| v.gambol.link/bacf24eb-ee09-4999-950c-bd9380adc496?utm_source=bacf24eb&utm_medium=44&utm_content=GSL-7204&utm_campaign=501_0&email={email}&cid=1026925e1161b9b90c48597751f685 |  18.156.16.63 | 302 | 0 B |
URL HTTP/1.1v.gambol.link/bacf24eb-ee09-4999-950c-bd9380adc496?utm_source=bacf24eb&utm_medium=44&utm_content=GSL-7204&utm_campaign=501_0&email={email}&cid=1026925e1161b9b90c48597751f685 IP18.156.16.63:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bacf24eb-ee09-4999-950c-bd9380adc496?utm_source=bacf24eb&utm_medium=44&utm_content=GSL-7204&utm_campaign=501_0&email={email}&cid=1026925e1161b9b90c48597751f685 HTTP/1.1
Host: v.gambol.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Thu, 10 Nov 2022 21:49:44 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://kingered-banctours.com/0e565a05-6b58-4a68-8931-3234a344b16f?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&cid=wcqp42ienj3mtlck2dtbb4om
Pragma: no-cache
Set-Cookie: bacf24eb-ee09-4999-950c-bd9380adc496-v4=I0mTJNZp9PYm8Q-28xz1zQr8-4gRXK09gaRKRytYRMk; Max-Age=86400; Expires=Fri, 11-Nov-2022 21:49:44 GMT; Domain=v.gambol.link; Path=/; HttpOnly
cc-v4=loKzmmJCbALuTiOEpTMRjwREaHfuszqd3fHIP%2BsXR1hH4tg9264az3tioH3zXCRjcfD6E955paFHBGEBLQf2YlIP%2FNgYSQ6qrsJRf5WOGO9lBJrvSQaUQrlMc8ymKjfevkpkXSoLJBvVYv8XN7HooA%3D%3D; Max-Age=31536000; Expires=Fri, 10-Nov-2023 21:49:44 GMT; Domain=v.gambol.link; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashaabe410b4bbe4d8beb0e4561d3aa158e e1788632902ddea62cdd9e7ad6009a75ffb69788 ad535e27b201e92670770b2b868c58f7c05633ec66490a41ef4592f062834c1f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD535E27B201E92670770B2B868C58F7C05633EC66490A41EF4592F062834C1F"
Last-Modified: Wed, 09 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4677
Expires: Thu, 10 Nov 2022 23:07:42 GMT
Date: Thu, 10 Nov 2022 21:49:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2b57492bf85f4ae6abbd1641b17dc9ab 008e71ec05d47bf025ca64e17da2ea1bd8e71111 17894427c471f7fa02ca274795dc55df1bfc99d7bd83f9ee36249394035110fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD"
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3087
Expires: Thu, 10 Nov 2022 22:41:12 GMT
Date: Thu, 10 Nov 2022 21:49:45 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha19a5555cc9ea92581b0cc504cb64345 01a86ce33d5eb33420ed76266360f32c62a96f31 9ebd48b4053bb4a7a27718670c44075b1f35d037be7fd16750fcbc3ffd68b18c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1498
Cache-Control: max-age=133580
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:45 GMT
Etag: "636cd2eb-1d7"
Expires: Sat, 12 Nov 2022 10:56:05 GMT
Last-Modified: Thu, 10 Nov 2022 10:31:07 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NmHrT3s0hT+nYJmuVVfJ+oB+nsPgNoiVLc0G4clGsc34og3JHvYQCUkZ2LuP/FnuHXSirOocuX8=
x-amz-request-id: ZQ9B50CZJXY3MGFR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 10 Nov 2022 21:12:18 GMT
age: 2247
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/ | 34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash4736bac84ca28f2b1e961159fb4ea098 1319612979f53896fcfeacd4215c2715d4951e4c 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 10 Nov 2022 21:43:49 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 356
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| kingered-banctours.com/0e565a05-6b58-4a68-8931-3234a344b16f?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&cid=wcqp42ienj3mtlck2dtbb4om | 18.195.123.247 | 302 Found | 0 B |
URL HTTP/2kingered-banctours.com/0e565a05-6b58-4a68-8931-3234a344b16f?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&cid=wcqp42ienj3mtlck2dtbb4om IP18.195.123.247:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /0e565a05-6b58-4a68-8931-3234a344b16f?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&cid=wcqp42ienj3mtlck2dtbb4om HTTP/1.1
Host: kingered-banctours.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Thu, 10 Nov 2022 21:49:45 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://l12.datingtopia.com/j56le98/?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&bt=bt1&cep=2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ&lptoken=164d6845115d871e85b8&cid=wcqp42ienj3mtlck2dtbb4om
pragma: no-cache
set-cookie: 0e565a05-6b58-4a68-8931-3234a344b16f-v4=8flLnrCHODf8TihbWhyqxkWsBTpzdA6JNPvBx26J1S4; Max-Age=86400; Expires=Fri, 11-Nov-2022 21:49:45 GMT; Domain=kingered-banctours.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=sg3oCTnx622DR1aubr7_pWBFEbrc_08I5e_33qzKk_cvRSeMFPGMBtJqC7T4zpTkQlID30sIuOJjq4wBIL825F0LhRBu2mchYUXHaGPWZPA0g2-OFYmPFg5MgtqY2_lzPRhBMvJ1P5K5C6vFawBysRlcGLiWXXTBA5jfOYV28eA5CvqvP95F12NqtNCbmlnUeOTdYo841ZxqN8ZD7I6CGfIAcWD73HYj8cBwDKWvD82IjhzhKEKeXvKKaQ5trXXEYfgjt4TFs8Aa-mCiVhtVVTk-kX2J_QJn-WqrfU9-_JAPwTnl_BBg2zDz2miqBrcCUfPBIaSh-KsAgmcW3gEK783AWUCVTlNhpfVMRqt8ok1ZXXv6cEYZo45c_e9qvV87rNp4J3eMHud9voc9FonIm8P5FXYsvc__O9kCK9jAYAaFFF1L8f-pYrJoh5JJVPdkl2vOGEbHb1NIXwY5vJ-G96htqecAPRHKbJLE1zWx8WuNp1PRC3UJmeKCylgEUv_9; Max-Age=86400; Expires=Fri, 11-Nov-2022 21:49:45 GMT; Domain=kingered-banctours.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 21:49:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js |  104.17.25.14 | 200 OK | 28 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (65451) Hash638a4990025383a0f83ebf29bdb84a68 153e8818dc42f598e47fde8cf398f1447649a4d0 878e34b89800bb271d3588e526eb3598eb3822e263f3bdaf53645847d39d0ad6
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 21:49:45 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1284009
expires: Tue, 31 Oct 2023 21:49:45 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1nQzFG3D4MBmOmA0wbWBvVV2csf9gePDxA0yAU7jT2zBXYxKL0l3gtLHQFkNPaM7aUP9gPL8LcuhGw4NeF7bzjwxiSLsnyZBjTKXzrPL2oSibBNce1KrO79JruwWkfkNG%2BcWgYI8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7681fff7b9f40b69-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 1.7 kB |
IP142.250.74.35:0
Hash021fd63a0411be30f7f90ad9230474a9 a5b77d9799f8d3b630836d24a1564d4a27dabc0b 796f9ab0cd7e3df46cba3069654c8e629da1a2a55b7e4bfba3da8e92a5b06dba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Cache-Control, Retry-After, Content-Length, Expires, ETag, Pragma, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 10 Nov 2022 21:44:47 GMT
cache-control: public,max-age=3600
age: 298
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash83b99092f19a38763c0b6ffc5e05e5aa 4cacf0a4adc46e28bc867d666a3fb45738dd1501 168478f1e03d83548fbfeed6dfad20ef23cb5a1dbf18f7312e5cf6dd290e9339
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash6bbfc6315b9228fd41cc16d1b2f54feb 2f2ca82eb3ca303268b03f7aa80af90f9380e8e2 9a593b197ba164b8fc74cfe6feccd57e05233a642d1dd8065c6723cee2c15701
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash6bbfc6315b9228fd41cc16d1b2f54feb 2f2ca82eb3ca303268b03f7aa80af90f9380e8e2 9a593b197ba164b8fc74cfe6feccd57e05233a642d1dd8065c6723cee2c15701
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js |  151.101.85.229 | 200 OK | 67 kB |
URL HTTP/2cdn.jsdelivr.net/npm/yandex-metrica-watch/watch.js IP151.101.85.229:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (586) Hash6fe8178c2f13f7d1562c5611b50eba41 3ea4fe1f45af160945c0da3c5789397b9b753e7d 66ed1c2dc4594409fde74e0ffc233e964bf36e748ffa9b0005c5cdd8bc87a61e
GET /npm/yandex-metrica-watch/watch.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.248.0
x-jsd-version-type: version
etag: W/"2849c-mqEP5LlGuRdoIRa5USlBAeOWoUg"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 10 Nov 2022 21:49:45 GMT
age: 12292
x-served-by: cache-fra-eddf8230043-FRA, cache-bma1646-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 66707
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 | 216.58.207.195 | 200 OK | 35 kB |
URL HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data Hash0e8eefb4549a2edf26c560cb9845952e 8d0b1718aacad934fd0043c87cbc54aa091396bf 7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://l12.datingtopia.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 08:17:47 GMT
expires: Thu, 09 Nov 2023 08:17:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
age: 135118
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 | 104.18.21.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.21.226:0
Hashccdc49bbceb95261d6da6017c85219e6 5355f6ccbe77854488db0b090d6cf554ea6612bb 320f5d41ab7af6b794eda1f11f6ec3434ed4d0f6c75f8db21c32d730eea6e9fc
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 21:49:45 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "B3C746540BFBE268176C059D355497E26697C9C7"
Expires: Fri, 11 Nov 2022 08:00:00 GMT
Last-Modified: Thu, 10 Nov 2022 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1937
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7681fffa3e98b51b-OSL
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash6bbfc6315b9228fd41cc16d1b2f54feb 2f2ca82eb3ca303268b03f7aa80af90f9380e8e2 9a593b197ba164b8fc74cfe6feccd57e05233a642d1dd8065c6723cee2c15701
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash081ea13ba4390a4baab25cf57c2672f3 30cc9c329228e3d7bc6041f1aa553f06f8136eed 5a48c189581edd8ae4a4e58e2d54359bb75ba769828436394e4c256fe861814e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3494
Cache-Control: max-age=130521
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:46 GMT
Etag: "636cbf2d-1d7"
Expires: Sat, 12 Nov 2022 10:05:07 GMT
Last-Modified: Thu, 10 Nov 2022 09:06:53 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.21.226 | 200 OK | 938 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.21.226:0
Hash543156a95ab87f82d7c3e5973930621c d636004f4fec8ca09a29b4e637e720044d08dbb3 8cfb51d92f2a4e4a2a52ffa4227fe4b8bdbc252fa7a8d5d6e574377e6be86392
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Nov 2022 21:49:46 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Mon, 14 Nov 2022 18:55:40 GMT
ETag: "d636004f4fec8ca09a29b4e637e720044d08dbb3"
Last-Modified: Thu, 10 Nov 2022 18:55:41 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1436
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7681fffc08e3b51b-OSL
|
|
| app.swpush.com/get-keys | 172.67.146.180 | 204 No Content | 0 B |
IP172.67.146.180:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /get-keys HTTP/1.1
Host: app.swpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-referer
Referer: https://l12.datingtopia.com/
Origin: https://l12.datingtopia.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 10 Nov 2022 21:49:46 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH
access-control-allow-headers: content-type,x-referer
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ggG0faI9P42j3qAnlFN4%2FDi%2FkQAyfTMXzUpKTbOgcLML20sKu4exWD6nG2xFks4Xt8y9PLrAyDYFON2pSKQogttdMvHbYYmI2a8mgUcmgbPxetcShzK90uZDWLp%2Fgjj5IQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7681fffbeeb40b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/48184178/1?wmode=7&page-url=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afp%3A1027%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A902874938539%3Ahid%3A263968223%3Az%3A0%3Ai%3A20221110214942%3Aet%3A1668116982%3Ac%3A1%3Arn%3A337518183%3Arqn%3A1%3Au%3A1668116982884589650%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A4%2C21%2C178%2C1%2C411%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668116980791%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668116982%3At%3APreeland&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 |  87.250.250.119 | 200 OK | 419 B |
URL HTTP/2mc.yandex.ru/watch/48184178/1?wmode=7&page-url=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afp%3A1027%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A902874938539%3Ahid%3A263968223%3Az%3A0%3Ai%3A20221110214942%3Aet%3A1668116982%3Ac%3A1%3Arn%3A337518183%3Arqn%3A1%3Au%3A1668116982884589650%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A4%2C21%2C178%2C1%2C411%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668116980791%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668116982%3At%3APreeland&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 IP87.250.250.119:0
File typeJSON data\012- , ASCII text, with very long lines (419), with no line terminators Hasha8e925be9203dd1cb16da594bbdb0251 9def1e7d516f5ca2b856861890aa1bc3a3f1038c 458f793c6cb1811780251d6a4ddb0ebe5a219b315ce6924c7bea76d59de2ff78
GET /watch/48184178/1?wmode=7&page-url=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afp%3A1027%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A902874938539%3Ahid%3A263968223%3Az%3A0%3Ai%3A20221110214942%3Aet%3A1668116982%3Ac%3A1%3Arn%3A337518183%3Arqn%3A1%3Au%3A1668116982884589650%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A4%2C21%2C178%2C1%2C411%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668116980791%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668116982%3At%3APreeland&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://l12.datingtopia.com
Referer: https://l12.datingtopia.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Thu, 10 Nov 2022 21:49:46 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://l12.datingtopia.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 10-Nov-2022 21:49:46 GMT
last-modified: Thu, 10-Nov-2022 21:49:46 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.39.126.109 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.39.126.109:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Q5ecRv17KYwnTFZCqegqqQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: le3YBAWrd7E0+XqywaVlJ71V5J0=
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashce8959577f690efc985797dff49ad972 b71e397e34aab3b8151397619619e97b354d3936 f56f7b1d7acc204158f51c7cfcd8497365a406e972ed7bf7b8ddef2ec661fa9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1053
Cache-Control: max-age=144627
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:46 GMT
Etag: "636cffd0-116"
Expires: Sat, 12 Nov 2022 14:00:13 GMT
Last-Modified: Thu, 10 Nov 2022 13:42:40 GMT
Server: ECS (amb/6B72)
X-Cache: HIT
Content-Length: 278
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hashce8959577f690efc985797dff49ad972 b71e397e34aab3b8151397619619e97b354d3936 f56f7b1d7acc204158f51c7cfcd8497365a406e972ed7bf7b8ddef2ec661fa9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1053
Cache-Control: max-age=144627
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:46 GMT
Etag: "636cffd0-116"
Expires: Sat, 12 Nov 2022 14:00:13 GMT
Last-Modified: Thu, 10 Nov 2022 13:42:40 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
|
|
| cdnjam.com/cdn/sw.min.js | 172.67.166.71 | 200 OK | 12 kB |
IP172.67.166.71:0
File typeASCII text, with very long lines (7322) Hashe3fb372391cb7b8aef4d9f926ea52f4b 5814ec4da38ea37aa941c5c70e2090ef8de6c246 724009023952a88873c2e44872969c27bf868472eaa5d63df7f1785e593814c0
GET /cdn/sw.min.js HTTP/1.1
Host: cdnjam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 10 Nov 2022 21:49:46 GMT
content-type: application/x-javascript
content-security-policy: block-all-mixed-content
etag: W/"b585b42672057da38c103f8002eaf012"
last-modified: Thu, 17 Mar 2022 13:12:00 GMT
strict-transport-security: max-age=15724800; includeSubDomains
vary: Origin, Accept-Encoding
x-amz-request-id: 16F62D8D719DDEB8
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=14400
cf-cache-status: HIT
age: 6606
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k1BmRP2Cnl%2BdMT%2BWLEItsFEH4hYWQoB5gk1pSu5Pmv97x0j%2F4ObN6gF65VOeMQM%2FRrtjaRYbr3AaU%2FB2cjiLYqAgUhI5J70vh3hnE3kTiW3X5To0gZ2qz3lPfhmT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7681fffd2d81b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/48184178?wmode=7&page-url=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afp%3A1027%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A902874938539%3Ahid%3A263968223%3Az%3A0%3Ai%3A20221110214942%3Aet%3A1668116982%3Ac%3A1%3Arn%3A337518183%3Arqn%3A1%3Au%3A1668116982884589650%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A4%2C21%2C178%2C1%2C411%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668116980791%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668116982%3At%3APreeland&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) | 87.250.250.119 | 302 Found | 2.6 kB |
URL HTTP/2mc.yandex.ru/watch/48184178?wmode=7&page-url=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afp%3A1027%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A902874938539%3Ahid%3A263968223%3Az%3A0%3Ai%3A20221110214942%3Aet%3A1668116982%3Ac%3A1%3Arn%3A337518183%3Arqn%3A1%3Au%3A1668116982884589650%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A4%2C21%2C178%2C1%2C411%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668116980791%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668116982%3At%3APreeland&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) IP87.250.250.119:0
File typePNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data Hash201a24c7863f3d0ecd983fc4a19ea30f e2efd2f5b768babee0336f713a603fadfa4a0acc 87e0373fa8c324ec8a4cb294c659918a9276aeb588b9a3f9651efd7641856523
GET /watch/48184178?wmode=7&page-url=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afp%3A1027%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A902874938539%3Ahid%3A263968223%3Az%3A0%3Ai%3A20221110214942%3Aet%3A1668116982%3Ac%3A1%3Arn%3A337518183%3Arqn%3A1%3Au%3A1668116982884589650%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A4%2C21%2C178%2C1%2C411%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668116980791%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668116982%3At%3APreeland&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://l12.datingtopia.com
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/48184178/1?wmode=7&page-url=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A12kwz5rkew6t6vin1zpu5w%3Afp%3A1027%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A902874938539%3Ahid%3A263968223%3Az%3A0%3Ai%3A20221110214942%3Aet%3A1668116982%3Ac%3A1%3Arn%3A337518183%3Arqn%3A1%3Au%3A1668116982884589650%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A4%2C21%2C178%2C1%2C411%2C0%2C%2C%2C%2C%2C%2C%2C%3Ans%3A1668116980791%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1668116982%3At%3APreeland&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 10 Nov 2022 21:49:46 GMT
access-control-allow-origin: https://l12.datingtopia.com
set-cookie: yandexuid=7234090981668116986; Expires=Fri, 10-Nov-2023 21:49:46 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7234090981668116986; Expires=Fri, 10-Nov-2023 21:49:46 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2547966341668116986; Path=/; SameSite=None; Secure
i=j/envGMLFCO6T7J9lfOYafV5yGgW4XHVcwcVegTT21zlpoepYWM1olMtp1AzOAxkCwXVakG/hjmx7xZMlC4YwXcP3tw=; Expires=Sun, 07-Nov-2032 21:49:40 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1699652986.yrts.1668116986#1699652986.yrtsi.1668116986; Expires=Fri, 10-Nov-2023 21:49:46 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 10-Nov-2022 21:49:46 GMT
last-modified: Thu, 10-Nov-2022 21:49:46 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| cdn-dt.fcdn.info/swpush.min.js | 104.21.234.86 | 200 OK | 17 kB |
URL HTTP/2cdn-dt.fcdn.info/swpush.min.js IP104.21.234.86:0
File typeASCII text, with very long lines (34449) Hashb76ffb685175a86f967db159a584262a 8bc29b90c7aa15c12e49c9d30bbdcd85ab38a9e1 06d35ea7936d042bf9515e366732279b227db025e1987c778f0c2a2e24d75a7f
GET /swpush.min.js HTTP/1.1
Host: cdn-dt.fcdn.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 10 Nov 2022 21:49:46 GMT
content-type: application/javascript
last-modified: Sat, 07 May 2022 08:23:17 GMT
etag: W/"62762c75-8692"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1336001
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxL2lly6LwZvJ7IzZwxnUoyTzoFtd21zTkVjuQ8gBoxvZrxH9r%2BKWyugV5zRgcd4lnuSxlj5GDlzTERrNnrMtYl6VWbhypWjOsYXWf1KSV6HP%2BQAPBgGB0xrefLhtHtc5ISz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7681fffaef3876ea-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscribe.swpush.com/subscriber/null/08bdb7bc-b201-4b11-9235-0457358ac58d | 172.67.146.180 | 204 No Content | 0 B |
URL HTTP/2subscribe.swpush.com/subscriber/null/08bdb7bc-b201-4b11-9235-0457358ac58d IP172.67.146.180:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /subscriber/null/08bdb7bc-b201-4b11-9235-0457358ac58d HTTP/1.1
Host: subscribe.swpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-referer
Referer: https://l12.datingtopia.com/
Origin: https://l12.datingtopia.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 10 Nov 2022 21:49:46 GMT
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH
access-control-allow-headers: content-type,x-referer
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KvZ9sSz1qjDfPaya4xpCJc4Ug%2Fie6xd%2FKoWsK02cGQ46GRfrMYnpmJuIhtJ9ULVAIBKIn%2BB5D2M2ATRyv4%2F4Mj9DTCFqX%2BGCTMdUrSwIUS3yVT3ZwK2b%2BnQOQIAn2TJueXJq3b7Y9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7681fffdd88b0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| subscribe.swpush.com/subscriber/null/08bdb7bc-b201-4b11-9235-0457358ac58d | 172.67.146.180 | 200 OK | 5 B |
URL HTTP/2subscribe.swpush.com/subscriber/null/08bdb7bc-b201-4b11-9235-0457358ac58d IP172.67.146.180:0
File typeASCII text, with no line terminators Hash68934a3e9455fa72420237eb05902327 7cb6efb98ba5972a9b5090dc2e517fe14d12cb04 fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /subscriber/null/08bdb7bc-b201-4b11-9235-0457358ac58d HTTP/1.1
Host: subscribe.swpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-referer: https://l12.datingtopia.com/j56le98/?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&bt=bt1&cep=2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ&lptoken=164d6845115d871e85b8&cid=wcqp42ienj3mtlck2dtbb4om
Origin: https://l12.datingtopia.com
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 21:49:46 GMT
content-type: application/json; charset=utf-8
content-length: 5
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1aAhUpdxA9N%2BDP6WStGtVKsM4VEwdtdJ1AhtKlSvQ2JmpS%2B3kRchN7u%2Fmce2VwCut7izlZP9HqL2XxW07p409NigpGZhB4VnYS5eSYzv4tRZO7ga6GQPnKfU40SJMaFObYnm1c34pA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7681fffed9960b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/advert.gif | 87.250.250.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP87.250.250.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 10 Nov 2022 21:49:46 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Thu, 10 Nov 2022 22:49:46 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashafc55511c7066ad08de213ef5e860002 d5a172a4998270aed3e79d606cd2c332d9c25b58 db868938549b28cc9920ca94971023fd3b010e7bec9fda2faac83fae034eb78c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5973
Cache-Control: max-age=87286
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:46 GMT
Etag: "636c0c9b-1d7"
Expires: Fri, 11 Nov 2022 22:04:32 GMT
Last-Modified: Wed, 09 Nov 2022 20:24:59 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hashabc1b6dead712b3905b9b0c0c8b63b56 e63b4c3f61604e313af85d9577866b98f75faa2a fe7ff7563830e4fd0ab0af0eb929ca26e7a59d6ac147115d127a9585867d139a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| connect.facebook.net/en_US/fbevents.js | 31.13.72.12 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP31.13.72.12:0
File typeASCII text, with very long lines (64348) Hash0ac10debd3a9ea8147a26d045bb93e6e ff45f3442508e8695f2303701682ebdb6e016464 5dee7b453b2c72c07ff1d62432493a044507835a8031ea62edf2fa7cc26219b9
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: J4FZ/bgcLNjc6IxwJzog+yn9Lr7sL/Uli4396sFyw2kyUO5Bk5wVPfam6dCCuSWoIYH7Ua6etvVzL3qmJLBO5g==
content-length: 27337
x-fb-trip-id: 1904183273
date: Thu, 10 Nov 2022 21:49:46 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 10 Nov 2022 20:41:09 GMT
expires: Thu, 10 Nov 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 4117
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashafc55511c7066ad08de213ef5e860002 d5a172a4998270aed3e79d606cd2c332d9c25b58 db868938549b28cc9920ca94971023fd3b010e7bec9fda2faac83fae034eb78c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5973
Cache-Control: max-age=87286
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:46 GMT
Etag: "636c0c9b-1d7"
Expires: Fri, 11 Nov 2022 22:04:32 GMT
Last-Modified: Wed, 09 Nov 2022 20:24:59 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hashabc1b6dead712b3905b9b0c0c8b63b56 e63b4c3f61604e313af85d9577866b98f75faa2a fe7ff7563830e4fd0ab0af0eb929ca26e7a59d6ac147115d127a9585867d139a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 509 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashea3698054c6d5ebd96132ce75afcc48a 2fed1612c97120349fa3163d16244b653c75392a c27003e96bfc39b93819e008aac741d28c3ba06e8d848d4a1f113edef1c0a389
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3155
Expires: Thu, 10 Nov 2022 22:42:22 GMT
Date: Thu, 10 Nov 2022 21:49:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1b6e55fb9c16b8ec503ca6fb935f650f 1e392159765235158a218248677dc21c46bc4f42 89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3155
Expires: Thu, 10 Nov 2022 22:42:22 GMT
Date: Thu, 10 Nov 2022 21:49:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1b6e55fb9c16b8ec503ca6fb935f650f 1e392159765235158a218248677dc21c46bc4f42 89cc50a881ff8fae94b7bfa2732d133df59bae06680f6d2147281ee7bf8ab00b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89CC50A881FF8FAE94B7BFA2732D133DF59BAE06680F6D2147281EE7BF8AB00B"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3155
Expires: Thu, 10 Nov 2022 22:42:22 GMT
Date: Thu, 10 Nov 2022 21:49:47 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F790db4df-e6d4-48ab-92fb-179a770f76b7.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F790db4df-e6d4-48ab-92fb-179a770f76b7.jpeg IP34.120.237.76:0
Hash5522609a8c18467618b4aacfe43c4b41 e084b00a7ee9120203f6c3caeb87f40e05452d19 7fce480ea68dfd5d0c9f30a954a51c53a6397e4da8a00de795931b15e43ff525
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F790db4df-e6d4-48ab-92fb-179a770f76b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7723
x-amzn-requestid: 1e07419e-8cd6-43d6-b0bb-61183502ee40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlpGHFKIAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1ca0-751c8b152ea5c28f5a78bf46;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: BXdwO74rhbF9575IFRz-DNbcEFNiX7JiCtsvghmUE8zOju0eyuFjow==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:08:38 GMT
age: 2469
etag: "2b6dbe326a49e03a0f8d1a5d15930fd7870f6f79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3916060e-035b-48ef-a0bc-a1a576044b3f.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3916060e-035b-48ef-a0bc-a1a576044b3f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe9c81b1a820a09138444dd6a55e6bcf6 d54538f8ecf22b03d58589a1bb76a4b292c3072f 2a3f0de4886061792d159e72f7608b27a9e1071486cbbfc3b0900fc2cd229a44
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3916060e-035b-48ef-a0bc-a1a576044b3f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9643
x-amzn-requestid: 6e80479a-3819-4a7e-98b1-99f44f45c5bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bTTUhGNyIAMFVlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636acc1c-5eb7853c191277c436bad941;Sampled=0
x-amzn-remapped-date: Tue, 08 Nov 2022 21:37:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3Xsxt0yJh-v_RL3WturGvjl4T1Vc15RXpPUUKxq8WxePS0UDTHy9A==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 22:27:36 GMT
age: 84131
etag: "d54538f8ecf22b03d58589a1bb76a4b292c3072f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashfeb275cc5fa7b13e70522cb76f001bbc 80ca9cf6cbbc73a884c3a839ace9a7aa191a8504 a5680637b55669355967b87fd4be4881a3e4dea746b7c420acf4dcb46b8a28de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f570a6d-7e0c-4dc3-9a3f-7af7ccbae623.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8242
x-amzn-requestid: 1ab9c180-7e6b-4eae-a6cf-6a45c96fdc4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlrkE_2oAMFk2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1cb0-0089846803d11bb649874507;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:36 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kZPJ95WwFXhxoBwZIeTN2iRl3-XFPmooKSeFtLu3wIm4b8nabFY2mA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:29 GMT
age: 198
etag: "80ca9cf6cbbc73a884c3a839ace9a7aa191a8504"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F407f630c-7642-40eb-8db3-288b03315712.jpeg | 34.120.237.76 | 200 OK | 3.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F407f630c-7642-40eb-8db3-288b03315712.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash178b1b5efcd0c5997d0e5b820193abe2 460630852800c0304295c78df268bfec64416f98 9822d2ef4199dcc01f81a8e6d3a91d9545466c17abfca4eb30e0a49ca8301da6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F407f630c-7642-40eb-8db3-288b03315712.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3445
x-amzn-requestid: 92b5ba7a-e45a-495c-89ae-9738fd5644bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWloyHMpoAMF-Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1c9e-5508b96c349a34537809ef0e;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3-XU3AO60wbMDZcPshBPHvxEFAQHVs7-dlg52BfbxkSlDAEx9kaeeg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:58:41 GMT
age: 85866
etag: "460630852800c0304295c78df268bfec64416f98"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe468f92f-2486-4c80-ab37-4225f9f983cc.webp | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe468f92f-2486-4c80-ab37-4225f9f983cc.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5fc04eddc597d6b10db5d59c53f20aec dddc0da13526d24aaea990cc1d68d9212612da43 a7e2d1fd141c4383de3411be95b8875c9d969d5f001020793a2b4d939aaa780b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe468f92f-2486-4c80-ab37-4225f9f983cc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12268
x-amzn-requestid: cd9ea4f7-9a75-47b4-a0ad-817c821a592e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWlpZHbBIAMFfUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1ca2-69a98f453929cc817bead2c7;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:33:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: d7nx_2Es1oEJhQDQAyBFqCJpPJ3EhCJf1jKttdcGnzplX6vR4p0k_Q==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:45:36 GMT
age: 251
etag: "dddc0da13526d24aaea990cc1d68d9212612da43"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha929256680885031f55121c35d626bcc 9caf2466f70995d5763b970f916c4944b364a4ff 9366db1c171fe9dae5946198415c9a02005a432fccd359896f94bce874c91027
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1301540a-8618-4725-97e7-ac03773f7ed0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9283
x-amzn-requestid: c800cccd-80cc-4cd6-8856-66cfd07141c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bWmC2HnpIAMF3kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636c1d45-686eac2b6c65b8dd41dfb44a;Sampled=0
x-amzn-remapped-date: Wed, 09 Nov 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: y9jHtcAFR3KyG8gWBDJ13rjekqGz6dUoqn0d_yHYW9beFkeCGSxbsA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 09 Nov 2022 21:51:10 GMT
etag: "9caf2466f70995d5763b970f916c4944b364a4ff"
content-type: image/jpeg
age: 86317
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=1426921724108509&ev=PageView&dl=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&rl=&if=false&ts=1668116983626&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1668116983626.365377448&it=1668116982879&coo=false&rqm=GET | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=1426921724108509&ev=PageView&dl=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&rl=&if=false&ts=1668116983626&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1668116983626.365377448&it=1668116982879&coo=false&rqm=GET IP31.13.72.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1426921724108509&ev=PageView&dl=https%3A%2F%2Fl12.datingtopia.com%2Fj56le98%2F%3Futm_source%3Dbacf24eb%26utm_medium%3D44%26utm_campaign%3D501_0%26utm_content%3DGSL-7204%26zid%3D%26bid%3D%26email%3D%257Bemail%257D%26data2%3D%26data3%3D%26data4%3D%26bt%3Dbt1%26cep%3D2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ%26lptoken%3D164d6845115d871e85b8%26cid%3Dwcqp42ienj3mtlck2dtbb4om&rl=&if=false&ts=1668116983626&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1668116983626.365377448&it=1668116982879&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l12.datingtopia.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 10 Nov 2022 21:49:48 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash7c89768eee117880b59f8644d2138e52 49a829a38293c8f1eb86dbbccc82017f1d5d86bb c512960cca090441f3c7e9ffea25448965eb4068d1506b8afa6d391b3c3a07be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&gjid=1869846317&_gid=528203670.1668116983&_u=IEBAAEAAAAAAACAAI~&z=1128334600 | 64.233.165.156 | 200 OK | 4 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&gjid=1869846317&_gid=528203670.1668116983&_u=IEBAAEAAAAAAACAAI~&z=1128334600 IP64.233.165.156:0
File typeASCII text, with no line terminators Hash48c0473b7821185d937e685216e2168b 3743e47f8a429a5e87b86cb582d78940733d9d2e 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&gjid=1869846317&_gid=528203670.1668116983&_u=IEBAAEAAAAAAACAAI~&z=1128334600 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l12.datingtopia.com/
Content-Type: text/plain
Origin: https://l12.datingtopia.com
Content-Length: 0
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://l12.datingtopia.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 10 Nov 2022 21:49:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash7c89768eee117880b59f8644d2138e52 49a829a38293c8f1eb86dbbccc82017f1d5d86bb c512960cca090441f3c7e9ffea25448965eb4068d1506b8afa6d391b3c3a07be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashdbfb46e8bdaa19ddaed629adf779c7d0 b8600d1af8e94f3c2d9dd41cc6d006dedfb09d16 bd87911e5dda0e290bde8bc02ffe35fd6b7538c0afec0703fdcb1bf86e4a27ee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash006bc2d8ab25bb41f907cbf7aae72496 edfa83f56f1c0e75d1785b84b1ac749c4460787e b31c79d23217ebe327b55bea3133ebf472781ee7101df47de0f87019e182fa0b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&_u=IEBAAEAAAAAAACAAI~&z=1824677458 | 142.250.74.35 | 200 OK | 42 B |
URL HTTP/2www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&_u=IEBAAEAAAAAAACAAI~&z=1824677458 IP142.250.74.35:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&_u=IEBAAEAAAAAAACAAI~&z=1824677458 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l12.datingtopia.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 10 Nov 2022 21:49:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&_u=IEBAAEAAAAAAACAAI~&z=1824677458 | 142.250.74.164 | 200 OK | 42 B |
URL HTTP/2www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&_u=IEBAAEAAAAAAACAAI~&z=1824677458 IP142.250.74.164:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-97359813-1&cid=484908360.1668116983&jid=1547111775&_u=IEBAAEAAAAAAACAAI~&z=1824677458 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://l12.datingtopia.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 10 Nov 2022 21:49:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hash2817ce33ca8b3667491f155a141abfa7 c39855bf058d975083bd145b944a438b47307a36 33bb12b05df7cb1e19ba5647d57b5cc5f0a79095a2ca40a04e5fe076b7e33422
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hashda6ea2384d89dcf08521ba15aaa8c085 141a73f1f12700389cecb3548d37c2d5286e7a95 db36322a9271b8e877ba3b1b59c0b8783eb5e9ac8cddd9ecce4180904e7a1088
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 10 Nov 2022 21:49:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Ubuntu:300,400,700 | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Ubuntu:300,400,700 IP142.250.74.10:0
GET /css?family=Ubuntu:300,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 10 Nov 2022 21:49:45 GMT
date: Thu, 10 Nov 2022 21:49:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| app.swpush.com/get-keys | 172.67.146.180 | 200 OK | 0 B |
IP172.67.146.180:0
POST /get-keys HTTP/1.1
Host: app.swpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-referer: https://l12.datingtopia.com/j56le98/?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&bt=bt1&cep=2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ&lptoken=164d6845115d871e85b8&cid=wcqp42ienj3mtlck2dtbb4om
Content-Length: 89
Origin: https://l12.datingtopia.com
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 10 Nov 2022 21:49:46 GMT
content-type: application/json; charset=utf-8
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,PATCH
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QVi7aKXORRP0c33dcvGW%2BuWvIf6sMV9vp4EAifqt%2FHQGxaryzA6QH9VqZ1lyT0ZGXpYtW6Dm15JvyNhXTl69qC3f0nDjZSnzk5li6GhlD0EUN5%2BPnQmBKum7e%2B%2Fg8wN2PA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7681fffccf810b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| l12.datingtopia.com/j56le98/?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&bt=bt1&cep=2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ&lptoken=164d6845115d871e85b8&cid=wcqp42ienj3mtlck2dtbb4om | 104.21.65.62 | 200 OK | 0 B |
URL HTTP/2l12.datingtopia.com/j56le98/?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&bt=bt1&cep=2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ&lptoken=164d6845115d871e85b8&cid=wcqp42ienj3mtlck2dtbb4om IP104.21.65.62:0
GET /j56le98/?utm_source=bacf24eb&utm_medium=44&utm_campaign=501_0&utm_content=GSL-7204&zid=&bid=&email=%7Bemail%7D&data2=&data3=&data4=&bt=bt1&cep=2ic78HtG7Nj2_QnhyHNuCR86B-a5NJB_8PRLlqKoyna4mQtdCQIsT5Dh2y0u3NXqxBr7sS1lpRjE10rMiOrO1_WPMJwg65duSrzE4hDORjUBX9RXQXYNnUrlLSWg9jfA5rGDhZCtanBSh3vZo6Jph6nsEgi9QmxB-3Ci1HVBKULfKXD1DS3ynvhuJqPMWHpA_yJP5FcfFmwSBYGAsfLkN_TgeHhsb9sGsQUBIwnYHKyNMlgGFj7Rs5AXR3IryP5z1RFq9jBaMntCMNpZ-EWBSYRvXUu2ORwpaVqJyBZU98dn9l7RCZ1zBC_L6skh2CHnUysefACIHrZTpwo3yUYl7KnioAR03hBUnlhFlPgXhudFRZOoaSLioALeua0GCPex3Xn6zpMmC2c0fu8eKpB6gWnyl22NoP-Pr8imB5b5rQ6BgPK7y4GqlnjucFQnkb4Gxy31hfh1Lxrl64KZc1RBJvxYGS1sjC5KObTrRGGXiDIjzFdMtV3_Y1PCy4IWGumZ&lptoken=164d6845115d871e85b8&cid=wcqp42ienj3mtlck2dtbb4om HTTP/1.1
Host: l12.datingtopia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 10 Nov 2022 21:49:45 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.11
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UpXYtgkQoIKaNvYhiqPGYqGW6UXtO3r70tH4JkNv0uqzywhkuRzNax9zDCNfBUqeid31rtLeUNbXz4qiBNDLGBhzNL%2F55Y96Q98evm2SVeD3GumERJOTiJlnwnP3x9bnxHhpvNpp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7681fff5ee38b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| kingered-banctours.com/hp | 18.195.123.247 | 200 OK | 0 B |
URL HTTP/2kingered-banctours.com/hp IP18.195.123.247:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /hp HTTP/1.1
Host: kingered-banctours.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://l12.datingtopia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 10 Nov 2022 21:49:45 GMT
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2
|
|