urlquery - report: findher2date.com/tds/ae

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
findher2date.com (2)	0	2018-07-15 22:47:59 UTC	2022-11-28 14:32:31 UTC	3.125.187.5	Unknown ranking
findher2date.com (2)	0	2018-07-15 22:47:59 UTC	2022-11-28 14:32:31 UTC	54.93.66.131	Unknown ranking
img-getpocket.cdn.mozilla.net (4)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-28 05:55:58 UTC	34.102.187.140
www.gstatic.com (1)	0	2016-07-26 09:37:06 UTC	2022-11-28 05:52:04 UTC	142.250.74.163	Domain (gstatic.com) ranked at: 540
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-28 05:46:10 UTC	34.117.237.239
ocsp.sca1b.amazontrust.com (2)	1015	2017-03-03 15:20:51 UTC	2019-03-27 04:05:54 UTC	143.204.42.165
www.redir2fuck.com (2)	138232	No data	No data	52.19.101.114
cdn-dimi.akamaized.net (15)	0	No data	No data	184.31.15.67	Domain (akamaized.net) ranked at: 280
ocsp.pki.goog (3)	175	2018-07-01 06:43:07 UTC	2020-05-02 20:58:16 UTC	142.250.74.3
ocsp.sectigo.com (1)	487	2019-11-29 11:50:24 UTC	2021-09-17 20:05:40 UTC	172.64.155.188
rgjgwe.impresslvedates.com (3)	0	No data	No data	52.19.101.114	Unknown ranking
r3.o.lencr.org (6)	344	No data	No data	23.36.76.226
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	35.162.142.194
www.dirtytinder.club (1)	145327	2019-07-18 13:02:00 UTC	2022-11-28 06:45:27 UTC	18.196.9.157

Scan Date	Severity	Indicator	Comment
2022-11-28	2	findher2date.com/tds/ae	Phishing

Date	UQ / IDS / BL	URL	IP
2022-12-04 10:27:49 +0000	0 - 0 - 1	findher2date.com/jump	54.93.66.131
2022-12-01 10:19:48 +0000	0 - 0 - 1	findher2date.com/tds/ae	54.93.66.131
2022-11-29 19:13:10 +0000	0 - 0 - 1	findher2date.com/jump	54.93.66.131
2022-11-28 18:18:48 +0000	0 - 0 - 1	findher2date.com/jump	54.93.66.131
2022-11-28 18:18:45 +0000	0 - 0 - 1	findher2date.com/tds/ae	54.93.66.131

Date	UQ / IDS / BL	URL	IP
2023-02-08 03:52:03 +0000	0 - 1 - 0	54.151.146.41/	54.151.146.41
2023-02-08 03:50:02 +0000	0 - 1 - 0	links.email.techsmithmail.com/els/v2/zW87Ckxr (...)	54.230.111.63
2023-02-08 03:45:00 +0000	0 - 0 - 1	download.findmysoft.com/2012/06/29/RndSkin_4. (...)	54.230.245.189
2023-02-08 03:42:31 +0000	0 - 0 - 1	thepiratebay.com.de/user/DickRiver	54.153.56.183
2023-02-08 03:42:57 +0000	0 - 2 - 0	download.findmysoft.com/2016/03/14/iDailyDiar (...)	54.230.245.17

Date	UQ / IDS / BL	URL	IP
2023-01-11 00:47:01 +0000	0 - 0 - 7	findher2date.com/tds/ae?tdsId=s0278yas_r&tds_ (...)	18.193.35.39
2022-12-04 10:27:49 +0000	0 - 0 - 1	findher2date.com/jump	54.93.66.131
2022-12-01 10:19:48 +0000	0 - 0 - 1	findher2date.com/tds/ae	54.93.66.131
2022-12-01 10:18:10 +0000	0 - 0 - 1	findher2date.com/jump	3.125.187.5
2022-11-29 19:13:10 +0000	0 - 0 - 1	findher2date.com/jump	54.93.66.131

Date	UQ / IDS / BL	URL	IP
2023-02-03 19:46:39 +0000	0 - 0 - 1	urdatingassistant.com/tds/ae	3.121.149.56
2023-01-28 13:53:17 +0000	0 - 0 - 1	findmycrushes.com/tds/ae	52.59.26.150
2023-01-22 20:43:43 +0000	0 - 0 - 1	goads.pro/tds/ae	3.66.64.17
2023-01-14 19:47:41 +0000	0 - 0 - 1	find-me-fuck.com/tds	3.66.82.41
2023-01-14 17:16:34 +0000	0 - 0 - 1	looking4fuck.com/tds	18.157.201.101

Request	Response
GET /tds/ae HTTP/1.1 Host: findher2date.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: findher2date.com/tds/ae FQDN: findher2date.com IP: 3.125.187.5 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 3.125.187.5 HTTP/1.1 302 Found Date: Mon, 28 Nov 2022 18:18:34 GMT Transfer-Encoding: chunked Connection: keep-alive Server: nginx Access-Control-Allow-Origin: * P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Accept-CH: UA, Platform, Model, Mobile, Arch Set-Cookie: dci=2987f244d39b4c9be546f7dd63394b1e50e60b22; Max-Age=31536000; Domain=.findher2date.com; Path=/; Expires=Tue, 28 Nov 2023 18:18:34 GMT; Secure; SameSite=None dm=fe450dd0d1dadc615429144d33241f42; Max-Age=432000; Path=/; Expires=Sat, 03 Dec 2022 18:18:34 GMT Location: https://findher2date.com/res_route/fback?s1=&s2=&s3=&s4=&s5=&s6=&s7=&s8=&tds_ac_id=&tds_cid=&tds_campaign=&utm_source=&utm_campaign=&utm_term=&tds_layer=ATE&tds_reason_code=TECH_UNKNOWN_CAMPAIGN --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2792 Expires: Mon, 28 Nov 2022 19:05:06 GMT Date: Mon, 28 Nov 2022 18:18:34 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 150792cfc458af013998f4ef6bdf5f74 Sha1: d5179b2dcb11d06f82606bf6eb6648319998d63e Sha256: 72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2915 Cache-Control: max-age=147682 Date: Mon, 28 Nov 2022 18:18:34 GMT Etag: "63848df9-1d7" Expires: Wed, 30 Nov 2022 11:19:56 GMT Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT Server: ECS (ska/F709) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 9408cc0694fcbea57966c3a3ba906092 Sha1: fddcee1fdcf3209298e41a4b1b5560357fa165f0 Sha256: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786" Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4923 Expires: Mon, 28 Nov 2022 19:40:37 GMT Date: Mon, 28 Nov 2022 18:18:34 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 71f9c681a82440fd55e76c780a20e55d Sha1: 3147768cfbcdd06e0c6e69684292e68e99917a80 Sha256: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 28 Nov 2022 17:19:32 GMT cache-control: public,max-age=3600 age: 3542 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: 4mVS3SN/SpYV8yH2lSqsWoTLaE1PkTEsQ8B6rmsVD0bbwdcZWBZHQUyiIEXVe7Acpoy1C3t0oq8= x-amz-request-id: Q2Y27GVVTWG28KFH content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 28 Nov 2022 17:45:07 GMT age: 2008 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 28 Nov 2022 18:18:35 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 143.204.42.165 HASH: 4acdced9fc708c93f30676dcb45a0d1aeade98117d66a2145867f3f1017ca005 143.204.42.165 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=137902 Date: Mon, 28 Nov 2022 18:18:35 GMT Etag: "63847329-1d7" Expires: Wed, 30 Nov 2022 08:36:57 GMT Last-Modified: Mon, 28 Nov 2022 08:36:57 GMT Server: nginx X-Cache: Miss from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: 8gD8WQdCQlpzgWwC_c2lSRDU_H66iyfX6cKFK4F6_9d_w0tm8nAkuA== --- Additional Info --- Magic: data Size: 471 Md5: 751f83072d6c6b9f9ee17302e420d4cc Sha1: c0002e5a72b421b13012c5b84e81a5ed54a27486 Sha256: 4acdced9fc708c93f30676dcb45a0d1aeade98117d66a2145867f3f1017ca005
GET /res_route/fback?s1=&s2=&s3=&s4=&s5=&s6=&s7=&s8=&tds_ac_id=&tds_cid=&tds_campaign=&utm_source=&utm_campaign=&utm_term=&tds_layer=ATE&tds_reason_code=TECH_UNKNOWN_CAMPAIGN HTTP/1.1 Host: findher2date.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: findher2date.com/res_route/fback?s1=&s2=&s3=&s4=&s5=&s6 (...) FQDN: findher2date.com IP: 54.93.66.131 HASH: 3fc0fbd5baebc9966029c9362a532698f7de479aa586a8b306826e9e952315be 54.93.66.131 HTTP/2 302 Found content-type: text/html; charset=utf-8 date: Mon, 28 Nov 2022 18:18:35 GMT content-length: 350 location: https://www.dirtytinder.club/c/8d2358ea43d0439d?s1=36_all_ng&s2=TECH_UNKNOWN_CAMPAIGN&s3=&s4=&s5=&s6=&s7=&s8=&utm_source= server: nginx x-powered-by: Express access-control-allow-origin: * vary: Accept, Accept-Encoding X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document, ASCII text, with very long lines (350), with no line terminators Size: 350 Md5: 67f0003da95624d577f7653bcd071724 Sha1: f8a6d804d1064054ca52cfc703b8f2c8f547ed92 Sha256: 3fc0fbd5baebc9966029c9362a532698f7de479aa586a8b306826e9e952315be
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 28 Nov 2022 18:08:55 GMT cache-control: public,max-age=3600 age: 580 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5091 Cache-Control: max-age=144791 Date: Mon, 28 Nov 2022 18:18:35 GMT Etag: "63847a2f-1d7" Expires: Wed, 30 Nov 2022 10:31:46 GMT Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT Server: ECS (ska/F709) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 7ab2ef968cb6a3078f4b9cb2dda813d4 Sha1: e669116047ca058a2c1b2999ff0ea8682719162c Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 143.204.42.165 HASH: 6f580f6acceb45898993c22de5a3ec230de6735906f90fd77130d4a19313deb5 143.204.42.165 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=114866 Date: Mon, 28 Nov 2022 18:18:35 GMT Etag: "6384192d-1d7" Expires: Wed, 30 Nov 2022 02:13:01 GMT Last-Modified: Mon, 28 Nov 2022 02:13:01 GMT Server: nginx X-Cache: Miss from cloudfront Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: 4ocW9noWd3fZ4zsnyAgQ0XPw33JXzo78AOxZbMs-HH3fbGSZJ_eqTQ== --- Additional Info --- Magic: data Size: 471 Md5: e1d56092b31771631a8088a7442d671a Sha1: f3c26dc0cc0aa95bb630595446bec05389cf04b3 Sha256: 6f580f6acceb45898993c22de5a3ec230de6735906f90fd77130d4a19313deb5
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: yV7huMFNqJOQAxRgFk+Bbg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.162.142.194 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.162.142.194 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: j/UINRVZGV766Rjyi+j81WlxYEA= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/8d2358ea43d0439d?s1=36_all_ng&s2=TECH_UNKNOWN_CAMPAIGN&s3=&s4=&s5=&s6=&s7=&s8=&utm_source= HTTP/1.1 Host: www.dirtytinder.club User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: www.dirtytinder.club/c/8d2358ea43d0439d?s1=36_all_ng&s2 (...) FQDN: www.dirtytinder.club IP: 18.196.9.157 HASH: 98142840586d889e9fb55dd47f8a5a3c77fae166d464617638b49f10128816a3 18.196.9.157 HTTP/2 302 Found content-type: text/html; charset=utf-8 date: Mon, 28 Nov 2022 18:18:35 GMT content-length: 316 location: https://www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UuaW1wcmVzc2x2ZWRhdGVzLmNvbS9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1vdWprcTYzODRmYjdiMDAwMDBiNmUmajE9MSZqOT0x&action=action_tmp server: nginx set-cookie: unique_id=6384fb7b000433da; Path=/; Expires=Fri, 27 Jan 2023 18:18:35 GMT; Secure; SameSite=None unique_id2=6384fb7b00043c80; Path=/; Expires=Sun, 26 Feb 2023 18:18:35 GMT; Secure; SameSite=None impression=; Path=/; Expires=Mon, 28 Nov 2022 18:18:35 GMT; Secure; SameSite=None tid=oujkq6384fb7b00000b6e; Path=/; Expires=Tue, 02 Nov 2027 18:18:35 GMT; Secure; SameSite=None X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document, ASCII text, with very long lines (314) Size: 316 Md5: 297aa0bf961beb4c20401567decff225 Sha1: 8d974df2818a62eae294755f10b690ba6a117516 Sha256: 98142840586d889e9fb55dd47f8a5a3c77fae166d464617638b49f10128816a3
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 172.64.155.188 HASH: 0493f706c24390b6a3f6dbbb19fcc44d4e0a0fb4de96d5887c0d9ee6a2a4d4cf 172.64.155.188 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 18:18:36 GMT Content-Length: 471 Connection: keep-alive Last-Modified: Sun, 27 Nov 2022 23:00:40 GMT Expires: Sun, 04 Dec 2022 23:00:39 GMT Etag: "64946db67a8e5ecda75c3916063392c31514ec0c" Cache-Control: max-age=534722,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb5 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 77151b672ac00b45-OSL --- Additional Info --- Magic: data Size: 471 Md5: cca2ab26d10dc195e5f9710d19b771ce Sha1: 64946db67a8e5ecda75c3916063392c31514ec0c Sha256: 0493f706c24390b6a3f6dbbb19fcc44d4e0a0fb4de96d5887c0d9ee6a2a4d4cf
GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UuaW1wcmVzc2x2ZWRhdGVzLmNvbS9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1vdWprcTYzODRmYjdiMDAwMDBiNmUmajE9MSZqOT0x&action=action_tmp HTTP/1.1 Host: www.redir2fuck.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: www.redir2fuck.com/redirect/index?type=script&to=aHR0cH (...) FQDN: www.redir2fuck.com IP: 52.19.101.114 HASH: 09101c4b3c8463a794fc7ab82066f7b09d5956be3f43728a82a476e0595531ca 52.19.101.114 HTTP/2 200 OK content-type: text/html; charset=utf-8 server: nginx date: Mon, 28 Nov 2022 18:18:36 GMT content-length: 295 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document, ASCII text, with no line terminators Size: 295 Md5: 6dc8907a9b7fe34062a829d7f42fd713 Sha1: d9811e6a43097a68c914e072fb0273b30f786b87 Sha256: 09101c4b3c8463a794fc7ab82066f7b09d5956be3f43728a82a476e0595531ca
GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UuaW1wcmVzc2x2ZWRhdGVzLmNvbS9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1vdWprcTYzODRmYjdiMDAwMDBiNmUmajE9MSZqOT0x&action=action_final HTTP/1.1 Host: www.redir2fuck.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UuaW1wcmVzc2x2ZWRhdGVzLmNvbS9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1vdWprcTYzODRmYjdiMDAwMDBiNmUmajE9MSZqOT0x&action=action_tmp Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin TE: trailers	URL: www.redir2fuck.com/redirect/index?type=script&to=aHR0cH (...) FQDN: www.redir2fuck.com IP: 52.19.101.114 HASH: 5aab80d177d6b4b14787640a15c7232573884f4e1c1ba961c9e1d0c0f7f12e9c 52.19.101.114 HTTP/2 200 OK content-type: text/html; charset=utf-8 server: nginx date: Mon, 28 Nov 2022 18:18:36 GMT content-length: 161 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document, ASCII text, with no line terminators Size: 161 Md5: 1ff0479b009fe678820803e01ad61d2d Sha1: 25775f17bab7d791fdc9e645421dc8b379e9d9de Sha256: 5aab80d177d6b4b14787640a15c7232573884f4e1c1ba961c9e1d0c0f7f12e9c
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: dc1dfdb0403b8045946eb18a899a224a703b4c7089c11eced0725e1e0d404bbb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "DC1DFDB0403B8045946EB18A899A224A703B4C7089C11ECED0725E1E0D404BBB" Last-Modified: Sat, 26 Nov 2022 13:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12973 Expires: Mon, 28 Nov 2022 21:54:49 GMT Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1aab9ff0e56ae9f396399c7bc506eed1 Sha1: 17bf62e4bb57c5d0dd6cb0ff1c8b44b42eac8959 Sha256: dc1dfdb0403b8045946eb18a899a224a703b4c7089c11eced0725e1e0d404bbb
GET /landings/212225/1624025125/js/jquery.validate.min.js?1624025125 HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/js/jq (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: 21e11160c5ba11e65a1c97b0306a9f5dec06c8fd3d4a7d69dd0a80e263577958 184.31.15.67 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: x0n88vy6R42RaV/564yya+rciGgXVcQvshv7BBD+QqFLxydxKP4YN3T5glF0YCxYX1XDiujp19w= x-amz-request-id: 76SPH51FAFYCDKPA Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT ETag: "23d73c6bd6cbea8f06d0cc227896a827" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Mon, 28 Nov 2022 18:18:36 GMT Content-Length: 7815 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (24228) Size: 7815 Md5: f808399407c6ac496fe830d5deacb05f Sha1: 151039ee8631ce8ff989c5cf795c2feba950a499 Sha256: 21e11160c5ba11e65a1c97b0306a9f5dec06c8fd3d4a7d69dd0a80e263577958
GET /landings/212225/1624025125/js/trls.js?1624025125 HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/js/tr (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: 95390457c7424017fadc461ca9ab9ad441f3fc2f96fb70e7b69ea333cf460a55 184.31.15.67 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: bEDMW+4uYXQPwp93E6hYipGoikvYukxCW1jf3CF2FDbC2bufMmZoIbFJeitROyv5M+AHZbFBmeE= x-amz-request-id: 76SN3BPGWTYB3T7P Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT ETag: "1f2a63d62e50fb3ea9b5bdfd69c66411" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Mon, 28 Nov 2022 18:18:36 GMT Content-Length: 12875 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 12875 Md5: 7c49093e0da4cde7c10e6eaeb5db33e8 Sha1: 8335e795d1fa1d5a59aad88a9f23a8bb43a09986 Sha256: 95390457c7424017fadc461ca9ab9ad441f3fc2f96fb70e7b69ea333cf460a55
GET /landings/212225/1624025125/css/css2.css?1624025125 HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/css/c (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: edd01a5eba971514bdb2bdac264929d7cc99b67d7b2d3999bb4f57c82a1a986b 184.31.15.67 HTTP/1.1 200 OK Content-Type: text/css x-amz-id-2: +P7HmwoyklT5lBsWZZv8dRfONDR5sFbboGSfNKeGGuNgxzrvRIj5nqW9OadQJ+qU+0ZavuZXcfU= x-amz-request-id: 3SRH1EH4G0K4GEFB Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT ETag: "71422cc0c98c0f0d038113e2c0f4fc74" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 478 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text Size: 478 Md5: 71422cc0c98c0f0d038113e2c0f4fc74 Sha1: 8cb475413b46c087e604adcbf6e0dcd7b3e4f1ae Sha256: edd01a5eba971514bdb2bdac264929d7cc99b67d7b2d3999bb4f57c82a1a986b
GET /landings/212225/1624025125/css/main.css?1624025125 HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/css/m (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: c8aff816800155d1460ec0dbce2c4ea158df479388e1f276e06514ab28d2bc2b 184.31.15.67 HTTP/1.1 200 OK Content-Type: text/css x-amz-id-2: dGUFAMVBkOQ2M09fPhZ1Ma8w2Xy1XvKCfgRZ8AuwChumab2SGLxJ/MaaDA5FdXypzEIBQ1OFg34= x-amz-request-id: 3SRVVYPBVS1113MX Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT ETag: "e8ad0d5112ebc38ccffa906a88480571" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Mon, 28 Nov 2022 18:18:36 GMT Content-Length: 1438 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: assembler source, ASCII text Size: 1438 Md5: 8df101b94d92ec02934a35a76b709de6 Sha1: d76437a536afe0430c9d6a765841de9eeb50a448 Sha256: c8aff816800155d1460ec0dbce2c4ea158df479388e1f276e06514ab28d2bc2b
GET /landings/212225/1624025125/js/script.js?1624025125 HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/js/sc (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: ee31e979a2410b8968bbfa00dbc3a6f2fb870562da1ac4315054da1a6c14eba0 184.31.15.67 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: 9v4LI0Nf/QJJk1CdEv3RcXP+gaGX0x+GvEWprsUgwN9MHr/m5kCGlZEi1P6bQ42YQFXAMUEd4PA= x-amz-request-id: 76SV05V07173EPSM Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT ETag: "7088a812e48fb5ed8602225eddbac48f" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 145 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 145 Md5: 7088a812e48fb5ed8602225eddbac48f Sha1: 4ab069794875538586cdbb1a924333a037e630d1 Sha256: ee31e979a2410b8968bbfa00dbc3a6f2fb870562da1ac4315054da1a6c14eba0
GET /landings/212225/1624025125/js/jquery-2.2.4.min.js?1624025125 HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/js/jq (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: 97d25af867afe95682e66a2d01f9c5e2f085df402403671e6ba885f49a1e03be 184.31.15.67 HTTP/1.1 200 OK Content-Type: text/javascript x-amz-id-2: iGCeVFed+qRt5/WMxWkRwGf/gH1XJWT9G/wuX8FMV9kjQEmQ+TKNro5xNmWT1F7vjK1rbeV2n2g= x-amz-request-id: 3SRP1WXFV252M78E Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT ETag: "61a04f254179208c931ebf40f4cfddf5" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Content-Encoding: gzip Date: Mon, 28 Nov 2022 18:18:36 GMT Content-Length: 36023 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text, with very long lines (530), with CRLF line terminators Size: 36023 Md5: 378507f30ab981ba7c512e07d134caaf Sha1: dd17d6f540df83bab63921deda1b9462a5047c00 Sha256: 97d25af867afe95682e66a2d01f9c5e2f085df402403671e6ba885f49a1e03be
GET /landings/212225/1624025125/images/filter.png HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: ad282a1099717f016062356106530897020924d9e92f613a21f2c305059184f8 184.31.15.67 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: 6eh5do1b8hgTeOza38mZfW8wgPNOd77OHhj5QOvCkmuRXAHd3sggs6UfTfbV6M2Kt838nKJuYCM= x-amz-request-id: G2Z4PE5JF8DVJFA5 Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "9c15c9a0a02ff49660d3c31f5c190b99" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 621 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 38 x 33, 8-bit colormap, non-interlaced\012- data Size: 621 Md5: 9c15c9a0a02ff49660d3c31f5c190b99 Sha1: 54c7501b9dfb865b87cd496e692779609bdc03bf Sha256: ad282a1099717f016062356106530897020924d9e92f613a21f2c305059184f8
GET /landings/212225/1624025125/css/css2.css HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cdn-dimi.akamaized.net/landings/212225/1624025125/css/main.css?1624025125 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/css/c (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: edd01a5eba971514bdb2bdac264929d7cc99b67d7b2d3999bb4f57c82a1a986b 184.31.15.67 HTTP/1.1 200 OK Content-Type: text/css x-amz-id-2: +P7HmwoyklT5lBsWZZv8dRfONDR5sFbboGSfNKeGGuNgxzrvRIj5nqW9OadQJ+qU+0ZavuZXcfU= x-amz-request-id: 3SRH1EH4G0K4GEFB Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT ETag: "71422cc0c98c0f0d038113e2c0f4fc74" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 478 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: ASCII text Size: 478 Md5: 71422cc0c98c0f0d038113e2c0f4fc74 Sha1: 8cb475413b46c087e604adcbf6e0dcd7b3e4f1ae Sha256: edd01a5eba971514bdb2bdac264929d7cc99b67d7b2d3999bb4f57c82a1a986b
GET /landings/212225/1624025125/images/btn.png HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: 75941932fdfac80826ee9f5516cd038ed9233b6e377c8daf3440a90aa4b0ccc3 184.31.15.67 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: qS2r5FFQMtAGAH23af0BXqmzGu3JWD1tTH4mc4+4fujcUy6S3Dms9YqNpNpupX0Q58dps+7UyRQ= x-amz-request-id: G2ZEVQSE2KW3W5TF Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "c90d93be7b9e2e55e87b9d58d3589721" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 876 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 55 x 55, 8-bit colormap, non-interlaced\012- data Size: 876 Md5: c90d93be7b9e2e55e87b9d58d3589721 Sha1: 951a4e7d04ec68e711196b3c9db68bce699f7f89 Sha256: 75941932fdfac80826ee9f5516cd038ed9233b6e377c8daf3440a90aa4b0ccc3
GET /landings/212225/1624025125/images/preview.jpg HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: c7c713b35f729a8e3246f80f666d8ff01233745653afee65ff603ab2d86fe9b5 184.31.15.67 HTTP/1.1 200 OK Content-Type: image/jpeg x-amz-id-2: +nHh7RkH0nutv1CA35z5OcqzIEFGocwQgk9KVJyOUbAiSWuTg5EJP9olbg5ef7NM90ctAxxWtCM= x-amz-request-id: VSQNNVA9AT56022K Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "f14e845449946d94336832c6a288b753" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 41399 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=257, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=257], progressive, precision 8, 257x257, components 3\012- data Size: 41399 Md5: f14e845449946d94336832c6a288b753 Sha1: 16b73762fe2dd8ffccbf8da97504a3bd4c4c396f Sha256: c7c713b35f729a8e3246f80f666d8ff01233745653afee65ff603ab2d86fe9b5
GET /landings/212225/1624025125/images/camera.png HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: 8a5920605debc2378688b502b33f55753fc099c17639d56c652981fc0442e57f 184.31.15.67 HTTP/1.1 200 OK Content-Type: image/png x-amz-id-2: +6sgPo4IwWDjLEpOourHrMnv1aGCfMHsbFzaIuTWVIa/h1JSb2utLt52SYBYiwI1colyaojeSqs= x-amz-request-id: VSQJ2R9W0GQP46WC Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "e6fc25af3843556766acc03739200472" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 521 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: PNG image data, 29 x 22, 8-bit colormap, non-interlaced\012- data Size: 521 Md5: e6fc25af3843556766acc03739200472 Sha1: 6aee49dbf2166cb5b0542fbe491d1b26da3f9e2c Sha256: 8a5920605debc2378688b502b33f55753fc099c17639d56c652981fc0442e57f
GET /landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://rgjgwe.impresslvedates.com Connection: keep-alive Referer: https://cdn-dimi.akamaized.net/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: 11af299d2fb378111a9be513d799b275e3a8ef811b06ad6802b4c041e1b0b6d5 184.31.15.67 HTTP/1.1 200 OK Content-Type: application/x-font-ttf x-amz-id-2: ikXxGD3V55TtP6jGVtUGbyHqUiHUqCgb3+gelfaqLxGkMURzm5+ptdLgvufLXjgWPv6+1e11TDc= x-amz-request-id: G2Z2ZQSPT2KV8EE2 Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "0d984acaec916c225c012f27d0c56a91" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 131916 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: TrueType Font data, 18 tables, 1st "GDEF"\012- data Size: 58062 Md5: 4c07173a3ab4db684feae997f0361516 Sha1: 3adb935da233afd9bd25c8ab1394999e07c2b7cb Sha256: 11af299d2fb378111a9be513d799b275e3a8ef811b06ad6802b4c041e1b0b6d5
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 18:18:37 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: cd0a5be4865b85e858cfcaafa90f8dca Sha1: 122569d314b0900b1f5e5f58cdad0d9fc16b7e1b Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 18:18:37 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: cd0a5be4865b85e858cfcaafa90f8dca Sha1: 122569d314b0900b1f5e5f58cdad0d9fc16b7e1b Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
GET /landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://rgjgwe.impresslvedates.com Connection: keep-alive Referer: https://cdn-dimi.akamaized.net/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Range: bytes=50572- If-Range: "0d984acaec916c225c012f27d0c56a91"	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: 65d6fbc5bb6bf4aa51c0ba78463e79dc0343568ac787807588bf62cf87cfe492 184.31.15.67 HTTP/1.1 206 Partial Content Content-Type: application/x-font-ttf x-amz-id-2: ikXxGD3V55TtP6jGVtUGbyHqUiHUqCgb3+gelfaqLxGkMURzm5+ptdLgvufLXjgWPv6+1e11TDc= x-amz-request-id: G2Z2ZQSPT2KV8EE2 Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "0d984acaec916c225c012f27d0c56a91" Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 28 Nov 2022 18:18:36 GMT Content-Range: bytes 50572-131915/131916 Content-Length: 81344 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: data Size: 114476 Md5: 6a97e49f5a88d0ba71eebcad73b2d4f8 Sha1: 28255d5718473866e1ec592bb9dad7a4a51fd661 Sha256: 65d6fbc5bb6bf4aa51c0ba78463e79dc0343568ac787807588bf62cf87cfe492
GET /firebasejs/5.0.2/firebase-messaging.js HTTP/1.1 Host: www.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js FQDN: www.gstatic.com IP: 142.250.74.163 HASH: 655daa1e20bf3aff16bc8462339dfea48c7ea5d3dd3505937015af3586d15fb7 142.250.74.163 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js cross-origin-resource-policy: cross-origin cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="firebase-js" report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]} content-length: 10017 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Mon, 21 Nov 2022 18:29:53 GMT expires: Tue, 21 Nov 2023 18:29:53 GMT cache-control: public, max-age=31536000 age: 604124 last-modified: Thu, 10 May 2018 20:35:52 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (35547) Size: 10017 Md5: fa9987a23f5a9d865766e952511baa30 Sha1: f2e620b99ee61a01671ba6a9e22ca75d58a1b52d Sha256: 655daa1e20bf3aff16bc8462339dfea48c7ea5d3dd3505937015af3586d15fb7
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 28 Nov 2022 18:18:37 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: cd0a5be4865b85e858cfcaafa90f8dca Sha1: 122569d314b0900b1f5e5f58cdad0d9fc16b7e1b Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8177 Expires: Mon, 28 Nov 2022 20:34:54 GMT Date: Mon, 28 Nov 2022 18:18:37 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8177 Expires: Mon, 28 Nov 2022 20:34:54 GMT Date: Mon, 28 Nov 2022 18:18:37 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8177 Expires: Mon, 28 Nov 2022 20:34:54 GMT Date: Mon, 28 Nov 2022 18:18:37 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4803 x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iFHoIAMF2-g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg== via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 22:25:51 GMT age: 71566 etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4803 Md5: cc0a257323f882caff067adb86d906e4 Sha1: cedf2f21be7cd366bd46055b62b5513db3011dfc Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10199 x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iF1VIAMF09g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:51:43 GMT age: 73614 etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10199 Md5: 2cd887044e91d7ed0f1a8d7119ff7dd0 Sha1: ae8aa4ce6ddaccba771fe65446926b60fc5628da Sha256: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7556 x-amzn-requestid: 1cda5313-2256-4830-bf84-2e6e15949d3e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cR78KFTmoAMF4yg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6383d9e7-452e36d718a298d12a2374a9;Sampled=0 x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: OWVkuAw6-nRNU_CVOgvsSSenSXnfSYSmJiKa60JvSaiJgPuXjJByZw== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 21:46:41 GMT age: 73916 etag: "1a542a53ba0b1cd0fb23257ebed8166555f16dfb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7556 Md5: 7e5051d8c06f69e1842a9295ce256a36 Sha1: 1a542a53ba0b1cd0fb23257ebed8166555f16dfb Sha256: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8885 x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cGDTEFSeIAMF3rg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google date: Mon, 28 Nov 2022 08:11:39 GMT age: 36418 etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8885 Md5: 3a1a4e00f1f15827cf651f373863c379 Sha1: 70c2a238f06ca7e56ef80c83738e081bf0de3330 Sha256: 3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=&click_id=oujkq6384fb7b00000b6e&j1=1&j9=1 HTTP/1.1 Host: rgjgwe.impresslvedates.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://www.redir2fuck.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: rgjgwe.impresslvedates.com/c/e2905f55ec3a568b?s1=138089 (...) FQDN: rgjgwe.impresslvedates.com IP: 52.19.101.114 HASH: 8c783291212daf340411ebb484345c758778f26ecd3c2a6724524484b24229b4 52.19.101.114 HTTP/2 200 OK content-type: text/html; charset=utf-8 server: nginx date: Mon, 28 Nov 2022 18:18:36 GMT set-cookie: unique_id=6384fb7c00030ce8; Path=/; Expires=Fri, 27 Jan 2023 18:18:36 GMT; Secure; SameSite=None unique_id2=638496ed00082b9d; Path=/; Expires=Sun, 26 Feb 2023 18:18:36 GMT; Secure; SameSite=None 638496ed00082b9d_c=1; Path=/; Expires=Sun, 26 Feb 2023 18:18:36 GMT; Secure; SameSite=None ref_token=138089; Path=/; Expires=Wed, 28 Dec 2022 18:18:36 GMT; Secure; SameSite=None impression=; Path=/; Expires=Mon, 28 Nov 2022 18:18:36 GMT; Secure; SameSite=None 638496ed00082b9d_sl=[212225]; Path=/; Expires=Mon, 12 Dec 2022 18:18:36 GMT; Secure; SameSite=None content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 11916 Md5: 5aab41ed53e3a305ad7a61ddfba7af7e Sha1: c71ac353d3c1adcf31b8fa4069a12ea52fc008c5 Sha256: 8c783291212daf340411ebb484345c758778f26ecd3c2a6724524484b24229b4
GET /landings/212225/1624025125/images/KFOlCnqEu92Fr1MmWUlvAw.ttf HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://rgjgwe.impresslvedates.com Connection: keep-alive Referer: https://cdn-dimi.akamaized.net/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 HASH: d06bcee06c1f27a491f64c972154116dba53d33e4b7a14a334b126192f7238e5 184.31.15.67 HTTP/1.1 200 OK Content-Type: application/x-font-ttf x-amz-id-2: JjY7K3ACjyfHw8f0c40KEvr8Bw+EmjghFjhoCYFuJQ6seGXl896FqCkW90D6EPjHiI4hbmKrOb8= x-amz-request-id: G2Z6J4CSDXVWPY0W Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "74bc6165dc68714ccaa88f5c64656b1c" Accept-Ranges: bytes Server: AmazonS3 Content-Length: 131008 Date: Mon, 28 Nov 2022 18:18:36 GMT Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info --- Magic: TrueType Font data, 18 tables, 1st "GDEF"\012- data Size: 61142 Md5: 85889b522716677f39fb3eec39c7795c Sha1: 4722eecdbc9d74275ffa1e733cfb6ae7b46501ac Sha256: d06bcee06c1f27a491f64c972154116dba53d33e4b7a14a334b126192f7238e5
GET /js/service-worker.js HTTP/1.1 Host: rgjgwe.impresslvedates.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Service-Worker: script Connection: keep-alive Cookie: unique_id=6384fb7c00030ce8; unique_id2=638496ed00082b9d; 638496ed00082b9d_c=1; ref_token=138089; 638496ed00082b9d_sl=[212225] Sec-Fetch-Dest: serviceworker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers	URL: rgjgwe.impresslvedates.com/js/service-worker.js FQDN: rgjgwe.impresslvedates.com IP: 52.19.101.114 52.19.101.114 HTTP/2 200 OK content-type: application/javascript server: nginx date: Mon, 28 Nov 2022 18:18:36 GMT expires: Mon, 05 Dec 2022 18:18:36 GMT cache-control: max-age=604800 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /landings/212225/1624025125/images/bg.mp4 HTTP/1.1 Host: cdn-dimi.akamaized.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: video/webm,video/ogg,video/;q=0.9,application/ogg;q=0.7,audio/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=0- Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/ Sec-Fetch-Dest: video Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn-dimi.akamaized.net/landings/212225/1624025125/image (...) FQDN: cdn-dimi.akamaized.net IP: 184.31.15.67 184.31.15.67 HTTP/1.1 206 Partial Content Content-Type: video/mp4 x-amz-id-2: PYCeh/fcpOLFMxwp+WjJrLuyZWn0W+QEBQxTdDCG8v368APnG/m0oked+OngdOIureCe7kW4K0g= x-amz-request-id: YNQGNQF9RNKBV33G Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT ETag: "cc4714e8b4e4c5fec9b05bafaeb508d5" Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 28 Nov 2022 18:18:36 GMT Content-Range: bytes 0-3823843/3823844 Content-Length: 3823844 Connection: keep-alive Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" --- Additional Info ---
GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1 Host: rgjgwe.impresslvedates.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://rgjgwe.impresslvedates.com/c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=backuser&click_id=oujkq6384fb7b00000b6e&iexpp=1&j1=1&j9=1 Cookie: unique_id=6384fb7c00030ce8; unique_id2=638496ed00082b9d; 638496ed00082b9d_c=1; ref_token=138089; 638496ed00082b9d_sl=[212225] Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: rgjgwe.impresslvedates.com/js/pushjs/1.0.0/subscriber.js FQDN: rgjgwe.impresslvedates.com IP: 52.19.101.114 52.19.101.114 HTTP/2 200 OK content-type: application/javascript server: nginx date: Mon, 28 Nov 2022 18:18:36 GMT expires: Mon, 05 Dec 2022 18:18:36 GMT cache-control: max-age=604800 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 2915 

                                        
                                            
Cache-Control: max-age=147682 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:34 GMT 

                                        
                                            
Etag: "63848df9-1d7" 

                                        
                                            
Expires: Wed, 30 Nov 2022 11:19:56 GMT 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT 

                                        
                                            
Server: ECS (ska/F709) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    9408cc0694fcbea57966c3a3ba906092

                                                Sha1:   fddcee1fdcf3209298e41a4b1b5560357fa165f0

                                                Sha256: 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Mon, 28 Nov 2022 17:19:32 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 3542 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    14cd9a0afb6ba9a763651d5112760d1e

                                                Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

                                                Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 18:18:35 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /res_route/fback?s1=&s2=&s3=&s4=&s5=&s6=&s7=&s8=&tds_ac_id=&tds_cid=&tds_campaign=&utm_source=&utm_campaign=&utm_term=&tds_layer=ATE&tds_reason_code=TECH_UNKNOWN_CAMPAIGN HTTP/1.1 

                                        
                                            
Host: findher2date.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         54.93.66.131

                                        
                                            HTTP/2 302 Found 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
date: Mon, 28 Nov 2022 18:18:35 GMT 

                                        
                                            
content-length: 350 

                                        
                                            
location: https://www.dirtytinder.club/c/8d2358ea43d0439d?s1=36_all_ng&s2=TECH_UNKNOWN_CAMPAIGN&s3=&s4=&s5=&s6=&s7=&s8=&utm_source= 

                                        
                                            
server: nginx 

                                        
                                            
x-powered-by: Express 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
vary: Accept, Accept-Encoding 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document, ASCII text, with very long lines (350), with no line terminators

                                                Size:   350

                                                Md5:    67f0003da95624d577f7653bcd071724

                                                Sha1:   f8a6d804d1064054ca52cfc703b8f2c8f547ed92

                                                Sha256: 3fc0fbd5baebc9966029c9362a532698f7de479aa586a8b306826e9e952315be

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 5091 

                                        
                                            
Cache-Control: max-age=144791 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:35 GMT 

                                        
                                            
Etag: "63847a2f-1d7" 

                                        
                                            
Expires: Wed, 30 Nov 2022 10:31:46 GMT 

                                        
                                            
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT 

                                        
                                            
Server: ECS (ska/F709) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    7ab2ef968cb6a3078f4b9cb2dda813d4

                                                Sha1:   e669116047ca058a2c1b2999ff0ea8682719162c

                                                Sha256: 6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: yV7huMFNqJOQAxRgFk+Bbg== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         35.162.142.194

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: j/UINRVZGV766Rjyi+j81WlxYEA= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.sectigo.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         172.64.155.188

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Content-Length: 471 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Sun, 27 Nov 2022 23:00:40 GMT 

                                        
                                            
Expires: Sun, 04 Dec 2022 23:00:39 GMT 

                                        
                                            
Etag: "64946db67a8e5ecda75c3916063392c31514ec0c" 

                                        
                                            
Cache-Control: max-age=534722,s-maxage=1800,public,no-transform,must-revalidate 

                                        
                                            
X-CCACDN-Proxy-ID: mcdpinlb5 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 77151b672ac00b45-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    cca2ab26d10dc195e5f9710d19b771ce

                                                Sha1:   64946db67a8e5ecda75c3916063392c31514ec0c

                                                Sha256: 0493f706c24390b6a3f6dbbb19fcc44d4e0a0fb4de96d5887c0d9ee6a2a4d4cf

                                        
                                            GET /redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UuaW1wcmVzc2x2ZWRhdGVzLmNvbS9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1vdWprcTYzODRmYjdiMDAwMDBiNmUmajE9MSZqOT0x&action=action_final HTTP/1.1 

                                        
                                            
Host: www.redir2fuck.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.redir2fuck.com/redirect/index?type=script&to=aHR0cHM6Ly93d3cucmVkaXIyZnVjay5jb20=&data=aHR0cHM6Ly9yZ2pnd2UuaW1wcmVzc2x2ZWRhdGVzLmNvbS9jL2UyOTA1ZjU1ZWMzYTU2OGI/czE9MTM4MDg5JnMyPTEzMTA5MDYmczM9JnM1PSZjbGlja19pZD1vdWprcTYzODRmYjdiMDAwMDBiNmUmajE9MSZqOT0x&action=action_tmp 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         52.19.101.114

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
content-length: 161 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document, ASCII text, with no line terminators

                                                Size:   161

                                                Md5:    1ff0479b009fe678820803e01ad61d2d

                                                Sha1:   25775f17bab7d791fdc9e645421dc8b379e9d9de

                                                Sha256: 5aab80d177d6b4b14787640a15c7232573884f4e1c1ba961c9e1d0c0f7f12e9c

                                        
                                            GET /landings/212225/1624025125/js/jquery.validate.min.js?1624025125 HTTP/1.1 

                                        
                                            
Host: cdn-dimi.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://rgjgwe.impresslvedates.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         184.31.15.67

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/javascript

                                        

                                        
                                            
x-amz-id-2: x0n88vy6R42RaV/564yya+rciGgXVcQvshv7BBD+QqFLxydxKP4YN3T5glF0YCxYX1XDiujp19w= 

                                        
                                            
x-amz-request-id: 76SPH51FAFYCDKPA 

                                        
                                            
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT 

                                        
                                            
ETag: "23d73c6bd6cbea8f06d0cc227896a827" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Content-Length: 7815 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 text, with very long lines (24228)

                                                Size:   7815

                                                Md5:    f808399407c6ac496fe830d5deacb05f

                                                Sha1:   151039ee8631ce8ff989c5cf795c2feba950a499

                                                Sha256: 21e11160c5ba11e65a1c97b0306a9f5dec06c8fd3d4a7d69dd0a80e263577958

                                        
                                            GET /landings/212225/1624025125/css/css2.css?1624025125 HTTP/1.1 

                                        
                                            
Host: cdn-dimi.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://rgjgwe.impresslvedates.com/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         184.31.15.67

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
x-amz-id-2: +P7HmwoyklT5lBsWZZv8dRfONDR5sFbboGSfNKeGGuNgxzrvRIj5nqW9OadQJ+qU+0ZavuZXcfU= 

                                        
                                            
x-amz-request-id: 3SRH1EH4G0K4GEFB 

                                        
                                            
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT 

                                        
                                            
ETag: "71422cc0c98c0f0d038113e2c0f4fc74" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 478 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   478

                                                Md5:    71422cc0c98c0f0d038113e2c0f4fc74

                                                Sha1:   8cb475413b46c087e604adcbf6e0dcd7b3e4f1ae

                                                Sha256: edd01a5eba971514bdb2bdac264929d7cc99b67d7b2d3999bb4f57c82a1a986b

                                        
                                            GET /landings/212225/1624025125/js/script.js?1624025125 HTTP/1.1 

                                        
                                            
Host: cdn-dimi.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://rgjgwe.impresslvedates.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         184.31.15.67

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/javascript

                                        

                                        
                                            
x-amz-id-2: 9v4LI0Nf/QJJk1CdEv3RcXP+gaGX0x+GvEWprsUgwN9MHr/m5kCGlZEi1P6bQ42YQFXAMUEd4PA= 

                                        
                                            
x-amz-request-id: 76SV05V07173EPSM 

                                        
                                            
Last-Modified: Fri, 18 Jun 2021 14:05:28 GMT 

                                        
                                            
ETag: "7088a812e48fb5ed8602225eddbac48f" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 145 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with CRLF line terminators

                                                Size:   145

                                                Md5:    7088a812e48fb5ed8602225eddbac48f

                                                Sha1:   4ab069794875538586cdbb1a924333a037e630d1

                                                Sha256: ee31e979a2410b8968bbfa00dbc3a6f2fb870562da1ac4315054da1a6c14eba0

                                        
                                            GET /landings/212225/1624025125/images/filter.png HTTP/1.1 

                                        
                                            
Host: cdn-dimi.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://rgjgwe.impresslvedates.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         184.31.15.67

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
x-amz-id-2: 6eh5do1b8hgTeOza38mZfW8wgPNOd77OHhj5QOvCkmuRXAHd3sggs6UfTfbV6M2Kt838nKJuYCM= 

                                        
                                            
x-amz-request-id: G2Z4PE5JF8DVJFA5 

                                        
                                            
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT 

                                        
                                            
ETag: "9c15c9a0a02ff49660d3c31f5c190b99" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 621 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 38 x 33, 8-bit colormap, non-interlaced\012- data

                                                Size:   621

                                                Md5:    9c15c9a0a02ff49660d3c31f5c190b99

                                                Sha1:   54c7501b9dfb865b87cd496e692779609bdc03bf

                                                Sha256: ad282a1099717f016062356106530897020924d9e92f613a21f2c305059184f8

                                        
                                            GET /landings/212225/1624025125/images/btn.png HTTP/1.1 

                                        
                                            
Host: cdn-dimi.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://rgjgwe.impresslvedates.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         184.31.15.67

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
x-amz-id-2: qS2r5FFQMtAGAH23af0BXqmzGu3JWD1tTH4mc4+4fujcUy6S3Dms9YqNpNpupX0Q58dps+7UyRQ= 

                                        
                                            
x-amz-request-id: G2ZEVQSE2KW3W5TF 

                                        
                                            
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT 

                                        
                                            
ETag: "c90d93be7b9e2e55e87b9d58d3589721" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 876 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 55 x 55, 8-bit colormap, non-interlaced\012- data

                                                Size:   876

                                                Md5:    c90d93be7b9e2e55e87b9d58d3589721

                                                Sha1:   951a4e7d04ec68e711196b3c9db68bce699f7f89

                                                Sha256: 75941932fdfac80826ee9f5516cd038ed9233b6e377c8daf3440a90aa4b0ccc3

                                        
                                            GET /landings/212225/1624025125/images/camera.png HTTP/1.1 

                                        
                                            
Host: cdn-dimi.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://rgjgwe.impresslvedates.com/ 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         184.31.15.67

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
x-amz-id-2: +6sgPo4IwWDjLEpOourHrMnv1aGCfMHsbFzaIuTWVIa/h1JSb2utLt52SYBYiwI1colyaojeSqs= 

                                        
                                            
x-amz-request-id: VSQJ2R9W0GQP46WC 

                                        
                                            
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT 

                                        
                                            
ETag: "e6fc25af3843556766acc03739200472" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Content-Length: 521 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 29 x 22, 8-bit colormap, non-interlaced\012- data

                                                Size:   521

                                                Md5:    e6fc25af3843556766acc03739200472

                                                Sha1:   6aee49dbf2166cb5b0542fbe491d1b26da3f9e2c

                                                Sha256: 8a5920605debc2378688b502b33f55753fc099c17639d56c652981fc0442e57f

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:37 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    cd0a5be4865b85e858cfcaafa90f8dca

                                                Sha1:   122569d314b0900b1f5e5f58cdad0d9fc16b7e1b

                                                Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d

                                        
                                            GET /landings/212225/1624025125/images/KFOmCnqEu92Fr1Me5Q.ttf HTTP/1.1 

                                        
                                            
Host: cdn-dimi.akamaized.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://rgjgwe.impresslvedates.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://cdn-dimi.akamaized.net/ 

                                        
                                            
Sec-Fetch-Dest: font 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Range: bytes=50572- 

                                        
                                            
If-Range: "0d984acaec916c225c012f27d0c56a91"

                                         184.31.15.67

                                        
                                            HTTP/1.1 206 Partial Content 

                                        
                                            
Content-Type: application/x-font-ttf

                                        

                                        
                                            
x-amz-id-2: ikXxGD3V55TtP6jGVtUGbyHqUiHUqCgb3+gelfaqLxGkMURzm5+ptdLgvufLXjgWPv6+1e11TDc= 

                                        
                                            
x-amz-request-id: G2Z2ZQSPT2KV8EE2 

                                        
                                            
Last-Modified: Fri, 18 Jun 2021 14:05:27 GMT 

                                        
                                            
ETag: "0d984acaec916c225c012f27d0c56a91" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Server: AmazonS3 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
Content-Range: bytes 50572-131915/131916 

                                        
                                            
Content-Length: 81344 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43" 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   114476

                                                Md5:    6a97e49f5a88d0ba71eebcad73b2d4f8

                                                Sha1:   28255d5718473866e1ec592bb9dad7a4a51fd661

                                                Sha256: 65d6fbc5bb6bf4aa51c0ba78463e79dc0343568ac787807588bf62cf87cfe492

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:37 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    cd0a5be4865b85e858cfcaafa90f8dca

                                                Sha1:   122569d314b0900b1f5e5f58cdad0d9fc16b7e1b

                                                Sha256: 624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8177 

                                        
                                            
Expires: Mon, 28 Nov 2022 20:34:54 GMT 

                                        
                                            
Date: Mon, 28 Nov 2022 18:18:37 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4803 

                                        
                                            
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cOo4iFHoIAMF2-g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg== 

                                        
                                            
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 22:25:51 GMT 

                                        
                                            
age: 71566 

                                        
                                            
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4803

                                                Md5:    cc0a257323f882caff067adb86d906e4

                                                Sha1:   cedf2f21be7cd366bd46055b62b5513db3011dfc

                                                Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4908162-9f1d-4654-8d78-fe85386ce233.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7556 

                                        
                                            
x-amzn-requestid: 1cda5313-2256-4830-bf84-2e6e15949d3e 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cR78KFTmoAMF4yg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-6383d9e7-452e36d718a298d12a2374a9;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:03 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: OWVkuAw6-nRNU_CVOgvsSSenSXnfSYSmJiKa60JvSaiJgPuXjJByZw== 

                                        
                                            
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 21:46:41 GMT 

                                        
                                            
age: 73916 

                                        
                                            
etag: "1a542a53ba0b1cd0fb23257ebed8166555f16dfb" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7556

                                                Md5:    7e5051d8c06f69e1842a9295ce256a36

                                                Sha1:   1a542a53ba0b1cd0fb23257ebed8166555f16dfb

                                                Sha256: a7c0dbbb4d0d9138f5ca318cc2aa44e12dadf7ed6263ec204ba756da64b29c41

                                        
                                            GET /c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=&click_id=oujkq6384fb7b00000b6e&j1=1&j9=1 HTTP/1.1 

                                        
                                            
Host: rgjgwe.impresslvedates.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://www.redir2fuck.com/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         52.19.101.114

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
set-cookie: unique_id=6384fb7c00030ce8; Path=/; Expires=Fri, 27 Jan 2023 18:18:36 GMT; Secure; SameSite=None
unique_id2=638496ed00082b9d; Path=/; Expires=Sun, 26 Feb 2023 18:18:36 GMT; Secure; SameSite=None
638496ed00082b9d_c=1; Path=/; Expires=Sun, 26 Feb 2023 18:18:36 GMT; Secure; SameSite=None
ref_token=138089; Path=/; Expires=Wed, 28 Dec 2022 18:18:36 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Mon, 28 Nov 2022 18:18:36 GMT; Secure; SameSite=None
638496ed00082b9d_sl=[212225]; Path=/; Expires=Mon, 12 Dec 2022 18:18:36 GMT; Secure; SameSite=None 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   11916

                                                Md5:    5aab41ed53e3a305ad7a61ddfba7af7e

                                                Sha1:   c71ac353d3c1adcf31b8fa4069a12ea52fc008c5

                                                Sha256: 8c783291212daf340411ebb484345c758778f26ecd3c2a6724524484b24229b4

                                        
                                            GET /js/service-worker.js HTTP/1.1 

                                        
                                            
Host: rgjgwe.impresslvedates.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Service-Worker: script 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cookie: unique_id=6384fb7c00030ce8; unique_id2=638496ed00082b9d; 638496ed00082b9d_c=1; ref_token=138089; 638496ed00082b9d_sl=[212225] 

                                        
                                            
Sec-Fetch-Dest: serviceworker 

                                        
                                            
Sec-Fetch-Mode: same-origin 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
TE: trailers

                                         52.19.101.114

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
expires: Mon, 05 Dec 2022 18:18:36 GMT 

                                        
                                            
cache-control: max-age=604800 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1 

                                        
                                            
Host: rgjgwe.impresslvedates.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://rgjgwe.impresslvedates.com/c/e2905f55ec3a568b?s1=138089&s2=1310906&s3=&s5=backuser&click_id=oujkq6384fb7b00000b6e&iexpp=1&j1=1&j9=1 

                                        
                                            
Cookie: unique_id=6384fb7c00030ce8; unique_id2=638496ed00082b9d; 638496ed00082b9d_c=1; ref_token=138089; 638496ed00082b9d_sl=[212225] 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         52.19.101.114

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Mon, 28 Nov 2022 18:18:36 GMT 

                                        
                                            
expires: Mon, 05 Dec 2022 18:18:36 GMT 

                                        
                                            
cache-control: max-age=604800 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	findher2date.com/tds/ae
IP	54.93.66.131 (Germany)
ASN	#16509 AMAZON-02
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-28 18:18:45 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (17)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 54.93.66.131

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: findher2date.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Overview

Domain Summary (17)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 54.93.66.131

Last 5 reports on ASN: AMAZON-02

Last 5 reports on domain: findher2date.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (16)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Network Intrusion Detection Systems