urlquery - report: qyjaw8qmorkf0rtest3.peddralsuude.ml/TSKtBH6B?keyword=jwhittington@slurpmail.net&sub1=clear&sub3=salsec-af.com

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	Sent bytes	Received bytes	IP
qyjaw8qmorkf0rtest3.peddralsuude.ml (1)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	440	1393	104.21.95.84
ocsp.r2m02.amazontrust.com (3)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1050	2740	54.230.80.227
o65532.ingest.sentry.io (1)	747982	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	591	469	34.120.195.249
ocsp.r2m01.amazontrust.com (2)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	700	1892	54.230.80.227
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2373	35.241.9.150
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	391	34.117.237.239
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	52.43.88.238
alexatracker.com (1)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1204	1252	104.21.85.99
js.sentry-cdn.com (1)	5259	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	385	1765	151.101.194.217
ocsp.pki.goog (2)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	686	1400	142.250.74.131
ajax.googleapis.com (1)	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356	35534	142.250.74.106
dateexotic.com (1)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	537	575	172.67.159.164
ero-cupid.com (6)	0	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4957	23474	185.151.246.147
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3246	57287	34.120.237.76
static.production.almightypush.com (4)	214819	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1572	57512	54.230.111.86
r3.o.lencr.org (11)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3718	9751	95.101.11.115
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5882	34.160.144.191
browser.sentry-cdn.com (1)	4393	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	389	21360	151.101.194.217
manager.production.almightypush.com (2)	731001	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	944	2157	3.140.173.127

Timestamp	Severity	Source IP	Destination IP	Alert
2023-03-06 22:10:52 UTC	low	Client IP	Internal IP	ET INFO DNS Query for Suspicious .ml Domain
2023-03-06 22:10:53 UTC	medium	Client IP	104.21.95.84	ET INFO HTTP Request to a *.ml domain
2023-03-06 22:11:01 UTC	high	104.21.95.84	Client IP	ETPRO WEB_CLIENT Evil Keitaro Set-Cookie Inbound (b15e4)

Date	UQ / IDS / BL	URL	IP
2023-03-06 22:11:03 UTC	0 - 3 - 0	qyjaw8qmorkf0rtest3.peddralsuude.ml/TSKtBH6B? (...)	172.67.143.216
2023-01-06 11:47:36 UTC	0 - 2 - 2	washoaircraft.top/	172.67.143.216

Date	UQ / IDS / BL	URL	IP
2023-06-01 05:48:20 UTC	0 - 2 - 0	bitsoft360.pw/	172.67.173.104
2023-06-01 05:48:16 UTC	0 - 12 - 0	www.ptt.cc/bbs/MobileComm/M.1653353056.A.D4E.html	172.64.128.9
2023-06-01 05:47:40 UTC	0 - 0 - 0	go.zoomstreakstream.com/go	104.21.38.198
2023-06-01 05:47:24 UTC	0 - 1 - 2	perplexitystray.top/	104.21.0.116
2023-06-01 05:46:12 UTC	5 - 0 - 0	steamcormrnunity.com/	104.21.27.65

Date	UQ / IDS / BL	URL	IP
2023-03-06 22:11:03 UTC	0 - 3 - 0	qyjaw8qmorkf0rtest3.peddralsuude.ml/TSKtBH6B? (...)	172.67.143.216

Date	UQ / IDS / BL	URL	IP
2023-03-22 05:00:53 UTC	0 - 0 - 1	dateexotic.com/agEA?usid=clear2&email=jennasu (...)	104.21.34.109
2023-03-13 08:05:34 UTC	0 - 0 - 1	dateexotic.com/agEA?usid=d0348v1gnj6s&email=f (...)	172.67.159.164
2023-03-11 22:30:47 UTC	0 - 4 - 0	jfb2ya109uawtest3.pracovdlotal.tk/TSKtBH6B?ke (...)	188.114.97.1
2023-03-09 11:04:48 UTC	0 - 4 - 0	wkz57ttf23llwtest3.mojolbonpta.tk/TSKtBH6B?ke (...)	104.21.57.123
2023-03-08 11:41:58 UTC	0 - 0 - 1	dateexotic.com/agEA?usid=30tualj1bls4t&email= (...)	104.21.34.109

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4652B9B479B50208073DBFF5A0B434FE6E8A1A2C5CAA6365A8C5DE2FF7FD9865" Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=9270 Expires: Tue, 07 Mar 2023 00:45:23 GMT Date: Mon, 06 Mar 2023 22:10:53 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: c8d3b63b0ab9c679c7a50df2ba42b497 Sha1: 7133ccb414f7d8040d0f4a1b1df359485a76c377 Sha256: 4652b9b479b50208073dbff5a0b434fe6e8a1a2c5caa6365a8c5de2ff7fd9865
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4" Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=11688 Expires: Tue, 07 Mar 2023 01:25:41 GMT Date: Mon, 06 Mar 2023 22:10:53 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cf14baed0842431a08367ed54f2346ca Sha1: d943be8835b7e4470e3d6fbe09ac39c5464be434 Sha256: a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F9FE24479B86404D7884409068517CC6F57B988B35BE92E4F58CB4634FCB2218" Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=18366 Expires: Tue, 07 Mar 2023 03:16:59 GMT Date: Mon, 06 Mar 2023 22:10:53 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6681493f94022a7df736f92e03badd12 Sha1: 31bc327734b19fbf70290dcc2d19222564a3a396 Sha256: f9fe24479b86404d7884409068517cc6f57b988b35be92e4f58cb4634fcb2218
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Content-Length, Backoff, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Mon, 06 Mar 2023 22:08:38 GMT age: 135 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 84db75194692d4afe13196bda6f22da8 Sha1: 4c1f49bc973a4917f146d93c8d598344edc021f6 Sha256: a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: /Hbey2aTBVDKy4KUhKVGv5uecT7tHZkDME/psgZgXU4fZqJueyybe0keBNvC/Ixukxg3kZ92/aY= x-amz-request-id: FZ66HQGRS3RAE3Z1 x-amz-server-side-encryption: AES256 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Mon, 06 Mar 2023 21:34:58 GMT age: 2155 last-modified: Sat, 18 Feb 2023 20:28:27 GMT etag: "b5ba6334e73496995e3e3a9ecd0eb323" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: b5ba6334e73496995e3e3a9ecd0eb323 Sha1: ad80d3b7718c28364e8c2004fb38a13a1747e462 Sha256: aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 06 Mar 2023 22:10:53 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /TSKtBH6B?keyword=jwhittington@slurpmail.net&sub1=clear&sub3=salsec-af.com HTTP/1.1 Host: qyjaw8qmorkf0rtest3.peddralsuude.ml User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	104.21.95.84 HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Date: Mon, 06 Mar 2023 22:10:53 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Location: https://dateexotic.com/agEA?usid=3bmfq771g6c2d&email=jwhittington%40slurpmail.net&sub1=clear_main&prid=3bmfq771g6c2d Pragma: no-cache Set-Cookie: _subid=3bmfq771g6c2d;Expires=Thursday, 06-Apr-2023 22:10:53 GMT;Max-Age=2678400;Path=/ b15e4=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjk4XCI6MTY3ODE0MDY1M30sXCJjYW1wYWlnbnNcIjp7XCIzM1wiOjE2NzgxNDA2NTN9LFwidGltZVwiOjE2NzgxNDA2NTN9In0.3EDyExrtGje5DleHo6FpTU-LCnMtTvz6ay-tplUHq64;Expires=Sunday, 10-May-2076 20:21:46 GMT;Max-Age=1678227053;Path=/ _token=uuid_3bmfq771g6c2d_3bmfq771g6c2d640664ed3c5222.12513293;Expires=Thursday, 06-Apr-2023 22:10:53 GMT;Max-Age=2678400;Path=/ Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HLuelDjIde59R%2BkGWVAWcMjF%2Fjmbxb5DzIBKzun%2BRr7yW5FI5xY2WbXlDeLsSp9oI5BfNexmKjND3JFzwPM3HWCXcYeiXLiJVbPcRjbYoeCrtAplgOA9jP%2F%2FVRaK4iZADBtZVfhlLjPg%2FS2str0hX034NjdwyA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 7a3dee683bf40b41-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 IDS: - ET INFO HTTP Request to a *.ml domain - ETPRO WEB_CLIENT Evil Keitaro Set-Cookie Inbound (b15e4)
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Mon, 06 Mar 2023 21:12:30 GMT age: 3503 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "872F2081EF126A0358E196338A21F095C376652FEAA7CB9B2BFD6F3149838F60" Last-Modified: Sat, 04 Mar 2023 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17441 Expires: Tue, 07 Mar 2023 03:01:34 GMT Date: Mon, 06 Mar 2023 22:10:53 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1dfdbbe528416d7653788c31a945540d Sha1: ce7e4b0cc913dcf90dcb43ca51706e2ff0677eaf Sha256: 872f2081ef126a0358e196338a21f095c376652feaa7cb9b2bfd6f3149838f60
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: AVYHKJcZgh5yL1mi+nJJzA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	52.43.88.238 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: 32deknjdgMkEtPAFEBntvAXHUmQ= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?r=aHR0cHM6Ly93d3cyLmRhdGVleG90aWMuY29tL2FnRUE%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%3D&h=ceace434b24f63f94827b80ea928ecfc HTTP/1.1 Host: alexatracker.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://dateexotic.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	104.21.85.99 HTTP/2 301 Moved Permanently date: Mon, 06 Mar 2023 22:10:54 GMT content-length: 0 location: https://www2.dateexotic.com/agEA?usid=3bmfq771g6c2d&email=jwhittington%40slurpmail.net&sub1=clear_main&prid=3bmfq771g6c2d&bdata=eyJkYXRhIjp7InBsYXRmb3JtIjoiTGludXggeDg2XzY0In0sImV4dHJhIjp7Ik5hdmlnYXRvci5wbGF0Zm9ybSI6WyJMaW51eCBwbGF0Zm9ybSBhbmQgV2luZG93cyB1c2VyIGFnZW50IGRvIG5vdCBtYXRjaCJdfSwiZXJyb3JzIjp7ImlmcmFtZSI6WyJjYW4ndCBhY2Nlc3MgcHJvcGVydHkgXCJhcHBlbmRDaGlsZFwiLCBkb2N1bWVudC5ib2R5IGlzIG51bGwiXSwiY2FudmFzX2NvbnRleHQiOlsiRmFpbGVkIHRvIGdldCBjYW52YXMgY29udGV4dCJdfSwiYm90U2NvcmUiOiIyNCJ9&bt=1678140653&bth=1362682569&tbsession=5171150465832215790&c=2854026913 set-cookie: trbarid=5171150465832215790;expires=Wed, 05 Mar 2025 22:10:54 GMT;secure;HttpOnly;SameSite=None;path=/ report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BsLd4cWVe%2F6b76l%2Bf9Kpr4HUrkZxKX%2FZsY2XKDO275nALziKMtEqha0d6IA8pHhL42KdjtFq%2B9O330leGtQ0OcmAkGujZ8v527ShuLEzWxLet8FAqXtH2fmmx7FcN47RdEz0"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7a3dee71cd4b0b41-OSL alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "B638E3CC42F6E98562FE1B69EA715F5BB9089DBD81E906F0A91B5E00EFB324B1" Last-Modified: Sun, 05 Mar 2023 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3367 Expires: Mon, 06 Mar 2023 23:07:02 GMT Date: Mon, 06 Mar 2023 22:10:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 273e6c0313495fc0c847ff53b0acd224 Sha1: 675d864c3b8dbb1360865b21dfe133c132cf21ac Sha256: b638e3cc42f6e98562fe1b69ea715f5bb9089dbd81e906f0a91b5e00efb324b1
GET /XQAA/12058/oth?i=I1hZ0mQGZO4&u=5171150465832215790 HTTP/1.1 Host: ero-cupid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://dateexotic.com/ Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	185.151.246.147 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Server: nginx/1.18.0 (Ubuntu) Date: Mon, 06 Mar 2023 22:10:55 GMT Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * X-Cache-Status: EXPIRED Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (467), with CRLF, LF line terminators Size: 7099 Md5: 2f356cab54b90840815cca70a61204f5 Sha1: c0a002071ddd7d31d4bee9f13d4cdadd9b4b4c5e Sha256: bee687f8a923fa351797023056b4ce8386bde7e6f736ff1118894193fc4710aa
GET /static/NgAA/css/styles.min.css HTTP/1.1 Host: ero-cupid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	185.151.246.147 HTTP/1.1 200 OK Content-Type: text/css Server: nginx/1.18.0 (Ubuntu) Date: Mon, 06 Mar 2023 22:10:55 GMT Content-Length: 14054 Connection: keep-alive Last-Modified: Wed, 20 Apr 2022 14:05:31 GMT ETag: "6260132b-36e6" Access-Control-Allow-Origin: * Accept-Ranges: bytes --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (14050), with no line terminators Size: 14054 Md5: 7c7128605b68dc5c5074066f7fe50087 Sha1: a02bdf7787d753e9b92f703a1c94ffa67a7936df Sha256: ec5c6e7c09b0f1e32e88152db7093221b0d4aa8a7d73e10c7e446f864d5ff4a6
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2" Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8516 Expires: Tue, 07 Mar 2023 00:32:51 GMT Date: Mon, 06 Mar 2023 22:10:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 5a5ffd15937290b01c6440b1c62e0521 Sha1: cfc46cb33cd50e11dedfbfe641713413bc0b6749 Sha256: 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
GET /f44bbfb9a37b4915ac9fa50036de00f6.min.js HTTP/1.1 Host: js.sentry-cdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://ero-cupid.com Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	151.101.194.217 HTTP/2 200 OK content-type: text/javascript access-control-allow-origin: * cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000 x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 1; mode=block x-envoy-attempt-count: 1 x-envoy-upstream-service-time: 17 content-encoding: gzip accept-ranges: bytes date: Mon, 06 Mar 2023 22:10:55 GMT age: 7 x-served-by: getsentry-web-default-common-production-848cdb54f7-8v2g9, cache-bma1622-BMA vary: Accept-Encoding timing-allow-origin: https://sentry.io strict-transport-security: max-age=31536000; includeSubDomains content-length: 1077 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (502) Size: 1077 Md5: f168a33e468d994bc37380cb6f1b9844 Sha1: f07eee5b20ac9dc587e6c8a15a8ec3454a89ba26 Sha256: 38dec94c4484898bf5d2917c3d61ddcf77e2f2388122d2c4551607ffb1e664b0
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2" Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8516 Expires: Tue, 07 Mar 2023 00:32:51 GMT Date: Mon, 06 Mar 2023 22:10:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 5a5ffd15937290b01c6440b1c62e0521 Sha1: cfc46cb33cd50e11dedfbfe641713413bc0b6749 Sha256: 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3553f944-d85f-4136-8939-71be8d622db9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10667 x-amzn-requestid: 84db4940-e8e2-4729-8bfd-fd82d9cd32fc x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BMPjaENkIAMF1cA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-640192e2-42c67d8a4a03cd0d33e5d004;Sampled=0 x-amzn-remapped-date: Fri, 03 Mar 2023 06:25:38 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: vRsOODhcPypCzX_hrZIv9drC32TAi3bfUvbqwMqMBSEjiIGikVh0iQ== via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google date: Mon, 06 Mar 2023 07:48:04 GMT age: 51771 etag: "3da4c9f6bd4deb49d97a8809d3ee5527a92bad29" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10667 Md5: a0d45909f5960fab61dc510f2d8727f9 Sha1: 3da4c9f6bd4deb49d97a8809d3ee5527a92bad29 Sha256: 508c8feca56c077a419b52d2c32b1df0cf10e8c189997c58f67660ea66803273
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2" Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8516 Expires: Tue, 07 Mar 2023 00:32:51 GMT Date: Mon, 06 Mar 2023 22:10:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 5a5ffd15937290b01c6440b1c62e0521 Sha1: cfc46cb33cd50e11dedfbfe641713413bc0b6749 Sha256: 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5573b4fa-a0bc-4bdd-95cf-3f076cd00ec6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7149 x-amzn-requestid: 566034bc-f422-4df1-ac00-c843fda7d892 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BYNhZHsDIAMFSWQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64065c6f-2c2f5e1911886a905463583b;Sampled=0 x-amzn-remapped-date: Mon, 06 Mar 2023 21:34:39 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: FTGKGsH0LIx43atqlB9ZFi5Ky47v9i4SvSvWg7V-awKqpDJz-bh3mw== via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ac463f3377446e4c603deca30feb744a.cloudfront.net (CloudFront), 1.1 google date: Mon, 06 Mar 2023 21:42:56 GMT age: 1679 etag: "4640e720eee24fe8af05120bd78ac87283185707" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7149 Md5: 3c1622ea57ab959bf7f10dbccb7c40fb Sha1: 4640e720eee24fe8af05120bd78ac87283185707 Sha256: 1d84da08a93001100d72009e0012083da9cebdbf527daf9bd464cf8af3a50a56
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1F4515613D7A23A0F6572298F97291E7220F99E4F83FD9F22A7654D4A228CAA2" Last-Modified: Sun, 05 Mar 2023 07:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8516 Expires: Tue, 07 Mar 2023 00:32:51 GMT Date: Mon, 06 Mar 2023 22:10:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 5a5ffd15937290b01c6440b1c62e0521 Sha1: cfc46cb33cd50e11dedfbfe641713413bc0b6749 Sha256: 1f4515613d7a23a0f6572298f97291e7220f99e4f83fd9f22a7654d4a228caa2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0479ca07-1cf3-4233-a788-502bbc20fe7a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9552 x-amzn-requestid: 50849335-aaad-424f-84eb-f06cca6a8084 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BYOvvGBtoAMFfqA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64065e64-6071b65f31efed6750ee54b4;Sampled=0 x-amzn-remapped-date: Mon, 06 Mar 2023 21:43:00 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: mjXh4Xdrwe_0FMDxqQ5EdDJxVoAUR4S3uaW1SmTG22wfN07cbYPGGw== via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 5c35539543902c678280929df206948c.cloudfront.net (CloudFront), 1.1 google date: Mon, 06 Mar 2023 21:45:21 GMT age: 1534 etag: "6694b053df34b65f9faabe9747bdc50bc8ef2729" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9552 Md5: deccb690482c7b596ebb11edc196637f Sha1: 6694b053df34b65f9faabe9747bdc50bc8ef2729 Sha256: c2dcc930762598b4baa02c64cb5b5655d2725a9d0833145f807abe631fe09205
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b77fb2e-f83b-4809-bc15-37fb41909d3e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9380 x-amzn-requestid: d3e272ab-31a9-439b-9f95-9f91b6613b8b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BFvhgHHCIAMFpEw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63fef93c-20b271d76af95ba25a6bcb7e;Sampled=0 x-amzn-remapped-date: Wed, 01 Mar 2023 07:05:32 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: eSQElo7t2X-cic6J8G-ojwOp9oX4XlF91mP77U4pE81GqE8LZ7P7Tg== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google date: Mon, 06 Mar 2023 22:04:42 GMT age: 373 etag: "a6eec16d900c754f882c5b07caf7f2810e22589a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9380 Md5: a5ba9336d8734533f8e65e265aacd9d0 Sha1: a6eec16d900c754f882c5b07caf7f2810e22589a Sha256: 691e61419f2f4893f996ac7dd1e2ae7597d243bbda9fd0b1a66053cddd060c07
GET /7.41.0/bundle.es5.min.js HTTP/1.1 Host: browser.sentry-cdn.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://ero-cupid.com Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	151.101.194.217 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 cache-control: public, max-age=31536000 expires: Tue, 05 Mar 2024 12:59:58 GMT last-modified: Mon, 06 Mar 2023 12:36:39 GMT etag: "4e6de5ddb0cbc8b033560220b0b6cb7f" content-encoding: gzip accept-ranges: bytes date: Mon, 06 Mar 2023 22:10:55 GMT age: 33057 vary: Accept-Encoding access-control-allow-origin: * server: Fastly strict-transport-security: max-age=31536000; includeSubDomains content-length: 20850 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (64341) Size: 20850 Md5: 4e6de5ddb0cbc8b033560220b0b6cb7f Sha1: 04a10504d607dcf3a37bfa1355b06f9988906b81 Sha256: d728c7d19bd9664d409576ac95363b2a2f9e29f1e67294d87d93391acf0b58c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F717025d0-93f9-4b57-ae89-00404dd5251d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6318 x-amzn-requestid: 2b7dde9b-5c20-4f5f-b3da-0178aa626cfe x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BYNhaGOcIAMFYCw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64065c6f-5a3090967753935f301370f5;Sampled=0 x-amzn-remapped-date: Mon, 06 Mar 2023 21:34:39 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Miss from cloudfront x-amz-cf-id: Gw83W6ErmEufUIAm1zDTdyA-Cc6nIEevlwyWcr6aPMjZXr-Y6Xv66Q== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google date: Mon, 06 Mar 2023 21:42:56 GMT age: 1679 etag: "ddbb5a9049300168ec4a44de95668ee2a67c77bf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6318 Md5: 14d08f8165c7d5750ec1ed1357c431f8 Sha1: ddbb5a9049300168ec4a44de95668ee2a67c77bf Sha256: 100614520c315de798c503fb0cb39d4150b1d32b17e63b4580d2a019415689eb
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 06 Mar 2023 22:10:55 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 587b1cd8e3fa518a1784d2ccc0139a36 Sha1: e1a4d4576e95660cc149c60b3655a278e6ac967b Sha256: 8339b116073dcfe2280c5d98bdac9e9d15214589f0292cc9c399656f887dc628
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F064a782d-c3a3-4a50-89b4-9268f2f1bbb6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7867 x-amzn-requestid: 978511a9-0cd3-43ea-88a0-065184d8aaed x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: BYNhZFJpIAMFwTg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-64065c6f-23c246725acb38fd45bd54c2;Sampled=0 x-amzn-remapped-date: Mon, 06 Mar 2023 21:34:39 GMT x-amz-cf-pop: HIO50-C1, SEA19-C3 x-cache: Miss from cloudfront x-amz-cf-id: QnlxCHypmU9WZ6MP_IBk3Iw_RaJcX6CUuIhO0Ial4QuppEj6LrsIIQ== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google date: Mon, 06 Mar 2023 22:04:02 GMT age: 413 etag: "54d826db5e99a66f6a3971fc2e7860bfb9bc4ab0" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7867 Md5: 266d5f697c0682af0bd9f0d9d9af5cf5 Sha1: 54d826db5e99a66f6a3971fc2e7860bfb9bc4ab0 Sha256: 4ee9f37f1a637b04e9a0b5045be65b1341c3e6bfce2e07672f5b69937555472b
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: ajax.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	142.250.74.106 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes content-encoding: gzip access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} timing-allow-origin: * content-length: 31021 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 02 Mar 2023 13:36:02 GMT expires: Fri, 01 Mar 2024 13:36:02 GMT cache-control: public, max-age=31536000, stale-while-revalidate=2592000 last-modified: Fri, 08 May 2020 07:05:03 GMT vary: Accept-Encoding age: 376493 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 34550 Md5: 75c09fe60f183b90d7e6648b425d2129 Sha1: fca6b6d9d5325c525028e0445d30d8a28dff206c Sha256: 6f82aaade433b02a72501922ac679cc59820da667ca6f06319a11fde2407a317
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Mon, 06 Mar 2023 22:10:55 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 587b1cd8e3fa518a1784d2ccc0139a36 Sha1: e1a4d4576e95660cc149c60b3655a278e6ac967b Sha256: 8339b116073dcfe2280c5d98bdac9e9d15214589f0292cc9c399656f887dc628
POST / HTTP/1.1 Host: ocsp.r2m02.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	54.230.80.227 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=168861 Date: Mon, 06 Mar 2023 22:10:55 GMT Etag: "64064248-1d7" Expires: Wed, 08 Mar 2023 21:05:16 GMT Last-Modified: Mon, 06 Mar 2023 19:43:04 GMT Server: ECAcc (nya/799C) X-Cache: Miss from cloudfront Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: GhM3EJ_xb1iU9-i_xr16odOUvYasOOCHis0CiC7XRDccLUTJCw4fNQ== Age: 4933 --- Additional Info --- Magic: data Size: 471 Md5: 1251f951ce3ad1c7eecdf13de37f53c6 Sha1: 196a4d4749c9f455c150b1f0363bdf2f168f9154 Sha256: 379b77f5739d74a332cfdf20f592a4a77b5b556af09a94821bf35b81b374232e
GET /mng/channels/init.min.js?ver=1672746357 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	54.230.111.86 HTTP/2 200 OK content-type: application/javascript content-length: 22787 last-modified: Wed, 18 Jan 2023 12:37:33 GMT x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 date: Mon, 06 Mar 2023 02:19:07 GMT etag: "3b6653c5e8ba364d3a55401890bfcd78" x-cache: Hit from cloudfront via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: 457aOfr-GqylNUXnAOAui_oCMcPi24RoDHd5GGwLLxqVQ4cHn4Z_dQ== age: 71625 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 22787 Md5: 3b6653c5e8ba364d3a55401890bfcd78 Sha1: ee999f16f02d41b93d1db2bf3a489fab1034e67a Sha256: a598ef0100e73e2d81969e0a59374e915ccfe7c312603b4b1375bbd0e75498d5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "746BAB210401390F8168BD766C87ED8D60C9C1F8B38EE57A5DB854CC6BE5DC9B" Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17758 Expires: Tue, 07 Mar 2023 03:06:53 GMT Date: Mon, 06 Mar 2023 22:10:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 30238296c62da4db5959b8b1914c78ff Sha1: bff6627acfcc9a4627520596a1e950ca6715596c Sha256: 746bab210401390f8168bd766c87ed8d60c9c1f8b38ee57a5db854cc6be5dc9b
POST /api/6161109/envelope/?sentry_key=f44bbfb9a37b4915ac9fa50036de00f6&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.41.0 HTTP/1.1 Host: o65532.ingest.sentry.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://ero-cupid.com/ Content-Type: text/plain;charset=UTF-8 Origin: https://ero-cupid.com Content-Length: 426 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	34.120.195.249 HTTP/2 200 OK content-type: application/json server: nginx date: Mon, 06 Mar 2023 22:10:55 GMT content-length: 2 access-control-allow-origin: https://ero-cupid.com access-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after vary: Origin x-envoy-upstream-service-time: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload via: 1.1 google alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 2 Md5: 99914b932bd37a50b983c5e7c90ae93b Sha1: bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	95.101.11.115 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "746BAB210401390F8168BD766C87ED8D60C9C1F8B38EE57A5DB854CC6BE5DC9B" Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17758 Expires: Tue, 07 Mar 2023 03:06:53 GMT Date: Mon, 06 Mar 2023 22:10:55 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 30238296c62da4db5959b8b1914c78ff Sha1: bff6627acfcc9a4627520596a1e950ca6715596c Sha256: 746bab210401390f8168bd766c87ed8d60c9c1f8b38ee57a5db854cc6be5dc9b
POST / HTTP/1.1 Host: ocsp.r2m02.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	54.230.80.227 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: 'max-age=158059' Date: Mon, 06 Mar 2023 22:10:55 GMT Server: ECAcc (dcb/737C) X-Cache: Miss from cloudfront Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: CoS91RG80Wn57v_WlfVe8ELhnaxoug5WLRsrzQILQyc_jhMTXDQ-2g== --- Additional Info --- Magic: data Size: 471 Md5: 1251f951ce3ad1c7eecdf13de37f53c6 Sha1: 196a4d4749c9f455c150b1f0363bdf2f168f9154 Sha256: 379b77f5739d74a332cfdf20f592a4a77b5b556af09a94821bf35b81b374232e
GET /mng/subs_window.css?ver=1672746357 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	54.230.111.86 HTTP/2 200 OK content-type: text/css content-length: 6945 last-modified: Wed, 18 Jan 2023 12:37:33 GMT x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 date: Mon, 06 Mar 2023 09:07:19 GMT etag: "bd7dbae15f904a4e1213439ebfefddbe" x-cache: Hit from cloudfront via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: aVv-U_efmnY5a4p0KDXyrlfpG_Vml6bSOKm0Xy9NR0Gx1Z0HEGkARQ== age: 47054 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 6945 Md5: bd7dbae15f904a4e1213439ebfefddbe Sha1: 9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a
POST / HTTP/1.1 Host: ocsp.r2m02.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	54.230.80.227 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Cache-Control: 'max-age=158059' Date: Mon, 06 Mar 2023 22:10:55 GMT Server: ECAcc (dcb/7FDF) X-Cache: Miss from cloudfront Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: -Dovl4euoQiB5OgQZY_StquJuZBS_7optGcKXVjrn6sRvgxN9o7K7A== --- Additional Info --- Magic: data Size: 471 Md5: 1251f951ce3ad1c7eecdf13de37f53c6 Sha1: 196a4d4749c9f455c150b1f0363bdf2f168f9154 Sha256: 379b77f5739d74a332cfdf20f592a4a77b5b556af09a94821bf35b81b374232e
GET /mng/subs_window.js?ver=1672746357 HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	54.230.111.86 HTTP/2 200 OK content-type: application/javascript content-length: 19491 last-modified: Wed, 18 Jan 2023 12:37:33 GMT x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 date: Mon, 06 Mar 2023 04:17:42 GMT etag: "ae593f4be1dd1f0710123918b49c4933" x-cache: Hit from cloudfront via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: JhSFnV8jr3IWTVj0WYFIPyRM9HRbccS21ojRWW1_kCHcLLO_9-r5eQ== age: 64430 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text Size: 19491 Md5: ae593f4be1dd1f0710123918b49c4933 Sha1: 66fbe30bb873e0a47d3d72e737d68aa4b6916c26 Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206
GET /worker.js HTTP/1.1 Host: ero-cupid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Service-Worker: script Connection: keep-alive Sec-Fetch-Dest: serviceworker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache	185.151.246.147 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Server: nginx/1.18.0 (Ubuntu) Date: Mon, 06 Mar 2023 22:10:55 GMT Content-Length: 83 Connection: keep-alive Last-Modified: Mon, 03 Jan 2022 14:14:05 GMT ETag: "61d304ad-53" Access-Control-Allow-Origin: * X-Cache-Status: HIT Accept-Ranges: bytes --- Additional Info --- Magic: ASCII text, with no line terminators Size: 83 Md5: 64017acd2edfab8cbd7907f8e6540a0d Sha1: 46da5f5bcebaea63581f01bab1701bb23981e7dc Sha256: 1880d7fa83d8e3a777ffd08aa61ca4a95174d1b9c30aecad1fa387a269c4dd0c
GET /mng/channels/sw.min.js HTTP/1.1 Host: static.production.almightypush.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://ero-cupid.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers	54.230.111.86 HTTP/2 200 OK content-type: application/javascript content-length: 6277 last-modified: Wed, 18 Jan 2023 12:37:33 GMT x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 date: Mon, 06 Mar 2023 07:52:15 GMT etag: "03b71607d0eb65df0c65a3d5fece3706" x-cache: Hit from cloudfront via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: b23NBX8M__lw9b3CJTx0imvqzZdb_s3voMW29eqU4aue6KscCeRk6g== age: 51521 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text Size: 6277 Md5: 03b71607d0eb65df0c65a3d5fece3706 Sha1: 871375fc1daff080ef7657a83058cbbe674d62e9 Sha256: 1a59bbb1f7d210cbcad77e4fa12797ac225f574c2d65b72ed3695719f6e84caf
GET /user-id?nbl=&impression=I1hZ0mQGZO4&trustLevel=0&botScore=0&finishClicksCount=0&landingConfig=&landingPageConfig=&extraRequestData=&showedPops=0&uri=https%3A%2F%2Fero-cupid.com%2FXQAA%2F12058%2Foth%3Fi%3DI1hZ0mQGZO4%26u%3D5171150465832215790&search=%3Fi%3DI1hZ0mQGZO4%26u%3D5171150465832215790&contactExists=false HTTP/1.1 Host: ero-cupid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-Requested-With: XMLHttpRequest Connection: keep-alive Cookie: slappInfo64_I1hZ0mQGZO4=eyJuYmwiOm51bGwsImltcHJlc3Npb24iOiJJMWhaMG1RR1pPNCIsInRydXN0TGV2ZWwiOjAsImJvdFNjb3JlIjowLCJmaW5pc2hDbGlja3NDb3VudCI6MCwibGFuZGluZ0NvbmZpZyI6bnVsbCwibGFuZGluZ1BhZ2VDb25maWciOm51bGwsImV4dHJhUmVxdWVzdERhdGEiOm51bGwsInNob3dlZFBvcHMiOjAsInVyaSI6Imh0dHBzOi8vZXJvLWN1cGlkLmNvbS9YUUFBLzEyMDU4L290aD9pPUkxaFowbVFHWk80JnU9NTE3MTE1MDQ2NTgzMjIxNTc5MCIsInNlYXJjaCI6Ij9pPUkxaFowbVFHWk80JnU9NTE3MTE1MDQ2NTgzMjIxNTc5MCIsImNvbnRhY3RFeGlzdHMiOmZhbHNlfQ== Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin	185.151.246.147 HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Server: nginx/1.18.0 (Ubuntu) Date: Mon, 06 Mar 2023 22:10:55 GMT Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: userid=1fc3e0fd5e6d684e634d1c2de9fd438d42bce45149996e7e5c334786e59b8aaca%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A479681315277%3B%7D; expires=Wed, 06-Mar-2024 18:27:35 GMT; Max-Age=31609000; path=/; HttpOnly; SameSite=Lax Access-Control-Allow-Origin: * --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 38 Md5: c9c3c251aa8eeede83f8bb51d4b68242 Sha1: fba612b3bb776672b485083c034285e2a2162214 Sha256: 352c823a5b768c0525f4dcc6e4642a262118426b17d54503a8503b0f7d437e02
POST /stats HTTP/1.1 Host: ero-cupid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 402 Origin: https://ero-cupid.com Connection: keep-alive Cookie: slappInfo64_I1hZ0mQGZO4=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 Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin	185.151.246.147 HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Server: nginx/1.18.0 (Ubuntu) Date: Mon, 06 Mar 2023 22:10:55 GMT Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (378), with no line terminators Size: 378 Md5: c1766226105dc98b02b90b8683399253 Sha1: 0e818b3e2567d41cc36177db320bd67e7a327396 Sha256: c8c4b95171f10d47402de7dd4278ffd6f2dbbcbf8919eeabba224aed723c6cc3
GET /favicon.ico HTTP/1.1 Host: ero-cupid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Cookie: slappInfo64_I1hZ0mQGZO4=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; userid=1fc3e0fd5e6d684e634d1c2de9fd438d42bce45149996e7e5c334786e59b8aaca%3A2%3A%7Bi%3A0%3Bs%3A6%3A%22userid%22%3Bi%3A1%3Bi%3A479681315277%3B%7D Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin	185.151.246.147 HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Server: nginx/1.18.0 (Ubuntu) Date: Mon, 06 Mar 2023 22:10:56 GMT Transfer-Encoding: chunked Connection: keep-alive Access-Control-Allow-Origin: * Content-Encoding: gzip --- Additional Info --- Magic: ASCII text, with no line terminators Size: 43 Md5: 384ca34aa16dc6ce293be59be14debee Sha1: 8e534edfbebe4b1a7021bd042dafb9bb724653fe Sha256: 3452525005a4a39d8f274e312a7a28b6c081bd6d68b5ccce3b1bedd2721b79ea
POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	54.230.80.227 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: 'max-age=158059' Date: Mon, 06 Mar 2023 22:10:56 GMT Last-Modified: Mon, 06 Mar 2023 21:01:30 GMT Server: ECAcc (nya/78C0) X-Cache: Miss from cloudfront Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: shQoAE8-0FAIlVK19tqQxFLwwHHJ78VWPwVLyEq3OctjN7L3PEgAbQ== Age: 4166 --- Additional Info --- Magic: data Size: 471 Md5: 879e6a42e96e091f7b0a2a3d47b0925e Sha1: 29e6f01cc817882f346c45d636e32422fde9fed1 Sha256: b3d6b2922a622fee1e23b4dd011be6d5474364cdc268a9cc7d8b03f0227bb167
POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	54.230.80.227 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: 'max-age=158059' Date: Mon, 06 Mar 2023 22:10:56 GMT Last-Modified: Mon, 06 Mar 2023 21:12:44 GMT Server: ECAcc (nya/799C) X-Cache: Miss from cloudfront Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: gu9QYWwqfGnLLqnFCsDiWwz4b5ayIkS013lb6DK72qf3gEFFqIoCFQ== Age: 3492 --- Additional Info --- Magic: data Size: 471 Md5: 879e6a42e96e091f7b0a2a3d47b0925e Sha1: 29e6f01cc817882f346c45d636e32422fde9fed1 Sha256: b3d6b2922a622fee1e23b4dd011be6d5474364cdc268a9cc7d8b03f0227bb167
OPTIONS /api/v1/code-snippet/ HTTP/1.1 Host: manager.production.almightypush.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: GET Access-Control-Request-Headers: channel-token Origin: https://ero-cupid.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	3.140.173.127 HTTP/2 200 OK content-type: text/html; charset=utf-8 date: Mon, 06 Mar 2023 22:10:56 GMT content-length: 0 server: gunicorn/19.9.0 vary: Origin access-control-allow-credentials: true access-control-allow-origin: https://ero-cupid.com access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT access-control-max-age: 86400 x-content-type-options: nosniff referrer-policy: same-origin X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/code-snippet/ HTTP/1.1 Host: manager.production.almightypush.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Channel-Token: NjNkMmRmNTQ2ZmEzOTBmZDIzMzI5OWM1ZGZmYzZkZGE9MTM4NzU9Lz0zMzM= Origin: https://ero-cupid.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	3.140.173.127 HTTP/2 200 OK content-type: application/json date: Mon, 06 Mar 2023 22:10:56 GMT content-length: 1190 server: gunicorn/19.9.0 vary: Accept, Origin allow: GET, POST, HEAD, OPTIONS x-frame-options: DENY access-control-allow-credentials: true access-control-allow-origin: https://ero-cupid.com x-content-type-options: nosniff referrer-policy: same-origin X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- HTML document text\012- HTML document, ASCII text, with very long lines (1190), with no line terminators Size: 1190 Md5: 325a240ab410859755c6e022b348f1b8 Sha1: 42384aef29bd0eefa66d1104d582c5d8d79af0ac Sha256: f40776e1ac73deaba5bcdac3eca6dc3c7e4fefab6218ad277e6087d1cc7fa39a
GET /agEA?usid=3bmfq771g6c2d&email=jwhittington%40slurpmail.net&sub1=clear_main&prid=3bmfq771g6c2d HTTP/1.1 Host: dateexotic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	172.67.159.164 HTTP/2 200 OK content-type: text/html date: Mon, 06 Mar 2023 22:10:53 GMT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rq1Ieb4VVbTVT%2BS84Hxl%2FQ0FAvQORUQ01jtoqyapcZ%2FZB%2Bg7OWumCip8crzxqddrvRdrU0uCta5YWq5y0rHHdKExAlp1dhm73VLBypdcsnslCv2TDP3FzfqVq4Hlap5MkQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7a3dee6c1a77b4f9-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Size: 0 Md5: Sha1: Sha256:

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             95.101.11.115

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "A45FBC8CDDDC9F43C0C3C7D73CBB2CDF3CF4C4CD2DF20802925B795DA5048AA4" 

                                            
                                                
Last-Modified: Sun, 05 Mar 2023 02:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=11688 

                                            
                                                
Expires: Tue, 07 Mar 2023 01:25:41 GMT 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:53 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    cf14baed0842431a08367ed54f2346ca

                                                Sha1:   d943be8835b7e4470e3d6fbe09ac39c5464be434

                                                Sha256: a45fbc8cdddc9f43c0c3c7d73cbb2cdf3cf4c4cd2df20802925b795da5048aa4

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Retry-After, Alert, Content-Length, Backoff, Content-Type 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 939 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Mon, 06 Mar 2023 22:08:38 GMT 

                                            
                                                
age: 135 

                                            
                                                
cache-control: max-age=3600,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    84db75194692d4afe13196bda6f22da8

                                                Sha1:   4c1f49bc973a4917f146d93c8d598344edc021f6

                                                Sha256: a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
server: nginx 

                                            
                                                
date: Mon, 06 Mar 2023 22:10:53 GMT 

                                            
                                                
content-length: 12 

                                            
                                                
access-control-expose-headers: content-type 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
via: 1.1 google 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/json

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
access-control-expose-headers: Backoff, Content-Type, Last-Modified, Retry-After, Expires, Pragma, Content-Length, Cache-Control, Alert, ETag 

                                            
                                                
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                            
                                                
strict-transport-security: max-age=31536000 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
content-length: 329 

                                            
                                                
via: 1.1 google 

                                            
                                                
date: Mon, 06 Mar 2023 21:12:30 GMT 

                                            
                                                
age: 3503 

                                            
                                                
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                            
                                                
etag: "1648230346554" 

                                            
                                                
cache-control: max-age=3600,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: AVYHKJcZgh5yL1mi+nJJzA== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                        
                                             52.43.88.238

                                            
                                                HTTP/1.1 101 Switching Protocols

                                            

                                            
                                                
Connection: Upgrade 

                                            
                                                
Upgrade: websocket 

                                            
                                                
Sec-WebSocket-Accept: 32deknjdgMkEtPAFEBntvAXHUmQ= 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             95.101.11.115

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "B638E3CC42F6E98562FE1B69EA715F5BB9089DBD81E906F0A91B5E00EFB324B1" 

                                            
                                                
Last-Modified: Sun, 05 Mar 2023 20:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=3367 

                                            
                                                
Expires: Mon, 06 Mar 2023 23:07:02 GMT 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    273e6c0313495fc0c847ff53b0acd224

                                                Sha1:   675d864c3b8dbb1360865b21dfe133c132cf21ac

                                                Sha256: b638e3cc42f6e98562fe1b69ea715f5bb9089dbd81e906f0a91b5e00efb324b1

                                        
                                            GET /static/NgAA/css/styles.min.css HTTP/1.1 

                                        
                                            
Host: ero-cupid.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: text/css

                                            

                                            
                                                
Server: nginx/1.18.0 (Ubuntu) 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
Content-Length: 14054 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Last-Modified: Wed, 20 Apr 2022 14:05:31 GMT 

                                            
                                                
ETag: "6260132b-36e6" 

                                            
                                                
Access-Control-Allow-Origin: * 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  Unicode text, UTF-8 text, with very long lines (14050), with no line terminators

                                                Size:   14054

                                                Md5:    7c7128605b68dc5c5074066f7fe50087

                                                Sha1:   a02bdf7787d753e9b92f703a1c94ffa67a7936df

                                                Sha256: ec5c6e7c09b0f1e32e88152db7093221b0d4aa8a7d73e10c7e446f864d5ff4a6

                                        
                                            GET /f44bbfb9a37b4915ac9fa50036de00f6.min.js HTTP/1.1 

                                        
                                            
Host: js.sentry-cdn.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://ero-cupid.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             151.101.194.217

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/javascript

                                            

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000 

                                            
                                                
x-frame-options: deny 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
x-envoy-attempt-count: 1 

                                            
                                                
x-envoy-upstream-service-time: 17 

                                            
                                                
content-encoding: gzip 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
age: 7 

                                            
                                                
x-served-by: getsentry-web-default-common-production-848cdb54f7-8v2g9, cache-bma1622-BMA 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
timing-allow-origin: https://sentry.io 

                                            
                                                
strict-transport-security: max-age=31536000; includeSubDomains 

                                            
                                                
content-length: 1077 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (502)

                                                Size:   1077

                                                Md5:    f168a33e468d994bc37380cb6f1b9844

                                                Sha1:   f07eee5b20ac9dc587e6c8a15a8ec3454a89ba26

                                                Sha256: 38dec94c4484898bf5d2917c3d61ddcf77e2f2388122d2c4551607ffb1e664b0

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3553f944-d85f-4136-8939-71be8d622db9.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 10667 

                                            
                                                
x-amzn-requestid: 84db4940-e8e2-4729-8bfd-fd82d9cd32fc 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: BMPjaENkIAMF1cA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-640192e2-42c67d8a4a03cd0d33e5d004;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Fri, 03 Mar 2023 06:25:38 GMT 

                                            
                                                
x-amz-cf-pop: SEA19-C3 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: vRsOODhcPypCzX_hrZIv9drC32TAi3bfUvbqwMqMBSEjiIGikVh0iQ== 

                                            
                                                
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 06 Mar 2023 07:48:04 GMT 

                                            
                                                
age: 51771 

                                            
                                                
etag: "3da4c9f6bd4deb49d97a8809d3ee5527a92bad29" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10667

                                                Md5:    a0d45909f5960fab61dc510f2d8727f9

                                                Sha1:   3da4c9f6bd4deb49d97a8809d3ee5527a92bad29

                                                Sha256: 508c8feca56c077a419b52d2c32b1df0cf10e8c189997c58f67660ea66803273

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5573b4fa-a0bc-4bdd-95cf-3f076cd00ec6.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 7149 

                                            
                                                
x-amzn-requestid: 566034bc-f422-4df1-ac00-c843fda7d892 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: BYNhZHsDIAMFSWQ= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64065c6f-2c2f5e1911886a905463583b;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Mon, 06 Mar 2023 21:34:39 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C3 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: FTGKGsH0LIx43atqlB9ZFi5Ky47v9i4SvSvWg7V-awKqpDJz-bh3mw== 

                                            
                                                
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ac463f3377446e4c603deca30feb744a.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 06 Mar 2023 21:42:56 GMT 

                                            
                                                
age: 1679 

                                            
                                                
etag: "4640e720eee24fe8af05120bd78ac87283185707" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7149

                                                Md5:    3c1622ea57ab959bf7f10dbccb7c40fb

                                                Sha1:   4640e720eee24fe8af05120bd78ac87283185707

                                                Sha256: 1d84da08a93001100d72009e0012083da9cebdbf527daf9bd464cf8af3a50a56

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0479ca07-1cf3-4233-a788-502bbc20fe7a.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: image/jpeg

                                            

                                            
                                                
server: nginx 

                                            
                                                
content-length: 9552 

                                            
                                                
x-amzn-requestid: 50849335-aaad-424f-84eb-f06cca6a8084 

                                            
                                                
x-xss-protection: 1; mode=block 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                            
                                                
x-frame-options: DENY 

                                            
                                                
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                            
                                                
x-amz-apigw-id: BYOvvGBtoAMFfqA= 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
x-amzn-trace-id: Root=1-64065e64-6071b65f31efed6750ee54b4;Sampled=0 

                                            
                                                
x-amzn-remapped-date: Mon, 06 Mar 2023 21:43:00 GMT 

                                            
                                                
x-amz-cf-pop: HIO50-C1, SEA19-C3 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
x-amz-cf-id: mjXh4Xdrwe_0FMDxqQ5EdDJxVoAUR4S3uaW1SmTG22wfN07cbYPGGw== 

                                            
                                                
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 5c35539543902c678280929df206948c.cloudfront.net (CloudFront), 1.1 google 

                                            
                                                
date: Mon, 06 Mar 2023 21:45:21 GMT 

                                            
                                                
age: 1534 

                                            
                                                
etag: "6694b053df34b65f9faabe9747bdc50bc8ef2729" 

                                            
                                                
cache-control: max-age=3600,public,public 

                                            
                                                
alt-svc: clear 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9552

                                                Md5:    deccb690482c7b596ebb11edc196637f

                                                Sha1:   6694b053df34b65f9faabe9747bdc50bc8ef2729

                                                Sha256: c2dcc930762598b4baa02c64cb5b5655d2725a9d0833145f807abe631fe09205

                                        
                                            GET /7.41.0/bundle.es5.min.js HTTP/1.1 

                                        
                                            
Host: browser.sentry-cdn.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://ero-cupid.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                        
                                             151.101.194.217

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/javascript; charset=utf-8

                                            

                                            
                                                
cache-control: public, max-age=31536000 

                                            
                                                
expires: Tue, 05 Mar 2024 12:59:58 GMT 

                                            
                                                
last-modified: Mon, 06 Mar 2023 12:36:39 GMT 

                                            
                                                
etag: "4e6de5ddb0cbc8b033560220b0b6cb7f" 

                                            
                                                
content-encoding: gzip 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
age: 33057 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
server: Fastly 

                                            
                                                
strict-transport-security: max-age=31536000; includeSubDomains 

                                            
                                                
content-length: 20850 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text, with very long lines (64341)

                                                Size:   20850

                                                Md5:    4e6de5ddb0cbc8b033560220b0b6cb7f

                                                Sha1:   04a10504d607dcf3a37bfa1355b06f9988906b81

                                                Sha256: d728c7d19bd9664d409576ac95363b2a2f9e29f1e67294d87d93391acf0b58c9

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             142.250.74.131

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
Cache-Control: public, max-age=14400 

                                            
                                                
Server: ocsp_responder 

                                            
                                                
Content-Length: 472 

                                            
                                                
X-XSS-Protection: 0 

                                            
                                                
X-Frame-Options: SAMEORIGIN 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   472

                                                Md5:    587b1cd8e3fa518a1784d2ccc0139a36

                                                Sha1:   e1a4d4576e95660cc149c60b3655a278e6ac967b

                                                Sha256: 8339b116073dcfe2280c5d98bdac9e9d15214589f0292cc9c399656f887dc628

                                        
                                            GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 

                                        
                                            
Host: ajax.googleapis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.106

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/javascript; charset=UTF-8

                                            

                                            
                                                
accept-ranges: bytes 

                                            
                                                
content-encoding: gzip 

                                            
                                                
access-control-allow-origin: * 

                                            
                                                
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers 

                                            
                                                
cross-origin-resource-policy: cross-origin 

                                            
                                                
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers" 

                                            
                                                
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]} 

                                            
                                                
timing-allow-origin: * 

                                            
                                                
content-length: 31021 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
server: sffe 

                                            
                                                
x-xss-protection: 0 

                                            
                                                
date: Thu, 02 Mar 2023 13:36:02 GMT 

                                            
                                                
expires: Fri, 01 Mar 2024 13:36:02 GMT 

                                            
                                                
cache-control: public, max-age=31536000, stale-while-revalidate=2592000 

                                            
                                                
last-modified: Fri, 08 May 2020 07:05:03 GMT 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
age: 376493 

                                            
                                                
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   34550

                                                Md5:    75c09fe60f183b90d7e6648b425d2129

                                                Sha1:   fca6b6d9d5325c525028e0445d30d8a28dff206c

                                                Sha256: 6f82aaade433b02a72501922ac679cc59820da667ca6f06319a11fde2407a317

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.r2m02.amazontrust.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             54.230.80.227

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Content-Length: 471 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Cache-Control: max-age=168861 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
Etag: "64064248-1d7" 

                                            
                                                
Expires: Wed, 08 Mar 2023 21:05:16 GMT 

                                            
                                                
Last-Modified: Mon, 06 Mar 2023 19:43:04 GMT 

                                            
                                                
Server: ECAcc (nya/799C) 

                                            
                                                
X-Cache: Miss from cloudfront 

                                            
                                                
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront) 

                                            
                                                
X-Amz-Cf-Pop: OSL50-P1 

                                            
                                                
X-Amz-Cf-Id: GhM3EJ_xb1iU9-i_xr16odOUvYasOOCHis0CiC7XRDccLUTJCw4fNQ== 

                                            
                                                
Age: 4933 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    1251f951ce3ad1c7eecdf13de37f53c6

                                                Sha1:   196a4d4749c9f455c150b1f0363bdf2f168f9154

                                                Sha256: 379b77f5739d74a332cfdf20f592a4a77b5b556af09a94821bf35b81b374232e

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             95.101.11.115

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "746BAB210401390F8168BD766C87ED8D60C9C1F8B38EE57A5DB854CC6BE5DC9B" 

                                            
                                                
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=17758 

                                            
                                                
Expires: Tue, 07 Mar 2023 03:06:53 GMT 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    30238296c62da4db5959b8b1914c78ff

                                                Sha1:   bff6627acfcc9a4627520596a1e950ca6715596c

                                                Sha256: 746bab210401390f8168bd766c87ed8d60c9c1f8b38ee57a5db854cc6be5dc9b

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             95.101.11.115

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Server: nginx 

                                            
                                                
Content-Length: 503 

                                            
                                                
ETag: "746BAB210401390F8168BD766C87ED8D60C9C1F8B38EE57A5DB854CC6BE5DC9B" 

                                            
                                                
Last-Modified: Sat, 04 Mar 2023 17:00:00 UTC 

                                            
                                                
Cache-Control: public, no-transform, must-revalidate, max-age=17758 

                                            
                                                
Expires: Tue, 07 Mar 2023 03:06:53 GMT 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
Connection: keep-alive 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   503

                                                Md5:    30238296c62da4db5959b8b1914c78ff

                                                Sha1:   bff6627acfcc9a4627520596a1e950ca6715596c

                                                Sha256: 746bab210401390f8168bd766c87ed8d60c9c1f8b38ee57a5db854cc6be5dc9b

                                        
                                            GET /mng/subs_window.css?ver=1672746357 HTTP/1.1 

                                        
                                            
Host: static.production.almightypush.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.86

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/css

                                            

                                            
                                                
content-length: 6945 

                                            
                                                
last-modified: Wed, 18 Jan 2023 12:37:33 GMT 

                                            
                                                
x-amz-server-side-encryption: AES256 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
server: AmazonS3 

                                            
                                                
date: Mon, 06 Mar 2023 09:07:19 GMT 

                                            
                                                
etag: "bd7dbae15f904a4e1213439ebfefddbe" 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) 

                                            
                                                
x-amz-cf-pop: OSL50-P1 

                                            
                                                
x-amz-cf-id: aVv-U_efmnY5a4p0KDXyrlfpG_Vml6bSOKm0Xy9NR0Gx1Z0HEGkARQ== 

                                            
                                                
age: 47054 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  Unicode text, UTF-8 text

                                                Size:   6945

                                                Md5:    bd7dbae15f904a4e1213439ebfefddbe

                                                Sha1:   9f7a33b3d6e7965d8b99f0ff56cbf2e2ebb8f78e

                                                Sha256: 30c08f3bb42d9a16155c65fbc952430048e4a84be70b98cb989b2dc977b49f8a

                                        
                                            GET /mng/subs_window.js?ver=1672746357 HTTP/1.1 

                                        
                                            
Host: static.production.almightypush.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             54.230.111.86

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/javascript

                                            

                                            
                                                
content-length: 19491 

                                            
                                                
last-modified: Wed, 18 Jan 2023 12:37:33 GMT 

                                            
                                                
x-amz-server-side-encryption: AES256 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
server: AmazonS3 

                                            
                                                
date: Mon, 06 Mar 2023 04:17:42 GMT 

                                            
                                                
etag: "ae593f4be1dd1f0710123918b49c4933" 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) 

                                            
                                                
x-amz-cf-pop: OSL50-P1 

                                            
                                                
x-amz-cf-id: JhSFnV8jr3IWTVj0WYFIPyRM9HRbccS21ojRWW1_kCHcLLO_9-r5eQ== 

                                            
                                                
age: 64430 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  Unicode text, UTF-8 text

                                                Size:   19491

                                                Md5:    ae593f4be1dd1f0710123918b49c4933

                                                Sha1:   66fbe30bb873e0a47d3d72e737d68aa4b6916c26

                                                Sha256: fdf9ff3f74dcf11d0fa456dcd53cb21550f67f0cfdc11dc29bef595f07b56206

                                        
                                            GET /mng/channels/sw.min.js HTTP/1.1 

                                        
                                            
Host: static.production.almightypush.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://ero-cupid.com/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
TE: trailers

                                        
                                             54.230.111.86

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: application/javascript

                                            

                                            
                                                
content-length: 6277 

                                            
                                                
last-modified: Wed, 18 Jan 2023 12:37:33 GMT 

                                            
                                                
x-amz-server-side-encryption: AES256 

                                            
                                                
accept-ranges: bytes 

                                            
                                                
server: AmazonS3 

                                            
                                                
date: Mon, 06 Mar 2023 07:52:15 GMT 

                                            
                                                
etag: "03b71607d0eb65df0c65a3d5fece3706" 

                                            
                                                
x-cache: Hit from cloudfront 

                                            
                                                
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront) 

                                            
                                                
x-amz-cf-pop: OSL50-P1 

                                            
                                                
x-amz-cf-id: b23NBX8M__lw9b3CJTx0imvqzZdb_s3voMW29eqU4aue6KscCeRk6g== 

                                            
                                                
age: 51521 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  ASCII text

                                                Size:   6277

                                                Md5:    03b71607d0eb65df0c65a3d5fece3706

                                                Sha1:   871375fc1daff080ef7657a83058cbbe674d62e9

                                                Sha256: 1a59bbb1f7d210cbcad77e4fa12797ac225f574c2d65b72ed3695719f6e84caf

                                        
                                            POST /stats HTTP/1.1 

                                        
                                            
Host: ero-cupid.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/x-www-form-urlencoded; charset=UTF-8 

                                        
                                            
X-Requested-With: XMLHttpRequest 

                                        
                                            
Content-Length: 402 

                                        
                                            
Origin: https://ero-cupid.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Cookie: slappInfo64_I1hZ0mQGZO4=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 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: same-origin

                                        
                                             185.151.246.147

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/json; charset=UTF-8

                                            

                                            
                                                
Server: nginx/1.18.0 (Ubuntu) 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:55 GMT 

                                            
                                                
Transfer-Encoding: chunked 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Access-Control-Allow-Origin: * 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  JSON data\012- , ASCII text, with very long lines (378), with no line terminators

                                                Size:   378

                                                Md5:    c1766226105dc98b02b90b8683399253

                                                Sha1:   0e818b3e2567d41cc36177db320bd67e7a327396

                                                Sha256: c8c4b95171f10d47402de7dd4278ffd6f2dbbcbf8919eeabba224aed723c6cc3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.r2m01.amazontrust.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                        
                                             54.230.80.227

                                            
                                                HTTP/1.1 200 OK 

                                            
                                                
Content-Type: application/ocsp-response

                                            

                                            
                                                
Content-Length: 471 

                                            
                                                
Connection: keep-alive 

                                            
                                                
Accept-Ranges: bytes 

                                            
                                                
Cache-Control: 'max-age=158059' 

                                            
                                                
Date: Mon, 06 Mar 2023 22:10:56 GMT 

                                            
                                                
Last-Modified: Mon, 06 Mar 2023 21:01:30 GMT 

                                            
                                                
Server: ECAcc (nya/78C0) 

                                            
                                                
X-Cache: Miss from cloudfront 

                                            
                                                
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront) 

                                            
                                                
X-Amz-Cf-Pop: OSL50-P1 

                                            
                                                
X-Amz-Cf-Id: shQoAE8-0FAIlVK19tqQxFLwwHHJ78VWPwVLyEq3OctjN7L3PEgAbQ== 

                                            
                                                
Age: 4166 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  data

                                                Size:   471

                                                Md5:    879e6a42e96e091f7b0a2a3d47b0925e

                                                Sha1:   29e6f01cc817882f346c45d636e32422fde9fed1

                                                Sha256: b3d6b2922a622fee1e23b4dd011be6d5474364cdc268a9cc7d8b03f0227bb167

                                        
                                            OPTIONS /api/v1/code-snippet/ HTTP/1.1 

                                        
                                            
Host: manager.production.almightypush.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Access-Control-Request-Method: GET 

                                        
                                            
Access-Control-Request-Headers: channel-token 

                                        
                                            
Origin: https://ero-cupid.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                        
                                             3.140.173.127

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/html; charset=utf-8

                                            

                                            
                                                
date: Mon, 06 Mar 2023 22:10:56 GMT 

                                            
                                                
content-length: 0 

                                            
                                                
server: gunicorn/19.9.0 

                                            
                                                
vary: Origin 

                                            
                                                
access-control-allow-credentials: true 

                                            
                                                
access-control-allow-origin: https://ero-cupid.com 

                                            
                                                
access-control-allow-headers: accept, accept-encoding, authorization, content-type, origin, x-csrftoken, x-requested-with, X-Push-Channel-Id, Channel-Token 

                                            
                                                
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT 

                                            
                                                
access-control-max-age: 86400 

                                            
                                                
x-content-type-options: nosniff 

                                            
                                                
referrer-policy: same-origin 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /agEA?usid=3bmfq771g6c2d&email=jwhittington%40slurpmail.net&sub1=clear_main&prid=3bmfq771g6c2d HTTP/1.1 

                                        
                                            
Host: dateexotic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                        
                                             172.67.159.164

                                            
                                                HTTP/2 200 OK 

                                            
                                                
content-type: text/html

                                            

                                            
                                                
date: Mon, 06 Mar 2023 22:10:53 GMT 

                                            
                                                
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rq1Ieb4VVbTVT%2BS84Hxl%2FQ0FAvQORUQ01jtoqyapcZ%2FZB%2Bg7OWumCip8crzxqddrvRdrU0uCta5YWq5y0rHHdKExAlp1dhm73VLBypdcsnslCv2TDP3FzfqVq4Hlap5MkQ%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                            
                                                
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                            
                                                
vary: Accept-Encoding 

                                            
                                                
server: cloudflare 

                                            
                                                
cf-ray: 7a3dee6c1a77b4f9-OSL 

                                            
                                                
content-encoding: br 

                                            
                                                
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                            
                                                
X-Firefox-Spdy: h2 

                                            
                                                
 

                                            
                                            
                                                

                                                --- Additional Info ---

                                                Magic:  

                                                Size:   0

                                                Md5:    

                                                Sha1:   

                                                Sha256:

URL	qyjaw8qmorkf0rtest3.peddralsuude.ml/TSKtBH6B?keyword=jwhittington@slurpmail.net&sub1=clear&sub3=salsec-af.com
IP	172.67.143.216 (United States)
ASN	#13335 CLOUDFLARENET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access
Report completed	2023-03-06 22:11:03 UTC
Status	Loading report..
IDS alerts	3
Blocklist alert	0
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (19)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 172.67.143.216

Last 5 reports on ASN: CLOUDFLARENET

Last 1 reports on domain: peddralsuude.ml

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (48)

Overview

Domain Summary (19)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 172.67.143.216

Last 5 reports on ASN: CLOUDFLARENET

Last 1 reports on domain: peddralsuude.ml

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (48)

Network Intrusion Detection Systems