firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Retry-After, Content-Type, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 20:13:14 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mRuN4Wwwn450UYPdPA0oZtXPeMTc1BxLVz66Ral439RkMrGsS0DJLQ==
Age: 3380
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5400
Expires: Tue, 20 Sep 2022 22:39:34 GMT
Date: Tue, 20 Sep 2022 21:09:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KxgLYCi-KfTlTE6KTl3ZrvUvL512U5TYUDd-gWIHTO74x35mjZR9MA==
age: 59661
X-Firefox-Spdy: h2
www.oatwinema.com/acTcl2kTmPSJi_Ld_mhpL8Y3dPWYsBKIfNUIBLzUari8dw2KRpFCw-ZJSBCwYPjbnmdIHdKRlhHppmxyz6PvKg~~/11_82164/12242_85063/1
302 Found 0 B URL HTTP/1.1 www.oatwinema.com/acTcl2kTmPSJi_Ld_mhpL8Y3dPWYsBKIfNUIBLzUari8dw2KRpFCw-ZJSBCwYPjbnmdIHdKRlhHppmxyz6PvKg~~/11_82164/12242_85063/1
IP
ASN #8100 ASN-QUADRANET-GLOBAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /acTcl2kTmPSJi_Ld_mhpL8Y3dPWYsBKIfNUIBLzUari8dw2KRpFCw-ZJSBCwYPjbnmdIHdKRlhHppmxyz6PvKg~~/11_82164/12242_85063/1 HTTP/1.1
Host: www.oatwinema.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 20 Sep 2022 21:09:34 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Server: Apache
Location: https://www.oatwinema.com/acTcl2kTmPSJi_Ld_mhpL8Y3dPWYsBKIfNUIBLzUari8dw2KRpFCw-ZJSBCwYPjbnmdIHdKRlhHppmxyz6PvKg~~/11_82164/12242_85063/1
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 21:03:22 GMT
Expires: Tue, 20 Sep 2022 21:33:01 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: e_dndTDSYJga8kevVdUPBVWWu5T5AEhn-iw0N6ddqxbvuy8zYnx0Hw==
Age: 372
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c3ee2cb7735a385aa1e26fba502b6767
1990d805d1dc6a09b33be4a130088c83c7109170
234b953989521440749a00f02a9d2a5d1fb654282da62b93b43eda81cc78e32e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "234B953989521440749A00F02A9D2A5D1FB654282DA62B93B43EDA81CC78E32E"
Last-Modified: Mon, 19 Sep 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 21 Sep 2022 03:09:34 GMT
Date: Tue, 20 Sep 2022 21:09:34 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash edf07cd621f733b0eb50c632387ebf4f
61a082d26501c2c8d481b1676d0de2e585269613
e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6469
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 21:09:34 GMT
Last-Modified: Tue, 20 Sep 2022 19:21:45 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +4/j1LKE9KxoRcAtX2HM/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 5XpiJJ1iDt8p3VyhWzsldEV0Y1Q=
www.oatwinema.com/acTcl2kTmPSJi_Ld_mhpL8Y3dPWYsBKIfNUIBLzUari8dw2KRpFCw-ZJSBCwYPjbnmdIHdKRlhHppmxyz6PvKg~~/11_82164/12242_85063/1
302 Found 0 B URL HTTP/1.1 www.oatwinema.com/acTcl2kTmPSJi_Ld_mhpL8Y3dPWYsBKIfNUIBLzUari8dw2KRpFCw-ZJSBCwYPjbnmdIHdKRlhHppmxyz6PvKg~~/11_82164/12242_85063/1
IP
ASN #8100 ASN-QUADRANET-GLOBAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /acTcl2kTmPSJi_Ld_mhpL8Y3dPWYsBKIfNUIBLzUari8dw2KRpFCw-ZJSBCwYPjbnmdIHdKRlhHppmxyz6PvKg~~/11_82164/12242_85063/1 HTTP/1.1
Host: www.oatwinema.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Date: Tue, 20 Sep 2022 21:09:35 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Server: Apache
Set-Cookie: uid11485=700213115-20220920170935-dd56ef845d6e0dddf8c24e4abea039c3-; domain=oatwinema.com; path=/; SameSite=None; Secure
Location: https://www.MeetUkrainianWomen.com/index.php/promote/click?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
www.meetukrainianwomen.com/index.php/promote/click?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
302 Found 20 B URL HTTP/2 www.meetukrainianwomen.com/index.php/promote/click?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /index.php/promote/click?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115 HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Tue, 20 Sep 2022 21:09:36 GMT
content-type: text/html; charset=UTF-8
content-length: 20
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
p3p: CP=CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR
set-cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; path=/
owner_id=CP259877; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
adv_id=2205; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
adv_type=1; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
subaffid=822225; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
source_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
adv_ldp_id=CD386009; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
qpid_offer_id=MUW_876082TESOO; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
website_id=188; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
referer=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
adv_click_history_id=664506916; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
qpid_click_id=700213115; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D; expires=Mon, 19-Dec-2022 21:09:36 GMT; path=/
location: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2584
Expires: Tue, 20 Sep 2022 21:52:40 GMT
Date: Tue, 20 Sep 2022 21:09:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2584
Expires: Tue, 20 Sep 2022 21:52:40 GMT
Date: Tue, 20 Sep 2022 21:09:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2584
Expires: Tue, 20 Sep 2022 21:52:40 GMT
Date: Tue, 20 Sep 2022 21:09:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85aa2dcaf76d25900c78356e5e1c254f
46cd66c9921a162c9e67cfa7d85bc82e5967d531
741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2584
Expires: Tue, 20 Sep 2022 21:52:40 GMT
Date: Tue, 20 Sep 2022 21:09:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed7323b395e757f7766ea0045efdaca
8b91bc3069a3217bc719c27959d578b353b5d9dc
8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gLh2EBTPdXvFtZuYKH1NVZebvnz4Rhs-f_rZPtfJpIWNemEk0upeOQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:43 GMT
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
content-type: image/jpeg
age: 82793
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a7d863845e96c5927e812f325c08c16
b8484fb5443344b03e52dd56b1d6c5682eb6221a
fcb382029332a44deaf212298b618074a752d674d0c735a1b8b861ab4bb6ff0f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9865
x-amzn-requestid: 7eeeff5b-cb13-4060-96a6-bf5a4be57331
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugokGQVoAMFXmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e169-4211dbbe1a22d0255a45aff0;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2kU9PLuzusMR04mNUdwbU6-120ESVhYJtNaIixERO68Vo9jEfP3JWg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:04:47 GMT
age: 83089
etag: "b8484fb5443344b03e52dd56b1d6c5682eb6221a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e70b2859ca89b353682d03f6b46b93
ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 10:06:02 GMT
age: 39814
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c283017ec789693602177a2785177e21
ff8286c4d2cf87a1865d56d082bc5235dba60ad7
520db2567ad5529d35d2ac63b94d4186848382e9c86d0c4355ab979b34f0e0ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11145
x-amzn-requestid: dcb726a6-2f43-4170-a53c-4f0d2883309e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yuh7yHfHIAMFu4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e37e-11bf06e96123e01c11854cbb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:47:42 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oJyChyEdTbGx6oQCRy6IVMS8qU22LupFYn6FOii3p4BUVFyKnssQ7Q==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:05:54 GMT
age: 83022
etag: "ff8286c4d2cf87a1865d56d082bc5235dba60ad7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca0c1a7f205ad07f1cce80b26448873
0e14f5062e40ce94346494ff947bfcf74b5e88c1
ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:44 GMT
age: 82792
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30fbdfee7ec4513a5ff3dfcb7282f816
a852edb64a7220532aa619ab2a440c3a7e11b97a
4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -VBFetQNkmIiWeJtW5IOheaPLdDHM9iKhiGPzVcA3_KQk7Qha5VrXg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:14:25 GMT
age: 82511
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
200 OK 26 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5859), with CRLF line terminators
Hash 94361bebf9a3801e43047f3dd3180985
6b2587b786cced89346de47a3eec7da17053e09c
ec56e2d57dd8c00da72fa36a393f6bd2e86451646be34dddbd94bae4596719ca
GET /qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115 HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:36 GMT
content-type: text/html; charset=UTF-8
content-length: 26060
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
200 OK 1.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (3601)
Hash d4c78fcda598ce00a38b0effd649e200
e3334dd6c15dd4e6b074b719ac472c6ef0ab56e1
effdd1f8a303725a5f6f7437555bcb36a281bf82cf7d1c2f110291cc5be4db7f
GET /ajax/libs/jquery-easing/1.3/jquery.easing.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 1507
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-15b3"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9148596
expires: Sun, 10 Sep 2023 21:09:37 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8eR%2FO%2BjFHc3ID5kUk96z%2BgMIJKCvihHZaD%2FJeV%2BY%2BlfK5U8gMF33ciPXlrpuRx2vfhKWbhOfMbuLdd%2F1F9500H%2Fd5I311dol7NDpLaM%2BjnSd80gmgTjg%2BcpPpA1YiaBZV%2F4MNZyb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74dd8b0b0e18b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3e48da5e4eb5672d4975e69314486614
496f0add05bfc0c73c80d186b5b52bfeecc70c59
13c9d3c8418e5875d4f0c8aa6309069c9fee7c8f2bc25eb249698c5d6e0347f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "13C9D3C8418E5875D4F0C8AA6309069C9FEE7C8F2BC25EB249698C5D6E0347F5"
Last-Modified: Sun, 18 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6423
Expires: Tue, 20 Sep 2022 22:56:40 GMT
Date: Tue, 20 Sep 2022 21:09:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 596ea0e7cffcb12819c214fd7e55e6b5
fdf581b35743d7693bf8c7f6154471a1b2646f06
a78eee2be3725b096407fde832e7762dad74ac69165f57a10b1ef76b5b2d9874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 21:09:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=1bf4eae9efe07830ab8b735fa9671e5f&rt=click&p=CP259877&a=822225&cmp=MUW_876082TESOO&rf=
200 OK 2.7 kB URL HTTP/2 fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=1bf4eae9efe07830ab8b735fa9671e5f&rt=click&p=CP259877&a=822225&cmp=MUW_876082TESOO&rf=
IP
File type ASCII text, with very long lines (2681), with no line terminators
Hash 9e7a13c202e038ed6bf8604374efc84d
dd1e5736c2edb53108b56eb6c48c4f2dd890c5d3
36f8c59b027b24183fa7cb94ad596c2f92dcc5bfc9deec452c311f85744856b7
GET /js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=1bf4eae9efe07830ab8b735fa9671e5f&rt=click&p=CP259877&a=822225&cmp=MUW_876082TESOO&rf= HTTP/1.1
Host: fqtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: 0
cache-control: no-cache, no-store, must-revalidate
x-xss-protection: 0
pragma: no-cache
date: Tue, 20 Sep 2022 21:09:37 GMT
access-control-allow-origin: *
content-type: application/javascript
content-length: 2681
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-133277878-79
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-133277878-79
IP
File type ASCII text, with very long lines (1720)
Hash 0a57cc3e7bcea23fe55e38dce47fde0e
49cf02de1195f92001d829d5aa6293a79db00708
c9d9060ce95bc13d4996971f7c5c7c334cb3e3a36351380ace80640bb8670f90
GET /gtag/js?id=UA-133277878-79 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Sep 2022 21:09:37 GMT
expires: Tue, 20 Sep 2022 21:09:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42264
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3e48da5e4eb5672d4975e69314486614
496f0add05bfc0c73c80d186b5b52bfeecc70c59
13c9d3c8418e5875d4f0c8aa6309069c9fee7c8f2bc25eb249698c5d6e0347f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "13C9D3C8418E5875D4F0C8AA6309069C9FEE7C8F2BC25EB249698C5D6E0347F5"
Last-Modified: Sun, 18 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6423
Expires: Tue, 20 Sep 2022 22:56:40 GMT
Date: Tue, 20 Sep 2022 21:09:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 596ea0e7cffcb12819c214fd7e55e6b5
fdf581b35743d7693bf8c7f6154471a1b2646f06
a78eee2be3725b096407fde832e7762dad74ac69165f57a10b1ef76b5b2d9874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 21:09:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.meetukrainianwomen.com/qa/register09/images/video_bar.gif
200 OK 5.0 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/images/video_bar.gif
IP
File type GIF image data, version 89a, 430 x 30\012- data
Hash b0e34a991ff45e0459d6fc910f68b097
b24b81be86b0fb5f1e1ed86cf835d816021ed71b
64c65bf74296b1a7645c6166f40a168f8837d6441a73b44f4c48349d6cbe5414
GET /qa/register09/images/video_bar.gif HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: image/gif
content-length: 4994
last-modified: Wed, 29 Jun 2022 01:59:08 GMT
etag: "1382-5e28c7fac2d00"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/images/logo.png
200 OK 9.5 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/images/logo.png
IP
File type PNG image data, 871 x 107, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d4f523bb185c27696dcf3a0ce6f2c3f
dc771c82721ee2b6b0a8bff820897eb35f2d199a
06ecab95ac77e0ce9f2a39f29a56d73d71776f800cc2a3807bd4e78db2748503
GET /qa/register09/images/logo.png HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: image/png
content-length: 9452
last-modified: Wed, 29 Jun 2022 01:59:08 GMT
etag: "24ec-5e28c7fa635a8"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/css/font-awesome.css
200 OK 5.5 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/css/font-awesome.css
IP
File type troff or preprocessor input, ASCII text, with very long lines (353), with CRLF line terminators
Hash e22abe8b0acb67dd10d80597040b508a
794e883b40da73f7ca1da53305098fcf98d5b16d
5315955e0aff58606d2134693e28360558e7ab0c310b01e9fb3d2c634fb85a12
GET /qa/register09/css/font-awesome.css HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: text/css
content-length: 5524
last-modified: Wed, 29 Jun 2022 01:59:04 GMT
etag: "6edf-5e28c7f699a08"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/css/style.css
200 OK 4.4 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/css/style.css
IP
File type ASCII text, with CRLF line terminators
Hash 2c5447259a262d2738875a9cabf7e26f
c4bdbf5802478e2da0a6b1e1e664149cec4eed51
7d763b3e04efe495ffcd0e56d94c7d3b9cd1b6215857576bd70df9776fef8491
GET /qa/register09/css/style.css HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: text/css
content-length: 4399
last-modified: Wed, 29 Jun 2022 01:59:04 GMT
etag: "50a8-5e28c7f70c9e0"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/common/js/my_validate_index2.js
200 OK 2.9 kB URL HTTP/2 www.meetukrainianwomen.com/common/js/my_validate_index2.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash f1e757f7e2374c7b7162906a20688af2
ca928406b98b3611e9f23ac3157c8a116eb332a6
4cc7f63506663396d396c9e81fdda9310abfe101cfa63e57411b1263c0d1f803
Analyzer Verdict Alert fortinet Phishing
GET /common/js/my_validate_index2.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 2851
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "2560-5b138acc60a3b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/css/default.css?v=1.0
200 OK 2.9 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/css/default.css?v=1.0
IP
File type ASCII text, with CRLF line terminators
Hash 989ffdfbbe2d0a224113484b5da0213a
8384482f13f200f3d1af2eaca25e1d511e0228b7
0f2f16bd2b4ba6f1c0e9ae166c5ab0efc49c8878aed8bf675addb4ded80f2e83
GET /qa/register09/css/default.css?v=1.0 HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: text/css
content-length: 2880
last-modified: Wed, 29 Jun 2022 01:59:04 GMT
etag: "2bb2-5e28c7f66b3d8"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/css/overwrite.css
200 OK 4.0 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/css/overwrite.css
IP
File type ASCII text, with CRLF line terminators
Hash 0bc06ab7a384d2a49855d6039fcfbf9c
ebffc5c59e967f6e47e8f7f1082d79d8c00587d0
c29d4189f5ba67bdfbecdc5c5427c9742d6706d9e2121e63565a97c7987116ce
GET /qa/register09/css/overwrite.css HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: text/css
content-length: 4006
last-modified: Wed, 29 Jun 2022 01:59:04 GMT
etag: "4998-5e28c7f6e2de8"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/css/layout.css
200 OK 2.3 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/css/layout.css
IP
File type assembler source, Unicode text, UTF-8 text, with very long lines (389), with CRLF line terminators
Hash def39b459fc48dd7d02a9c3e99ce5b0c
3ddb679cc26d1ebf151a52c4981765fa5f94da57
53b0737c8622f1757c983d8c7eae378dfe941357f128b3cd87d07bcb30c7a10e
GET /qa/register09/css/layout.css HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: text/css
content-length: 2341
last-modified: Wed, 29 Jun 2022 01:59:04 GMT
etag: "1d09-5e28c7f6b95d8"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/js/ie-emulation-modes-warning.js
200 OK 1.1 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/js/ie-emulation-modes-warning.js
IP
File type ASCII text, with CRLF line terminators
Hash dba686f0c62d22b6615c58b5339cc6e6
9374493416c44ae58fca0cc181fdc39215df9719
24952cb00bfd97742f4977938001a39d139ee69855e1d76b1f7b23430d6ddb77
Analyzer Verdict Alert fortinet Phishing
GET /qa/register09/js/ie-emulation-modes-warning.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 1054
last-modified: Wed, 29 Jun 2022 01:59:09 GMT
etag: "887-5e28c7fbdc8d0"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/css/bootstrap.min.css
200 OK 22 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (576), with CRLF line terminators
Hash 3637c866da881fc6658624c9b5cc3881
ac5a1f19f87675d17fe85c86277e3271711023dd
90113f1c2e9b016cce648d9f3d1ed9e971ee3609511742c0cabf655f45052f79
GET /qa/register09/css/bootstrap.min.css HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: text/css
content-length: 22192
last-modified: Wed, 29 Jun 2022 01:59:04 GMT
etag: "218d1-5e28c7f6469e8"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/common/js/auto_email/autoComplete.css
200 OK 376 B URL HTTP/2 www.meetukrainianwomen.com/common/js/auto_email/autoComplete.css
IP
File type ASCII text, with CRLF line terminators
Hash fa161ac586a052c4476ed190ac1571e0
95bf7bc6541743739aa6d9f185d398e36dc9ce6c
f514e2d195768146c7b6453b788d6fdeb1df19ee6e5b017e0e9a1003a8e5c662
GET /common/js/auto_email/autoComplete.css HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: text/css
content-length: 376
last-modified: Fri, 09 Oct 2020 08:24:17 GMT
etag: "27d-5b138acba794b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/common/js/auto_email/jquery.autoComplete.js
200 OK 1.0 kB URL HTTP/2 www.meetukrainianwomen.com/common/js/auto_email/jquery.autoComplete.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash d4b600f68461a491b71e88dc6f0173e1
7e20eb3d42dfec881deb87d3c2d6aad1c40aca0f
c5dc9fb6467bc20ff42141ea247397131baf1e1d6240d0dd66eb62f2cf87c74a
Analyzer Verdict Alert fortinet Phishing
GET /common/js/auto_email/jquery.autoComplete.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 1046
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c56-5b138acbfdc33"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/js/bootstrap.min.js
200 OK 10 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32025), with CRLF line terminators
Hash 52b128566997d29d60563861dc83768d
c65765d5eb835d4a04886e860a7aba6e86e40044
dae5acd09ec7026b18c0e75475616790ed2b4b7a3475229398c1f788694a8864
Analyzer Verdict Alert fortinet Phishing
GET /qa/register09/js/bootstrap.min.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 9987
last-modified: Wed, 29 Jun 2022 01:59:09 GMT
etag: "8c75-5e28c7fb63368"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/common/js/jquery.cookie.js
200 OK 1.4 kB URL HTTP/2 www.meetukrainianwomen.com/common/js/jquery.cookie.js
IP
Hash 00cfb5c8c7ec0b51b1dfb190279d570f
468f6fe01079afbcf53594f1065847f04165e249
0585e143aba785df6fb525229dd5e3466227cecc87e913459f0444e732fbf15c
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.cookie.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 1378
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c31-5b138acc863cb"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/js/ie10-viewport-bug-workaround.js
200 OK 451 B URL HTTP/2 www.meetukrainianwomen.com/qa/register09/js/ie10-viewport-bug-workaround.js
IP
File type ASCII text, with CRLF line terminators
Hash efbb3d40cdafa46ef5690b0ea6bde9c8
0a29397e0d681201982984b2e402716b57b50ab6
114e0af0c057af877ad19aa8978964444d1030808eb2ef3609374a9d10aea93c
Analyzer Verdict Alert fortinet Phishing
GET /qa/register09/js/ie10-viewport-bug-workaround.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 451
last-modified: Wed, 29 Jun 2022 01:59:10 GMT
etag: "2cc-5e28c7fbf7298"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/images/large_kiss.gif
200 OK 816 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/images/large_kiss.gif
IP
File type GIF image data, version 89a, 348 x 247\012- data
Size 816 kB (815748 bytes)
Hash 0a3d6cbdbdd0cb1125f973a04faa22e5
3cd97509afdb9e7bf613c6a873cf30ac0ed60a96
575a32f83009af2c1c47020b80ff79263b45c0f6f0f2c456228434c9ccc9df6e
GET /qa/register09/images/large_kiss.gif HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: image/gif
content-length: 815748
last-modified: Wed, 29 Jun 2022 01:59:08 GMT
etag: "c7284-5e28c7fa3e7d0"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/js/fieldset.js
200 OK 876 B URL HTTP/2 www.meetukrainianwomen.com/qa/register09/js/fieldset.js
IP
File type ASCII text, with CRLF line terminators
Hash 4110488c2b7313290342dced97bd81b1
64dd93621727b9036cd988ada18b07c07c5a77c8
4ceef090702aeab11398166212bc8458b6eb0c60393c7ea4f76642413a318021
Analyzer Verdict Alert fortinet Phishing
GET /qa/register09/js/fieldset.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 876
last-modified: Wed, 29 Jun 2022 01:59:09 GMT
etag: "a21-5e28c7fb84a90"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/common/js/jquery.min.js
200 OK 35 kB URL HTTP/2 www.meetukrainianwomen.com/common/js/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 28ca33b476a0e86fa59725bdb38c7f2f
120531fc57923e78104a0aacee05c53cecbfd61f
ffbc181a3d82af401ee3645d08b10d739c12222da179cd5ec2dc67016d7c93a3
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.min.js HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 34763
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "17278-5b138accbfdab"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
flx808.lporirxe.com/flp/ncvp.js?c=808&i=1663708178
200 OK 11 kB URL HTTP/2 flx808.lporirxe.com/flp/ncvp.js?c=808&i=1663708178
IP
Hash e6a30d4ef5eaccb5d35d0eb5dc740052
42740eec442f77afdb474126b88300330ef2473a
b962548be39783badbf3c462775ada9eddb95b9bc6e4e5c0c313c54fb6e524aa
GET /flp/ncvp.js?c=808&i=1663708178 HTTP/1.1
Host: flx808.lporirxe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 21:09:38 GMT
content-type: application/javascript
content-length: 11218
last-modified: Fri, 26 Aug 2022 17:37:34 GMT
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 4672
expires: Wed, 21 Sep 2022 21:09:38 GMT
cache-control: public, max-age=86400
accept-ranges: bytes
server: cloudflare
cf-ray: 74dd8b117a9ffac4-OSL
X-Firefox-Spdy: h2
cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
200 OK 90 kB URL HTTP/2 cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
IP
File type ASCII text, with very long lines (31986)
Hash e0eff30579598f76147c9ea12f490d21
f0bf2ef576db440b275bdae3d6abac35e59a33b2
e70a34c5f232fa80328a361630a994cf847c54deb926f13d40be4807291b657b
GET /1.27.339-ccfb11a/pixel.js HTTP/1.1
Host: cdn.fqtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsKxjBjn5fT5mArqcBYxM21m46T9lXW_fnu96eK0S6fyiMvhKFUFsXDXoso8oDme9bDwo_bX_X_PXnaAYHocVhW_g
x-goog-generation: 1611776924905378
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89647
content-language: en
x-goog-hash: crc32c=YwE4YA==, md5=4O/zBXlZj3YUfJ6hL0kNIQ==
x-goog-expiration: Sun, 11 Nov 2294 19:48:44 GMT
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
server: UploadServer
date: Tue, 20 Sep 2022 20:48:27 GMT
expires: Tue, 20 Sep 2022 21:48:27 GMT
cache-control: public, max-age=3600
age: 1271
last-modified: Wed, 27 Jan 2021 19:48:44 GMT
etag: "e0eff30579598f76147c9ea12f490d21"
content-type: application/javascript
content-length: 89647
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/images/background_1c.jpg
200 OK 280 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/images/background_1c.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1399x798, components 3\012- data
Size 280 kB (280407 bytes)
Hash 0b5f586004a5c31dd5be97df746b69a0
9357cfb6f537af88042b7cd05fab52fd4e56de7b
fa9f9d9123f1835efbcff46308fa79980e2a244a1fd7e38978dfbde254247f50
GET /qa/register09/images/background_1c.jpg HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09/css/overwrite.css
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:38 GMT
content-type: image/jpeg
content-length: 280407
last-modified: Wed, 29 Jun 2022 01:59:06 GMT
etag: "44757-5e28c7f863258"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
fqtag.com/pixel
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pixel HTTP/1.1
Host: fqtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 2493
Origin: https://www.meetukrainianwomen.com
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
date: Tue, 20 Sep 2022 21:09:38 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 20 Sep 2022 20:41:12 GMT
expires: Tue, 20 Sep 2022 22:41:12 GMT
cache-control: public, max-age=7200
age: 1706
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/images/favicon.png
200 OK 1.3 kB URL HTTP/2 www.meetukrainianwomen.com/images/favicon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash e34cc2b5b85f3dbe87036fdc98da89ac
39d0dafc953aa1ec37cf4ad03e43525967d540ee
f0fc2184499433d70b42770da3fd175ff3fb8a10c67d32a5c0e26aa28ead4227
GET /images/favicon.png HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09.php?aid=2205&oid=CP259877&qpid_offer_id=MUW_876082TESOO&qpid_subid=822225&qpid_clickid=700213115
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D; flv=KlClnRLJ8ExFCQIULsQM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:38 GMT
content-type: image/png
content-length: 1252
last-modified: Wed, 29 Jun 2022 01:58:05 GMT
etag: "4e4-5e28c7be81c38"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
aux.fqtag.com/aux/d
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/d HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 233
Origin: https://www.meetukrainianwomen.com
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
date: Tue, 20 Sep 2022 21:09:38 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.meetukrainianwomen.com/qa/register09/fonts/fontawesome/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL HTTP/2 www.meetukrainianwomen.com/qa/register09/fonts/fontawesome/fontawesome-webfont.woff?v=4.2.0
IP
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /qa/register09/fonts/fontawesome/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: www.meetukrainianwomen.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/qa/register09/css/font-awesome.css
Cookie: PHPSESSID=cv3ac28pq8ahbah3v8t7kjuoj4; owner_id=CP259877; adv_id=2205; adv_type=1; subaffid=822225; adv_ldp_id=CD386009; qpid_offer_id=MUW_876082TESOO; website_id=188; adv_click_history_id=664506916; qpid_click_id=700213115; owner_argv=a%3A5%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222205%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP259877%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22MUW_876082TESOO%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A6%3A%22822225%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22700213115%22%3B%7D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 21:09:38 GMT
content-type: application/x-font-woff
content-length: 65452
last-modified: Wed, 29 Jun 2022 01:59:05 GMT
etag: "ffac-5e28c7f764c08"
accept-ranges: bytes
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
aux.fqtag.com/aux/p
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/p HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 295
Origin: https://www.meetukrainianwomen.com
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
date: Tue, 20 Sep 2022 21:09:39 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aux.fqtag.com/aux/a
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/a HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 286
Origin: https://www.meetukrainianwomen.com
Connection: keep-alive
Referer: https://www.meetukrainianwomen.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
date: Tue, 20 Sep 2022 21:09:40 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4653898fc83ae1b62d9b975658cc7fe9
adc6def18885ff49efd6b61c47d4b36eaca057b4
642a2e27f6635db0f9670cce2cba91f24f881db8f19d3f9b00e439f746fbc225
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6961
x-amzn-requestid: 3177a5d3-6be5-426f-84ff-c044443c8627
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugHuHGZoAMFuwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e097-00d08a4e1c0ebd3f62716843;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:19 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _dXQRIghNGF2FVKY8rbWdykpQd225TT_e645hfVwkq8SMhT5O16lFg==
via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:53:49 GMT
age: 83754
etag: "adc6def18885ff49efd6b61c47d4b36eaca057b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
144.172.64.100
23.36.76.226
104.17.25.14
93.184.220.29