r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7be8442ec1e518ccc80739495f6d047
7a9d24b9d4046262c7753c49afaf9c19f4840626
b93410a9d62da3f219796d753b61a0f730cc272c13596724aa9d20efba298b44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B93410A9D62DA3F219796D753B61A0F730CC272C13596724AA9D20EFBA298B44"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10141
Expires: Sat, 05 Nov 2022 05:45:15 GMT
Date: Sat, 05 Nov 2022 02:56:14 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash cd02b32dbc8416dcb10b468af2166c33
503a9c4cabdb19dfde769f5e2d3ef919c818c364
46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5520
Cache-Control: max-age=115611
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:14 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 11:03:05 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3527f898221f8ba6b5015f6decc100
ead93baa0e9d3a6297be3377dc3a624e5a3f509a
73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9493
Expires: Sat, 05 Nov 2022 05:34:28 GMT
Date: Sat, 05 Nov 2022 02:56:15 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gm5DxXvoFkwqryb0GPOdy8dADDg+/Zc8UEg+zX5XDzvfM1MfpPpdfIuLc0rzrgW+kL9o8FqNvh0=
x-amz-request-id: EXZ339BX3A6Q3A7X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 05 Nov 2022 02:09:49 GMT
age: 2786
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 02:56:15 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 42a0adacced30df52cf7cad3e200036d
f7b4114defc61f806dbb74fd228bca155d52362a
e4928481739a2a75dce86c03b355c6dff507426e8d851cba5ca8537b1be87c20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4720
Cache-Control: max-age=109752
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:15 GMT
Etag: "6364c817-1d7"
Expires: Sun, 06 Nov 2022 09:25:27 GMT
Last-Modified: Fri, 04 Nov 2022 08:06:47 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
patisseriearpege.com/verifylogs/authentic.zip
302 Found 11 B URL HTTP/1.1 patisseriearpege.com/verifylogs/authentic.zip
IP
ASN #30633 LEASEWEB-USA-WDC
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer Verdict Alert fortinet Phishing
GET /verifylogs/authentic.zip HTTP/1.1
Host: patisseriearpege.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 05 Nov 2022 02:56:14 GMT
location: http://dipaka-ead.com/zcvisitor/69951f9a-5cb5-11ed-847f-12a04fb68a47/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0b485b40-4e8d-11ed-9f3d-0a918cbcbb97
server: nginx
set-cookie: sid=698ef23c-5cb5-11ed-80e8-24c173c02a78; path=/; domain=.patisseriearpege.com; expires=Thu, 23 Nov 2090 06:10:22 GMT; max-age=2147483647; HttpOnly
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NTCGZfStLCErMH3ftfZY3Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ykDnwQcdamFRj9cEegIEYXB9HPM=
dipaka-ead.com/zcvisitor/69951f9a-5cb5-11ed-847f-12a04fb68a47/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0b485b40-4e8d-11ed-9f3d-0a918cbcbb97
200 998 B URL HTTP/1.1 dipaka-ead.com/zcvisitor/69951f9a-5cb5-11ed-847f-12a04fb68a47/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0b485b40-4e8d-11ed-9f3d-0a918cbcbb97
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8fc32a230bc8938224198d7a5e1b867a
2fb8286d6773be70e072a86f96fa429818c7e003
36cb462f727dfeb1d1aa74a26c5c67a1c75d4140699a0ea7076ca4cbd1d42f01
GET /zcvisitor/69951f9a-5cb5-11ed-847f-12a04fb68a47/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0b485b40-4e8d-11ed-9f3d-0a918cbcbb97 HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sat, 05 Nov 2022 02:56:16 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: aNJKCSCw
dipaka-ead.com/zcredirect?visitid=69951f9a-5cb5-11ed-847f-12a04fb68a47&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 748 B URL HTTP/1.1 dipaka-ead.com/zcredirect?visitid=69951f9a-5cb5-11ed-847f-12a04fb68a47&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (331)
Hash 966b85ef209f623743fc68f620bf53b0
3512895e89e1f49ccbffa5771f93345a6b2cba8c
f0b3580fd9bec11190a58bfa7651e5c89f8ee4d4f3a59b1d64fcb466539b6ead
GET /zcredirect?visitid=69951f9a-5cb5-11ed-847f-12a04fb68a47&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcvisitor/69951f9a-5cb5-11ed-847f-12a04fb68a47/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0b485b40-4e8d-11ed-9f3d-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sat, 05 Nov 2022 02:56:16 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: ntbWvZlG
dipaka-ead.com/favicon.ico
404 653 B URL HTTP/1.1 dipaka-ead.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: dipaka-ead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://dipaka-ead.com/zcredirect?visitid=69951f9a-5cb5-11ed-847f-12a04fb68a47&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Sat, 05 Nov 2022 02:56:16 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: SyedXgPx
cartining-specute.com/zp-redirect?target=https%3A%2F%2Ftrk.ezymny.com%2F71625b6a-307e-445c-be32-59d93b21d919%3Fo%3D2736%26clicktag%3Dwso2v1v8efi2ma8k2e9dm38m&caid=d934eb6d-f327-48a7-99a3-e0a43a04c155&zpid=69951f9a-5cb5-11ed-847f-12a04fb68a47&cid=wso2v1v8efi2ma8k2e9dm38m&rt=R
302 Found 0 B URL HTTP/2 cartining-specute.com/zp-redirect?target=https%3A%2F%2Ftrk.ezymny.com%2F71625b6a-307e-445c-be32-59d93b21d919%3Fo%3D2736%26clicktag%3Dwso2v1v8efi2ma8k2e9dm38m&caid=d934eb6d-f327-48a7-99a3-e0a43a04c155&zpid=69951f9a-5cb5-11ed-847f-12a04fb68a47&cid=wso2v1v8efi2ma8k2e9dm38m&rt=R
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zp-redirect?target=https%3A%2F%2Ftrk.ezymny.com%2F71625b6a-307e-445c-be32-59d93b21d919%3Fo%3D2736%26clicktag%3Dwso2v1v8efi2ma8k2e9dm38m&caid=d934eb6d-f327-48a7-99a3-e0a43a04c155&zpid=69951f9a-5cb5-11ed-847f-12a04fb68a47&cid=wso2v1v8efi2ma8k2e9dm38m&rt=R HTTP/1.1
Host: cartining-specute.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://dipaka-ead.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sat, 05 Nov 2022 02:56:16 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://trk.ezymny.com/71625b6a-307e-445c-be32-59d93b21d919?o=2736&clicktag=wso2v1v8efi2ma8k2e9dm38m
pragma: no-cache
set-cookie: cc-v4=ObDq50XXqnrE14K8AjolaNLiR0yUeoe26yL97UxXoxR2Wjg7EtScGOoKQw1yjCbPFwE%2FvUYpZVk4qaT9Oq6tCgHAJKb1eBZ16plB17NN7hWxoEYua9DYpE2be0uQiY7uMIJpLrm6olXRThJgwwdgDg%3D%3D; Max-Age=31536000; Expires=Sun, 05-Nov-2023 02:56:16 GMT; Domain=cartining-specute.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 7210d93074ab95da4fd3a9b58f01a32d
158f64cc9c3834fab2d1fddf89e9b73d1aaae78a
1254961795390a501bb718c924408b2f6404741300dbcb45aeca8e3dc0912e1d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "1254961795390A501BB718C924408B2F6404741300DBCB45AECA8E3DC0912E1D"
Last-Modified: Thu, 03 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=198
Expires: Sat, 05 Nov 2022 02:59:34 GMT
Date: Sat, 05 Nov 2022 02:56:16 GMT
Connection: keep-alive
trk.ezymny.com/71625b6a-307e-445c-be32-59d93b21d919?o=2736&clicktag=wso2v1v8efi2ma8k2e9dm38m
302 Found 0 B URL HTTP/2 trk.ezymny.com/71625b6a-307e-445c-be32-59d93b21d919?o=2736&clicktag=wso2v1v8efi2ma8k2e9dm38m
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /71625b6a-307e-445c-be32-59d93b21d919?o=2736&clicktag=wso2v1v8efi2ma8k2e9dm38m HTTP/1.1
Host: trk.ezymny.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dipaka-ead.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 05 Nov 2022 02:56:16 GMT
content-length: 0
location: https://ww2.casualdating.com/landing/cl6001?clickId=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tracker=SGM_Pro&publisher=31015&subPublisher=&zz=true&hit_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tp_redirect_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
set-cookie: attrk=yes;Version=1;Max-Age=86400
vcid=%7B%22id%22%3A%22a9f0c53c-5c4f-4a8b-9c53-341fe544aab3%22%2C%22firstTime%22%3A%22Nov+5%2C+2022+2%3A56%3A16+AM%22%2C%22visitCount%22%3A1%2C%22firstTimeDay%22%3A%22Nov+5%2C+2022+2%3A56%3A16+AM%22%2C%22visitDays%22%3A1%2C%22origin%22%3A%22routing%22%2C%22lastLocation%22%3A%22routing%22%2C%22ageInSecs%22%3A0%7D;Version=1;Domain=ezymny.com;Path=/;Max-Age=2147483647;Expires=Thu, 23 Nov 2090 06:10:23 GMT
__cf_bm=e4dEmHUwUy.7PdlDbIFOMFXQFer9913GZj7bD9GS5Wc-1667616976-0-Acwh+C5xB0O0mRKzKguX3yXPtFiBvqTCtRousdpOYkpaykEln2KFNren3KGHBQQGrSO/RBBvmV00uUSa+4akqUE=; path=/; expires=Sat, 05-Nov-22 03:26:16 GMT; domain=.ezymny.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250b89981b52d-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash f50b45b12370a5f803314211544302ed
acae073a75e8ac8321a0a7addec5d80a0851f1b0
b552dcdee0a773b1e2dbe28ffe7b4a45e1de743ccacb330fb471e079a85bf890
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "B552DCDEE0A773B1E2DBE28FFE7B4A45E1DE743CCACB330FB471E079A85BF890"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4914
Expires: Sat, 05 Nov 2022 04:18:11 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12040
Expires: Sat, 05 Nov 2022 06:16:57 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12040
Expires: Sat, 05 Nov 2022 06:16:57 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12040
Expires: Sat, 05 Nov 2022 06:16:57 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12040
Expires: Sat, 05 Nov 2022 06:16:57 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8ee5640e4bbe5e2c0dd4aa0698a3ce62
a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef
938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12040
Expires: Sat, 05 Nov 2022 06:16:57 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c7c9c908e891e7277f21a914fea9aa25
596c3c084ae3d850a5dc28e549b4e22f2b8cc71f
709c217b3ac09712d2af4366316c8977b1a4e2a73f887b3e30f10df1ed50bacd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9150
x-amzn-requestid: 7c179507-20a7-4fa3-993b-f79b3e7949ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apwiGHD_IAMFQZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2e0d-337623ce79dc53c864632c72;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:06:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OM3hc6Jfl5pDWPikIlcQOexIScQavqJh9h-N-EvIGNpicWJwHMPKIA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 19:29:40 GMT
age: 26797
etag: "596c3c084ae3d850a5dc28e549b4e22f2b8cc71f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8386dbb6-48d7-404a-acfd-e0366f041a8b.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8386dbb6-48d7-404a-acfd-e0366f041a8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a3428f7926e724686ddf40cdfdaf830
e56f1acd5646afde18b366e30f8dfbd7f9a6a15b
a413cee3cdae66712505157afaad44b2e08762bce67d05398dfcaa721035eafa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8386dbb6-48d7-404a-acfd-e0366f041a8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8933
x-amzn-requestid: 5a2debdf-46aa-4205-a78a-5bebd347bc1c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: atDg5GSaoAMFgJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635b7f9f-630c25e060bb22dc55fbd097;Sampled=0
x-amzn-remapped-date: Fri, 28 Oct 2022 07:07:11 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ztXeOZSwnwsYYPPOmCkIr_WTTKl3UbPi9kQDOCwrumndDzrrhJS5cQ==
via: 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 22:22:51 GMT
age: 16406
etag: "e56f1acd5646afde18b366e30f8dfbd7f9a6a15b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F005dcb42-4824-4232-94cb-b73713f73375.jpeg
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F005dcb42-4824-4232-94cb-b73713f73375.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c1182def5cf59cf834fc33853c55d15
15ac708f7d9fdf2136c980afcd844e8fff6fb7aa
2e0b597618655aa5649787b034e18e8d7a47e03404233a516a68ee6e98a8ad43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F005dcb42-4824-4232-94cb-b73713f73375.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3921
x-amzn-requestid: 7b68d999-a1c6-4889-bf79-e1f0abfc1d1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apTueHLRoAMFjyw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359fff6-679b214454c013587af76689;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 03:50:14 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lEDQvyTIRNKTT7J-oz-Rb2PcayFmw0ybRFFrvjMKXJYLwy45Oaun_g==
via: 1.1 c07670802688417c8b871124c547eb0a.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 14:39:29 GMT
age: 44208
etag: "15ac708f7d9fdf2136c980afcd844e8fff6fb7aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F026ddf6a-a4ad-4c8d-9da5-41a184265e24.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F026ddf6a-a4ad-4c8d-9da5-41a184265e24.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8fd1a79378f8a426e682c599e64e9bdf
d223df60a7340cf3745e981f19c1d3fd9c75d44a
14e3192a87f45d7ed4f809c528e1631bba69e69fc541637574ae3c3f70540408
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F026ddf6a-a4ad-4c8d-9da5-41a184265e24.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4749
x-amzn-requestid: d6545893-af81-4e76-bd31-cd80a0658a28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: asg4QH3HoAMFX7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635b4834-015a8ad175cc388576dcddc5;Sampled=0
x-amzn-remapped-date: Fri, 28 Oct 2022 03:10:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p3tf0WwkKam_wcY3Ik0IJxu_b11GqHoTWyQ4kxl0mtejIfJD14ji0Q==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:49:43 GMT
age: 18394
etag: "d223df60a7340cf3745e981f19c1d3fd9c75d44a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe9d0595-2606-4462-8dd8-11c0a267de65.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe9d0595-2606-4462-8dd8-11c0a267de65.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df11af332512d94d34a88a4671b2fbe1
0db58fda3dec787d0d979f8398d90b2b8d7e2c2f
7c561aed53b57db2039031c79453fc3f7cead944c60dd087487a9998c2df5a30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe9d0595-2606-4462-8dd8-11c0a267de65.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4413
x-amzn-requestid: b6f0aa99-437e-4e3d-b300-0a0ab1563c42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bGHm_HhVIAMFdUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365862c-3eacf2f4114f5ae22a140480;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tfZ_BvuASWOZmTXu843gBNpGSe4T0CUCaymoVUMzYFWaILLZX-vPmg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 22:07:33 GMT
age: 17324
etag: "0db58fda3dec787d0d979f8398d90b2b8d7e2c2f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ae2b8d827fb2c8bef64febcd36f1645
f7705fcd2d91ce90c58e79324cce1e3abba6c1c8
2dc55e97ef3a85fccb104b80161a8bac16b12d37527c336563677432584c7ad5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11421
x-amzn-requestid: 80f2a46c-6682-4160-b896-eeaa366dbab7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aUsKNF4SoAMFn5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6351c0a7-5a5517d005ec7a7d1507b58e;Sampled=0
x-amzn-remapped-date: Thu, 20 Oct 2022 21:41:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gdqoswTMqjrfyzzY-103agxLH8ak-rFsCId29eoLOF6WHgFmd04K7g==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 08:24:41 GMT
age: 66696
etag: "f7705fcd2d91ce90c58e79324cce1e3abba6c1c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c029ca9249583f8e860c4707ec751074
3151b2e607888610cc179920f6471b879b99e2fd
2e0f651d8705c6b10a21df88f8a5eb2e818a50b9f785e1cf7d65ee22f9622aa7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2E0F651D8705C6B10A21DF88F8A5EB2E818A50B9F785E1CF7D65EE22F9622AA7"
Last-Modified: Thu, 03 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Sat, 05 Nov 2022 03:39:28 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl01.jpg?950734
200 OK 38 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl01.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d25d652ec0ee3b6b6c1bf13f9de976ad
bd515f9150867082632ca607ff2ff766c2d1d50b
0a0276ca0d774c64a01d4448f5cf99c16f50eee260fc43713a9fcf215ecb5c6c
GET /img/_pictures/fsk16/m/cl01.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 38095
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-94cf"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41073
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=UtfPbwxVoahDwbC2Jhbq7OsCpaV1hgRCXLMugVDWSGA-1667616977-0-AXtV+IW4/8m/KG8wGt4c97nFzA64JXgLSVBALRscw+SvOqNgDf6KH8EVNFnzm3mQtzgiNF63RFtd4BhHhBZmwks=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbcfeb503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl05.jpg?950734
200 OK 48 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl05.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 27164017f1aa62515fe1e0f98490e42d
f1fb37569d871c7511e2ce0ef603c9f10ed3a51e
d9ced411b18b0ff18b7ffa9b501ae88f755917ca353c4edc782c9a495c0ccb18
GET /img/_pictures/fsk16/m/cl05.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 47899
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-bb1b"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41073
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=Y.89l2Q1CN3GPE6kvP8qUfRFMjJgWxQuYHz29tZIzNA-1667616977-0-AcX1szly3QomlC2VT0/pIE/vJCEoXKEW/nggXIQ9eaqOgsnM4XupgZVdCsgorNSOvj8xXzEDglFRk9H7OjydBII=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbd02b503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl02.jpg?950734
200 OK 38 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl02.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 409ed3574d65b08ed3236e00747326be
b36ec2bc4c363474942cae266bfc44ab3c2e070e
3ccfcf428bfcab9f0ff342d25fa88cf558f4b8b1da4a50938de856e2ac5eb25e
GET /img/_pictures/fsk16/m/cl02.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 38431
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-961f"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41073
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=m8HPVNSWgohORcResvDXr3HHYO7gAzvSbnmwUKMK30w-1667616977-0-AcoskT8x2EmPH1/U0t8DtOHkP7gMUnwg3NAtt3iy40JDvhVUAEjmbIeMB3hDZ7Jy6btMWdkknBBZ8dlW6uBnRnU=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbcffb503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl03.jpg?950734
200 OK 47 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl03.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 2322b3486749744bf0a9ea7a37f9c238
b9b97a48c3647b4fbc42ac0fd923e9a979fc7282
80e29b01f0d6cc6daa75cef711a5db3a011f6dd35964ad2cf7b8912abeebf910
GET /img/_pictures/fsk16/m/cl03.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 47201
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-b861"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41073
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=U9MEo3CJVZBzS91tw7hqBfAX72I3Ju4k.GE5LD_nQOw-1667616977-0-AQfLP4EZayLAn3+7ChOQ20+LUDbUXhGnDBvG5xyc7993Xpk9G74S1S9tuIpC/lEekoyMNFCTAWyeDfR6GNIGTuY=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbd00b503-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c029ca9249583f8e860c4707ec751074
3151b2e607888610cc179920f6471b879b99e2fd
2e0f651d8705c6b10a21df88f8a5eb2e818a50b9f785e1cf7d65ee22f9622aa7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2E0F651D8705C6B10A21DF88F8A5EB2E818A50B9F785E1CF7D65EE22F9622AA7"
Last-Modified: Thu, 03 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Sat, 05 Nov 2022 03:39:28 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl04.jpg?950734
200 OK 47 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl04.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 086f13eb37a4a8533cbe13827322b1ea
fcf5253bb77cf9b645ccffd748e88e17478b79c3
d5e6b384e169032b80bcebe6014b5d90dff2113a63e5fc6a9df5cd090ce2d105
GET /img/_pictures/fsk16/m/cl04.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 46683
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-b65b"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41073
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=wjsI0YU8eb.lx8h3GxERP5pPfNPyeuZLx8bjo2c3eYg-1667616977-0-ARkCHWyCfYp0cwKls62uTPHy0gxiHfyZVIpmwLIe7/v3oO3OwNaHG3NRDD5WvVRLkXQOPV/zcJ4zBTH8z5OsoMU=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbd01b503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl06.jpg?950734
200 OK 48 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl06.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 2c5b2970c3fc892e69bea9b2ad0a0a32
c5f618104295e6061d68b32b7efda94b6a646c13
4ba2db8b2b9bc4561fd04b9603a27cf165341f15b9832c55cb8e54cc96da31a0
GET /img/_pictures/fsk16/m/cl06.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 47727
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-ba6f"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41073
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=g4Ayn__9dyJZ6UQHR9AiUigH0H2o33E1oXVoINXQY08-1667616977-0-ATo0dIs92wAtuB91T8yPCFKKoNVVU60S9ZO+ZAtrM86hJDpLG6NH7co4euL5srorhtGZgMbWH9W0dspMK5Mm9Co=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbd03b503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl08.jpg?950734
200 OK 42 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl08.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash bcd601ca4cd1611a6e99cc61a4fa6bd8
26528fc431b3f2e9da2473a1f0847fbbbb34bde9
80db6e373df2c1843225066bf688ff2af8fb4b6864fffb39f5799a20935b5d98
GET /img/_pictures/fsk16/m/cl08.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 42343
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-a567"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41072
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=xJdylPePZ6o3ceFq6c9Zrh29NSvYaVZKOx.gh6IaRlI-1667616977-0-AR8BFIFh/1Fx/G36plXUWwcxkggpJbUPV0Y3u3r5nMJqrD8i/h8tD4bUlETWdeRccy+BHBUte9axryRfJ/6948k=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbd05b503-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c029ca9249583f8e860c4707ec751074
3151b2e607888610cc179920f6471b879b99e2fd
2e0f651d8705c6b10a21df88f8a5eb2e818a50b9f785e1cf7d65ee22f9622aa7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2E0F651D8705C6B10A21DF88F8A5EB2E818A50B9F785E1CF7D65EE22F9622AA7"
Last-Modified: Thu, 03 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Sat, 05 Nov 2022 03:39:28 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl07.jpg?950734
200 OK 44 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_pictures/fsk16/m/cl07.jpg?950734
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4e5b2f60bc11300f87b75e4a83c8721e
93f163fe190da3847f1804c59026506a08280bee
17be05214e5f5ef51cc2df6c903fd9b8fd29edb00ea33169d22788ee0b816994
GET /img/_pictures/fsk16/m/cl07.jpg?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 44220
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633dfd-acbc"
last-modified: Thu, 03 Nov 2022 04:05:17 GMT
cf-cache-status: HIT
age: 41072
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
set-cookie: __cf_bm=0FJ6D5EsVcY4U3txeFJmkvIWJDSsiPe2l1YjoAb8HLY-1667616977-0-AeJUbvAIJtCCpfsMB000SZeuSBv12Una4MKOe0Yj5EtTsGyEXE0bewzZ5AgXbj3YFpIlumyXVHOHTHjflIrAZTk=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bcbd04b503-OSL
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c029ca9249583f8e860c4707ec751074
3151b2e607888610cc179920f6471b879b99e2fd
2e0f651d8705c6b10a21df88f8a5eb2e818a50b9f785e1cf7d65ee22f9622aa7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2E0F651D8705C6B10A21DF88F8A5EB2E818A50B9F785E1CF7D65EE22F9622AA7"
Last-Modified: Thu, 03 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Sat, 05 Nov 2022 03:39:28 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c029ca9249583f8e860c4707ec751074
3151b2e607888610cc179920f6471b879b99e2fd
2e0f651d8705c6b10a21df88f8a5eb2e818a50b9f785e1cf7d65ee22f9622aa7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "2E0F651D8705C6B10A21DF88F8A5EB2E818A50B9F785E1CF7D65EE22F9622AA7"
Last-Modified: Thu, 03 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2591
Expires: Sat, 05 Nov 2022 03:39:28 GMT
Date: Sat, 05 Nov 2022 02:56:17 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash 18b3e9846a32e6a1dd145d70d76ee611
88eab3ee3dc829428b4e980ccca6d2143a50ecf8
3b9ab10b40e38182f51188561d126dc7806a5a45fa3088232615b4d3d64de4e3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5204
Cache-Control: max-age=102700
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:17 GMT
Etag: "6364aaa9-116"
Expires: Sun, 06 Nov 2022 07:27:57 GMT
Last-Modified: Fri, 04 Nov 2022 06:01:13 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash 82ce859347899fc7c0da361d938a3766
7efa9565bc757520550c35a04d77ad65176daaa5
b9f1bd962f3260ec55846caa0e280a77ec62a492b386a6dcb3cef2774064d411
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6549
Cache-Control: max-age=107289
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:17 GMT
Etag: "6364b756-117"
Expires: Sun, 06 Nov 2022 08:44:26 GMT
Last-Modified: Fri, 04 Nov 2022 06:55:18 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
lpmedia.servefilesonly.com/js/plugins/jQueryUI/jquery-ui-1-12.min.js?950734
200 OK 68 kB URL HTTP/2 lpmedia.servefilesonly.com/js/plugins/jQueryUI/jquery-ui-1-12.min.js?950734
IP
Hash aa2eaaed05d169ff53ce702f79659ad6
503941d2b8a3a2c577597162ba5180b342960308
5aa711bd715c99c5497923649a3901b53c730bb0415a7e7ee984edc61c3fa802
GET /js/plugins/jQueryUI/jquery-ui-1-12.min.js?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 04:05:54 GMT
vary: Accept-Encoding
etag: W/"63633e22-3dee5"
access-control-allow-origin: *
cache-control: public, max-age=43200
content-encoding: gzip
cf-cache-status: HIT
age: 42667
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=9iMQ2EpFicIo0MIsXzcDhpsKwVJSbFchu3aANVpsnBk-1667616977-0-AbWpspSS/Pk02aeRsiy9wr9TleqPMXVpL4I+vvEU7NJhhCkoFjXd6AGHNa5wOmOpHDduNcz5uhu1BbCSFDpsA9U=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcf9b503-OSL
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP
File type ASCII text, with very long lines (32058)
Hash fc3fc31e5e7c0933dc18e562c1c071bf
a44c31323f6bd29e583cc585036e6eb39f7014a6
ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 29 Oct 2022 20:03:21 GMT
expires: Sun, 29 Oct 2023 20:03:21 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 543176
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 18b3e9846a32e6a1dd145d70d76ee611
88eab3ee3dc829428b4e980ccca6d2143a50ecf8
3b9ab10b40e38182f51188561d126dc7806a5a45fa3088232615b4d3d64de4e3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5204
Cache-Control: max-age=102700
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:17 GMT
Etag: "6364aaa9-116"
Expires: Sun, 06 Nov 2022 07:27:57 GMT
Last-Modified: Fri, 04 Nov 2022 06:01:13 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 279 B IP
Hash 82ce859347899fc7c0da361d938a3766
7efa9565bc757520550c35a04d77ad65176daaa5
b9f1bd962f3260ec55846caa0e280a77ec62a492b386a6dcb3cef2774064d411
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1508
Cache-Control: max-age=102249
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:17 GMT
Etag: "6364b756-117"
Expires: Sun, 06 Nov 2022 07:20:26 GMT
Last-Modified: Fri, 04 Nov 2022 06:55:18 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
lpmedia.servefilesonly.com/style/layout/animation.css?950734
200 OK 909 B URL HTTP/2 lpmedia.servefilesonly.com/style/layout/animation.css?950734
IP
Hash 9e625ca3b9b82427dda651866e8525e4
a08ba81b1d376bc3709bd56fab5fc03225c709fe
fdb8acae3487867af821135a596f842443201db61ac012bd7a50a7fda1a68169
GET /style/layout/animation.css?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2320
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e25-910"
last-modified: Thu, 03 Nov 2022 04:05:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9566
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=qy1PDeMZV8I_.i_M1wMLnJHGet_NieeRoHeJbPDKuyM-1667616977-0-AUYMHKDBrYGqr9fBW9N7gNzPeUVcEeLRcXkRKeoVmclBdctuLg2LapZHW4ZOGAL07rYokDb1gpcipcb1OfySN4A=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bd2d34b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_patterns/cl1-bg.jpg
200 OK 329 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_patterns/cl1-bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2263x1367, components 3\012- data
Size 329 kB (329094 bytes)
Hash af5c6708b88bcc5c9d407667b1ff778f
7b053efcbbd45b4af2f689271b46ae315f014817
fad1f28c28a08c3aa6f6d754395c48ade6ff08f24163a9359ee06efe4e5e7ec0
GET /img/_patterns/cl1-bg.jpg HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lpmedia.servefilesonly.com/style/templates/CircleLoader/orange.css?950734
Cookie: __cf_bm=kjGDpcb5YL7gPuk6i.BRSamtr2KDHm6wlOnBd9LpnCc-1667616977-0-Aa0UjzghJNVAiPtQC9wTt4xATccZyCY7kt52A5n8uvI75FnxBpMK9lcCWG95S+RCX0lBg959rU7QCgoGdSpqI4M=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/jpeg
content-length: 329094
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633df1-50586"
last-modified: Thu, 03 Nov 2022 04:05:05 GMT
cf-cache-status: HIT
age: 6040
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250bdfd86b503-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 656a355c6cb333c5554fa65748d3d165
15e6dc206e412e258ca49e2eec46e67b831ea4a6
3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 656a355c6cb333c5554fa65748d3d165
15e6dc206e412e258ca49e2eec46e67b831ea4a6
3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 02:56:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25372, version 1.0\012- data
Hash fe424f96cb627d8b835cb001af17f56e
c5b4368fed99812a99036fba86d01367b5549505
35c92598a5f32c018dc630f57b183b0284c211ce9c222e5b36840a62115262f1
GET /s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ww2.casualdating.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Oct 2022 21:14:39 GMT
expires: Tue, 31 Oct 2023 21:14:39 GMT
cache-control: public, max-age=31536000
age: 366098
last-modified: Mon, 18 Jul 2022 19:24:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ww2.casualdating.com/landing/cl6001?clickId=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tracker=SGM_Pro&publisher=31015&subPublisher=&zz=true&hit_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tp_redirect_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2
200 OK 7.5 kB URL HTTP/2 ww2.casualdating.com/landing/cl6001?clickId=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tracker=SGM_Pro&publisher=31015&subPublisher=&zz=true&hit_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tp_redirect_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (588)
Hash 3fcbfb1fd397f9191a6e3202d17e629c
d16bd02e3248ced9768b0d614c3a7621260ff32d
fdc2b1112fb3018514e92d498642f07cd47c122df92e51e9be4da60a949e6e7a
GET /landing/cl6001?clickId=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tracker=SGM_Pro&publisher=31015&subPublisher=&zz=true&hit_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2&tp_redirect_id=99fd6896-3d7d-4272-a7c1-d373d692b2b2 HTTP/1.1
Host: ww2.casualdating.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dipaka-ead.com/
Connection: keep-alive
Cookie: UTGv2=h419e13d6f61e42f5520d2cdada50edd3d56
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: max-age=0, private, must-revalidate, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With, Content-Type, Accept, Origin, Authorization
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD
pragma: no-cache
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=6e8riu745vp6dieg81rf7a6o1f; path=/
__cf_bm=Nrt.Js7IWOvEKoWJX0M6dYwfm2F4oJ_sMm6Xkm5sULU-1667616977-0-AXep6BFYNl/Ct/S29zP1uTSh9znAWHxlHQrDB7wJ0xv05t9AEgYuqNmdfFay9E99NghBn1zECRWOQ9KCdZ8Ac+Q=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.casualdating.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250baba7db51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_patterns/apple-touch-icon.png?950734
200 OK 67 B URL HTTP/2 lpmedia.servefilesonly.com/img/_patterns/apple-touch-icon.png?950734
IP
File type PNG image data, 1 x 1, 1-bit grayscale, non-interlaced\012- data
Hash 87e729aeec558580ccce1056cba7379b
1b739b74ebf7b2baaf4981301f48a15858cb5431
15d0d8531d9628928db8adcd1c3d3406d6ce67fa01926a3b73b054b4f34b93a4
GET /img/_patterns/apple-touch-icon.png?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Cookie: __cf_bm=kjGDpcb5YL7gPuk6i.BRSamtr2KDHm6wlOnBd9LpnCc-1667616977-0-Aa0UjzghJNVAiPtQC9wTt4xATccZyCY7kt52A5n8uvI75FnxBpMK9lcCWG95S+RCX0lBg959rU7QCgoGdSpqI4M=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: image/png
content-length: 67
last-modified: Thu, 03 Nov 2022 04:05:05 GMT
etag: "63633df1-43"
access-control-allow-origin: *
cache-control: public, max-age=43200
cf-cache-status: HIT
age: 9555
expires: Sat, 05 Nov 2022 14:56:17 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250beadc9b503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/widgets/corner/corner.css?950734
200 OK 70 kB URL HTTP/2 lpmedia.servefilesonly.com/widgets/corner/corner.css?950734
IP
Hash b1c8df9b0b36e1c81fd6bda199a5cfc4
6dd0f8d5f9740972ace01eec50fd3f133d3e4ac4
3e76b784c79b7053a2d5c49e70f6f8741cc543720bb86abf43d37900216fda32
GET /widgets/corner/corner.css?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=246
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e25-f6"
last-modified: Thu, 03 Nov 2022 04:05:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9583
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=3vjlvwfyzu8VTrb3.2ZGtzHDKoErx3CHQyMMPScCk.I-1667616977-0-AZuEgmknVpzb1DE/sa/5Wuk9cr4LxBU1RbUKsyuQIE3mC1zjEyV0bpSWkEgk5LOMzPWIPxRVTq+9m1BDBYLoAvk=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bd3d39b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/img/_patterns/map1.jpg
200 OK 31 kB URL HTTP/2 lpmedia.servefilesonly.com/img/_patterns/map1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1700x400, components 3\012- data
Hash 85a490d142df7f45e0adf21234236f57
c452bc1060749e00e2341169a71a43eaa59bd1c2
786f9ae5e7266bb5eaac068bf16efb1fe54c4baf1adbab50ab910d3e25d8c5a4
GET /img/_patterns/map1.jpg HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lpmedia.servefilesonly.com/style/templates/CircleLoader/orange.css?950734
Cookie: __cf_bm=kjGDpcb5YL7gPuk6i.BRSamtr2KDHm6wlOnBd9LpnCc-1667616977-0-Aa0UjzghJNVAiPtQC9wTt4xATccZyCY7kt52A5n8uvI75FnxBpMK9lcCWG95S+RCX0lBg959rU7QCgoGdSpqI4M=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:23 GMT
content-type: image/jpeg
content-length: 31418
cf-bgj: h2pri
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: "63633df1-7aba"
last-modified: Thu, 03 Nov 2022 04:05:05 GMT
cf-cache-status: HIT
age: 35739
expires: Sat, 05 Nov 2022 14:56:23 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 765250e49d27b503-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a3b1551512640bb8f5e7deb80c32272
75805b9f03aef14cfad025259936ae5f217d25ca
5baa90853202e78cf9b59e9ab597e16ccfbf143d7e124583e64dc1ad1ee2c2df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7783
x-amzn-requestid: c8f73eac-612d-48e3-a655-41525e97331c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apxM8H7aoAMFT3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2f1f-5470c77a30a11b9423f56837;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:11:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FLFsF-1gAeN0HiZnS03oNMNajnwk12P-5Aro-QOcQNFtkjknh9g5FA==
via: 1.1 0c04e836dfe22246a870a0f54a2d4746.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 19:19:17 GMT
age: 27426
etag: "75805b9f03aef14cfad025259936ae5f217d25ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/build/widgets/loginFormBuilder/styles-1.min.css?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/build/widgets/loginFormBuilder/styles-1.min.css?950734
IP
GET /build/widgets/loginFormBuilder/styles-1.min.css?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/css
last-modified: Thu, 03 Nov 2022 08:48:20 GMT
vary: Accept-Encoding
etag: W/"63638054-1313"
access-control-allow-origin: *
cache-control: public, max-age=43200
content-encoding: gzip
cf-cache-status: HIT
age: 9519
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=YWpedpctzkBSdwvz6HFbPtsOI_oao5Z6pMI19rtAfx0-1667616977-0-AQL2+mrveTFuQNLMwUlYXMH4MMUC1r9Ummq5H2Z1b+jU7b91nU8SddyGY/8kW2cdZMEWt1HHCr4xMS1YC0YcaYA=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bd2d35b503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/js/plugins/jQueryUI/jquery-ui-1-12.min.css?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/js/plugins/jQueryUI/jquery-ui-1-12.min.css?950734
IP
GET /js/plugins/jQueryUI/jquery-ui-1-12.min.css?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/css
last-modified: Thu, 03 Nov 2022 04:05:54 GMT
vary: Accept-Encoding
etag: W/"63633e22-7d4c"
access-control-allow-origin: *
cache-control: public, max-age=43200
content-encoding: gzip
cf-cache-status: HIT
age: 42667
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=RgE6kFh0MiAZrwKNUho5llpQwQoyaasEBxti8FCVp7I-1667616977-0-ARoanZxD4f/C9DcNOgsD096xvKQ2RPnO5CLP8FfT2/TUeHmSLZRYUD/FDH53wsRgr5kmH3v7emJ2+abw9/e//xo=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bd1d2bb503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/js/plugins/owlCarousel/script.js?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/js/plugins/owlCarousel/script.js?950734
IP
GET /js/plugins/owlCarousel/script.js?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=89994
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e22-15f8a"
last-modified: Thu, 03 Nov 2022 04:05:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 41074
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=xl3g0PbDwAtNAl4e2lZY7cJsK0Cy.izv1CRxOOSGdL0-1667616977-0-AeubLPmnKQan9MDBYNgV7rYnXmYFhD2ZOBQmWtxJG3KHzOPOXjrcU1I1fmEUx8rEgZEdVdCzZ4ANPSg7xW544Mo=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcf6b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/style/plugins/owlCarousel/owl.carousel.min.css?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/style/plugins/owlCarousel/owl.carousel.min.css?950734
IP
GET /style/plugins/owlCarousel/owl.carousel.min.css?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/css
last-modified: Thu, 03 Nov 2022 04:05:57 GMT
vary: Accept-Encoding
etag: W/"63633e25-b66"
access-control-allow-origin: *
cache-control: public, max-age=43200
content-encoding: gzip
cf-cache-status: HIT
age: 41074
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=ptXdCgGry27MueQCIrPJMFXbgKWITdWm7hI5bGJuvps-1667616977-0-AbFFSFMa8KO/7dbFSf9T/6Yghi4ut8xyBChGfu+mjbw2WQWlWXRidkUhEUBWK1dXvNxSLXGP/6R2pxEbzvByeXY=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcf4b503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/build/widgets/loginFormBuilder/scripts.min.js?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/build/widgets/loginFormBuilder/scripts.min.js?950734
IP
GET /build/widgets/loginFormBuilder/scripts.min.js?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 08:48:20 GMT
vary: Accept-Encoding
etag: W/"63638054-c99"
access-control-allow-origin: *
cache-control: public, max-age=43200
content-encoding: gzip
cf-cache-status: HIT
age: 9570
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=IPTz6OMZdhqgcVzwa1lFbM_OPdrmVvdnICBnFHg4Wy8-1667616977-0-ARZ5EGnM5ZZD+sBbxwRf/xQuNZ5ApxLcfna3y+YXpBBmXYq75aShUFzrrzJ3UrQwKwG4TOFB69SRyDzzquPU+Y8=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcfbb503-OSL
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/js/popwin.js?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/js/popwin.js?950734
IP
GET /js/popwin.js?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1177
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e22-499"
last-modified: Thu, 03 Nov 2022 04:05:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9583
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=laP1f4gz5m19Ma4JhaFTpIrLAbvGSqKte4eJH9CyyIw-1667616977-0-AResFFsipsjIB8LopfE5e+4rqHUsaS/TFvX+jT+3Pad3TTXLHjIK4qsHBlPR9pZXtiknV+ZyMG/Q8OXZWROtVqQ=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcfdb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-03-10 20:26:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 121d365db7a9aba3915641185d93b963
cdn-cache: HIT
cf-cache-status: HIT
age: 16927784
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 765250bd5c46b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 1343
expires: Tue, 08 Nov 2022 02:56:17 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 765250bd5b030b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/js/helpers/validation.js?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/js/helpers/validation.js?950734
IP
GET /js/helpers/validation.js?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=11177
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e22-2ba9"
last-modified: Thu, 03 Nov 2022 04:05:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 9564
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=VRdwG3lh849MwkrEBjDW4nrajhpePA9Cr9OaKFfKFl4-1667616977-0-AY6/ioc/QeQdLHtfSiVk+UQxURkAglSRwTg5vXqVXw+M/seGCwDYWUL1Tp2991Ov033+54FU77bgmmSZy3SZjAk=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcf7b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/js/plugins/circle-progress.js?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/js/plugins/circle-progress.js?950734
IP
GET /js/plugins/circle-progress.js?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=12455
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e22-30a7"
last-modified: Thu, 03 Nov 2022 04:05:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 41074
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=DBG8TI.dAUOCZYGgmS.75ZzT3L5JVa0K6zZmVqurCD4-1667616977-0-Ads4ijHh/DvpWXQ6/S3q/Jl0Gt0O3O7HDstVZUt4BjRIYPZjQvjeHq6S8W7V5FE7xjL6wCu6JFNu1AhJUxlUH8U=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcf5b503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/js/registration.js?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/js/registration.js?950734
IP
GET /js/registration.js?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=18832
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e22-4990"
last-modified: Thu, 03 Nov 2022 04:05:54 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 4990
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=9Y8ju1UF9lImn7psxckfCDmGJdpkc8QC_7dHVko67g0-1667616977-0-Ac665JtXVKydijFJsAMgfSpNrQwzF3txIikS2YZmx/mW6bppXWwOElpFl2Q+7JmhDSuKQ9mIGaiLtORsdmxIZW8=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bcbcfab503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lpmedia.servefilesonly.com/style/templates/CircleLoader/orange.css?950734
200 OK 0 B URL HTTP/2 lpmedia.servefilesonly.com/style/templates/CircleLoader/orange.css?950734
IP
GET /style/templates/CircleLoader/orange.css?950734 HTTP/1.1
Host: lpmedia.servefilesonly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ww2.casualdating.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 02:56:17 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19816
access-control-allow-origin: *
cache-control: public, max-age=43200
etag: W/"63633e25-4d68"
last-modified: Thu, 03 Nov 2022 04:05:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 41074
expires: Sat, 05 Nov 2022 14:56:17 GMT
set-cookie: __cf_bm=kjGDpcb5YL7gPuk6i.BRSamtr2KDHm6wlOnBd9LpnCc-1667616977-0-Aa0UjzghJNVAiPtQC9wTt4xATccZyCY7kt52A5n8uvI75FnxBpMK9lcCWG95S+RCX0lBg959rU7QCgoGdSpqI4M=; path=/; expires=Sat, 05-Nov-22 03:26:17 GMT; domain=.servefilesonly.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 765250bd3d3ab503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
162.210.196.166
93.184.220.29
104.18.226.52
23.36.76.226
18.197.36.77