datesclub.ru/?land=08262
185.36.100.24302 Found 0 B IP 185.36.100.24:0
ASN #62403 Disk Group Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /?land=08262 HTTP/1.1
Host: datesclub.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 24 Dec 2022 15:08:50 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=60
X-Powered-By: PHP/5.6.40
Location: https://www.todayhotties.ru/s/5ea416fed322f
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7e300ca7d2d586dd1ca0c185ef6b0da5
3914cfd3b7aa6e1d1117bf509319479e489ed2a4
91c8810ad137faf4393f7d15f9c619c06d124a7aaebfa21290dca614db2c7757
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91C8810AD137FAF4393F7D15F9C619C06D124A7AAEBFA21290DCA614DB2C7757"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18028
Expires: Sat, 24 Dec 2022 20:09:18 GMT
Date: Sat, 24 Dec 2022 15:08:50 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash ad598540c6639aaaa344fb3ce4f3162f
b0b9f86d50de7dc23bdc7aee2f45d79a06165afc
4e9aaff330ce0c9c11f6bb8502fe21296b1845151bace75f73908a3194d5d0a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7358
Expires: Sat, 24 Dec 2022 17:11:28 GMT
Date: Sat, 24 Dec 2022 15:08:50 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6b1d63d9d906daa309dc263b4991bbe9
04680ddd86781d46dfe6a9671571b3ad1f3758f3
46fff7230b88de4cd81dfb0feb783d2dec27e49041f9257d2fb891030781bf6c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10573
Expires: Sat, 24 Dec 2022 18:05:03 GMT
Date: Sat, 24 Dec 2022 15:08:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 24 Dec 2022 14:34:53 GMT
content-type: application/json
age: 2037
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: P+G2Vme+BFmBohq8TnafhzllCwVPLDXJrJqxEw655FdN1i6MqPTRF4+rqF1tqozILHxwdHebBwrwJlnxx+mQEw==
x-amz-request-id: Y3AXNJDS859YFAPH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 24 Dec 2022 14:56:38 GMT
age: 732
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Dec 2022 15:08:50 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 24 Dec 2022 14:33:26 GMT
age: 2125
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2e286ce5049498099c734854752ad6b3
3384a4cf6a3413c6441d40df0c7299334d49b75e
1ed656d108ec4e1c011dbf4541a4e193512b6d17e75949b6897b4f22935588f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1ED656D108EC4E1C011DBF4541A4E193512B6D17E75949B6897B4F22935588F5"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2852
Expires: Sat, 24 Dec 2022 15:56:23 GMT
Date: Sat, 24 Dec 2022 15:08:51 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d7938ab2263405a708c44813f3e16cb8
3ba9f4363ecc2834ea1211f761ce2d04e0077ab3
8a8ef4218bcd8ecb1f12ecdb74f3f453a7093be8dd3c233615577dcc9b40fa92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 342
Cache-Control: max-age=151420
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 15:08:51 GMT
Etag: "63a6c129-1d7"
Expires: Mon, 26 Dec 2022 09:12:31 GMT
Last-Modified: Sat, 24 Dec 2022 09:06:49 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.149.51.98101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.51.98:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KK1UZJUh++RqROztN31HBQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mrpcVWFeZAkYTQTeHun6SlM/3hg=
www.todayhotties.ru/s/5ea416fed322f
178.162.199.80200 OK 1.9 kB URL HTTP/1.1 www.todayhotties.ru/s/5ea416fed322f
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 6a1e3acb6f6659da531f15c3192a03ea
a265138a64222f17e161e6b498b85919ca112ea5
d161f03869a262fc7ec3090b13af0a3912fb607522d2f20d17304840ca214897
Analyzer Verdict Alert fortinet Phishing
GET /s/5ea416fed322f HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1; expires=Sun, 25-Dec-2022 15:08:51 GMT; Max-Age=86400; path=/; domain=todayhotties.ru
SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru
ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru
Content-Encoding: gzip
www.todayhotties.ru/bundle/343/assets/css/style.css
178.162.199.80200 OK 7.0 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/css/style.css
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with CRLF line terminators
Hash d5002b22f74b3ffbb36142417535ae09
6f86da6c79b5432649a47f4e520eea677da8e457
e3f3db8ec545f578599a7d301982393b47a937d23931e8cb9fb9b08a2bf5212e
GET /bundle/343/assets/css/style.css HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: text/css
Content-Length: 7047
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
Vary: Accept-Encoding
ETag: "5f13df9a-1b87"
Accept-Ranges: bytes
www.todayhotties.ru/bundle/343/assets/js/functions.js
178.162.199.80200 OK 1.3 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/js/functions.js
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with CRLF line terminators
Hash 0f08070c8301c605e00292fc31c3ee6e
9148cf2b7799c3142e4f4f2ada6006a70b4fb579
74c8bc5828d0eb6816571dc9b6d7e9c821bfb57eb3a97976d7635bbd79500c5d
Analyzer Verdict Alert fortinet Phishing
GET /bundle/343/assets/js/functions.js HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: application/javascript
Content-Length: 1302
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
Vary: Accept-Encoding
ETag: "5f13df9a-516"
Accept-Ranges: bytes
www.todayhotties.ru/js/click.js?8
178.162.199.80200 OK 5.3 kB URL HTTP/1.1 www.todayhotties.ru/js/click.js?8
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
Hash 8207d083c909c6386927c5197eff584c
a5f1148a0e9923191d3f8ed4c1750240374af2a9
f71ae9723255b00dcc8e3631fe419cbbb56a80b3034f184ca5292127d7b3eea9
Analyzer Verdict Alert fortinet Phishing
GET /js/click.js?8 HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: application/javascript
Content-Length: 5260
Connection: keep-alive
Last-Modified: Fri, 23 Dec 2022 12:52:41 GMT
Vary: Accept-Encoding
ETag: "63a5a499-148c"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 15:08:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.todayhotties.ru/bundle/343/assets/js/jquery.js
178.162.199.80200 OK 86 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/js/jquery.js
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
Analyzer Verdict Alert fortinet Phishing
GET /bundle/343/assets/js/jquery.js HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: application/javascript
Content-Length: 85578
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
Vary: Accept-Encoding
ETag: "5f13df9a-14e4a"
Accept-Ranges: bytes
www.todayhotties.ru/bundle/343/assets/img/1k.jpg
178.162.199.80200 OK 54 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/1k.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Hash 891bd8edafa58a57a905cb1cc9c49bff
36560046ed59a2b2e4b678b7a69ff8ce3342e6c8
1124945d1b3467717d897e5728c4691fec6cc06bbebe48b586fa613fd299a423
GET /bundle/343/assets/img/1k.jpg HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: image/jpeg
Content-Length: 54367
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-d45f"
Accept-Ranges: bytes
www.todayhotties.ru/bundle/343/assets/img/4k.jpg
178.162.199.80200 OK 46 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/4k.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Hash ed2fe56349612fecd208fe2e6ebbc02f
94352ad9c83687e5d8ebde66550b7c9ce787423e
aec56bbd25def61a86fdf61e505c66ec9feedd70268347664835179f5b561d19
GET /bundle/343/assets/img/4k.jpg HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: image/jpeg
Content-Length: 45692
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-b27c"
Accept-Ranges: bytes
fonts.googleapis.com/css?family=Lato&display=swap
142.250.74.74200 OK 811 B URL HTTP/2 fonts.googleapis.com/css?family=Lato&display=swap
IP 142.250.74.74:0
Hash a6b917292f55da4fa8912312a54f1ee1
c09fc766c2f70ad5c172cfddf04b1c3bb511088c
529ec6f7ca83bb09b867451c0b315d5817ab4c6d9fdd39a9483995b8c4b5af6f
GET /css?family=Lato&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Dec 2022 15:08:51 GMT
date: Sat, 24 Dec 2022 15:08:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.todayhotties.ru/bundle/343/assets/img/3k.jpg
178.162.199.80200 OK 33 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/3k.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Hash a66815ce1439259be87d0288fc00baa6
c95f125b3e867a716545ab6a94cea6cc270031cb
6b5c1ed44a068de8c213c700b0900f36f4294bf24e46bfacb98e94fa9b120ca7
GET /bundle/343/assets/img/3k.jpg HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: image/jpeg
Content-Length: 32842
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-804a"
Accept-Ranges: bytes
www.todayhotties.ru/bundle/343/assets/img/1.jpg
178.162.199.80200 OK 82 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/1.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x830, components 3\012- data
Hash 8e3ace5de93b554fcbe1ac206c13bc44
1c083f689d62cd296fa5622a8383536a98030811
12b3d01a66c9e6e57bf7869460d4e94e232f20d56a6cbe48fd982d104a4e495c
GET /bundle/343/assets/img/1.jpg HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: image/jpeg
Content-Length: 81920
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-14000"
Accept-Ranges: bytes
www.todayhotties.ru/bundle/343/assets/img/6k.jpg
178.162.199.80200 OK 64 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/6k.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Hash 4397bf4aa46e98f9ac7de6987efd0e8d
40fe5d8dc212a034a2d66442a4242ee09bc641ab
26f4a2eba9a991d422f99988d4ae22e17826c87874305239fdb85e19751ce8ee
GET /bundle/343/assets/img/6k.jpg HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: image/jpeg
Content-Length: 64243
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-faf3"
Accept-Ranges: bytes
www.todayhotties.ru/bundle/343/assets/img/2k.jpg
178.162.199.80200 OK 49 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/2k.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Hash f04372e0d038a14b25ce40eaccab06a9
a6ef1e6194e4843559cafad30d38e7650bc83df3
67963849ad79125161e36c550fea229cd1ba5b533f392194d79813d113b6d0c4
GET /bundle/343/assets/img/2k.jpg HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: image/jpeg
Content-Length: 49411
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-c103"
Accept-Ranges: bytes
www.todayhotties.ru/bundle/343/assets/img/5k.jpg
178.162.199.80200 OK 74 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/5k.jpg
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x620, components 3\012- data
Hash 8caae1bd31eaba57dd37493bd5f3e9ad
bfc7fc50fa53aee0cabafa72a29c8b8665f2d074
c0020d3e076498a290b97d7adefc90f0398e53e0a28f55f91ed119e56b1bab85
GET /bundle/343/assets/img/5k.jpg HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: image/jpeg
Content-Length: 73730
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-12002"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 9527d889a5b94c28b4dcd8809ffba513
b2ee81348df6ebc3f72fcd64b7767df0a1903fb5
9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 15:08:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.todayhotties.ru/js/fp2.min.js
178.162.199.80200 OK 31 kB URL HTTP/1.1 www.todayhotties.ru/js/fp2.min.js
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type ASCII text, with very long lines (30507)
Hash e7d6b85edb141824af8951e19333337c
76600b2cb1978ca24d9fe39b1412f052da855ddb
6e1bf43d1d49858aacd5de53b32b551732bca4b2a46b1f808eb6d6d0f2b70c0e
Analyzer Verdict Alert fortinet Phishing
GET /js/fp2.min.js HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1; CF=gZb0LA2I7Ix3j45Tvx8pqw__
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:51 GMT
Content-Type: application/javascript
Content-Length: 30685
Connection: keep-alive
Last-Modified: Fri, 23 Dec 2022 12:52:41 GMT
Vary: Accept-Encoding
ETag: "63a5a499-77dd"
Accept-Ranges: bytes
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.todayhotties.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:12 GMT
expires: Sat, 23 Dec 2023 13:33:12 GMT
cache-control: public, max-age=31536000
age: 92139
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 15:08:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.todayhotties.ru/bundle/343/assets/img/favicon.png
178.162.199.80200 OK 1.2 kB URL HTTP/1.1 www.todayhotties.ru/bundle/343/assets/img/favicon.png
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Hash e8073cd460e8d7469633099834659549
af524b0e7cb82d90a67602109a550380aa8850dc
77df391534b58f0024b7e60b35b1b595188436e24735a19e943d0d5a7d3fc33f
GET /bundle/343/assets/img/favicon.png HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1; CF=gZb0LA2I7Ix3j45Tvx8pqw__
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:52 GMT
Content-Type: image/png
Content-Length: 1194
Connection: keep-alive
Last-Modified: Sun, 19 Jul 2020 05:52:26 GMT
ETag: "5f13df9a-4aa"
Accept-Ranges: bytes
www.todayhotties.ru/s/5ea416fed322f?callback=jQuery22409234871398125549_1671894529909&_=1671894529910
178.162.199.80200 OK 2.3 kB URL HTTP/1.1 www.todayhotties.ru/s/5ea416fed322f?callback=jQuery22409234871398125549_1671894529909&_=1671894529910
IP 178.162.199.80:0
ASN #28753 Leaseweb Deutschland GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash c5f980e362fea371eb9a10645e3f0086
7b7e69e9e46302bde39a13ac203ee638ddcdd1c9
499148942b29d37c2ce1ac693406d393b1fc159fdee927f2c4c2b23f2bfaf2af
GET /s/5ea416fed322f?callback=jQuery22409234871398125549_1671894529909&_=1671894529910 HTTP/1.1
Host: www.todayhotties.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.todayhotties.ru/s/5ea416fed322f
Cookie: s=Yltqhhwtmm5CZYLio6q9H%2B0EXj5guKhhQeRJf%2FSJnFQ4aB%2F36zHi7cKckyGQ1U%2FvMNdF%2B7QSJzwj4v3DfO03rSB%2BNvgRH6NV%2FTdQXiJj4feWGGsbdYrb15oNZpiAeQ74Gitn3RnGA%2FNpP2dDtNS87G7Am1JDuwJCSyPVFP%2B2%2FWS97vDOftROY4N14eb6UaADaJpl2KIwkvzVqJFJ11ytEVFdG5mjImTqyPJg5Msrg1I%2B1qvjmJByOOhdp6lyFrYa31TaMKVg3BF4ysP4D8Xsh7mtNg2jGuYwxHqO375omVFOTT37LrFWjzc4qWoURCeHn3fXdET9jR3W7eeolh%2Fj3DdLf42AtvOB0OPl%2Fu6hjY8gwNXus%2BJK2nHZWouAFJ1mgb2t01fc4yZ192hGKjaCMiTF0OluLW2y3kaj7BypxqzssehjPUNsaH9vi69dF54MLZpn4vY9gg79mjpeU1lfQon336SItDsRLQi4njDxvtqAc5eOVGQxmRVMg70xcrH2pqdM5Z8pWLH0gC00k6%2Fa8m%2FfyqlFALbPMakzEzepPCJFuNkdyrRdPx3j2suff7Qo5VOiGjMomHdNp3jHlB4VqKub0i61SvgL0FryD%2BdmghRPgwpMJ8OaoFK6PRuVpUzeQt48Yx%2BZFx3QbLaPik4VJwnwmy%2Bansd4iEGcsdOygDjh8dk4yV5lkRvYkcG7s8fEZTEClL0YewGEli8z6KIwDMIauN2F6Woepk%2FnPCL8AwVqzp7E8UcfM9dVqF%2FoeoBqq%2BUC1ACvaOgXhGjfTNG5vJQ%2FVrqOkZIb92TJlS1MG%2FUhaosS21dOFVsd7i8Kv2V17MqOyKbc0LS6C%2FJXLTSSXjSEaXQBKxZzwteAV77MWcEoVpj50q1ny90v9uuDdV4I7rbY513F%2B7bKJVoraHVCNzx3dY%2Fk5oEnmKo4%2FHvdtmsGcboM2FBtbZLLF8uPG3C5c2zHZYkGHLOwbn%2BgrEkTtWFpocbEsVr5smaK25WRdeep2sIJBUlqL4w884UweW0oitSJtc0x21UVLk4VqCCPuwXch079GQOIhNL5RO57guo5hvTHT3R6OgqfAAD4eT6Wikj0fQIskZ9pNCfOPv4fu7%2Fx58tWGgIIi%2Bv1RskzaO2UYryyro1ihum0ft3zVDPccxMdp6XI8BbDryt6LA1jSZB9cGkmH3AsZvFtjAYdQe7HuRkVfkLHB%2BfB4LCxayrNrXeIJx4Z5%2BLtR%2B%2BwpMGGIxEF8GS%2BPmaMa%2B6mU6wtyJBb7B6BEIgZcPzkk0ey6ywB4EI%2BIESQzU44pjlmjmDVZUCtfDy%2BW%2F4OrFp67mNRrUlx9uKhibSbX2szuz4JYdRDbTMib8cNZfiJoPCZyKAVMhjfifjdOpChjMk%2FF%2B2KFjJsGgLqam6l767RybacDM3AHvzdATaQakyLLyzFf9Vub08bjy3k9l0T%2BDmvfIfEEJdpeRRTwV30Yh3G0p%2FSS2b%2BDGALV28ix1FFuTa%2Fa%2FXmSFMjTvK5fvxGMhGUS1c7KED24EFhQNs%2FgZdfzxp7aQAaLOlWraMzPMTFmpznGAuseRmCnvxq6MooqgRbwzqPOr3SoUz%2FRnMmJFXm0aSvQc0BN%2B4qjYnlVUgnfi5eQ16rZ%2FV1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: openresty/1.19.3.1
Date: Sat, 24 Dec 2022 15:08:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: s=Ey%2B0D89hyylniKuW9iGCemVA5Z%2BuJxmF3n2vKcGCLr53%2FmIjr%2Fr%2FigSWX8RTnxLVetxOxSKghOfIllt6q7jBOiB%2BNvgRH6NV%2FTdQXiJj4feWANfAIs6WAtUl9kXdkmu6sI10RAwrVs5sY%2BR8RfYEb78BpFKDfzz9hD2lHFWg1HH6e1rkT8l%2FbGDrTEya82m%2BLfF6iOGi9OpKEr9QcluSA%2FJGtKfKTlZT5Ps1SmDA77nE5bX3fX%2B%2FuVAiHEY5ywBhyD3%2F4n7xnrz%2BDa8s7oUO%2Brahv1QWindC6ktSBYroASEqa73l8pbloMXlxFUpOirw0xiQT%2BHIZOydcYQuqQcW1v9Xuqbl8kF1SFmwBNLhImcQnOfPQ8MID%2BAWP0LNzvGlyDvezFfNPeYfHyTfyhidljGNzpjsWsvlwyEeRSRFORfw7rfVn10b9cEtzm1hBqCG8UVBxUolj3U1cTfmsWmiVwToM6PcNZ5vlsl8KeFMXpapTgYSJmCxCuwejnEqLfAwQ4gxDnXu3DhAWlnrF9ffA3ST%2B3hCO9EgQenlNPumGLTeVsyosP%2Fu9%2FaUpLnrENJeZtKI5bu34ZhfXJblJ8JcL4ck%2Fx0h2vkHIqVbSjJ1BumQ1%2FUXG%2BdOPkiwvyvtJnlVycHaTiEG%2Ft%2Bwlytgc2d0mWRoxDdqKd2GtUWo7G19Nul1Y2O%2BIMn8hhMJgrewJjkw9fKEnUwCRuvcUuJiazbmicUnOMXhzBwNbdBM%2FiPBYg5D1zeJX0vY4pW1v0NPcoAkXyJcOLqYEYRzj0Dt9A7DR0VRMp7Kl%2BdwJlgRVAmzSqCgdzNUBhmKP92F30yego0SUCzZQmu4X8zsA2Eot8P7MfikEe8zxDR8zIm1BZEq7mzgKTy4hgt9kTWLZk1IoMhXOqk6YddKjGqTP7kxgbw1J8kO%2FBzulcpmR4BZxDKrXLB3EzlaqvS%2F1SX%2BXHzqHhRSfeUocTQs%2BTvezkW79%2Fw8%2F1uDBHL%2BeK6ivzbt9gxt%2BqutQ0cu0VnT0TvdU67ZQ%2BO11pDMScsX7XdjSGGoC5VjEDoL3LyJWCNAE5FIU4NUXb0YMWMwrxKXgTqL1M5AyS80QfqfE9X0CAT8fmoO%2Fn3fRQsKRUkLVyoMonFLz3KfeRYj5no8RoViJYzJRk%2FOjqtbgDfYM2HRsI4Yxc%2FqTNW%2FtUKlS%2FPVv277uUsYR7AwqvuyFBweW%2B6dj4Ks%2FixddvqTWwSX5pZRTRcq11nOZ%2BLH5ZSy6g%2B7Aw6T6WfhR4NDLeQduEpN4qgbLR%2FNHb3mSQ%2BEUAG1x8YS25uW2%2BneklvLyh9n2TB8PaOcQufSxe8XNR0cxKWCigZRnMO2gbEnSW5gOnGyXYs2%2BgyL%2B%2F8alDLrvNcOkDfPPNdKUmKcPCEzD7dRcrM312PXkLESfcraGZbyQxJr4ChS3qGrnONFV0G%2FJn7FUG1zFmelhBjVqJL9hjI9vzeMd2OiupeuRK%2BQd6rZ%2BfNn8JrqfHMAxMX4wk788CAzD%2BFUfgmMzv%2F25CPClGua4CLmboZDrQZiyduwApPmMXa812yHjXhqfOGO7jWM%2Br0mu5mg6OsYoYPElRr4%2BzgRex3oUVheEc2WmVXBot58qXd8gJiZkiBEwQ1biEK%2BwVS067pNp2vQc4qjEIuF9FHBKP1nboA%3D; expires=Sun, 25-Dec-2022 15:08:52 GMT; Max-Age=86400; path=/; domain=todayhotties.ru
SID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru
ESID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=todayhotties.ru
Content-Encoding: gzip
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9473
Expires: Sat, 24 Dec 2022 17:46:45 GMT
Date: Sat, 24 Dec 2022 15:08:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9473
Expires: Sat, 24 Dec 2022 17:46:45 GMT
Date: Sat, 24 Dec 2022 15:08:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9473
Expires: Sat, 24 Dec 2022 17:46:45 GMT
Date: Sat, 24 Dec 2022 15:08:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9473
Expires: Sat, 24 Dec 2022 17:46:45 GMT
Date: Sat, 24 Dec 2022 15:08:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2d4cf077d410b94f1326e942304f9e9b
98fb13feecfada3cc8b467aa48d7cdf1ed8ab001
ec82cd83bfd4da849888b0535c9764cd4d462ef9e12c5934512858375908dfe4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5659
x-amzn-requestid: bc225a93-868b-42d4-aa94-c8fa16ef2c64
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dk33gHUqIAMFg1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a50696-7710727f0f086a791a0e7939;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 01:38:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Es7YaIRVfiybyKGY41ZE5UYSN0bfn6LmOUqcYZASi9QsXQqR9NSwTA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 05:20:54 GMT
age: 35278
etag: "98fb13feecfada3cc8b467aa48d7cdf1ed8ab001"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbf0437-e3f8-4c0c-ac43-11a9d84659cb.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbf0437-e3f8-4c0c-ac43-11a9d84659cb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b92387330acabeb3e5475a52f789314e
c27aa6c638e130063905e556d5d2213dcadb690f
b67e7688d3ed7d4a7aaa9bae8c083f296ed9f52986e8bddbcc93ac13ae02a6af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbf0437-e3f8-4c0c-ac43-11a9d84659cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4576
x-amzn-requestid: 81468234-ef31-40ad-b003-2d22e8fd2ef8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnpAGi8oAMFXBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61fd3-0ddf619f2677a5a134334202;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:38:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: k0iAdchmYKi0_s5TLmEUA6zgrkAwv5VOylgHbHt0vnnMfwJHpvUuGg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:45:56 GMT
etag: "c27aa6c638e130063905e556d5d2213dcadb690f"
content-type: image/jpeg
age: 62576
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d90b80ebad103c48c3043c8d5e4c3ca
ab36c9309ce13b2a3d075461c2445f76bfc582aa
2287a6db0a6a58c570930c1f94c3b36d7acf383b26cdfa42261eb254598fa7c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7669
x-amzn-requestid: 4b35e79d-21c8-48d7-b11b-44bd820e29d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnROG4UoAMFZdA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f3a-765739ad7e9063781ccb12b2;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:35:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lhQA2yVBNtJ04goTms0KXhX6Q4v86TEe4EUioQs3eJzzMsCxbVmykw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:39:58 GMT
age: 62934
etag: "ab36c9309ce13b2a3d075461c2445f76bfc582aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdce5468-cf1b-4a55-968b-1aaa101e60d6.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdce5468-cf1b-4a55-968b-1aaa101e60d6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38cc82b5e5d8c2fee6f51021e156ec81
eafb4e029313caabcdbdc1002abcab95f66e91b1
b8cad011e1a98ee4e896f00263495aab7f9cab986736a7a5b4187b8e94c46493
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdce5468-cf1b-4a55-968b-1aaa101e60d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11939
x-amzn-requestid: a00e5ab5-ad16-4576-b046-381e36456998
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dkUhqE94oAMFu5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4ce0a-28687ad51eea1f6f3ce8cc86;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 21:37:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GZ4CbztfUpuPUplTacPrTbsufySu214BVAvkmxZe_PA2t89nsTFCdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:37:34 GMT
age: 63078
etag: "eafb4e029313caabcdbdc1002abcab95f66e91b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3071a834e874a992c3b14f7a3f91b30f
559014c7e6e5019097b7da8b3a820a80a1f55b6c
4f8e29303936b4168f0ad765d8a2773a7247f249396147f68f6f9639b1ad1208
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10356
x-amzn-requestid: 32dbf731-a18f-4150-b3cd-f30d2ab3c6a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnoi1GY2oAMFesg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a62145-55a5f14a6ea6e7dc3754a8be;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:44:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: I-X2fEUZq8ogVCK-SeYSAgdEupzhzeBxgZv0WaVunieB4pgXxjqn2w==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:48:16 GMT
age: 62436
etag: "559014c7e6e5019097b7da8b3a820a80a1f55b6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ebee3d-1399-4100-87ce-23d8990b97d2.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ebee3d-1399-4100-87ce-23d8990b97d2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 33d7fa2f0af62e65eb23c36297749038
d28362f2babfde4ca02f309b80be75bfc520de9a
070da72e06d4492a954b130ff6bef5ca5fd625f0fcfee81e801ef26a03d07e2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ebee3d-1399-4100-87ce-23d8990b97d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7478
x-amzn-requestid: b9f7f6d8-fada-45fd-80a7-3ac122dae6fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnoYlEbVIAMF_lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a62103-15601045320b166c295d24d2;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:43:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZhfcPqJ8RN-si9JrtR_1eTK_ipOrXOgs7CusvSevQSfpSOoVB5Hm7Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:48:09 GMT
age: 62443
etag: "d28362f2babfde4ca02f309b80be75bfc520de9a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b8b6b6f-05a3-4eb5-804c-574c03992933.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b8b6b6f-05a3-4eb5-804c-574c03992933.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a63236113546a7bfb369d741c2b76e2
737f6730f63deff51a39ef094fa1a263b91db89b
b811838126a7d3e814415c3b869f9f224361ef468c08c4c7d5e385371149263a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b8b6b6f-05a3-4eb5-804c-574c03992933.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8078
x-amzn-requestid: 0fa11c0d-584a-4790-83fe-d10780dd6df9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnncXGjDIAMFvfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f82-452f8acd148122756a8f0230;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZsYREhlLzv_oHiB1qgGuelsC8t99SUMILEGgU42tKWeugQUU5iFgBA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:47:42 GMT
age: 62477
etag: "737f6730f63deff51a39ef094fa1a263b91db89b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2