craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fsl9p|0v7rxm|31pkanp|82534|0000rfsl9p|N|oTI2pzSxo3V=|PC|1lr5q75&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw
302 Found 404 B URL HTTP/1.1 craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fsl9p|0v7rxm|31pkanp|82534|0000rfsl9p|N|oTI2pzSxo3V=|PC|1lr5q75&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (332), with CRLF line terminators
Hash 8828866f7bed957b86131a5b0b380508
4487a0c22516f338f421ac17a0e8977822b58d51
aa86891671d7dd7a21f7a59cc27e86e4a8491da3c1ba3d977c636fbc425230fc
GET /?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fsl9p|0v7rxm|31pkanp|82534|0000rfsl9p|N|oTI2pzSxo3V=|PC|1lr5q75&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw HTTP/1.1
Host: craftrans.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Thu, 23 Feb 2023 11:06:33 GMT
content-type: text/html; charset=utf-8
content-length: 404
cache-control: private
location: https://craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fsl9p|0v7rxm|31pkanp|82534|0000rfsl9p|N|oTI2pzSxo3V=|PC|1lr5q75&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=41441802-db1d-40b3-952b-decc93680066
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 67fc460ed2f69dde3c410ec607ef3510
ba9f582ec321351e5c06c9b2c381f06b685ef274
85df74fac7d59d76840b6359bac24648fede201c0048f2a8382af6468225ffb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85DF74FAC7D59D76840B6359BAC24648FEDE201C0048F2A8382AF6468225FFB8"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12049
Expires: Thu, 23 Feb 2023 14:27:22 GMT
Date: Thu, 23 Feb 2023 11:06:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6f313739c4c44174fc9a97ac63621b46
319da68d06694330ad9f7901bcde1ca0a6eeac0d
321236ee07769c741890815bc56fd2700ff1974b0534368b9ff2e96320ae4fee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "321236EE07769C741890815BC56FD2700FF1974B0534368B9FF2E96320AE4FEE"
Last-Modified: Wed, 22 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3857
Expires: Thu, 23 Feb 2023 12:10:50 GMT
Date: Thu, 23 Feb 2023 11:06:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb59e5d3cdf08b94e5f41fdeb9aec6c
ff644039db3b9f74d7e2fab10f93581bea10614a
861573a00d75364e15783c5e448c4f8b4da48b38d9beba3ebd33a87f993489a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "861573A00D75364E15783C5E448C4F8B4DA48B38D9BEBA3EBD33A87F993489A5"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7766
Expires: Thu, 23 Feb 2023 13:15:59 GMT
Date: Thu, 23 Feb 2023 11:06:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Content-Length, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Feb 2023 10:53:56 GMT
content-type: application/json
age: 757
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: pL5Y+MdxeF+RmWFlCI8puVQ6l2a8Z+apGuh7lPjpK66NXPYJCOsapZL8fhdb5oJ/SNeLlKJkjIk=
x-amz-request-id: V38NFJXHQ1K8MC46
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Feb 2023 10:49:02 GMT
age: 1051
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:34 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash be3f02aff481bae0073c58f3dc4a1f77
d332ffa3ac06809e3cbced7961329f28b8295b7c
d16ca8ddd475881a3c0b7fb10197d9d1ef5e24159e12d82a8b4aa26c22437951
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Feb 2023 11:06:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 27 Feb 2023 09:25:02 GMT
ETag: "d332ffa3ac06809e3cbced7961329f28b8295b7c"
Last-Modified: Thu, 23 Feb 2023 09:25:03 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79df7e2b2c851bfe-OSL
craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fsl9p|0v7rxm|31pkanp|82534|0000rfsl9p|N|oTI2pzSxo3V=|PC|1lr5q75&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=41441802-db1d-40b3-952b-decc93680066
302 Found 401 B URL HTTP/1.1 craftrans.com/?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fsl9p|0v7rxm|31pkanp|82534|0000rfsl9p|N|oTI2pzSxo3V=|PC|1lr5q75&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=41441802-db1d-40b3-952b-decc93680066
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (329), with CRLF line terminators
Hash f7206636d26d572720150ee788e0d1ca
c7d0cfb326715cebbb1ccbb12a8ef1ac6b630562
c7e7ec7aef061a305d1e94ccc19100dcb874a8d9eb48590d14edb469b06dc41e
GET /?a=923&oc=15717&c=46739&m=3&s1=clctngmx__9704r1ebbd3d2d7338d22&s2=ye0re|GHWso3EbMKWm|fsl9p|0v7rxm|31pkanp|82534|0000rfsl9p|N|oTI2pzSxo3V=|PC|1lr5q75&s3=p3yyAwAzAmWyAmqvMQyzMy92oS9gnKu2oS8jpzIw&ckmguid=41441802-db1d-40b3-952b-decc93680066 HTTP/1.1
Host: craftrans.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
date: Thu, 23 Feb 2023 11:06:34 GMT
content-type: text/html; charset=utf-8
content-length: 401
cache-control: private
location: https://www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: som=+fvWmsgjZXPVMZ8KS1ro6MsoqH1hILOyTt2Wo9DObu1cgKOhv7Fw7g==; domain=.craftrans.com; path=/; HttpOnly
tib=w6h9KDzL1PzoagsfzR6WDMsoqH1hILOyTt2Wo9DObu1cgKOhv7Fw7g==; domain=.craftrans.com; expires=Sun, 23-Feb-2025 11:06:34 GMT; path=/; HttpOnly
c17185=+fvWmsgjZXOxupm+Xq7MSinymze6swsn/uWSKEeieVz63DbdZ7FYZg==; domain=.craftrans.com; expires=Sat, 25-Mar-2023 11:06:34 GMT; path=/; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Content-Length, Content-Type, Cache-Control, Pragma, Retry-After, ETag, Expires, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Feb 2023 10:20:35 GMT
age: 2759
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fa728a339ca32e616d483e61d0aebcd
6a63966de94d16390c8f1e47e5b67fe5bb67f7cd
7e83729d554404e59f1f1ff809ac776d3596487e2b062a1e38af8e29f33c0686
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E83729D554404E59F1F1FF809AC776D3596487E2B062A1E38AF8E29F33C0686"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11692
Expires: Thu, 23 Feb 2023 14:21:26 GMT
Date: Thu, 23 Feb 2023 11:06:34 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7ad9b9ac360fa90064f7db0bc374dda9
de572988d7b30ae27e7141e97c8ab18ba1e4285d
f93f5300ff967104566d78d94dfc38d977a4a54aa41ccd4e695c4d653a16eeb7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Feb 2023 11:06:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 21 Feb 2023 19:04:43 GMT
Expires: Tue, 28 Feb 2023 19:04:42 GMT
Etag: "de572988d7b30ae27e7141e97c8ab18ba1e4285d"
Cache-Control: max-age=460087,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79df7e2f6d9ab509-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Kk8rW56oSZmu93beM7c+DQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wIPJidkVORzbAltBZq7U+clBPzY=
www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
302 Found 20 B URL HTTP/2 www.dateukrainianwoman.com/index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /index.php/promote/click?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75 HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Thu, 23 Feb 2023 11:06:35 GMT
content-type: text/html; charset=UTF-8
content-length: 20
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
p3p: CP=CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR
set-cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; path=/
owner_id=CP281903; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
adv_id=2190; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
adv_type=1; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
subaffid=923; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
adv_ldp_id=CD384002; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
qpid_offer_id=DUW_839143TEEDK; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
website_id=187; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
referer=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
adv_click_history_id=680041339; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
qpid_click_id=295414690; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D; expires=Wed, 24-May-2023 11:06:35 GMT; path=/
location: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9167
Expires: Thu, 23 Feb 2023 13:39:23 GMT
Date: Thu, 23 Feb 2023 11:06:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9167
Expires: Thu, 23 Feb 2023 13:39:23 GMT
Date: Thu, 23 Feb 2023 11:06:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9167
Expires: Thu, 23 Feb 2023 13:39:23 GMT
Date: Thu, 23 Feb 2023 11:06:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cd04d923e6b3cbd7cac3c56d18ca9016
7d3205fb454124635afcbfcf2265ce504c778ef1
fc857fad800eb3c6f2a3f28007b1b81f2a95e4968d376f47238a681f9c958475
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC857FAD800EB3C6F2A3F28007B1B81F2A95E4968D376F47238A681F9C958475"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9167
Expires: Thu, 23 Feb 2023 13:39:23 GMT
Date: Thu, 23 Feb 2023 11:06:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7cd1e9feb9abc7f7d7f0d5fc7b181f0
cf3ce1808c48e1a86910e16731a044f6cb26275d
426c90298d5a0807b7820d803ce2907268df1195e15d5582eb0ff2f3deeb318c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7734
x-amzn-requestid: fe4dc342-33b6-45f6-984c-2c71dfa0ec13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-lGiJoAMFW3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f6-489049413f3cb63c537f20d0;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KyUqB4zqsHWgCv7C3-PymFep4oVmPy4ZHFf75lYOfWbb4qgvVRqoLg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:51:47 GMT
age: 47689
etag: "cf3ce1808c48e1a86910e16731a044f6cb26275d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdafc403d-ba8c-45cc-ba07-47b9b8673685.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdafc403d-ba8c-45cc-ba07-47b9b8673685.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f89fe2187067877f5d5808f1d50ec7cb
200aa55e7c88cbc90d9e4c62eb5ccbf1c14a0a6b
bb9819d00d58efbe26c0216e39ef78c0f25ad47e8ccbe9c5b169de9a324b0910
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdafc403d-ba8c-45cc-ba07-47b9b8673685.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6046
x-amzn-requestid: 2be82087-190d-4769-a112-34acec2c5d77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AkyHCEc-oAMFRoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f1ca2c-1921dab22ab9d3d762474b9e;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 07:05:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: vHIE13LN8sAqSE0R7hYwmRHgWTHKSOGHsFfvwjYDBo3CfhpHnQfhWg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 18:49:36 GMT
age: 58620
etag: "200aa55e7c88cbc90d9e4c62eb5ccbf1c14a0a6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0752d2b-baa6-43fe-9853-c2658724f5b7.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0752d2b-baa6-43fe-9853-c2658724f5b7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92d2c80b251bb51747853df99da38ca1
ad95ca2ec077179e3f9e7663a5121cf712828036
1dd23526abe0cd324f4e53ff13e1de599d8c54938c773cd856be7a1cecf5b954
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0752d2b-baa6-43fe-9853-c2658724f5b7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9586
x-amzn-requestid: 96df496a-e183-46f2-8c4c-5d3fa4bb6458
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AwqS9EKDoAMFt6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f68a79-2a16a6546a261fea3682a4b2;Sampled=0
x-amzn-remapped-date: Wed, 22 Feb 2023 21:34:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -G7CVDFZWQF8EZWghmCaae7zzYlFNiwcnkyDGSSqshdx_eWzeziZSQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:55:57 GMT
age: 47439
etag: "ad95ca2ec077179e3f9e7663a5121cf712828036"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e4016fa20fa2642f89d375fcc2855d4b
f1733be34a214e9565208f814dd3990f89cafbcb
74686e6a674433c436bce8c70cecc1a2cde51e82241e8251188ebd587fd4ee18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1585e234-d4e0-4e4e-8699-70831e5a915e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9721
x-amzn-requestid: 5ddea3ff-b6e2-4528-8e71-eade54612b4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AwqR3HJpoAMF5LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f68a72-413219251feae2e32b9e6857;Sampled=0
x-amzn-remapped-date: Wed, 22 Feb 2023 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iHR9N5OPgY8mjpsZowY-Ipeq62c8O_QQorpNmIOa68_vmWyY0eqt-A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Feb 2023 21:44:15 GMT
age: 48141
etag: "f1733be34a214e9565208f814dd3990f89cafbcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fbf1945668d4a8c35e68f8d60fd80f56
0553020a82f7a6245a2979d58e1765883a777893
4220c9dea6f77c1775be6ca4d1d133b3d8f1d9caec3cc6e85747b87c7d897a92
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1024518c-aee4-4742-a886-86b92f76f0c3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5823
x-amzn-requestid: 4b226ac8-c443-4382-ab8e-b618c95a713d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Aq1HSFWvIAMFUAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f43561-7ac4a51e389a6e6b2a9199a5;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 03:07:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dtWC44nCUmtR6U6wTsd4PynkTqmJ79bFeZmUJUVQguz3l8BSR9A1Zg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 04:02:15 GMT
age: 25461
etag: "0553020a82f7a6245a2979d58e1765883a777893"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a6c075bf39141bbc7826d6969cf2ac8
8a3f71fea281d57261814a858c94fd11f083b9fe
dbd5fd07729dd569dd87128ba167ccccb2fa1c8e73f3eb6d64ac1c37f8294db7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c4dab71-c39e-421a-8dd6-60a97e3b2223.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6643
x-amzn-requestid: 326ed8fb-b228-4546-adf3-a188ce799089
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ArXwJG4OoAMFVZQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f46ccd-74c2a8741928ad99733db89f;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 07:03:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Gu_G39ZXNYgyloJITQfAYavWjzrcB_sPNNOROrgBJW3BZtCVLpbxSQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 00:42:09 GMT
age: 37467
etag: "8a3f71fea281d57261814a858c94fd11f083b9fe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
200 OK 24 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5899), with CRLF line terminators
Hash 4b3143ef4a8a6600939dcba102d440d7
2289bb45ceb3700567fd5d3cab6bfdf873bc9d0c
2297e43aecbf2b891a275bf9fdf98b35f8ae27b919300fa7c3d506fa93440dc9
GET /qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75 HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:35 GMT
content-type: text/html; charset=UTF-8
content-length: 23481
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 56cd85a02d031d2f7b794f1f2cfda4eb
878162e77393da15f0a1c8bf8a83a777a6caf317
15bc2ef238d6cf940adc4a29a31bd3fa0ee1712529d89c1a2fd74fb32d5ffe5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 11:06:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-133277878-77
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-133277878-77
IP
File type ASCII text, with very long lines (2206)
Hash 9f09e78157f9a148756419547c918116
889c964284f2bc58384e6c2f972b75654dcfa7ca
de1467f2abb314e214506a7b023c9beacfc218dcd82f8bd73e2e50ee51fb6c28
GET /gtag/js?id=UA-133277878-77 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Feb 2023 11:06:36 GMT
expires: Thu, 23 Feb 2023 11:06:36 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Feb 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44533
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d53acd716676cb8b42207fd72823e09c
6764d4b82edb1887c91468136377fa2b691422ee
6394339c102c70b8c37bc6fc3e929f9bf460806eb357b2a91a688a1afff47816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6394339C102C70B8C37BC6FC3E929F9BF460806EB357B2A91A688A1AFFF47816"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11621
Expires: Thu, 23 Feb 2023 14:20:17 GMT
Date: Thu, 23 Feb 2023 11:06:36 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 67d0353e59411ba1f85c492efa548d94
2bb48dd2638abb14217de43ca03d2485a31eb7e7
c50c81dc979238b0bfea29f69cc5b4e6277e06c407025412430c190acf1e8d29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 11:06:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.dateukrainianwoman.com/qa/register02/images/logo.png
200 OK 8.6 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/logo.png
IP
File type PNG image data, 430 x 96, 8-bit/color RGBA, interlaced\012- data
Hash 32e98cdad71f7f7098043477def53ca8
e8ae6c5081295bec261786804aec78a203819878
cb31dfefb7c9a5960ea32b2ce869fb4b071ef59e2af8962dafffc45b503924f0
GET /qa/register02/images/logo.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: image/png
content-length: 8566
last-modified: Mon, 27 Jun 2022 02:17:42 GMT
etag: "2176-5e264865cb9b6"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=d056afb18853509f2d62695044ca6f4e&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf=
200 OK 2.7 kB URL HTTP/2 fqtag.com/js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=d056afb18853509f2d62695044ca6f4e&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf=
IP
File type ASCII text, with very long lines (2711), with no line terminators
Hash a631fd5603fc1d327af7fae0cede4ebf
5c7fb4375abee0b3c71a8d0f093c380da48caa07
c0312a9ded67628c95f30e672feef638a061ff73655c7849f9c1e37020cb822d
GET /js/implement-r.js?org=B30kwnm0BOePk19pEhOI&s=d056afb18853509f2d62695044ca6f4e&rt=click&p=CP281903&a=923&cmp=DUW_839143TEEDK&rf= HTTP/1.1
Host: fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: 0
cache-control: no-cache, no-store, must-revalidate
x-xss-protection: 0
pragma: no-cache
date: Thu, 23 Feb 2023 11:06:36 GMT
access-control-allow-origin: *
content-type: application/javascript
content-length: 2711
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d53acd716676cb8b42207fd72823e09c
6764d4b82edb1887c91468136377fa2b691422ee
6394339c102c70b8c37bc6fc3e929f9bf460806eb357b2a91a688a1afff47816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6394339C102C70B8C37BC6FC3E929F9BF460806EB357B2A91A688A1AFFF47816"
Last-Modified: Wed, 22 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11621
Expires: Thu, 23 Feb 2023 14:20:17 GMT
Date: Thu, 23 Feb 2023 11:06:36 GMT
Connection: keep-alive
www.dateukrainianwoman.com/common/js/jquery.cookie.js
200 OK 1.4 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/jquery.cookie.js
IP
Hash 00cfb5c8c7ec0b51b1dfb190279d570f
468f6fe01079afbcf53594f1065847f04165e249
0585e143aba785df6fb525229dd5e3466227cecc87e913459f0444e732fbf15c
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.cookie.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 1378
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c31-5b138acc863cb"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/my_validate_index2.js
200 OK 2.9 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/my_validate_index2.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash f1e757f7e2374c7b7162906a20688af2
ca928406b98b3611e9f23ac3157c8a116eb332a6
4cc7f63506663396d396c9e81fdda9310abfe101cfa63e57411b1263c0d1f803
Analyzer Verdict Alert fortinet Phishing
GET /common/js/my_validate_index2.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 2851
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "2560-5b138acc60a3b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/auto_email/autoComplete.css
200 OK 376 B URL HTTP/2 www.dateukrainianwoman.com/common/js/auto_email/autoComplete.css
IP
File type ASCII text, with CRLF line terminators
Hash fa161ac586a052c4476ed190ac1571e0
95bf7bc6541743739aa6d9f185d398e36dc9ce6c
f514e2d195768146c7b6453b788d6fdeb1df19ee6e5b017e0e9a1003a8e5c662
GET /common/js/auto_email/autoComplete.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: text/css
content-length: 376
last-modified: Fri, 09 Oct 2020 08:24:17 GMT
etag: "27d-5b138acba794b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/auto_email/jquery.autoComplete.js
200 OK 1.0 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/auto_email/jquery.autoComplete.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash d4b600f68461a491b71e88dc6f0173e1
7e20eb3d42dfec881deb87d3c2d6aad1c40aca0f
c5dc9fb6467bc20ff42141ea247397131baf1e1d6240d0dd66eb62f2cf87c74a
Analyzer Verdict Alert fortinet Phishing
GET /common/js/auto_email/jquery.autoComplete.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 1046
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "c56-5b138acbfdc33"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/animate.css
200 OK 4.4 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/animate.css
IP
File type ASCII text, with very long lines (52592), with CRLF line terminators
Hash 6a4206f24d86fcdc27b7d3738db71a65
4bce89647b3be48d6708697fe1c92220bba0de01
f2cfeb0fb2123770d38edadf91710d9f3f28ca7d2d0d3c52c5b5f8fb4e5b4f8f
GET /qa/register02/css/animate.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: text/css
content-length: 4435
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "ce3f-5e26485bbf95e"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/layout.css?v1
200 OK 3.1 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/layout.css?v1
IP
File type Unicode text, UTF-8 text, with very long lines (371), with CRLF line terminators
Hash e3f7d187990788c1ab6f414e34256422
307eda88616b34f64e852498b629fd481bf452a3
15945f56dd6d481be88d179bc6b3d6f102f7763bc24b5fe97ae172686d5c0d7a
Analyzer Verdict Alert fortinet Phishing
GET /qa/register02/css/layout.css?v1 HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: text/css
content-length: 3126
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "2904-5e26485be27f6"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/css/Style.css
200 OK 2.8 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/css/Style.css
IP
File type ASCII text, with very long lines (416), with CRLF line terminators
Hash dd274154dd32534d79088d097eb470ab
c9d1a7bf635b824f6d7ef03af23f15a2e2766324
8af6a361783aa6fdda604e1a8b6496a54f0733edd3bf6916c6c9de147b3311d8
GET /qa/register02/css/Style.css HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: text/css
content-length: 2773
last-modified: Mon, 27 Jun 2022 02:17:31 GMT
etag: "2764-5e26485b89246"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/common/js/jquery.min.js
200 OK 35 kB URL HTTP/2 www.dateukrainianwoman.com/common/js/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 28ca33b476a0e86fa59725bdb38c7f2f
120531fc57923e78104a0aacee05c53cecbfd61f
ffbc181a3d82af401ee3645d08b10d739c12222da179cd5ec2dc67016d7c93a3
Analyzer Verdict Alert fortinet Phishing
GET /common/js/jquery.min.js HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 34763
last-modified: Fri, 09 Oct 2020 08:24:18 GMT
etag: "17278-5b138accbfdab"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
200 OK 90 kB URL HTTP/2 cdn.fqtag.com/1.27.339-ccfb11a/pixel.js
IP
File type ASCII text, with very long lines (31986)
Hash e0eff30579598f76147c9ea12f490d21
f0bf2ef576db440b275bdae3d6abac35e59a33b2
e70a34c5f232fa80328a361630a994cf847c54deb926f13d40be4807291b657b
GET /1.27.339-ccfb11a/pixel.js HTTP/1.1
Host: cdn.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycduIPSEz036VFkKuMGo9PCACgzm2cqtt7OmQqGmGZVwq11i7EETiLyhay6vJY-XeVpJHl0XXHdSWnq-KmOYw-umLi_0DURLC
x-goog-generation: 1611776924905378
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89647
content-language: en
x-goog-hash: crc32c=YwE4YA==, md5=4O/zBXlZj3YUfJ6hL0kNIQ==
x-goog-expiration: Sun, 11 Nov 2294 19:48:44 GMT
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 89647
server: UploadServer
date: Thu, 23 Feb 2023 10:57:59 GMT
expires: Thu, 23 Feb 2023 11:57:59 GMT
cache-control: public, max-age=3600
age: 518
last-modified: Wed, 27 Jan 2021 19:48:44 GMT
etag: "e0eff30579598f76147c9ea12f490d21"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash d2ba168eb10c000b2bc301e6018db048
279a24805c9efb4bd49cb52704b0f446ee2f826f
ddfa4ce9981cf2ff785e45b987f2ada6bc58c19d759a79ca141427d0175d4b60
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Feb 2023 11:06:37 GMT
Etag: "63f703ec-117"
Server: ECS (amb/6B76)
Content-Length: 279
flx808.lporirxe.com/flp/ncvp.js?c=808&i=1677150410
200 OK 11 kB URL HTTP/2 flx808.lporirxe.com/flp/ncvp.js?c=808&i=1677150410
IP
Hash e6a30d4ef5eaccb5d35d0eb5dc740052
42740eec442f77afdb474126b88300330ef2473a
b962548be39783badbf3c462775ada9eddb95b9bc6e4e5c0c313c54fb6e524aa
GET /flp/ncvp.js?c=808&i=1677150410 HTTP/1.1
Host: flx808.lporirxe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Feb 2023 11:06:37 GMT
content-type: application/javascript
content-length: 11218
last-modified: Wed, 30 Nov 2022 23:31:48 GMT
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 366
expires: Fri, 24 Feb 2023 11:06:37 GMT
cache-control: public, max-age=86400
accept-ranges: bytes
server: cloudflare
cf-ray: 79df7e3fac92b50f-OSL
X-Firefox-Spdy: h2
aux.fqtag.com/aux/d
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/d HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 230
Origin: https://www.dateukrainianwoman.com
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
date: Thu, 23 Feb 2023 11:06:37 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/pattern.png
200 OK 831 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/pattern.png
IP
File type PNG image data, 709 x 709, 8-bit/color RGB, non-interlaced\012- data
Size 831 kB (830650 bytes)
Hash 43b541688b8e3de8e90cde1f849d63c9
b757897621cb8c946ff64e473121e85d69c01259
550354f9dbf9602e01d868240ce1855acce334e0fea2a7c46a241d195b10fcdf
GET /qa/register02/images/pattern.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02/css/Style.css
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:37 GMT
content-type: image/png
content-length: 830650
last-modified: Mon, 27 Jun 2022 02:17:44 GMT
etag: "cacba-5e264867863be"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/lady01.jpg
200 OK 245 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/lady01.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 414x644, components 3\012- data
Size 245 kB (245212 bytes)
Hash 2969421e64f861983bbe08cd1a00c265
535eae7fb122a93d16e2534bf6ebe2ad2050a041
6f7f56e569244ede27b19883dd4e56258e41a0beaa4c66a47102c9f67a4c7d4d
GET /qa/register02/images/lady01.jpg HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:37 GMT
content-type: image/jpeg
content-length: 245212
last-modified: Mon, 27 Jun 2022 02:17:37 GMT
etag: "3bddc-5e2648616ea9e"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Feb 2023 09:45:20 GMT
expires: Thu, 23 Feb 2023 11:45:20 GMT
cache-control: public, max-age=7200
age: 4878
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/bg.jpg
200 OK 1.7 MB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1000, components 3\012- data
Size 1.7 MB (1677086 bytes)
Hash e6b14ba17761cf12b0c843e0782003ce
822b2c94ecfee9d7bbe0cc714f35f598195681f4
ddc02a213b431cdd546ad932ece81e6c02c0a6220232e2dd9a2f0779a7dca392
GET /qa/register02/images/bg.jpg HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02/css/Style.css
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:37 GMT
content-type: image/jpeg
content-length: 1677086
last-modified: Mon, 27 Jun 2022 02:17:36 GMT
etag: "19971e-5e26486072f46"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.dateukrainianwoman.com/qa/register02/images/favicon.png
200 OK 1.3 kB URL HTTP/2 www.dateukrainianwoman.com/qa/register02/images/favicon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced\012- data
Hash e34cc2b5b85f3dbe87036fdc98da89ac
39d0dafc953aa1ec37cf4ad03e43525967d540ee
f0fc2184499433d70b42770da3fd175ff3fb8a10c67d32a5c0e26aa28ead4227
GET /qa/register02/images/favicon.png HTTP/1.1
Host: www.dateukrainianwoman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/qa/register02.php?aid=2190&oid=CP281903&qpid_offer_id=DUW_839143TEEDK&qpid_clickid=295414690&qpid_subid=923&source_tag=ye0re%7cGHWso3EbMKWm%7cfsl9p%7c0v7rxm%7c31pkanp%7c82534%7c0000rfsl9p%7cN%7coTI2pzSxo3V%3d%7cPC%7c1lr5q75
Cookie: PHPSESSID=ck3jqiqj9gaotf4cto5g4uc687; owner_id=CP281903; adv_id=2190; adv_type=1; subaffid=923; source_id=ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75; adv_ldp_id=CD384002; qpid_offer_id=DUW_839143TEEDK; website_id=187; adv_click_history_id=680041339; qpid_click_id=295414690; owner_argv=a%3A6%3A%7Bs%3A3%3A%22aid%22%3Bs%3A4%3A%222190%22%3Bs%3A3%3A%22oid%22%3Bs%3A8%3A%22CP281903%22%3Bs%3A13%3A%22qpid_offer_id%22%3Bs%3A15%3A%22DUW_839143TEEDK%22%3Bs%3A12%3A%22qpid_clickid%22%3Bs%3A9%3A%22295414690%22%3Bs%3A10%3A%22qpid_subid%22%3Bs%3A3%3A%22923%22%3Bs%3A10%3A%22source_tag%22%3Bs%3A82%3A%22ye0re%7CGHWso3EbMKWm%7Cfsl9p%7C0v7rxm%7C31pkanp%7C82534%7C0000rfsl9p%7CN%7CoTI2pzSxo3V%3D%7CPC%7C1lr5q75%22%3B%7D; flv=mlQGSH2DDPqfTTNncDGQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Feb 2023 11:06:38 GMT
content-type: image/png
content-length: 1252
last-modified: Mon, 27 Jun 2022 02:17:37 GMT
etag: "4e4-5e264860bd2c6"
strict-transport-security: max-age=17280000; includeSubDomains
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
aux.fqtag.com/aux/p
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /aux/p HTTP/1.1
Host: aux.fqtag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=utf-8
Content-Length: 269
Origin: https://www.dateukrainianwoman.com
Connection: keep-alive
Referer: https://www.dateukrainianwoman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: *
date: Thu, 23 Feb 2023 11:06:38 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc56e7499a3e9db178e91df024e668f0
9cc85c16fd4a9d10df5db5ddfc54b0d88999f317
25ffc87e2be6e0dc9ac208aafbefa99bb4c1d6476c1447056b83d462cd182df2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e1f8718-617f-4cdb-9fab-ed40cbef6784.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9686
x-amzn-requestid: 4eb1ca50-a322-4f64-8cb9-be0315918800
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ArYWFF8fIAMFRlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f46dc0-35fee09f3e6ff22358e9da0c;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 07:07:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ifg3X--I8qSAGRMvv97fc3eLcmMZuEoLcaA87ONUHByrqcO_vfFq4Q==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Feb 2023 05:04:42 GMT
age: 21721
etag: "9cc85c16fd4a9d10df5db5ddfc54b0d88999f317"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
34.76.75.249
34.160.144.191
23.33.119.27
93.184.220.29
104.19.213.36
27.111.12.93
216.145.109.98