dameserotiques.com/landing2
301 Moved Permanently 0 B URL HTTP/1.1 dameserotiques.com/landing2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /landing2 HTTP/1.1
Host: dameserotiques.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 17 Mar 2023 03:47:02 GMT
Content-Length: 0
Connection: keep-alive
Location: https://dameserotiques.com/landing2
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qzK80ZWOQqSk15oE8F1mBdpVAq5kM8EgmOiOq%2BpuMuJ9tQklDmeAXvnCDckIh444clpmow0U%2FKbDOxwBejeScON1m5sHNg%2Bg4kkuRElXRkRBghYVscTkeH1KZbp24IpOUASCvA4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7a9240965b76b509-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1424d2734290cfd767b86da0ee0da3bc
875b1243bca41177411ac6af710d2bb96f45a0ac
70b5bb76774526a0cf131445ae2f8639085c3449812497df457f4bc78089917b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "70B5BB76774526A0CF131445AE2F8639085C3449812497DF457F4BC78089917B"
Last-Modified: Wed, 15 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14379
Expires: Fri, 17 Mar 2023 07:46:41 GMT
Date: Fri, 17 Mar 2023 03:47:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3fe71d20fae0ef9598de076d7c898ee5
8217796b8c261e184e11147a43a34dc28d723e8b
8f4124c1b2ae90fdec229e26dc0f2e8f4e9ace6011baa2cbd9bef884188c8fee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F4124C1B2AE90FDEC229E26DC0F2E8F4E9ACE6011BAA2CBD9BEF884188C8FEE"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3871
Expires: Fri, 17 Mar 2023 04:51:34 GMT
Date: Fri, 17 Mar 2023 03:47:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cef8425d927aae677234ca535562b58b
823b45ffe59ac234f49d38516baf528a9daded85
c2d2e2be0e1484259271be471ff46345fd332c071389f9ef92f637e7ee666ea6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2D2E2BE0E1484259271BE471FF46345FD332C071389F9EF92F637E7EE666EA6"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21200
Expires: Fri, 17 Mar 2023 09:40:23 GMT
Date: Fri, 17 Mar 2023 03:47:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Backoff, Alert, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 17 Mar 2023 03:26:41 GMT
content-type: application/json
age: 1222
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: GtUYP6vqd2A0baNc2z40dTjWAeKTVEw+uz9H8pqZ1Nnu2ZGHHx9An+FWp+Ypdum1pIAJiIMqIqc=
x-amz-request-id: Q8D0FCXE274S9E9V
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 17 Mar 2023 02:47:57 GMT
age: 3546
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 17 Mar 2023 03:47:03 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, ETag, Backoff, Expires, Alert, Pragma, Cache-Control, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 17 Mar 2023 03:14:32 GMT
age: 1951
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4353e40dea39897876467013220ab1ad
ecdbe764620d0d760f9333ff2c30d0f7d9b5d9a8
f23a16dcfff2a742fcbd5fff52cb6edcb9485eea5e732574f3124371b21abfb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F23A16DCFFF2A742FCBD5FFF52CB6EDCB9485EEA5E732574F3124371B21ABFB3"
Last-Modified: Tue, 14 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4690
Expires: Fri, 17 Mar 2023 05:05:13 GMT
Date: Fri, 17 Mar 2023 03:47:03 GMT
Connection: keep-alive
cdnjs.cloudflare.com/ajax/libs/Chart.js/2.7.3/Chart.bundle.min.js
200 OK 56 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/Chart.js/2.7.3/Chart.bundle.min.js
IP
File type ASCII text, with very long lines (65336)
Hash 96795eaa55e2d7ec65b0f41625a393d1
0f2e1e2f73a46fdb08daddd68c26c1505fcb837a
195bcf47b5339d942cd359a6d1e23893303ebf9628589842dfa58684f0987c71
GET /ajax/libs/Chart.js/2.7.3/Chart.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 17 Mar 2023 03:47:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 55786
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cee-335f3"
last-modified: Mon, 04 May 2020 16:03:58 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 15409694
expires: Wed, 06 Mar 2024 03:47:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5WUZ6vHqubdr%2FEM01LVjbAQ0VWiKI043Hvb%2BB0%2BDPQ448C49CAy2NSL0yNgj%2BUT9CaawPOL%2FA085UzJoQKqtBe27pXwoLZA%2B6RB%2FlAerhvsM8uv9hkZg9HgXSzwaWSBtYlfQx4Q5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7a92409cddbbb4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a.exoclick.com/tag_gen.js
200 OK 515 B URL HTTP/1.1 a.exoclick.com/tag_gen.js
IP
File type ASCII text, with very long lines (1030), with no line terminators
Hash 628e0302068ade64b5f411f39d5ce7e5
ff1a609269f34bad5ae67ed1678df3f7b905d018
c583ceaeae2e9a05e25c27b61520710f16b8b98ca7f9087a75ae90a040b8bc3f
GET /tag_gen.js HTTP/1.1
Host: a.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 17 Mar 2023 03:47:03 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 515
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"a56c0470b9aa925085e51a6271a"
X-HW: 1679024823.dop017.sk1.t,1679024823.cds238.sk1.shn,1679024823.dop017.sk1.t,1679024823.cds251.sk1.c
Access-Control-Allow-Origin: *, *
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: JCIxtrVkZsyflR3kX2pKpg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sIQFBuwjt4x4qWFF5IIBbHKi2EI=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0315ec83d4aea8ce838c445ccbcec06c
a5471190459e823769e316346fbaa3b044fae081
b69efd21259e4868e61dce8850d26dff23a45bd9c9a744d6dc4df06111aeccb9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=120834
Date: Fri, 17 Mar 2023 03:47:04 GMT
Etag: "64131046-1d7"
Expires: Sat, 18 Mar 2023 13:20:58 GMT
Last-Modified: Thu, 16 Mar 2023 12:49:10 GMT
Server: ECAcc (nya/78C0)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Fjdcu1_nTDpScHRW40xRjoI8vfbznFrlG9X0ouB3M_feablxD8Ld6w==
Age: 1908
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0315ec83d4aea8ce838c445ccbcec06c
a5471190459e823769e316346fbaa3b044fae081
b69efd21259e4868e61dce8850d26dff23a45bd9c9a744d6dc4df06111aeccb9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 17 Mar 2023 03:47:04 GMT
Last-Modified: Fri, 17 Mar 2023 02:35:17 GMT
Server: ECAcc (bsa/EAE4)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lsswe7j-SNiKQ9N_Hho-RS4pnLxScYAu-QqciX8JtGyxF2jIZznrnQ==
Age: 4307
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0315ec83d4aea8ce838c445ccbcec06c
a5471190459e823769e316346fbaa3b044fae081
b69efd21259e4868e61dce8850d26dff23a45bd9c9a744d6dc4df06111aeccb9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122600
Date: Fri, 17 Mar 2023 03:47:04 GMT
Etag: "64131046-1d7"
Expires: Sat, 18 Mar 2023 13:50:24 GMT
Last-Modified: Thu, 16 Mar 2023 12:49:10 GMT
Server: ECAcc (nya/7919)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LuHZIyt6Pe7oRnXeUqPE9H23uw0VDAklxuV9Yti-A8ew0bQDZaEkfA==
Age: 3674
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0315ec83d4aea8ce838c445ccbcec06c
a5471190459e823769e316346fbaa3b044fae081
b69efd21259e4868e61dce8850d26dff23a45bd9c9a744d6dc4df06111aeccb9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121686
Date: Fri, 17 Mar 2023 03:47:04 GMT
Etag: "64131046-1d7"
Expires: Sat, 18 Mar 2023 13:35:10 GMT
Last-Modified: Thu, 16 Mar 2023 12:49:10 GMT
Server: ECAcc (nya/1C5E)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bbD-BE9G0ahhVRmQoBW51eGPAr2amHHZNfzmGG8tMA6-OPsy7_OM1Q==
Age: 2760
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0315ec83d4aea8ce838c445ccbcec06c
a5471190459e823769e316346fbaa3b044fae081
b69efd21259e4868e61dce8850d26dff23a45bd9c9a744d6dc4df06111aeccb9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122719
Date: Fri, 17 Mar 2023 03:47:04 GMT
Etag: "64131046-1d7"
Expires: Sat, 18 Mar 2023 13:52:23 GMT
Last-Modified: Thu, 16 Mar 2023 12:49:10 GMT
Server: ECAcc (nya/1C5C)
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -fiNen4DgyvE6ui2IqpmwTWIJqKwOEXGFl9x7N2zFIG255xvZ_kVEg==
Age: 3793
syndication.exdynsrv.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2 HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 03:47:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.opoxv.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
200 OK 20 B URL HTTP/1.1 s.opoxv.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 03:47:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
200 OK 20 B URL HTTP/1.1 syndication.realsrv.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 03:47:04 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
matchmaker7.s3.amazonaws.com/matches/xzh6r4r14fo6a6rd/b_rWZlT3FJVYvJSyu2Pn8gDRjAwOfLX2.jpg
200 OK 8.7 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/xzh6r4r14fo6a6rd/b_rWZlT3FJVYvJSyu2Pn8gDRjAwOfLX2.jpg
IP
Hash 80257aa5f2a7b8b6c2354d8b3a567e11
ce1b00daf2cccda35210be47ad5ee443af1b6d60
de5e78c931f3a9a49e3a2deb6160bb0655ac4bf279e058742004aaa8078a64a7
GET /matches/xzh6r4r14fo6a6rd/b_rWZlT3FJVYvJSyu2Pn8gDRjAwOfLX2.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: UtVEb/dyqIkXeQkCoOp/CvaBx2pKF2raGvjBArp6wBFQp9SU9Ra92cgbgSwOZB+/G8qNUBTClRU=
x-amz-request-id: 6SQY5FSMCW151Q4A
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:27 GMT
ETag: "38cab222a60678aa568ae66a22d61323"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7550
matchmaker7.s3.amazonaws.com/matches/m497euqhcx946mju/b_YTeWDWHtbyzxTPKomvWe2sImQcuOSN.jpg
200 OK 8.3 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/m497euqhcx946mju/b_YTeWDWHtbyzxTPKomvWe2sImQcuOSN.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 80087acbcf299459744c88086729a102
e7b824722dd8bc8fcff922cef6c1222ff5425cd5
d2b455b77e50c6bb4adf08e9a0ff43615b1e9b6f72d11d528a4d467a59ba81da
GET /matches/m497euqhcx946mju/b_YTeWDWHtbyzxTPKomvWe2sImQcuOSN.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 9X+Q51vCmDXKwKQnPV1cH/dWW6lapykiofI/AooGX7EfJYYVuCZ9185/37sTcaj6/x0SDN8juEo=
x-amz-request-id: 6SQJYWH69GZEYET1
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:26 GMT
ETag: "80087acbcf299459744c88086729a102"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 8340
matchmaker7.s3.amazonaws.com/matches/2oxgro81m4ox76ac/b_kuuXdzDmGSN9txdBspZh4RETvYujr3.jpg
200 OK 7.5 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/2oxgro81m4ox76ac/b_kuuXdzDmGSN9txdBspZh4RETvYujr3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 50e98ad112e161e52d728441eeb6830b
3fccdc9e81e4c023806232df9189f82a88b59aae
9bb10a9e23b5ae4983e38e1b3f7f9fd96ed9a7546d1706f646a1526eabce61fa
GET /matches/2oxgro81m4ox76ac/b_kuuXdzDmGSN9txdBspZh4RETvYujr3.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: exITT8KxjvSNKcV+CEstXY4wOOSeoXn1Ja2PwIB425Y4rkKHlP+u9Jc+w+SoY3T2QjwiIgEz4Kk=
x-amz-request-id: 6SQT5Y2MKVV8CD95
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:25 GMT
ETag: "50e98ad112e161e52d728441eeb6830b"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7501
matchmaker7.s3.amazonaws.com/matches/a2e1tuxqt4noeoyi/b_aNbHzvFLqHHJETNJ5K4xVgu20gpPDm.jpg
200 OK 7.6 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/a2e1tuxqt4noeoyi/b_aNbHzvFLqHHJETNJ5K4xVgu20gpPDm.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 0dd1ca60b97ef1fdf2adba09c6c2067b
5ae950fd3997bbc641073987987e0f5d517fef64
023106329630f2a6c14c273631ae5224ef4dcf757313a9bed66a2fd5f8c514ac
GET /matches/a2e1tuxqt4noeoyi/b_aNbHzvFLqHHJETNJ5K4xVgu20gpPDm.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: wX1KhLcngn4ogK1+ilyVja1NVauaxrxsmojvmBB6reX90FQmoidgMd+OdvFAo6y+7uz7svRXQcE=
x-amz-request-id: 6SQJECGTM3W8SHZW
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:21 GMT
ETag: "0dd1ca60b97ef1fdf2adba09c6c2067b"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7581
matchmaker7.s3.amazonaws.com/matches/rffv71e3l6fbjlw9/b_3HGrY7AzAvs22E8GOIJqvTTSAv8tMe.jpg
200 OK 7.6 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/rffv71e3l6fbjlw9/b_3HGrY7AzAvs22E8GOIJqvTTSAv8tMe.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 316b3e823c060eaa6fb25e588d2b9522
3d9dac9e00a345e50f699a0b54ac278694e12d03
708112b4607ed6cdbf4943caca78ac4252a297921ab2a42264d58345952b867e
GET /matches/rffv71e3l6fbjlw9/b_3HGrY7AzAvs22E8GOIJqvTTSAv8tMe.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 1DJepI9W992z/Vo5P3EG2M8ZxXYJ6CJVDEIG/R2buWtko4d6iPFM+eC9lOyjYSLBuYDYEqF6L58=
x-amz-request-id: 6SQH7XZKD29S5FWP
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:22 GMT
ETag: "316b3e823c060eaa6fb25e588d2b9522"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7582
matchmaker7.s3.amazonaws.com/matches/s3h45oeud1zcctnz/b_cdlIm3jkVhU2SGUgxHUOsdy2Q8n81N.jpg
200 OK 7.2 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/s3h45oeud1zcctnz/b_cdlIm3jkVhU2SGUgxHUOsdy2Q8n81N.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash bebbb3113bf5028afa50108e2761f0ec
beeb6c357f0bb1abb7156428f66fb157b5923a76
dad6f7a940b1c6538199fde5b5de4c1fde4f0518c0ae3eab2c9e4a651feb84ba
GET /matches/s3h45oeud1zcctnz/b_cdlIm3jkVhU2SGUgxHUOsdy2Q8n81N.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: EJyAVBQggsZURmpwsG5ZBM71LVLHQvIylu1e4BLCiqOIqV7VWRz5xON5FkH2GINL6N3OHZubHvY=
x-amz-request-id: 6SQRZM7C03XZHTBB
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:24 GMT
ETag: "bebbb3113bf5028afa50108e2761f0ec"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7219
matchmaker7.s3.amazonaws.com/matches/qwx4ageh8q42fjta/b_2ueEGxWLVcEKUqnjzyAUuKyO4yvMas.jpg
200 OK 7.4 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/qwx4ageh8q42fjta/b_2ueEGxWLVcEKUqnjzyAUuKyO4yvMas.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 4eb5f514761fcdb325e874cfdba615cf
06c0039ff4e7cfd538b3ca9aadb6d0a15a98ce8d
c43775bf0c22a8463b8b629214faa024b495d3b0737e4a17023a40aaab9d4e17
GET /matches/qwx4ageh8q42fjta/b_2ueEGxWLVcEKUqnjzyAUuKyO4yvMas.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: uFWFsZRzXywlNK2u6zrtSdDFIIQ+381kWscRvjbHayO0CcAFRkl2+GvFNN6Zy7mNMugsfWlzCBY=
x-amz-request-id: 6SQTRXZQHAHYH450
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:17 GMT
ETag: "4eb5f514761fcdb325e874cfdba615cf"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7350
matchmaker7.s3.amazonaws.com/matches/bz1sjzqeezia1mgd/b_zvc15sJsBEKSJN9HX2becdKOyNFEXv.jpg
200 OK 7.9 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/bz1sjzqeezia1mgd/b_zvc15sJsBEKSJN9HX2becdKOyNFEXv.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash efca0ac403362db99ffb8765aac1b5ee
e3ae88ad0b599cac2f6ba8c66346069b9be578f8
0e8faa463cc7976e12158f0e1b014dbbdc7c068626a85afe22b0fa595f7de6a9
GET /matches/bz1sjzqeezia1mgd/b_zvc15sJsBEKSJN9HX2becdKOyNFEXv.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: E8ZEezECDEt9EwjP8zI45ZxIWfO7yOUHFUCYfyS/+mgaoIEiW8kSsHyOlgnKd8nzxlAXPvHym/E=
x-amz-request-id: 6SQQTN7E793XJ6N6
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:18 GMT
ETag: "efca0ac403362db99ffb8765aac1b5ee"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7948
matchmaker7.s3.amazonaws.com/matches/chuc7sgfk4soga3w/b_TaBMoJaI2Cxo8MoiUXDTVJ8H8liNm2.jpg
200 OK 7.9 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/chuc7sgfk4soga3w/b_TaBMoJaI2Cxo8MoiUXDTVJ8H8liNm2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a7753f03c026c72cb6a58c260e302c6f
c10ad154921fd091ec94b2f130fc8036536fa2ac
b086cd8a5b9f602fca6407dde5c3bb7b2fbc0e5646652adca49dd0f74726b7ca
GET /matches/chuc7sgfk4soga3w/b_TaBMoJaI2Cxo8MoiUXDTVJ8H8liNm2.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: xGeVEbKLo3d8gMRGtNRj1A7A2h9zmFhg3cLv83J4vF0EbQbUUHT5egNgjyjmlYRh9u/fEXqn65k=
x-amz-request-id: 6SQXT08VA6GCKQ9G
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:14 GMT
ETag: "a7753f03c026c72cb6a58c260e302c6f"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7853
matchmaker7.s3.amazonaws.com/matches/giu5nd4bv34dyy7d/b_hQyhgudAyRwrYH6LUUcMCdCwOmftzX.jpg
200 OK 7.2 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/giu5nd4bv34dyy7d/b_hQyhgudAyRwrYH6LUUcMCdCwOmftzX.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash aa059314df1fa20330dfff20d335207a
661e8a4b53a2073c406e95444a48c557a75cfbe9
e1fa96ebf96bc92f046e0df3682825052c6bf0e17aebad2e2d706e1ea4b2d68d
GET /matches/giu5nd4bv34dyy7d/b_hQyhgudAyRwrYH6LUUcMCdCwOmftzX.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: j8EJzft70/El41fBus5NxOtf2Hs/1kvjC4nCcksWG4H6aykREkS2t2ktruAImwYe9CYd10uzZ8g=
x-amz-request-id: 6SQW1Q7SPP6RQYTB
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:13 GMT
ETag: "aa059314df1fa20330dfff20d335207a"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7207
matchmaker7.s3.amazonaws.com/matches/bvrhec391ri5zbx1/b_EckpmVClFwY5Bi8zxH889vLPSL9y1S.jpg
200 OK 7.3 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/bvrhec391ri5zbx1/b_EckpmVClFwY5Bi8zxH889vLPSL9y1S.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 05bddeee493c8a1b6351e0bc40940c01
b632062be1a143ce579ac88dae98b7b896939553
d3b377049790dce53c7d212963d3f959ed19818ddc2b6f82280c7d0238bf2b13
GET /matches/bvrhec391ri5zbx1/b_EckpmVClFwY5Bi8zxH889vLPSL9y1S.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: u1JcmqSo1UOTwTPK4iudJJWWYbzmGz54Gq2fCUZNs+c4GcENsfphmuF6d+/VSIhUbDBm7fE/+Fk=
x-amz-request-id: 6SQYREH0MX2W5PBC
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:20 GMT
ETag: "05bddeee493c8a1b6351e0bc40940c01"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7319
matchmaker7.s3.amazonaws.com/matches/ae7xeywh4se17bvl/b_bSP7zKU8x4nvqLyzsOvxNpi2jzVcxM.jpg
200 OK 7.5 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/ae7xeywh4se17bvl/b_bSP7zKU8x4nvqLyzsOvxNpi2jzVcxM.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 43363fbb5dccbeb71749503bb352da84
dbacb4cc7bafdc9064862adefb1f1c5c50dfd18e
423277620ce6ad6450d6db7bd983be04fde45cc798e8e31ad40327a1dec7f5a1
GET /matches/ae7xeywh4se17bvl/b_bSP7zKU8x4nvqLyzsOvxNpi2jzVcxM.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 9HjgpO89PgZn+UDVsbcM6ro8yCfUdOG0znC3ipNipXTLqg7Ac5u8DyLUrU4LVTDg1/8OKSvEwpM=
x-amz-request-id: 6SQG30XAX6GFPX10
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:16 GMT
ETag: "43363fbb5dccbeb71749503bb352da84"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7513
matchmaker7.s3.amazonaws.com/matches/x9t3t46sew78ehf8/b_mMA0ssFBOoRrtgT7yBvXvrakiLmvKB.jpg
200 OK 6.4 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/x9t3t46sew78ehf8/b_mMA0ssFBOoRrtgT7yBvXvrakiLmvKB.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a87e6f653e3799ddb1b583014527103b
0026713439738ab0790c2d3738c288d41c062b18
3276bb6a11061791efbde2e2f2c264fd75aa73d7c22bd06e8cf99e916e19a952
GET /matches/x9t3t46sew78ehf8/b_mMA0ssFBOoRrtgT7yBvXvrakiLmvKB.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: CLhpuFOKud8iGeMwpledH1giq2L5ty3lcyCDsp3SPe3oFjvpSz9O6ehbxLTdzFqyBjIzWYCZ5Zw=
x-amz-request-id: 6SQJ5QD09RD4143K
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:10 GMT
ETag: "a87e6f653e3799ddb1b583014527103b"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 6448
matchmaker7.s3.amazonaws.com/matches/lr41hajha4e7lsgd/b_9v4ls7sym0Yv1YNtpxvM1m7QMcmWci.jpg
200 OK 7.9 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/lr41hajha4e7lsgd/b_9v4ls7sym0Yv1YNtpxvM1m7QMcmWci.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 4978cfd0b80c2cee973a925015918783
48f5b05b571f765442af32f3d07408dd9e0c5415
bfb6087e0cd3cc730bb34dec68ac185c7fcce12f30bff228968641277e534147
GET /matches/lr41hajha4e7lsgd/b_9v4ls7sym0Yv1YNtpxvM1m7QMcmWci.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dRSJKUs4NHsgCFRjE/sOuZeLu75v2LUctHdrh7z3cA/BJwVWVvIx4wrPA6TDUV48xdWtuTdmF6E=
x-amz-request-id: 6SQJ4Q5N8F02ZQX2
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:09 GMT
ETag: "4978cfd0b80c2cee973a925015918783"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7872
matchmaker7.s3.amazonaws.com/matches/riwj8yxq7nqjdi6x/b_w8zBoP9TjGeYjDHkb1pZ7cyEiVLDK3.jpg
200 OK 8.0 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/riwj8yxq7nqjdi6x/b_w8zBoP9TjGeYjDHkb1pZ7cyEiVLDK3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 15eced0175f6ad7f8f21b07f9d3ce367
95a4f9b367c080e4d4fc4b6dde0c67262260841e
aa52d09732995a1b1545c781550d0ffcbdb2b663365abcb3392345053888fc5d
GET /matches/riwj8yxq7nqjdi6x/b_w8zBoP9TjGeYjDHkb1pZ7cyEiVLDK3.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 9iv08ngnAPwbEC17uTyxuupmbBBvA4SotOpfGezww4a+GtHIx/0drZ4f/jVT61am9YNG3l//qXw=
x-amz-request-id: 88R4K1BC88BYS2W0
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:08 GMT
ETag: "15eced0175f6ad7f8f21b07f9d3ce367"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 8020
matchmaker7.s3.amazonaws.com/matches/7631bymx9ajrbqlg/b_YgfcmnafzqZNrQPkmg0X93jtIUfe1d.jpg
200 OK 7.5 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/7631bymx9ajrbqlg/b_YgfcmnafzqZNrQPkmg0X93jtIUfe1d.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash b76796489488adbf4c6fa3af422bd7af
9ae8cf3ed7661a01b3c0de96898537b14b066d32
e0deed3db7b779798d6760121206c7bb3ab6e50517dff951134916e73a12920c
GET /matches/7631bymx9ajrbqlg/b_YgfcmnafzqZNrQPkmg0X93jtIUfe1d.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 41+L3yLa1OvgeeYNtcOkLAlWH3bOL9JJzH6i/m1wU0NtB9KHt6Tvy8f2NUEPnVNnjDmVyaTKqkc=
x-amz-request-id: 6SQN2A2YH738HYM5
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:12 GMT
ETag: "b76796489488adbf4c6fa3af422bd7af"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7529
matchmaker7.s3.amazonaws.com/matches/bf5gqhdztdrx1nti/b_JicQQTU8JORLVwXOQpWcjOdPkqNwMy.jpg
200 OK 8.3 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/bf5gqhdztdrx1nti/b_JicQQTU8JORLVwXOQpWcjOdPkqNwMy.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 99354400b83ad694f78fc17908f19ee6
2f13824f80037bab62d418170a6e94c38122ebca
a72b66d903e49821d98becf0aa05480b6cdb88fa7a2a8159fbed3817207a1bbe
GET /matches/bf5gqhdztdrx1nti/b_JicQQTU8JORLVwXOQpWcjOdPkqNwMy.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: EsincWeGwwjcSshXpq1ELSWCsVaLz+KPJ5rH6s81Fd4xzWvFSKg11VoEzii8oZFMJt3s1D5sWVk=
x-amz-request-id: 88R45NACR0YTP6KN
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:07 GMT
ETag: "99354400b83ad694f78fc17908f19ee6"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 8332
matchmaker7.s3.amazonaws.com/matches/5bv4lrm1io61fk8n/b_QVvWJcZ2gIsURn8SahUIuoXv2Wauxh.jpg
200 OK 6.7 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/5bv4lrm1io61fk8n/b_QVvWJcZ2gIsURn8SahUIuoXv2Wauxh.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 4c43a3f023387e67ac046c41d74caa5b
90278bf7740abef8c6acb9e2828e374a1f0ac661
1aa91d1b990c9badf7c9ccf0003e4eab98e23ad1286df279d4da7a1d819638e3
GET /matches/5bv4lrm1io61fk8n/b_QVvWJcZ2gIsURn8SahUIuoXv2Wauxh.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: BbgWLNgj62a3V8gtChOSQLt1ALL1rGncaeyKm3ahbwoa1b8ZelBY5GtwTvcW/R/tPhF7L3+tDP0=
x-amz-request-id: 88RDX08SSXH6ZS4B
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:04 GMT
ETag: "4c43a3f023387e67ac046c41d74caa5b"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 6723
matchmaker7.s3.amazonaws.com/matches/evlkdlrnddy3qbms/b_lo7xciOYGjJ6C0L4VsTJesmSxWnnzp.jpg
200 OK 8.0 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/evlkdlrnddy3qbms/b_lo7xciOYGjJ6C0L4VsTJesmSxWnnzp.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 1593c66b509b2b6a66ce584075c61b36
e66531e8dcb6c05c5dd7f05f5a814950ddc79e21
084dcd3a98f034ba3af7d7186ef2969a4696dd81032e91fcaa9c3c598d20a333
GET /matches/evlkdlrnddy3qbms/b_lo7xciOYGjJ6C0L4VsTJesmSxWnnzp.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Fmp4a3UZsjRH4U0enQBLB+ky/U6jbDg6anl7V8KVAKz2Di6e6BjZ6OjNTXJ2kkTyWR8cJXvfp70=
x-amz-request-id: 88RCGNB8051PCKXC
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:03 GMT
ETag: "1593c66b509b2b6a66ce584075c61b36"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7989
matchmaker7.s3.amazonaws.com/matches/d9ftfhdr43tp5y5a/b_PwcZeSHGMlLo5ntWolMVEKYOxR8UZT.jpg
200 OK 8.0 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/d9ftfhdr43tp5y5a/b_PwcZeSHGMlLo5ntWolMVEKYOxR8UZT.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash dbf49531a099622167c31b1aca8293d6
2f28615e7f03c42330046493e4d854746c15c5ce
f71cb7ab538b5ec3eb722ece20a0593be5bbbc08f4dd0a63dbfee44bc4c5920a
GET /matches/d9ftfhdr43tp5y5a/b_PwcZeSHGMlLo5ntWolMVEKYOxR8UZT.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: BPi3QqiEaLK76K9KYGaNwceFcqV6JJ7j4kGsJ6k7HcoeKbl5dG1G5W50gYxuysu0UAMOT3uuLOo=
x-amz-request-id: 88RC3KF22T7EK2WV
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:02 GMT
ETag: "dbf49531a099622167c31b1aca8293d6"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7981
matchmaker7.s3.amazonaws.com/matches/m5rvczzzz8k7x1yh/b_Lc8sFSIpAo1XuGBka5ujmCWHU8O5s9.jpg
200 OK 7.4 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/m5rvczzzz8k7x1yh/b_Lc8sFSIpAo1XuGBka5ujmCWHU8O5s9.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash b7f87fdae2b4c29d471e7b80123b2a5a
c9443fe4d1d31e4bcbe72c9013185bc3f4e8c7d6
353dbea5febfb5af26c2e6a37465c6b740cdb36b63ff42e70aa09692994f0c73
GET /matches/m5rvczzzz8k7x1yh/b_Lc8sFSIpAo1XuGBka5ujmCWHU8O5s9.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: v4vIkuKZTlydHg9XOSyegnjEZhfGJ6XBon3Arh+fleLD8/SMYRxkXnBQkayepaM71vfRsG79s4o=
x-amz-request-id: 88R6BCR2N50DSW0W
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:00 GMT
ETag: "b7f87fdae2b4c29d471e7b80123b2a5a"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7432
matchmaker7.s3.amazonaws.com/matches/zijngnh58j65j297/b_gqsp2vLmUiDWTWRz6uRua6CsyCqS8S.jpg
200 OK 6.5 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/zijngnh58j65j297/b_gqsp2vLmUiDWTWRz6uRua6CsyCqS8S.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 832fb56c770aa98198c54a52bf45bb55
1382ee8aaab448b6fe84e567a859b6b526a3ffc5
c9f655973ad177885e1ec95498eacc1d209eda5392170ff5296b2975dcefeedb
GET /matches/zijngnh58j65j297/b_gqsp2vLmUiDWTWRz6uRua6CsyCqS8S.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: H/HXHA7syr3C5yQ12QfGuQ++0vApVEQl0amP/UBOl9ucSoFqgFaLsWSiclaKOg6N91saQw5RLA8=
x-amz-request-id: 88R9TF959QEHVF3E
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:17:59 GMT
ETag: "832fb56c770aa98198c54a52bf45bb55"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 6521
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13051
Expires: Fri, 17 Mar 2023 07:24:36 GMT
Date: Fri, 17 Mar 2023 03:47:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13051
Expires: Fri, 17 Mar 2023 07:24:36 GMT
Date: Fri, 17 Mar 2023 03:47:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13051
Expires: Fri, 17 Mar 2023 07:24:36 GMT
Date: Fri, 17 Mar 2023 03:47:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13051
Expires: Fri, 17 Mar 2023 07:24:36 GMT
Date: Fri, 17 Mar 2023 03:47:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash be71491cee9b47dc3ffb23b4fdff25b3
79c7d22c8df6d305f46c5779ccb9f25169d4d111
e785896e5840fb901ddd0118bef3ccad6b59a96d8eef0e8ccd9c95a3c261ba45
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87df4bcd-c6cd-4a0c-a9f5-dffb7f36d2e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8487
x-amzn-requestid: 92381f1a-0140-47e9-a971-594a7de36c3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BkEcBGizoAMFgOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640b1ab3-1a54b65a5d7083e62dcb85ab;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 11:55:31 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Nn4eV-UeuWZ02ANOxzTUSgE4UODtaZxeIjp8UJfU8PgUny2shFaDjQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 74ab105148338444981d1b2277ffd9c4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 22:00:53 GMT
age: 20772
etag: "79c7d22c8df6d305f46c5779ccb9f25169d4d111"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35bbebd-fe94-4a9a-89ef-f9766e41b86e.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35bbebd-fe94-4a9a-89ef-f9766e41b86e.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4062ca109e37235c9996cd13acaca8ab
d4fcc855ddd9f7a949b66ba5bceba73f7b0c91bd
800e19d4c2fbb828aedb80542563c95b8f1d6022ff604576ed4943f1fc6d607b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35bbebd-fe94-4a9a-89ef-f9766e41b86e.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11594
x-amzn-requestid: b0875d40-ec76-4541-9e9c-0a86c89bdf22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B14BfHOkoAMFXIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64123a09-43982eb560373c1449a90e35;Sampled=0
x-amzn-remapped-date: Wed, 15 Mar 2023 21:35:05 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: RnPM_j6OB3YRMpbaG14o5uurKLKWWnY04FcFimt9bPQxGiB0FZFocQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 82893cc36087a50f9a150a621d10e740.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 21:51:09 GMT
age: 21356
etag: "d4fcc855ddd9f7a949b66ba5bceba73f7b0c91bd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3afd93ef-cefa-4b13-9faa-e4560a0e65e1.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3afd93ef-cefa-4b13-9faa-e4560a0e65e1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5db2f29c5f1c49dd8d108f52ddae6c7
e380ed74ff84aa07ab542d6e7406b5780cbef0b8
e5ed487d1ddb3acda9e191ca2405297488460bdac661f8813074758281eeb29e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3afd93ef-cefa-4b13-9faa-e4560a0e65e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5922
x-amzn-requestid: 80d66033-595a-494b-851e-f38cbc71d197
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B5LISGbYIAMF1bA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64138bce-773f824a0989e5ec7b10295e;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: Cm2_3aMuUoPr8-9OqvMwEnQ2LqNk7pXIeC9woNv3jmMe7VFOTJnzIQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 21:56:42 GMT
etag: "e380ed74ff84aa07ab542d6e7406b5780cbef0b8"
content-type: image/jpeg
age: 21023
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F119face5-3d80-4278-9d71-a22148eb61a0.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F119face5-3d80-4278-9d71-a22148eb61a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 010bbe685e612868671ed36e422a6b25
3f4f1a419f7461a8dc1486b4a62355eca70ba895
4f6109f0f60cc5997576184faff7a31a4636ed618e15b8913ca76a7e574fbf19
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F119face5-3d80-4278-9d71-a22148eb61a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5877
x-amzn-requestid: 5ba83dec-248d-4f89-94cd-83a57be18bc4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Bmtd0ESMoAMFzYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640c2924-55ed65d90044c459274d6257;Sampled=0
x-amzn-remapped-date: Sat, 11 Mar 2023 07:09:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: mqMjrNthVuwCeUq72ZbpLw_PEH4-QQgD-lair6zLmNDoJPCvHI52hQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6af3b573d8970d5db2a4d03354335b84.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 22:04:54 GMT
age: 20531
etag: "3f4f1a419f7461a8dc1486b4a62355eca70ba895"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f19293d-3fc5-4e67-b7ad-1f03c1f05423.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f19293d-3fc5-4e67-b7ad-1f03c1f05423.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0bb738443ad4f0cade67756f402f30cb
345d3813d1bfb92195d0376d25569483b70d7334
7bab3f0fe97af9fbe10855e469abf4a4f9a6703ce797f5dc85dc7fa8c75b1e3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f19293d-3fc5-4e67-b7ad-1f03c1f05423.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8964
x-amzn-requestid: 87771785-8ac1-4ec6-a917-730286f0a227
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B5K3XH4xoAMFdmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64138b62-562e04df4244b0e42a8a9007;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 21:34:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: HkLW9U0z6C6n42CElrZLnFumGoSRoeFvyfaL_zLG91fjcOl7TWstxQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 c5c7edc18be1805f007e0576da02e554.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 21:49:59 GMT
age: 21426
etag: "345d3813d1bfb92195d0376d25569483b70d7334"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F397a8aa0-cc33-491d-803e-2517ee9a86ba.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F397a8aa0-cc33-491d-803e-2517ee9a86ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8ba7fb2c4aa96cbff91c044c37cf908
9e30c5a51a00dd2e64d40a64f109870bb23f2f9e
72890df12fd731f311fffa0b9ae8e1620104cab15379c3b41832855e28d854ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F397a8aa0-cc33-491d-803e-2517ee9a86ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6483
x-amzn-requestid: 00810211-292c-4582-9284-a6cfa962eda0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B3M7qF-FoAMFwSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6412c1e3-60e04c44525865212d4064f4;Sampled=0
x-amzn-remapped-date: Thu, 16 Mar 2023 07:14:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: -H3BpRk7IKEgxxsZRLt2CA0_maOqr_4QGRkzOnHRz-NtRNOT-3g7sw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 16 Mar 2023 21:49:59 GMT
age: 21426
etag: "9e30c5a51a00dd2e64d40a64f109870bb23f2f9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
matchmaker7.s3.amazonaws.com/matches/vco7f7ns8zmyj1ak/b_RmHwpwdQVJDC31Afc7hO6sSb55Tud3.jpg
200 OK 7.1 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/vco7f7ns8zmyj1ak/b_RmHwpwdQVJDC31Afc7hO6sSb55Tud3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash b86eb685686d31692f414eb9c7e2b614
3184c4a34237c815774723fffec37dc57bc617a4
ec7ae203771ce8a9edf72aa9e8a467adffb788beac7ab3afb3acd251d6602552
GET /matches/vco7f7ns8zmyj1ak/b_RmHwpwdQVJDC31Afc7hO6sSb55Tud3.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: hozugfC6xfXWhzgOu9OcdSDbSa8Y8kjT/7ZCiCs7dCehOL51qCwWX/VEwC+MKzCKCV/tvCIJoiQ=
x-amz-request-id: 88RA7PRZ4TGYAZHN
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:17:56 GMT
ETag: "b86eb685686d31692f414eb9c7e2b614"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7068
matchmaker7.s3.amazonaws.com/matches/7bkbplc1nl5ksu6k/b_lKEQUvdaIPLXnE893LdpWBPjPFBS2a.jpg
200 OK 7.7 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/7bkbplc1nl5ksu6k/b_lKEQUvdaIPLXnE893LdpWBPjPFBS2a.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash d11c7f67b0265d9a321e75abec16bacb
18cf80fe93a134e15f4daf26c250f632fe1be5a5
98db9033379e5bff400822e8448c8b1d32d9514f14ed4024dffd4018d6f7893d
GET /matches/7bkbplc1nl5ksu6k/b_lKEQUvdaIPLXnE893LdpWBPjPFBS2a.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: mVPjcgLqvqhlhBHrsLcJRR4RasYpaa+T4eiTPPysM36ifCQVtVJVDF0O4NJh2MImWFh9nIzQY0k=
x-amz-request-id: 88R4K0E4GR0V3KBS
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:17:58 GMT
ETag: "d11c7f67b0265d9a321e75abec16bacb"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7742
matchmaker7.s3.amazonaws.com/matches/8jtxvc9r1xe1qu6t/b_Tk0PPqWlZmD98jJlQIU1Rx4jDRHj2G.jpg
200 OK 6.8 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/8jtxvc9r1xe1qu6t/b_Tk0PPqWlZmD98jJlQIU1Rx4jDRHj2G.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 4efcf40b485c959f1ed9ee347c1ed40a
2bbda0d607683ecb7b4762666ea1873360bb31bf
98ac6eb5ef629a78070e196e632d065b06b36cab95d604f4907100c20b76efc4
GET /matches/8jtxvc9r1xe1qu6t/b_Tk0PPqWlZmD98jJlQIU1Rx4jDRHj2G.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: F9cYukxjcJjKwxoWdAn0PO2ivWgmHQa70BxeNqBHyob0sKAXOjB3CM/DFHAeBbnGcIoy7ax/a3A=
x-amz-request-id: 88R4CSTZR3057AWP
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:17:55 GMT
ETag: "4efcf40b485c959f1ed9ee347c1ed40a"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 6818
matchmaker7.s3.amazonaws.com/matches/uvndbth3nowgqpnn/b_IxCFLuwOb4yiFVdHIiHiMyBA8J9UfC.jpg
200 OK 7.7 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/uvndbth3nowgqpnn/b_IxCFLuwOb4yiFVdHIiHiMyBA8J9UfC.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 234bc29e370238b8b7dc21c1f07aa6d6
32e615e525172ec924feb49491de279ed784e935
32e6cef192ea47fbc36cc986e7da64db19736ded51a4ccd64ddc9d8045ab2258
GET /matches/uvndbth3nowgqpnn/b_IxCFLuwOb4yiFVdHIiHiMyBA8J9UfC.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 49xLBRaAgkFPFY9WJGIy+b3NVAhrEM0Xg7T6KVYYL6qTxFlDS4lSU1f3Gezy7Jbt8QQ0LGVgkl4=
x-amz-request-id: 88RABG5RHY5TD9QS
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:17:54 GMT
ETag: "234bc29e370238b8b7dc21c1f07aa6d6"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7672
matchmaker7.s3.amazonaws.com/matches/qrufltlnomwf5417/b_ZAxfPUfZsEnq6Ou869eeMTgieoGs1p.jpg
200 OK 7.4 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/qrufltlnomwf5417/b_ZAxfPUfZsEnq6Ou869eeMTgieoGs1p.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 95b660cf84d0f95e996b25a4659f66db
3e928d6f3b43618c8ba194759d166653648b1b54
341296dd415475e2d04fa7a961df50f1c01e8fc0df8aa1c3af6ef551231edf67
GET /matches/qrufltlnomwf5417/b_ZAxfPUfZsEnq6Ou869eeMTgieoGs1p.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: P8ahZm/kAciq0HVtB1UV9AtkbJMNAziIB+RergMwBczLxFfy/viPN00CehxuOIQ1w33TUuEpN/g=
x-amz-request-id: 88RD0RGZN7M96RPM
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:17:52 GMT
ETag: "95b660cf84d0f95e996b25a4659f66db"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7380
matchmaker7.s3.amazonaws.com/matches/a7547ggy7fheku1b/b_EaCGKHMYsIzGqiEtMaNmSn8clO0NYv.jpg
200 OK 8.0 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/a7547ggy7fheku1b/b_EaCGKHMYsIzGqiEtMaNmSn8clO0NYv.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 72a6fd53adbda394c4a3c1a8d23d25db
a5819ea0b97f2fb7a2be7a81f690954222714a4e
1bc905bf020b25dadb05e215915ceeb2b7ad3344e2fe49f950c7dbd9ec4eec07
GET /matches/a7547ggy7fheku1b/b_EaCGKHMYsIzGqiEtMaNmSn8clO0NYv.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: E11oVswN1UCqC3h1rdzoVAY1Q7cdUD9IMYWDHfvdYwLLPz25vkJLvCgTqwGjt+V5QGK4yZTqDHU=
x-amz-request-id: 88R5M90X9WX1DMWG
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:16:29 GMT
ETag: "72a6fd53adbda394c4a3c1a8d23d25db"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 7968
matchmaker7.s3.amazonaws.com/matches/a4831rerpqgwzmkm/b_vdqDPJpt1OmtUo9TeUth0mrkeIu1os.jpg
200 OK 12 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/a4831rerpqgwzmkm/b_vdqDPJpt1OmtUo9TeUth0mrkeIu1os.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash eaaf21577fd3e10080f4568c9779b521
404d580ba0f23178a6c6636d39e37faf4aed0a61
fc61c4e4becf23049aa8913fc1790e553d63b289ac08ddf02c79a16fef17ef1d
GET /matches/a4831rerpqgwzmkm/b_vdqDPJpt1OmtUo9TeUth0mrkeIu1os.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: /R+UrFvOFYPTcBlBdIg92QOpGUeKoD8k9TRAgHi+QDlwQ2od1tP4J/p6XRxTkJW+thlv2n+6mho=
x-amz-request-id: 88RFRZ1TDA51Q6AS
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Fri, 25 Aug 2017 12:52:59 GMT
ETag: "eaaf21577fd3e10080f4568c9779b521"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 11769
matchmaker7.s3.amazonaws.com/matches/9pwese7t5af2e25y/b_WsbkMQwvJ4G5xSNJFhbtGdyjbj6321.jpg
200 OK 8.4 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/9pwese7t5af2e25y/b_WsbkMQwvJ4G5xSNJFhbtGdyjbj6321.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash dc497915675908cf9d6e5a76a229fb86
890028b5a632cac4e8733823798e427a24901795
5d07bacd0bda18cf0ad0a9751ad418ca732658f143a9003d03983e657fc689a8
GET /matches/9pwese7t5af2e25y/b_WsbkMQwvJ4G5xSNJFhbtGdyjbj6321.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: jbGvFuTX0267j7QSr0aVFlraY0YakF0QcRRNbodaSLfYd3hunLFxt8GlqSETAuCJFKNqqUNiWGo=
x-amz-request-id: 88R1AJ6VDBMFNCA8
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:16:26 GMT
ETag: "dc497915675908cf9d6e5a76a229fb86"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 8392
matchmaker7.s3.amazonaws.com/matches/yvyhm2i7klb6ksly/b_1fVmDNyMpCz2VcpwFiJlQXI9UZQRhd.jpg
200 OK 7.0 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/yvyhm2i7klb6ksly/b_1fVmDNyMpCz2VcpwFiJlQXI9UZQRhd.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 7029ab7203e76c04cf64635e347deac3
c838bc584da7822862bde1813f7fce602e0d51e0
6c78bdbe0b691198dc28b0bd3ca42fb6a263dcb45fb22a4b7313d9b791c137b4
GET /matches/yvyhm2i7klb6ksly/b_1fVmDNyMpCz2VcpwFiJlQXI9UZQRhd.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Yjl2+XuRPv92hbQzHz5+g1Fuh7SrvQBE3BlHKDrpfXg1JThXrI5HIJSZYGR+Q5zfnE/VI8EC6l4=
x-amz-request-id: 88R5X0BPYASPZ073
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:18:05 GMT
ETag: "7029ab7203e76c04cf64635e347deac3"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 6996
matchmaker7.s3.amazonaws.com/matches/8er57l3zyld8pept/b_4tjYIPxvvmfhP5r8OKwJsajRgbNCgg.jpg
200 OK 8.5 kB URL HTTP/1.1 matchmaker7.s3.amazonaws.com/matches/8er57l3zyld8pept/b_4tjYIPxvvmfhP5r8OKwJsajRgbNCgg.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 85d5af308c2fad655e257a040c1696e7
b4093a12b6364733dd52066f57f141614e314869
b20ef4f0162b7e2c418901ddc3b42eab0e64b369c0fe5a8babfdf9bd73824a41
GET /matches/8er57l3zyld8pept/b_4tjYIPxvvmfhP5r8OKwJsajRgbNCgg.jpg HTTP/1.1
Host: matchmaker7.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: SRV9lH7D/8NIvnfcIv7QmlSMvw8FGuuxbwqJOinQG+O2cSsSlw8EwZ3/k25wE7592Yf5BuEVbRE=
x-amz-request-id: 88R7EHGCH99XMZ1R
Date: Fri, 17 Mar 2023 03:47:06 GMT
Last-Modified: Thu, 14 Mar 2019 09:16:24 GMT
ETag: "85d5af308c2fad655e257a040c1696e7"
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 8457
ocsp.digicert.com/
200 OK 471 B IP
Hash 0e9aa5e2379389daa7b2c7257c7d4d8e
138883d912fa7a708aa742a6e5a272e919d7fa84
c24af35a96b337cce8f3cd0f181b7534e8d2b4805146648a3f838e2a3a19ddcf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3756
Cache-Control: max-age=140304
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:05 GMT
Etag: "6413551d-1d7"
Expires: Sat, 18 Mar 2023 18:45:29 GMT
Last-Modified: Thu, 16 Mar 2023 17:42:53 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 546b79205f0778516abd0c857e8e4f0a
73626ceb2635079088f3e8331ed5133d776414a0
38e4a35d1dcdaa25f0e124f1df2510537364387eabbc80b9d2820b729605e22f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 151f56154342cf3658b06c18abf8dfde
910fac1b4b6d60d98e476af010dd93a1f3830f20
88bb27efce7ac1288e958095af4f078026cdd64105c5752d915e7d214a1f561e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3415
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Fri, 17 Mar 2023 02:50:10 GMT
Server: ECAcc (ska/F757)
X-Cache: HIT
Content-Length: 471
syndication.exoclick.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
200 OK 20 B URL HTTP/1.1 syndication.exoclick.com/tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=9aeecb98d05a87753a2934f2424e8ac2 HTTP/1.1
Host: syndication.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 17 Mar 2023 03:47:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 0650e3e569213b2f8b273d9a839a87c9
8e77d5f83352fc04c665b08db310bcb55b98ab53
6757c2e358291ae8e9103f893d402de4af4903c90b9cec2a27673f63fc8e24a3
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 17 Mar 2023 03:47:05 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Tue, 21 Mar 2023 00:20:32 GMT
ETag: "8e77d5f83352fc04c665b08db310bcb55b98ab53"
Last-Modified: Fri, 17 Mar 2023 00:20:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2847
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a9240a77f2efac0-OSL
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 6a599c9bd605553d6e8ea26b240017e5
ce6de2eaa815569841f1b16de3de7aa841ac7e88
8ee4a7bf51b198d826a7320c21965e73d95fd1642d9071a1a840e566ee9303de
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73790
date: Fri, 17 Mar 2023 03:47:05 GMT
access-control-allow-origin: *
etag: "6412d54e-1203e"
expires: Fri, 17 Mar 2023 04:47:05 GMT
last-modified: Thu, 16 Mar 2023 11:37:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0f03f2ce91e1cf44a2e3a955f1d03594
2bd3421ebdffd191c65c5cc0e533dd5695c409dc
76e7b283f89fa271371ca30032dd7ea5f8bc59c78b92e52b6c272c6b14613377
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 151f56154342cf3658b06c18abf8dfde
910fac1b4b6d60d98e476af010dd93a1f3830f20
88bb27efce7ac1288e958095af4f078026cdd64105c5752d915e7d214a1f561e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3805
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:05 GMT
Last-Modified: Fri, 17 Mar 2023 02:43:40 GMT
Server: ECAcc (ska/F776)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 0e9aa5e2379389daa7b2c7257c7d4d8e
138883d912fa7a708aa742a6e5a272e919d7fa84
c24af35a96b337cce8f3cd0f181b7534e8d2b4805146648a3f838e2a3a19ddcf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3794
Cache-Control: max-age=140342
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:05 GMT
Etag: "6413551d-1d7"
Expires: Sat, 18 Mar 2023 18:46:07 GMT
Last-Modified: Thu, 16 Mar 2023 17:42:53 GMT
Server: ECAcc (ska/F73A)
X-Cache: HIT
Content-Length: 471
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 25 kB URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
Hash c97a6f3e876d146357f71e7e599f43df
19bef6ae71105e7a4f5911075aeb8d28439353db
07a1157ee68a5762a764d1290a66ba4746f047a34badfccef19cd5ff7497dcbc
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":3600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}],"group":"network-errors"}
nel: {"report_to":"network-errors","max_age":3600,"failure_fraction":0.01}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: SJnjIT0uneahOPuQ0GqgcfZ/Zvs35XkesVmLosR/9/YYHkeWi7QMCbo5EuOws4D8wrXIJ/OdqyjliFVX2zCl3A==
date: Fri, 17 Mar 2023 03:47:05 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 17 Mar 2023 03:47:05 GMT
access-control-allow-origin: *
etag: "6412d54e-2b"
expires: Fri, 17 Mar 2023 04:47:05 GMT
accept-ranges: bytes
last-modified: Thu, 16 Mar 2023 11:37:34 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 314 B IP
Hash 79a269c862f8a388bcc559a358789e08
c34ee215542be593aaf4621d5c7bf38ee9c2ce83
05493279f69f3e8dd57374317121ac7c365ee763e291764964dfe6ff9c9f834b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4959
Cache-Control: max-age=168174
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:06 GMT
Etag: "6413bd49-13a"
Expires: Sun, 19 Mar 2023 02:30:00 GMT
Last-Modified: Fri, 17 Mar 2023 01:07:21 GMT
Server: ECAcc (ska/F7A3)
X-Cache: HIT
Content-Length: 314
r3.o.lencr.org/
200 OK 2.6 kB IP
ASN #20940 Akamai International B.V.
Hash 240fd7a9f64ccdf7e2f7c3a28bf4cf6b
9346cb5ebf636992338e3b15f95aa4a1d6bd0369
83dfd86afb759a9c36c82d5f13fdd1ca82702348f699be35329d3984b7f91ad3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A6983F0BCE44AC75DEC598252704494D7657235CD3C276C9B5AB2BD37B54B06"
Last-Modified: Thu, 16 Mar 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=923
Expires: Fri, 17 Mar 2023 04:02:29 GMT
Date: Fri, 17 Mar 2023 03:47:06 GMT
Connection: keep-alive
pornhub.com/video/manage?o=mr&t=pr2
301 Moved Permanently 166 B URL HTTP/2 pornhub.com/video/manage?o=mr&t=pr2
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /video/manage?o=mr&t=pr2 HTTP/1.1
Host: pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: openresty
date: Fri, 17 Mar 2023 03:47:06 GMT
content-type: text/html
content-length: 166
location: https://www.pornhub.com/video/manage?o=mr&t=pr2
x-frame-options: SAMEORIGIN
rating: RTA-5042-1996-1400-1577-RTA
set-cookie: __s=6413E2BA-42FE722901BB3C1A-F2166AF; Secure; Samesite=None
__l=6413E2BA-42FE722901BB3C1A-F2166AF; Secure; Samesite=None; Max-Age=31556926
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-request-id: 6413E2BA-42FE722901BB3C1A-F2166AF
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 16 kB IP
Hash d9c4c1e96aeb62e7bd20255cb742680c
b85b2f77eb4d175e3cf6f78fcf9b08a3e58c3ecc
8425e13376d4e6c5e981e1d95ce1a4301b74243268770e130d3c1bf27e75d8c8
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 17 Mar 2023 03:47:06 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 14 Mar 2023 03:37:38 GMT
Expires: Tue, 21 Mar 2023 03:37:37 GMT
Etag: "f82c9d10e70caefef3bad57a32052c214926bb2e"
Cache-Control: max-age=344430,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a9240aafba40afe-OSL
www.pornhubpremium.com/user/security/1111
302 Found 0 B URL HTTP/1.1 www.pornhubpremium.com/user/security/1111
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /user/security/1111 HTTP/1.1
Host: www.pornhubpremium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
server: openresty
date: Fri, 17 Mar 2023 03:47:06 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
set-cookie: ua=df16c081c25306654a0efb89b8761a08; expires=Sat, 18-Mar-2023 03:47:06 GMT; Max-Age=86400; path=/; domain=pornhubpremium.com; secure; HttpOnly
platform=pc; expires=Fri, 24-Mar-2023 03:47:06 GMT; Max-Age=604800; path=/; domain=pornhubpremium.com; secure; HttpOnly
bs=8hwjxtr6nqbt05wencghu848bml7r9su; expires=Mon, 14-Mar-2033 03:47:06 GMT; Max-Age=315360000; path=/; domain=pornhubpremium.com; secure; HttpOnly; SameSite=None
ss=645335684313616961; expires=Sat, 16-Mar-2024 03:47:06 GMT; Max-Age=31536000; path=/; domain=pornhubpremium.com; secure; HttpOnly
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
ph-redirect: 1026
location: https://www.pornhubpremium.com/premium/login?redirect=x-rfqZN6KYXyagbBOvVa9kmte8N3nl9N2su3oYeZWh88ay2jLBKfWDlcoosPN2M1
x-frame-options: SAMEORIGIN
vary: User-Agent
rating: RTA-5042-1996-1400-1577-RTA
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-request-id: 6413E2BA-42FE722101BBBDB5-F6FF773
www.xvideos.com/favorite/90902157/mk_1123
404 Not Found 26 kB URL HTTP/1.1 www.xvideos.com/favorite/90902157/mk_1123
IP
ASN #46652 SERVERSTACK-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8340)
Hash c9ce23d1786e3ba857a1fce69edc06ac
4067b2b55503a743728c219cefaebc2038654312
79842503087de656168d38ade65668bfc6d442d6ad7f09cdc764b92cbfeb44f5
GET /favorite/90902157/mk_1123 HTTP/1.1
Host: www.xvideos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Fri, 17 Mar 2023 03:47:06 GMT
P3p: policyref="/p3p.xml", CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Vary: Accept-Encoding,User-Agent,Accept-Language,Cookie
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com 1868565294.rsc.cdn77.org https://www.xvideos.com https://wg-xvdev.xvideos.com *.trafficfactory.biz fonts.googleapis.com fonts.gstatic.com ajax.googleapis.com www.google-analytics.com www.googletagmanager.com *.addthis.com *.addthisedge.com www.iwanttodeliver.com apis.google.com www.google.com www.gstatic.com accounts.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ *.cdn77.org fcm.googleapis.com *.nk-img.com https://static-dev-xvlive.xvideos.com https://dev-api.naked.com http://dev-api.naked.com *.googleapis.com *.cdn77.org *.pingdom.net *.exoclick.com *.exosrv.com *.realsrv.com *.orbsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net *.adglare.net www.flirt4free.com www.ohmybutt.com www.secretpartners.com cdn.asf4f.us *.livejasmin.com *.jsmcrptjmp.com *.awemwh.com etahub.com ctrack.trafficjunky.net tracking.sexcash.com *.gtflixtv.com wss://dev-chatserver.camster.com wss://staging-chatserver.camster.com wss://m.1ka.com wss://c1.1ka.com wss://c11.1ka.com wss://c12.1ka.com wss://c13.1ka.com wss://c14.1ka.com wss://c15.1ka.com wss://c16.1ka.com wss://c17.1ka.com wss://c18.1ka.com wss://c19.1ka.com wss://c110.1ka.com wss://c111.1ka.com wss://c112.1ka.com wss://c113.1ka.com wss://c114.1ka.com wss://c115.1ka.com wss://c2.1ka.com wss://c21.1ka.com wss://c22.1ka.com wss://c23.1ka.com wss://c24.1ka.com wss://c25.1ka.com wss://c26.1ka.com wss://c27.1ka.com wss://c28.1ka.com wss://c29.1ka.com wss://c210.1ka.com wss://c211.1ka.com wss://c212.1ka.com wss://c213.1ka.com wss://c214.1ka.com wss://c215.1ka.com wss://c3.1ka.com wss://c31.1ka.com wss://c32.1ka.com wss://c33.1ka.com wss://c34.1ka.com wss://c35.1ka.com wss://c36.1ka.com wss://c37.1ka.com wss://c38.1ka.com wss://c39.1ka.com wss://c4.1ka.com wss://c41.1ka.com wss://c42.1ka.com wss://c43.1ka.com wss://c44.1ka.com wss://c45.1ka.com wss://c46.1ka.com wss://c47.1ka.com wss://c48.1ka.com wss://c49.1ka.com wss://c410.1ka.com wss://c411.1ka.com wss://c412.1ka.com wss://c413.1ka.com wss://c414.1ka.com wss://c415.1ka.com wss://c5.1ka.com wss://c51.1ka.com wss://c52.1ka.com wss://c53.1ka.com wss://c54.1ka.com wss://c55.1ka.com wss://c56.1ka.com wss://c57.1ka.com wss://c58.1ka.com wss://c59.1ka.com wss://c510.1ka.com wss://c511.1ka.com wss://c512.1ka.com wss://c513.1ka.com wss://c514.1ka.com wss://c515.1ka.com https://dev-chatserver.camster.com https://staging-chatserver.camster.com https://m.1ka.com https://c1.1ka.com https://c11.1ka.com https://c12.1ka.com https://c13.1ka.com https://c14.1ka.com https://c15.1ka.com https://c16.1ka.com https://c17.1ka.com https://c18.1ka.com https://c19.1ka.com https://c110.1ka.com https://c111.1ka.com https://c112.1ka.com https://c113.1ka.com https://c114.1ka.com https://c115.1ka.com https://c2.1ka.com https://c21.1ka.com https://c22.1ka.com https://c23.1ka.com https://c24.1ka.com https://c25.1ka.com https://c26.1ka.com https://c27.1ka.com https://c28.1ka.com https://c29.1ka.com https://c210.1ka.com https://c211.1ka.com https://c212.1ka.com https://c213.1ka.com https://c214.1ka.com https://c215.1ka.com https://c3.1ka.com https://c31.1ka.com https://c32.1ka.com https://c33.1ka.com https://c34.1ka.com https://c35.1ka.com https://c36.1ka.com https://c37.1ka.com https://c38.1ka.com https://c39.1ka.com https://c4.1ka.com https://c41.1ka.com https://c42.1ka.com https://c43.1ka.com https://c44.1ka.com https://c45.1ka.com https://c46.1ka.com https://c47.1ka.com https://c48.1ka.com https://c49.1ka.com https://c410.1ka.com https://c411.1ka.com https://c412.1ka.com https://c413.1ka.com https://c414.1ka.com https://c415.1ka.com https://c5.1ka.com https://c51.1ka.com https://c52.1ka.com https://c53.1ka.com https://c54.1ka.com https://c55.1ka.com https://c56.1ka.com https://c57.1ka.com https://c58.1ka.com https://c59.1ka.com https://c510.1ka.com https://c511.1ka.com https://c512.1ka.com https://c513.1ka.com https://c514.1ka.com https://c515.1ka.com https://media.1ka.com https://u.1ka.com https://n.1ka.com;img-src 'self' 'unsafe-inline' data: blob: *.xvideos.com *.xnxx.com *.red-cdn.com *.gold-cdn.com *.xvideos-cdn.com *.xnxx-cdn.com *.others-cdn.com *.cdn77.org *.trafficfactory.biz www.google.com www.google-analytics.com ssl.gstatic.com *.nk-img.com *.camster.com *.vscdns.com *.doubleclick.net *.google.fr *.google.com *.gtflixtv.com *.exoclick.com *.exosrv.com *.realsrv.com *.exdynsrv.com *.ackcdn.net *.afcdn.net *.aucdn.net bmedia.justservingfiles.net;
Referrer-Policy: no-referrer-when-downgrade
Set-Cookie: session_token=a06e1490242b6cf91V4eR53xzWmYru04wtIBzED87pQfpF9h17VLpwpJMidMGbnkiPtR5ls95zyJ4SrKyNTIiUm8G8MJ3UqXz92QBRERNgsRBe5mtyKPmPIsxrIcJDHr9w_8REHIT28xE9U5HAHdXlTBuihxmoEGI-jzrNh4SqQK4F6JCowYCgAmMsTGvA5BTHBcZdg4htTWurUD; expires=Sun, 16-Apr-2023 03:47:06 GMT; Max-Age=2592000; path=/; domain=.xvideos.com
_ga=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.xvideos.com
_gid=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.xvideos.com
_gat=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.xvideos.com
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Server: nginx
www.pornhubpremium.com/premium/login?redirect=x-rfqZN6KYXyagbBOvVa9kmte8N3nl9N2su3oYeZWh88ay2jLBKfWDlcoosPN2M1
200 OK 7.9 kB URL HTTP/1.1 www.pornhubpremium.com/premium/login?redirect=x-rfqZN6KYXyagbBOvVa9kmte8N3nl9N2su3oYeZWh88ay2jLBKfWDlcoosPN2M1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2404)
Hash 422103b186dfc2b34d016c758860e691
83869ba68217b46d84592f83b2b7107a7add35ba
bcb757e950b18cb537d05698f059ec3b14786a25935545fcb340c2474a5102de
GET /premium/login?redirect=x-rfqZN6KYXyagbBOvVa9kmte8N3nl9N2su3oYeZWh88ay2jLBKfWDlcoosPN2M1 HTTP/1.1
Host: www.pornhubpremium.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dameserotiques.com/
Connection: keep-alive
Cookie: bs=8hwjxtr6nqbt05wencghu848bml7r9su
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: openresty
date: Fri, 17 Mar 2023 03:47:06 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
set-cookie: ua=df16c081c25306654a0efb89b8761a08; expires=Sat, 18-Mar-2023 03:47:06 GMT; Max-Age=86400; path=/; domain=pornhubpremium.com; secure; HttpOnly
platform=pc; expires=Fri, 24-Mar-2023 03:47:06 GMT; Max-Age=604800; path=/; domain=pornhubpremium.com; secure; HttpOnly
ss=203694300290833789; expires=Sat, 16-Mar-2024 03:47:06 GMT; Max-Age=31536000; path=/; domain=pornhubpremium.com; secure; HttpOnly
fg_0d2ec4cbd943df07ec161982a603817e=30312.100000; expires=Sun, 16-Apr-2023 03:47:06 GMT; Max-Age=2592000; path=/; domain=pornhubpremium.com; secure
ats=eyJhIjoyNiwibiI6MywicyI6MiwiZSI6ODAwMCwicCI6NSwiY24iOiJOb3RfTWVtYmVyX0xvZ2luX0MwMDBfNDJfMV80MTEifQ%3D%3D; expires=Sun, 16-Apr-2023 03:47:06 GMT; Max-Age=2592000; path=/; domain=pornhubpremium.com; secure; HttpOnly
x-frame-options: SAMEORIGIN
cache-control: no-cache, no-store, must-revalidate
vary: User-Agent
rating: RTA-5042-1996-1400-1577-RTA
content-encoding: gzip
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-request-id: 6413E2BA-42FE722101BBBDB5-F6FF7B3
mc.yandex.ru/watch/54321264/1?page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&charset=utf-8&hittoken=1679024825_d2adfd09ee1ecea9701701db41d4637328a5b52d40e04aaae2e756c006fc12bf&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A880240531178%3Ahid%3A59133345%3Az%3A0%3Ai%3A20230317034705%3Aet%3A1679024826%3Ac%3A1%3Arn%3A539590282%3Arqn%3A2%3Au%3A1679024826326708759%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C3292%2C3295%2C4%2C%3Aco%3A0%3Ans%3A1679024822528%3Aadb%3A2%3Ast%3A1679024826&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/54321264/1?page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&charset=utf-8&hittoken=1679024825_d2adfd09ee1ecea9701701db41d4637328a5b52d40e04aaae2e756c006fc12bf&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A880240531178%3Ahid%3A59133345%3Az%3A0%3Ai%3A20230317034705%3Aet%3A1679024826%3Ac%3A1%3Arn%3A539590282%3Arqn%3A2%3Au%3A1679024826326708759%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C3292%2C3295%2C4%2C%3Aco%3A0%3Ans%3A1679024822528%3Aadb%3A2%3Ast%3A1679024826&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/54321264/1?page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&charset=utf-8&hittoken=1679024825_d2adfd09ee1ecea9701701db41d4637328a5b52d40e04aaae2e756c006fc12bf&browser-info=pa%3A1%3Aar%3A1%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A970%3Acn%3A1%3Adp%3A0%3Als%3A880240531178%3Ahid%3A59133345%3Az%3A0%3Ai%3A20230317034705%3Aet%3A1679024826%3Ac%3A1%3Arn%3A539590282%3Arqn%3A2%3Au%3A1679024826326708759%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C3292%2C3295%2C4%2C%3Aco%3A0%3Ans%3A1679024822528%3Aadb%3A2%3Ast%3A1679024826&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 136
Origin: https://dameserotiques.com
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 17 Mar 2023 03:47:06 GMT
access-control-allow-origin: https://dameserotiques.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 17-Mar-2023 03:47:06 GMT
last-modified: Fri, 17-Mar-2023 03:47:06 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0f03f2ce91e1cf44a2e3a955f1d03594
2bd3421ebdffd191c65c5cc0e533dd5695c409dc
76e7b283f89fa271371ca30032dd7ea5f8bc59c78b92e52b6c272c6b14613377
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 17 Mar 2023 03:47:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.pornhub.com/video/manage?o=mr&t=pr2
302 Found 337 B URL HTTP/2 www.pornhub.com/video/manage?o=mr&t=pr2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 66a43eafe19fd2e9782007272dd06ced
9d5112f8b4482ef224d10b0d0a17bfaf053e8e23
f432da756645f1aa0bdfff17c86556d7343c5ae482f941597552d9701560d6bb
GET /video/manage?o=mr&t=pr2 HTTP/1.1
Host: www.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dameserotiques.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: openresty
date: Fri, 17 Mar 2023 03:47:06 GMT
content-type: text/html; charset=UTF-8
set-cookie: ua=df16c081c25306654a0efb89b8761a08; expires=Sat, 18-Mar-2023 03:47:06 GMT; Max-Age=86400; path=/; domain=pornhub.com; secure
platform=pc; expires=Fri, 24-Mar-2023 03:47:06 GMT; Max-Age=604800; path=/; domain=pornhub.com; secure
bs=l73szotb2l45fy70d29zk54ebyz9uixu; expires=Mon, 14-Mar-2033 03:47:06 GMT; Max-Age=315360000; path=/; domain=pornhub.com; secure; SameSite=None
ss=804034933526592439; expires=Sat, 16-Mar-2024 03:47:06 GMT; Max-Age=31536000; path=/; domain=pornhub.com; secure
fg_0d2ec4cbd943df07ec161982a603817e=52499.100000; expires=Sun, 16-Apr-2023 03:47:06 GMT; Max-Age=2592000; path=/; domain=pornhub.com; secure
__s=6413E2BA-42FE722901BB3C1A-F21670B; Secure; Samesite=None
__l=6413E2BA-42FE722901BB3C1A-F21670B; Secure; Samesite=None; Max-Age=31556926
x-frame-options: SAMEORIGIN
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
ph-redirect: 1041
location: /login
vary: User-Agent
rating: RTA-5042-1996-1400-1577-RTA
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-request-id: 6413E2BA-42FE722901BB3C1A-F21670B
X-Firefox-Spdy: h2
www.pornhub.com/login
200 OK 68 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4544)
Hash cda258dc56a4f8dc04df644c999a10e8
eca6883dcbcb1c1537f3e993dbc423bf8566c550
1ad0c3c50fc99b15af4e2d1676ce84f3f27b570fe14f66f5479597e86996cbe6
GET /login HTTP/1.1
Host: www.pornhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dameserotiques.com/
Connection: keep-alive
Cookie: bs=l73szotb2l45fy70d29zk54ebyz9uixu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 17 Mar 2023 03:47:06 GMT
content-type: text/html; charset=UTF-8
set-cookie: ua=df16c081c25306654a0efb89b8761a08; expires=Sat, 18-Mar-2023 03:47:06 GMT; Max-Age=86400; path=/; domain=pornhub.com; secure
platform=pc; expires=Fri, 24-Mar-2023 03:47:06 GMT; Max-Age=604800; path=/; domain=pornhub.com; secure
ss=526326825354429316; expires=Sat, 16-Mar-2024 03:47:06 GMT; Max-Age=31536000; path=/; domain=pornhub.com; secure
fg_0d2ec4cbd943df07ec161982a603817e=76232.100000; expires=Sun, 16-Apr-2023 03:47:06 GMT; Max-Age=2592000; path=/; domain=pornhub.com; secure
__s=6413E2BA-42FE722901BB3C1A-F21673F; Secure; Samesite=None
__l=6413E2BA-42FE722901BB3C1A-F21673F; Secure; Samesite=None; Max-Age=31556926
x-frame-options: SAMEORIGIN
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
vary: User-Agent
rating: RTA-5042-1996-1400-1577-RTA
content-encoding: gzip
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-request-id: 6413E2BA-42FE722901BB3C1A-F21673F
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=721262081&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679024829%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034709%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024829&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=721262081&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679024829%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034709%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024829&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/54321264?wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=721262081&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679024829%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034709%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024829&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 257493
Origin: https://dameserotiques.com
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 17 Mar 2023 03:47:09 GMT
access-control-allow-origin: https://dameserotiques.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 17-Mar-2023 03:47:09 GMT
last-modified: Fri, 17-Mar-2023 03:47:09 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=886256940&wv-type=3&browser-info=we%3A1%3Aet%3A1679024829%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034709%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024829&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=886256940&wv-type=3&browser-info=we%3A1%3Aet%3A1679024829%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034709%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024829&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/54321264?wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=886256940&wv-type=3&browser-info=we%3A1%3Aet%3A1679024829%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034709%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024829&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://dameserotiques.com
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 17 Mar 2023 03:47:09 GMT
access-control-allow-origin: https://dameserotiques.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 17-Mar-2023 03:47:09 GMT
last-modified: Fri, 17-Mar-2023 03:47:09 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/54321264?wv-check=46341&wv-type=0&wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=645382784&browser-info=we%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/54321264?wv-check=46341&wv-type=0&wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=645382784&browser-info=we%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/54321264?wv-check=46341&wv-type=0&wmode=0&wv-part=1&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=645382784&browser-info=we%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://dameserotiques.com
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 17 Mar 2023 03:47:11 GMT
access-control-allow-origin: https://dameserotiques.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 17-Mar-2023 03:47:11 GMT
last-modified: Fri, 17-Mar-2023 03:47:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=2&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=567402540&wv-type=3&browser-info=we%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=2&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=567402540&wv-type=3&browser-info=we%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/54321264?wmode=0&wv-part=2&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=567402540&wv-type=3&browser-info=we%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://dameserotiques.com
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 17 Mar 2023 03:47:11 GMT
access-control-allow-origin: https://dameserotiques.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 17-Mar-2023 03:47:11 GMT
last-modified: Fri, 17-Mar-2023 03:47:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=2&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=250535991&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/54321264?wmode=0&wv-part=2&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=250535991&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/54321264?wmode=0&wv-part=2&wv-hit=59133345&page-url=https%3A%2F%2Fdameserotiques.com%2Flanding2&rn=250535991&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1679024832%3Aw%3A1268x939%3Av%3A970%3Az%3A0%3Ai%3A20230317034711%3Au%3A1679024826326708759%3Avf%3Asm0eap24cmhk4ozkpnx0n%3Ast%3A1679024832&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://dameserotiques.com
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 17 Mar 2023 03:47:12 GMT
access-control-allow-origin: https://dameserotiques.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 17-Mar-2023 03:47:12 GMT
last-modified: Fri, 17-Mar-2023 03:47:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
chytrack.com/assets.min.js
500 Internal Server Error 0 B URL HTTP/2 chytrack.com/assets.min.js
IP
GET /assets.min.js HTTP/1.1
Host: chytrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 500 Internal Server Error
date: Fri, 17 Mar 2023 03:47:06 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DSY1ZSRInSir20F0CMew%2BcJH2KJ%2BQV1CIzFQhRSbsbJlU%2F3fLNWDkSBFvOhFvOnFmK1zBU5ajyjvRaL2bT2PnhLOn7v3BbDY1eDDCuEUoLq%2F9QiR1jo0KPaojFOZK0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a9240aace520b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dameserotiques.com/landing2
200 OK 0 B URL HTTP/2 dameserotiques.com/landing2
IP
Analyzer Verdict Alert fortinet Phishing
GET /landing2 HTTP/1.1
Host: dameserotiques.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 17 Mar 2023 03:47:03 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
set-cookie: XSRF-TOKEN=eyJpdiI6IjBOYjRFTzBtRDdUTnZpalROWWl4UFE9PSIsInZhbHVlIjoiRkZBYkFCWTVlVXFTTWZ4cHg0bjhNOHRqMG8wanRhNXBoazFBSjBtRGdKOVB0RGlGSHFNS25ITkt5UjlUY2loc2RtXC9TM1wvNm9rU1dUdHpObndJYW01dz09IiwibWFjIjoiZGQ4YWJkMTg4ZjU3NmM3Y2M0NWFmMDRjZjViMzU2ZjYxM2I2OTNjNWM0ZTQ2M2FhMTM3NTlhNDNhYzFlMzlmNiJ9; expires=Fri, 17-Mar-2023 05:47:03 GMT; Max-Age=7200; path=/
laravel_session=eyJpdiI6Ikg0UmoyWHhcL3o2ajZSOUJ5M0k0MVwvZz09IiwidmFsdWUiOiJYcFg4MDZsa3NZQWlzYnd3YjJOajFrOGtqeUtkTmFXaktJQ2dZekZQeXpzdklsQjA5K3RnZ0t2RDBrSEszb2JiWXlGVm9zR1ZRT3JDUTVuVnM5RXV6QT09IiwibWFjIjoiZTQ5MWZmY2U1OGM3N2VhZTcwM2I0NDQ3ZTBmNjZlYjYyMjEzN2UxNTU4ODlkNjA0YWQxYjc5NGFhZWUwZjhiNSJ9; expires=Fri, 17-Mar-2023 05:47:03 GMT; Max-Age=7200; path=/; HttpOnly
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v4jc9opPULG%2FAmLJPOaZP3TpJfRBzi3bqLQ3FIbrYqcNis%2FvUiNxXCWyEt22LS%2ByiORDIPMs5jfUuH7zPoHstPFxq4nCAMG10Wc0xThirDlJbuRcJJtQLopFk8tUrhSMtTNAG7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a92409a09c5b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
svntrk.com/assets/analytics.js?cb=6413e2b79400d
200 OK 0 B URL HTTP/2 svntrk.com/assets/analytics.js?cb=6413e2b79400d
IP
GET /assets/analytics.js?cb=6413e2b79400d HTTP/1.1
Host: svntrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 17 Mar 2023 03:47:04 GMT
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: BYPASS
set-cookie: scktrk=6413e2b81cfbc-8-0323; expires=Wed, 15-Mar-2028 03:47:04 GMT; Max-Age=157680000; path=/; secure; httponly; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5h0VfADIjWKZeVk2O%2BcWcDN4ZLy%2BFvqG%2Fjjg1NI1ArorI7dnOvTNv5wp%2BjPsCpPoVRFX2kqLCnst89o2Q1r%2Bh5WFUXrON3SL23xQBWO4HQKcXt8f%2B10nIBt2vM9a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a92409d0ee80b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=de&service=youtube
302 Found 0 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=de&service=youtube
IP
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=de&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 17 Mar 2023 03:47:05 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=de&passive=true&service=youtube&uilel=3&ifkv=AWnogHfhhOZzyPqdbM6WEQUPXb197bm8RY9SUYi-AXCx9fn4usc8bkLUyJaTBKkNsg4TA0QlFEWh9w
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-kZ08UpcrW-dZKXpvLxbOXg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSigninPassiveLoginHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSigninPassiveLoginHttp/external"}]}, {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none; report-to="AccountsSigninPassiveLoginHttp"
content-type: application/binary
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:ixoCFcRzzH4vqAkvW4rb3ak8kluxHA:2d6AUTZLWCrD37S6; Expires=Sun, 16-Mar-2025 03:47:05 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.instagram.com/accounts/login/?next=%2Ffavicon.ico
200 OK 0 B URL HTTP/2 www.instagram.com/accounts/login/?next=%2Ffavicon.ico
IP
GET /accounts/login/?next=%2Ffavicon.ico HTTP/1.1
Host: www.instagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dameserotiques.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
accept-ch-lifetime: 4838400
accept-ch: sec-ch-prefers-color-scheme
reporting-endpoints: coep_report="https://www.facebook.com/browser_reporting/?minimize=0"
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: unsafe-none
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000
content-type: text/html; charset="utf-8"
x-fb-debug: XYfoohtUUkHS3IyapJF9iJasMdfCAxTlDEpLkuXT+BDNi+OFF04d6rBeR0MCvyrpaPK52UyGBgFlGt2I9UxdDw==
date: Fri, 17 Mar 2023 03:47:05 GMT
priority: u=3,i
x-fb-trip-id: 1679558926
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.68.122
31.13.72.36
172.64.155.188
95.211.229.247
188.114.96.1
93.158.134.119
23.36.77.32