Overview

URLdateexotic.com/agEA?usid=3mn0nrs1c1s93&email=rzacarias@slurpmail.net&sub1=clear_main&prid=3mn0nrs1c1s93
IP 172.67.159.164 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access public lock_open
Report completed2023-03-09 13:53:27 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (18)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-24T16:33:49Z 3246 43675 34.120.237.76
ocsp.r2m01.amazontrust.com (2) 0 2022-10-12T22:43:53Z 2023-03-25T05:09:20Z 700 1974 54.230.80.227
manager.production.almightypush.com (2) 731001 2021-12-13T08:30:11Z 2023-03-25T16:52:33Z 944 2157 3.134.218.58
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-24T18:17:07Z 606 127 54.187.66.119
static.production.almightypush.com (4) 214819 2021-09-25T18:34:18Z 2023-03-25T12:04:56Z 1572 57512 54.230.111.2
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-24T18:20:20Z 413 5882 34.160.144.191
ero-cupid.com (6) 0 2022-06-27T17:14:54Z 2023-03-24T14:44:05Z 5291 23468 185.151.246.147
browser.sentry-cdn.com (1) 4393 2018-07-13T13:42:06Z 2023-03-25T05:30:42Z 389 21361 151.101.66.217
o65532.ingest.sentry.io (3) 747982 2022-06-02T03:41:52Z 2023-03-25T10:53:12Z 1760 1700 34.120.195.249
www2.dateexotic.com (1) 0 2022-11-09T13:59:30Z 2023-03-25T10:53:09Z 958 1387 172.67.159.164
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-24T18:14:23Z 782 2374 35.241.9.150
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-25T05:09:02Z 3042 7979 23.36.77.32
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-25T05:09:25Z 333 391 34.117.237.239
ocsp.pki.goog (4) 175 2018-07-01T08:43:07Z 2023-03-25T05:09:34Z 1400 2824 216.58.211.3
alexatracker.com (1) 0 2020-10-28T19:44:06Z 2023-03-25T05:10:01Z 1199 1255 104.21.85.99
js.sentry-cdn.com (1) 5259 2018-07-13T13:42:06Z 2023-03-25T18:49:17Z 385 1765 151.101.66.217
ajax.googleapis.com (1) 12905 2013-08-16T11:51:31Z 2023-03-25T04:04:41Z 356 32003 216.58.207.202
dateexotic.com (3) 0 2020-10-21T12:51:18Z 2023-03-25T10:00:12Z 1198 6397 172.67.159.164

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-09 medium dateexotic.com/static/js/build/bd.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.159.164
Date UQ / IDS / BL URL IP
2023-05-23 23:48:54 UTC 0 - 20 - 39 dateexotic.com/agEA?usid=pp&email=luchtfoto@s (...) 172.67.159.164
2023-04-19 04:04:10 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=1inbv16vjhul&email&s (...) 172.67.159.164
2023-04-18 12:13:46 UTC 0 - 1 - 0 mokowimy.logalestore.buzz/ 172.67.159.164
2023-04-05 21:46:02 UTC 0 - 0 - 2 dateexotic.com/agEA?usid=lq4b3kvlcoq&email&su (...) 172.67.159.164
2023-04-01 05:55:19 UTC 0 - 2 - 0 xrijks6.info/ 172.67.159.164


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-07 03:10:13 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/30253307374705 (...) 162.159.130.233
2023-06-07 03:10:12 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/31975836793123 (...) 162.159.134.233
2023-06-07 03:10:12 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/32507444262548 (...) 162.159.135.233
2023-06-07 03:10:11 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/44856564714058 (...) 162.159.130.233
2023-06-07 03:10:01 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/20489105023657 (...) 162.159.135.233


Last 5 reports on domain: dateexotic.com
Date UQ / IDS / BL URL IP
2023-04-19 04:04:10 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=1inbv16vjhul&email&s (...) 172.67.159.164
2023-04-16 06:38:55 UTC 0 - 0 - 17 dateexotic.com/agEA?usid=3u19vufv9oqs&email&s (...) 104.21.34.109
2023-04-09 16:13:19 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=1g50tdvur3j3&email&s (...) 104.21.34.109
2023-04-05 21:46:02 UTC 0 - 0 - 2 dateexotic.com/agEA?usid=lq4b3kvlcoq&email&su (...) 172.67.159.164
2023-03-29 23:57:22 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=3ltov8519nhvo&email= (...) 172.67.159.164


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-22 05:00:53 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=clear2&email=jennasu (...) 104.21.34.109
2023-03-13 08:05:34 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=d0348v1gnj6s&email=f (...) 172.67.159.164
2023-03-11 22:30:47 UTC 0 - 4 - 0 jfb2ya109uawtest3.pracovdlotal.tk/TSKtBH6B?ke (...) 188.114.97.1
2023-03-09 11:04:48 UTC 0 - 4 - 0 wkz57ttf23llwtest3.mojolbonpta.tk/TSKtBH6B?ke (...) 104.21.57.123
2023-03-08 11:41:58 UTC 0 - 0 - 1 dateexotic.com/agEA?usid=30tualj1bls4t&email= (...) 104.21.34.109

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (49)


Request Response
                                        
                                            GET /agEA?usid=3mn0nrs1c1s93&email=rzacarias@slurpmail.net&sub1=clear_main&prid=3mn0nrs1c1s93 HTTP/1.1 
Host: dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             172.67.159.164
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Thu, 09 Mar 2023 13:53:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xmB7ZQUzxDcdHXVw4g0PkqAzHtBCTLHizN3ePQlT%2BNCVApELicuGvl0C1XAR0B%2FaOSfbQ5e2WP0dqIMv1YTzaIXUI2AJwEXuCaC7GrpuLb9QJmSv4Yyh8fgIDDPqga30Iw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a53cd9da919b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   960
Md5:    b3cc11b91b6e6c63fd10fd2b69df7e28
Sha1:   193736ed8bdbe035cdd6e4d173129a12e8539a0f
Sha256: e8486e4436ce7ec804fc71850f087660aaead62994afb26e00a022d7b8a12057
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B15C98C58FAE6A49E831BC0DB617BEDF8538BBFA011A84553DEBDCBE461433D0"
Last-Modified: Tue, 07 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13259
Expires: Thu, 09 Mar 2023 17:34:15 GMT
Date: Thu, 09 Mar 2023 13:53:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EBCB744A032452533C000C0A9F193FD2566B2389729C41B6C5ED69B9E4CD42D4"
Last-Modified: Tue, 07 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14209
Expires: Thu, 09 Mar 2023 17:50:05 GMT
Date: Thu, 09 Mar 2023 13:53:16 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Mar 2023 13:13:43 GMT
age: 2373
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    84db75194692d4afe13196bda6f22da8
Sha1:   4c1f49bc973a4917f146d93c8d598344edc021f6
Sha256: a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "560F8228FEDC912E05B84AF1D19FCEFCA3FEC82415180DF5D18C5B2A3F533A68"
Last-Modified: Tue, 07 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4877
Expires: Thu, 09 Mar 2023 15:14:33 GMT
Date: Thu, 09 Mar 2023 13:53:16 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: WpVMpb1KLmyTNYoAOX62ZlNlENUJZkm5B1sXk11HYfcicoXeFTLZoR7PQe/c+ispv4kRmsVhPiA=
x-amz-request-id: RA6ANB60B3C2Y8RQ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Mar 2023 13:18:26 GMT
age: 2090
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b5ba6334e73496995e3e3a9ecd0eb323
Sha1:   ad80d3b7718c28364e8c2004fb38a13a1747e462
Sha256: aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
                                        
                                            GET /static/js/build/bd.js HTTP/1.1 
Host: dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dateexotic.com/agEA?usid=3mn0nrs1c1s93&email=rzacarias@slurpmail.net&sub1=clear_main&prid=3mn0nrs1c1s93

                                        
                                             172.67.159.164
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Date: Thu, 09 Mar 2023 13:53:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7a53cd9fec5db524-OSL
Age: 130624
ETag: W/"static/js/build/bd.3ad9d77bdd.js"
Vary: Accept-Encoding
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X5CE8kEyYvgXi11LnxTk5KqmPClTLn%2Fpv5b%2BU8UBPNlNf5iHHXlQ8grjQ7fpTm2tZfLK4hqi18iwlKll1xf1YxeDlV%2BsNl2VcLbwIkuAOEYGn0xQDxpL6jI0Jp6LTtG8Pg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (8033)
Size:   3571
Md5:    896fa747a8832e6a6ac72bbbcfc917f6
Sha1:   67dc40632c900a9f84280f0898b308b8a6b3e3a5
Sha256: 6e8a3da2d10de2291c78a9b5c4924383914596d719f5a0390f8a4e38a78d9c2b

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 09 Mar 2023 13:53:16 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dateexotic.com/agEA?usid=3mn0nrs1c1s93&email=rzacarias@slurpmail.net&sub1=clear_main&prid=3mn0nrs1c1s93

                                        
                                             172.67.159.164
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Date: Thu, 09 Mar 2023 13:53:17 GMT
Content-Length: 47
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E%2BPTRcG5Ie6Pb5jYVYS7%2B9tAAEXEb3qcGMhdGg5fp1X6RUmK9x0FFL94lg%2FsgJEe7BKk3VDaz4htgAz3Jhsm7mKKgTMBjaj8A6MBPny5UcbEDHWYaRLgXRAITc0Alr2EBA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a53cda14e66b524-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   47
Md5:    2f3ca1d38e8b18ef00c4a0eff0889cfc
Sha1:   2f28ed1ccf7c08cf22491757fe20385249db162e
Sha256: af9dbf02c85319fda5ed6e97828a8328ce87a4a11e2a95d506654bf7dee244f4
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Mar 2023 13:03:42 GMT
age: 2975
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A9D8A1030EC5E70745F085F90E35A4B8832956FF20BD6719F3DBE6DD7291FC05"
Last-Modified: Tue, 07 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4247
Expires: Thu, 09 Mar 2023 15:04:04 GMT
Date: Thu, 09 Mar 2023 13:53:17 GMT
Connection: keep-alive

                                        
                                            POST /s/gts1p5/2sAltK-Ives HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 09 Mar 2023 13:53:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /?r=aHR0cHM6Ly93d3cyLmRhdGVleG90aWMuY29tL2FnRUE%2FdXNpZD0zbW4wbnJzMWMxczkzJmVtYWlsPXJ6YWNhcmlhcyU0MHNsdXJwbWFpbC5uZXQmc3ViMT1jbGVhcl9tYWluJnByaWQ9M21uMG5yczFjMXM5MyZiZGF0YT1leUprWVhSaElqcDdJbkJzWVhSbWIzSnRJam9pVEdsdWRYZ2dlRGcyWHpZMEluMHNJbVY0ZEhKaElqcDdJazVoZG1sbllYUnZjaTV3YkdGMFptOXliU0k2V3lKTWFXNTFlQ0J3YkdGMFptOXliU0JoYm1RZ1YybHVaRzkzY3lCMWMyVnlJR0ZuWlc1MElHUnZJRzV2ZENCdFlYUmphQ0pkZlN3aVpYSnliM0p6SWpwN0ltbG1jbUZ0WlNJNld5SmpZVzRuZENCaFkyTmxjM01nY0hKdmNHVnlkSGtnWENKaGNIQmxibVJEYUdsc1pGd2lMQ0JrYjJOMWJXVnVkQzVpYjJSNUlHbHpJRzUxYkd3aVhTd2lZMkZ1ZG1GelgyTnZiblJsZUhRaU9sc2lSbUZwYkdWa0lIUnZJR2RsZENCallXNTJZWE1nWTI5dWRHVjRkQ0pkZlN3aVltOTBVMk52Y21VaU9pSXlOQ0o5JmJ0PTE2NzgzNjk5OTYmYnRoPTEwNjA0MzY5OTk%3D&h=266fdb7fd7e5e9f538a6bf7b7da54e95 HTTP/1.1 
Host: alexatracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dateexotic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             104.21.85.99
HTTP/2 301 Moved Permanently
                                            
date: Thu, 09 Mar 2023 13:53:17 GMT
content-length: 0
location: https://www2.dateexotic.com/agEA?usid=3mn0nrs1c1s93&email=rzacarias%40slurpmail.net&sub1=clear_main&prid=3mn0nrs1c1s93&bdata=eyJkYXRhIjp7InBsYXRmb3JtIjoiTGludXggeDg2XzY0In0sImV4dHJhIjp7Ik5hdmlnYXRvci5wbGF0Zm9ybSI6WyJMaW51eCBwbGF0Zm9ybSBhbmQgV2luZG93cyB1c2VyIGFnZW50IGRvIG5vdCBtYXRjaCJdfSwiZXJyb3JzIjp7ImlmcmFtZSI6WyJjYW4ndCBhY2Nlc3MgcHJvcGVydHkgXCJhcHBlbmRDaGlsZFwiLCBkb2N1bWVudC5ib2R5IGlzIG51bGwiXSwiY2FudmFzX2NvbnRleHQiOlsiRmFpbGVkIHRvIGdldCBjYW52YXMgY29udGV4dCJdfSwiYm90U2NvcmUiOiIyNCJ9&bt=1678369996&bth=1060436999&tbsession=4179972997186708685&c=4213020991
set-cookie: trbarid=4179972997186708685;expires=Sat, 08 Mar 2025 13:53:17 GMT;secure;HttpOnly;SameSite=None;path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aZTKuATT%2Bpm%2B0BelBN3hAxbZ8TxQ7LL2uSezk8IMbSX%2BiUHu4TsSxskLSlqpe%2BLLglDpof7V5YeF2HThG0kpbTdcNKrSPLcm5h0D9Mm%2B4a1CvhZ3w%2BGvThI5ufxasVFP%2B5%2FO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a53cda65d2cb4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3zwOm7DrDpOJjmXA8sXWYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.187.66.119
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kMzTrmaUpH6KbaJeOzz7xJX648s=

                                        
                                            POST /s/gts1p5/2sAltK-Ives HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 09 Mar 2023 13:53:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D5D1AA6A57672D8BD170D2B5803EC1E56371CDC00FDEB4618132DD6D5B2B310F"
Last-Modified: Wed, 08 Mar 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13825
Expires: Thu, 09 Mar 2023 17:43:43 GMT
Date: Thu, 09 Mar 2023 13:53:18 GMT
Connection: keep-alive

                                        
                                            GET /XQAA/12058/oth?i=EbaJOmQJ5M4&u=4179972997186708685 HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dateexotic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 09 Mar 2023 13:53:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
X-Cache-Status: MISS
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (467), with CRLF, LF line terminators
Size:   7099
Md5:    2f356cab54b90840815cca70a61204f5
Sha1:   c0a002071ddd7d31d4bee9f13d4cdadd9b4b4c5e
Sha256: bee687f8a923fa351797023056b4ce8386bde7e6f736ff1118894193fc4710aa
                                        
                                            GET /static/NgAA/css/styles.min.css HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 09 Mar 2023 13:53:18 GMT
Content-Length: 14054
Connection: keep-alive
Last-Modified: Wed, 20 Apr 2022 14:05:31 GMT
ETag: "6260132b-36e6"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (14050), with no line terminators
Size:   14054
Md5:    7c7128605b68dc5c5074066f7fe50087
Sha1:   a02bdf7787d753e9b92f703a1c94ffa67a7936df
Sha256: ec5c6e7c09b0f1e32e88152db7093221b0d4aa8a7d73e10c7e446f864d5ff4a6
                                        
                                            GET /f44bbfb9a37b4915ac9fa50036de00f6.min.js HTTP/1.1 
Host: js.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.66.217
HTTP/2 200 OK
content-type: text/javascript
                                            
access-control-allow-origin: *
cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-envoy-attempt-count: 1
x-envoy-upstream-service-time: 13
content-encoding: gzip
accept-ranges: bytes
date: Thu, 09 Mar 2023 13:53:18 GMT
age: 49
x-served-by: getsentry-web-default-common-production-6bc8dcd9d-2ns7j, cache-bma1681-BMA
vary: Accept-Encoding
timing-allow-origin: https://sentry.io
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 1077
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (502)
Size:   1077
Md5:    f168a33e468d994bc37380cb6f1b9844
Sha1:   f07eee5b20ac9dc587e6c8a15a8ec3454a89ba26
Sha256: 38dec94c4484898bf5d2917c3d61ddcf77e2f2388122d2c4551607ffb1e664b0
                                        
                                            GET /mng/subs_window.js?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 19491
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 09 Mar 2023 06:29:56 GMT
etag: "ae593f4be1dd1f0710123918b49c4933"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lhaa87Kts3KFHLRg866yBsyWeU4dJdc6S95ymoLILuTEuw1lxC0gLg==
age: 26784
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   19491
Md5:    ae593f4be1dd1f0710123918b49c4933
Sha1:   66fbe30bb873e0a47d3d72e737d68aa4b6916c26
Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
                                        
                                            GET /mng/channels/init.min.js?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 22787
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 09 Mar 2023 02:12:01 GMT
etag: "3b6653c5e8ba364d3a55401890bfcd78"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jZNvaISbZZNpQ4qfJct86ZS6yUp9YjaEaw9ABHA5bJhsalpAyQlHSw==
age: 42401
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   22787
Md5:    3b6653c5e8ba364d3a55401890bfcd78
Sha1:   ee999f16f02d41b93d1db2bf3a489fab1034e67a
Sha256: a598ef0100e73e2d81969e0a59374e915ccfe7c312603b4b1375bbd0e75498d5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 09 Mar 2023 13:53:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /mng/subs_window.css?ver=1672746357 HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: text/css
                                            
content-length: 6945
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Thu, 09 Mar 2023 09:18:06 GMT
etag: "bd7dbae15f904a4e1213439ebfefddbe"
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -qwahvxUnzBkiuIauPrhtMakU7gLYJ8hvdhVxrh5pA1Log6uiYKgmA==
age: 45845
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   6945
Md5:    bd7dbae15f904a4e1213439ebfefddbe
Sha1:   9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e
Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21422
Expires: Thu, 09 Mar 2023 19:50:20 GMT
Date: Thu, 09 Mar 2023 13:53:18 GMT
Connection: keep-alive

                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.202
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Mar 2023 13:36:02 GMT
expires: Fri, 08 Mar 2024 13:36:02 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 1036
last-modified: Fri, 08 May 2020 07:05:03 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   31021
Md5:    903bc7a7e510f87aa5d0201eb59a0832
Sha1:   ac9aa4dd94cde1bcba9037e94087138b127e41fc
Sha256: 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21422
Expires: Thu, 09 Mar 2023 19:50:20 GMT
Date: Thu, 09 Mar 2023 13:53:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff126aba3-5053-41e8-9adc-5cb3d542d065.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8421
x-amzn-requestid: f161f3bb-2b66-4ec8-a2d0-460296e59d8b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BezfVHwPoAMF9CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6408ff95-7fd8848f23e348491da23bc3;Sampled=0
x-amzn-remapped-date: Wed, 08 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: WhZOgffFrj1iFAfsjgAIAP7uqlu_51nukKxgziuJgMjU8lOxFKKnUg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 21:45:40 GMT
age: 58058
etag: "ec77a342171a7b2df5b4bb4ff267eb9e7b6fdc9d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8421
Md5:    f57df98d880821f3ed2d1227ea1e29c0
Sha1:   ec77a342171a7b2df5b4bb4ff267eb9e7b6fdc9d
Sha256: d9c8877d58e5625ffd72222372334fa857611de3e444732e4ac025571df9e333
                                        
                                            GET /7.41.0/bundle.es5.min.js HTTP/1.1 
Host: browser.sentry-cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.66.217
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
cache-control: public, max-age=31536000
expires: Tue, 05 Mar 2024 12:59:58 GMT
last-modified: Mon, 06 Mar 2023 12:36:39 GMT
etag: "4e6de5ddb0cbc8b033560220b0b6cb7f"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 09 Mar 2023 13:53:18 GMT
age: 262401
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 20850
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64341)
Size:   20850
Md5:    4e6de5ddb0cbc8b033560220b0b6cb7f
Sha1:   04a10504d607dcf3a37bfa1355b06f9988906b81
Sha256: d728c7d19bd9664d409576ac95363b2a2f9e29f1e67294d87d93391acf0b58c9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F834c2aef-aac4-479f-968e-6e2512e6b3a7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6557
x-amzn-requestid: 0596691a-f410-4aaf-9b05-f9e24f776901
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BezeKGgGIAMF4UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6408ff8d-4a4a6e5e1ba9967f11131c82;Sampled=0
x-amzn-remapped-date: Wed, 08 Mar 2023 21:35:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 6TjTZsqUlL4tyx5jrOM3zCLd-4nAP4IqBHYFEDY_-b51OErcrsfXnw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 21:45:40 GMT
age: 58058
etag: "bb9f22ac357ef47cac278a35acfec2a3c45b9778"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6557
Md5:    0a2b1e2520b334c727a108a6ef9e3a5b
Sha1:   bb9f22ac357ef47cac278a35acfec2a3c45b9778
Sha256: 44395dbddf288edbb6e450aedbdbef228904b39ff4816a11113be7e5c7f209b2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46cbec1f-fbf7-461c-90ac-cc819d929109.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4995
x-amzn-requestid: 045078d2-7791-47fe-9e00-229a03528d74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BWO1vG9HoAMFyxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640591be-73e4a521649e1ef317078153;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 07:09:50 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: jd7mcQebbYc29bdaGqgIQ8m4_fOK26grkzSuH_Y9H07oZ0FdBg1K1w==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 23:03:22 GMT
age: 53396
etag: "40ccc2a777a89f6c33ec4daffcddd21299472971"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4995
Md5:    fb83e8e17585c3bffd4f5cc805090e7d
Sha1:   40ccc2a777a89f6c33ec4daffcddd21299472971
Sha256: 40bbc718adc11a3a6d6238e3990c6684f3834296141e3163d8ffecea46852958
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff38cea88-980c-4bc3-9bc7-9a1bd822bec7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7804
x-amzn-requestid: c100b707-4225-449e-b028-4d9f9da81b3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BfIm7H1_IAMFRYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6409215f-192127435abb06342b869fff;Sampled=0
x-amzn-remapped-date: Wed, 08 Mar 2023 23:59:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bfnl06q4VdgNQOw7uOgtQvhdBzjBsmKHR33fIimnrggCh0cW9pfybQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Mar 2023 00:14:14 GMT
age: 49144
etag: "f849869251bd94a51243604d94f9dd708930d3e2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7804
Md5:    8f45f111388e764cdc6482be2307e0a1
Sha1:   f849869251bd94a51243604d94f9dd708930d3e2
Sha256: 8e7b32b34a50ba9ca3834a7d915b245590bd19d96ae13aa9881cdea8b7f5fcc2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffcb7b5b1-0c4b-408c-8cd5-9eefd08402b5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4779
x-amzn-requestid: 2b17d9dd-5471-4d32-b49b-d02d656ff32d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BWPHqF6oIAMF9rA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64059230-40d6f50a5c99b19a09bc10f6;Sampled=0
x-amzn-remapped-date: Mon, 06 Mar 2023 07:11:44 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: Q9-UoPTYCnyFdkOejus088TOAvKfyxOTRSI27U0KPo_kxF3Bn1iORQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 da4fa914888b330b3e8a08632b8e41be.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Mar 2023 07:48:48 GMT
age: 21870
etag: "014fa1c8bb655e3dc2d7047fe1934fa3d4d28195"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4779
Md5:    05f4cdc3272aedc4a6fb7b7eef4177fd
Sha1:   014fa1c8bb655e3dc2d7047fe1934fa3d4d28195
Sha256: 27b6a951f9fe1bbc7ab5290a170aa0506f1e5fc12b188427b3eead0140ee3fab
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5f13a1-64f5-41ac-aa1b-5fb0a6b438d4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4770
x-amzn-requestid: 963dae3d-8336-4a5b-8b25-c3617f946d73
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BUZkWFhLIAMF6FQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6404d61b-1b705b460f7539f97c3dd7e5;Sampled=0
x-amzn-remapped-date: Sun, 05 Mar 2023 17:49:15 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: uGH8_fFeonTgrNF5RYeA6pMhKoh24-6W74Vhju3CcJ7A8LEGFse9Sw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Mar 2023 21:51:07 GMT
age: 57731
etag: "bc714ee0389e279919dde08149be61c4dc9ab0a7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4770
Md5:    cd029abcba5db74cecb02bad1a036c43
Sha1:   bc714ee0389e279919dde08149be61c4dc9ab0a7
Sha256: 10ae90728b38f7aeba134961a7b80c68c213a09eeef618ef3d66f3305b19834e
                                        
                                            GET /worker.js HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 09 Mar 2023 13:53:18 GMT
Content-Length: 83
Connection: keep-alive
Last-Modified: Mon, 03 Jan 2022 14:14:05 GMT
ETag: "61d304ad-53"
Access-Control-Allow-Origin: *
X-Cache-Status: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   83
Md5:    64017acd2edfab8cbd7907f8e6540a0d
Sha1:   46da5f5bcebaea63581f01bab1701bb23981e7dc
Sha256: 1880d7fa83d8e3a777ffd08aa61ca4a95174d1b9c30aecad1fa387a269c4dd0c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 09 Mar 2023 13:53:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "36F5D9E6C0E02E273B4D2B26045CDB797ED0891C5532EBE33E2B7B7289B35344"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2994
Expires: Thu, 09 Mar 2023 14:43:13 GMT
Date: Thu, 09 Mar 2023 13:53:19 GMT
Connection: keep-alive

                                        
                                            GET /mng/channels/sw.min.js HTTP/1.1 
Host: static.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ero-cupid.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             54.230.111.2
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 6277
date: Thu, 09 Mar 2023 02:56:39 GMT
last-modified: Wed, 18 Jan 2023 12:37:33 GMT
etag: "03b71607d0eb65df0c65a3d5fece3706"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8BZUlK7iNGhO2Cn2COuPGw4sgKHAv-SlK8esDqtVeIaT8iTSA80Y_w==
age: 39401
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   6277
Md5:    03b71607d0eb65df0c65a3d5fece3706
Sha1:   871375fc1daff080ef7657a83058cbbe674d62e9
Sha256: 1a59bbb1f7d210cbcad77e4fa12797ac225f574c2d65b72ed3695719f6e84caf
                                        
                                            POST /api/6161109/envelope/?sentry_key=f44bbfb9a37b4915ac9fa50036de00f6&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.41.0 HTTP/1.1 
Host: o65532.ingest.sentry.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ero-cupid.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://ero-cupid.com
Content-Length: 426
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.195.249
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 09 Mar 2023 13:53:19 GMT
content-length: 2
access-control-allow-origin: https://ero-cupid.com
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "36F5D9E6C0E02E273B4D2B26045CDB797ED0891C5532EBE33E2B7B7289B35344"
Last-Modified: Tue, 07 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2994
Expires: Thu, 09 Mar 2023 14:43:13 GMT
Date: Thu, 09 Mar 2023 13:53:19 GMT
Connection: keep-alive

                                        
                                            POST /stats HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 402
Origin: https://ero-cupid.com
Connection: keep-alive
Cookie: slappInfo64_EbaJOmQJ5M4=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 09 Mar 2023 13:53:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (375), with no line terminators
Size:   375
Md5:    096a8eabe9c921cd9ca7fadf6e70fc60
Sha1:   08ac17d1825d8bd8b12ac48b56aedef00517bc26
Sha256: 7bc4caf5d1269868bb426bc54f5e574b4d809b5433ea3ac8ac2fcedf0ae17be3
                                        
                                            GET /user-id?nbl=&impression=EbaJOmQJ5M4&trustLevel=0&botScore=0&finishClicksCount=0&landingConfig=&landingPageConfig=&extraRequestData=&showedPops=0&uri=https%3A%2F%2Fero-cupid.com%2FXQAA%2F12058%2Foth%3Fi%3DEbaJOmQJ5M4%26u%3D4179972997186708685&search=%3Fi%3DEbaJOmQJ5M4%26u%3D4179972997186708685&contactExists=false HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: slappInfo64_EbaJOmQJ5M4=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 09 Mar 2023 13:53:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: userid=9390b84a2ccd080b0a66a9119263893f62ba48824520a22cc8723c81c4e9619ca%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A605583367591%3B%7D; expires=Sat, 09-Mar-2024 10:09:59 GMT; Max-Age=31609000; path=/; HttpOnly; SameSite=Lax
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   38
Md5:    033ed98ff87d47f7b32d4d5f7ee87c2c
Sha1:   1ed19acb88803478d114e50fd36bc0d3ec1a6e34
Sha256: e84ad7088593d0b18ba2b7542550c665df1fef846cd80ea3f8fdfd3f08e0460c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ero-cupid.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: slappInfo64_EbaJOmQJ5M4=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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                            
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 09 Mar 2023 13:53:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   43
Md5:    384ca34aa16dc6ce293be59be14debee
Sha1:   8e534edfbebe4b1a7021bd042dafb9bb724653fe
Sha256: 3452525005a4a39d8f274e312a7a28b6c081bd6d68b5ccce3b1bedd2721b79ea
                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114613
Date: Thu, 09 Mar 2023 13:53:19 GMT
Etag: "6408ec33-1d7"
Expires: Fri, 10 Mar 2023 21:43:32 GMT
Last-Modified: Wed, 08 Mar 2023 20:12:35 GMT
Server: ECAcc (bsa/EA9A)
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A6cgR3iuF_SinJLFqX51m1p7ayPe7jg2Q_CvOubwdUKZPrBFwHSvWw==
Age: 5457

                                        
                                            POST / HTTP/1.1 
Host: ocsp.r2m01.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.80.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Thu, 09 Mar 2023 13:53:19 GMT
Etag: "6408ec33-1d7"
Last-Modified: Thu, 09 Mar 2023 12:43:52 GMT
Server: ECAcc (dcb/7F87)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ybc-5uVor_LEFSiymeaaAwY8Uv8BVytd34IHX1YqYDDCr8KJYLCcIA==
Age: 4167

                                        
                                            OPTIONS /api/v1/code-snippet/ HTTP/1.1 
Host: manager.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: channel-token
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             3.134.218.58
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Thu, 09 Mar 2023 13:53:19 GMT
content-length: 0
server: gunicorn/19.9.0
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://ero-cupid.com
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2

                                        
                                            GET /api/v1/code-snippet/ HTTP/1.1 
Host: manager.production.almightypush.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Channel-Token: NjNkMmRmNTQ2ZmEzOTBmZDIzMzI5OWM1ZGZmYzZkZGE9MTM4NzU9Lz0zMzM=
Origin: https://ero-cupid.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             3.134.218.58
HTTP/2 200 OK
content-type: application/json
                                            
date: Thu, 09 Mar 2023 13:53:19 GMT
content-length: 1190
server: gunicorn/19.9.0
vary: Accept, Origin
allow: GET, POST, HEAD, OPTIONS
x-frame-options: DENY
access-control-allow-credentials: true
access-control-allow-origin: https://ero-cupid.com
x-content-type-options: nosniff
referrer-policy: same-origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (1190), with no line terminators
Size:   1190
Md5:    c0ece5d10292a5ca975df52fceecff79
Sha1:   fe29a3399fd1225372c631799c29f3d9f526d540
Sha256: bfeff29bd5b39d6c15ee122a24c2bb9661a92832954662d50c89f57b0c787581
                                        
                                            POST /api/6161109/envelope/?sentry_key=f44bbfb9a37b4915ac9fa50036de00f6&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.41.0 HTTP/1.1 
Host: o65532.ingest.sentry.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ero-cupid.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://ero-cupid.com
Content-Length: 432
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.195.249
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 09 Mar 2023 13:53:19 GMT
content-length: 2
access-control-allow-origin: https://ero-cupid.com
access-control-expose-headers: x-sentry-rate-limits, x-sentry-error, retry-after
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST /api/6161109/envelope/?sentry_key=f44bbfb9a37b4915ac9fa50036de00f6&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.41.0 HTTP/1.1 
Host: o65532.ingest.sentry.io
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ero-cupid.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://ero-cupid.com
Content-Length: 1395
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.195.249
HTTP/2 429 Too Many Requests
content-type: application/json
                                            
server: nginx
date: Thu, 09 Mar 2023 13:53:19 GMT
content-length: 198
retry-after: 17
x-sentry-rate-limits: 17:default;error;security:key:key_quota
access-control-allow-origin: https://ero-cupid.com
access-control-expose-headers: retry-after, x-sentry-error, x-sentry-rate-limits
vary: Origin
x-envoy-upstream-service-time: 0
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   198
Md5:    478b411c59eb87249bea32cf7c7be5d2
Sha1:   023907c62eb55758905bb3c0e640b5b204ae0652
Sha256: bac10d17440dcd6f6c6c4e0bd7eca2e1a7eec030ef3b1143d4be3791dcf91263
                                        
                                            GET /agEA?usid=3mn0nrs1c1s93&email=rzacarias%40slurpmail.net&sub1=clear_main&prid=3mn0nrs1c1s93&bdata=eyJkYXRhIjp7InBsYXRmb3JtIjoiTGludXggeDg2XzY0In0sImV4dHJhIjp7Ik5hdmlnYXRvci5wbGF0Zm9ybSI6WyJMaW51eCBwbGF0Zm9ybSBhbmQgV2luZG93cyB1c2VyIGFnZW50IGRvIG5vdCBtYXRjaCJdfSwiZXJyb3JzIjp7ImlmcmFtZSI6WyJjYW4ndCBhY2Nlc3MgcHJvcGVydHkgXCJhcHBlbmRDaGlsZFwiLCBkb2N1bWVudC5ib2R5IGlzIG51bGwiXSwiY2FudmFzX2NvbnRleHQiOlsiRmFpbGVkIHRvIGdldCBjYW52YXMgY29udGV4dCJdfSwiYm90U2NvcmUiOiIyNCJ9&bt=1678369996&bth=1060436999 HTTP/1.1 
Host: www2.dateexotic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dateexotic.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             172.67.159.164
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
date: Thu, 09 Mar 2023 13:53:17 GMT
location: https://alexatracker.com/?r=aHR0cHM6Ly93d3cyLmRhdGVleG90aWMuY29tL2FnRUE%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%3D&h=266fdb7fd7e5e9f538a6bf7b7da54e95
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kHr33HA%2Flw4n%2B%2BO5NOlwfaQ7Ai2K8CPHejsrs%2FCM9MfgtRZlryKxepHL1udfwwY8e1yBMk%2Bvx6FGq1YPyrJvVr7QxQGPEC7%2B3IRL3%2F20pTH2sK0AmSa5IEesMhUG1LV%2F%2BArpxs9F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a53cda10a6f1c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: