social.medialinks.cc/files/hot_song.rar
37.48.65.154200 OK 494 B URL HTTP/1.1 social.medialinks.cc/files/hot_song.rar
IP 37.48.65.154:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (494), with no line terminators
Hash 3cb235b6de0254b8eed97d36e6e826e5
7b75a491dfb7d351d752e252ed560b8a934410d6
b148c3ae0eeea0ff8618d9f4a4071dd904d2cff2b4c601740fca47a7029d48f0
Analyzer Verdict Alert fortinet Malware
GET /files/hot_song.rar HTTP/1.1
Host: social.medialinks.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 494
content-type: text/html; charset=utf-8
date: Tue, 25 Oct 2022 03:07:43 GMT
server: nginx
set-cookie: sid=31b6f054-5412-11ed-b41e-cd290afd9242; path=/; domain=.medialinks.cc; expires=Sun, 12 Nov 2090 06:21:50 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 6223248c33009fd48ef053d1ba379132
bb14f9500425f64883101297baeda1a69ca65fb2
4db22da1db8573be87bd7cf4fb98dd69a47e4938c0e81cb21f015c5a9d485c6f
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Retry-After, Content-Type, Backoff, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 25 Oct 2022 02:53:05 GMT
Expires: Tue, 25 Oct 2022 03:35:17 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bz_NQyKHM0S3clgZuhC-9Yy1KNE3G82S8n8HUsZ6_p3_vgH3fRmHhg==
Age: 878
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b3537658770790ad6cf0d727f0c0acd2
8365cadda05ef27b2ebd627d545e31886b512bde
df992311f130f15459739841de925c7eec2604d5a68ca6b2a67b6dc8d229212c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF992311F130F15459739841DE925C7EEC2604D5A68CA6B2A67B6DC8D229212C"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18022
Expires: Tue, 25 Oct 2022 08:08:06 GMT
Date: Tue, 25 Oct 2022 03:07:44 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a39eea1096852891690eaee02a64383e
c273000f799fc3676e8e3ef3617611a31252cffc
d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6697
Expires: Tue, 25 Oct 2022 04:59:21 GMT
Date: Tue, 25 Oct 2022 03:07:44 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: F2ilj/ukiXXGuyTBsPt8RJG3kDXlOSmdL3KRbnCBbpMCw0SQ24WeeMtzcx6kus54aewJqubJW9YC57Os6DGhzw==
x-amz-request-id: JKNTGB9682Q8716Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 02:38:37 GMT
age: 1747
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 03:07:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
social.medialinks.cc/favicon.ico
37.48.65.154404 Not Found 9 B URL HTTP/1.1 social.medialinks.cc/favicon.ico
IP 37.48.65.154:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: social.medialinks.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://social.medialinks.cc/files/hot_song.rar
Cookie: sid=31b6f054-5412-11ed-b41e-cd290afd9242
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 25 Oct 2022 03:07:44 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 25 Oct 2022 02:33:32 GMT
Expires: Tue, 25 Oct 2022 03:01:38 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7nlhz5SrdD9nMB57boNQDtkXu56YXgF9DUc_hAhbp4JUc4fIUSN7YQ==
Age: 2052
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7c6fdc8e76ef5875b5c965ade2df503e
45d548aa2a9d7ede163743274790700878eaea62
d2ff6eacd48af4892a2642e5d7bb925ca683062139f5a5cb4047f6f706830618
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6056
Cache-Control: max-age=110397
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 03:07:44 GMT
Etag: "63564795-1d7"
Expires: Wed, 26 Oct 2022 09:47:41 GMT
Last-Modified: Mon, 24 Oct 2022 08:06:45 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
social.medialinks.cc/files/hot_song.rar?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NjY3NDQ2MywiaWF0IjoxNjY2NjY3MjYzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2dqMjJ1ZGZ0N3A3NTFkOGsxcGlna2IiLCJuYmYiOjE2NjY2NjcyNjMsInRzIjoxNjY2NjY3MjYzODY1Nzk3fQ.Pvz59GeCxVhcRvIrmwY_bMe-keoGlKDY7vefcPsaf_o&sid=31b6f054-5412-11ed-b41e-cd290afd9242
37.48.65.154302 Found 11 B URL HTTP/1.1 social.medialinks.cc/files/hot_song.rar?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NjY3NDQ2MywiaWF0IjoxNjY2NjY3MjYzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2dqMjJ1ZGZ0N3A3NTFkOGsxcGlna2IiLCJuYmYiOjE2NjY2NjcyNjMsInRzIjoxNjY2NjY3MjYzODY1Nzk3fQ.Pvz59GeCxVhcRvIrmwY_bMe-keoGlKDY7vefcPsaf_o&sid=31b6f054-5412-11ed-b41e-cd290afd9242
IP 37.48.65.154:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /files/hot_song.rar?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NjY3NDQ2MywiaWF0IjoxNjY2NjY3MjYzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2dqMjJ1ZGZ0N3A3NTFkOGsxcGlna2IiLCJuYmYiOjE2NjY2NjcyNjMsInRzIjoxNjY2NjY3MjYzODY1Nzk3fQ.Pvz59GeCxVhcRvIrmwY_bMe-keoGlKDY7vefcPsaf_o&sid=31b6f054-5412-11ed-b41e-cd290afd9242 HTTP/1.1
Host: social.medialinks.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://social.medialinks.cc/files/hot_song.rar
Cookie: sid=31b6f054-5412-11ed-b41e-cd290afd9242
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 25 Oct 2022 03:07:44 GMT
location: http://belia-glp.com/zcvisitor/31ffddf2-5412-11ed-8ad1-0acbe10f220d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
server: nginx
set-cookie: sid=31b6f054-5412-11ed-b41e-cd290afd9242; path=/; domain=.medialinks.cc; expires=Sun, 12 Nov 2090 06:21:51 GMT; max-age=2147483647; HttpOnly
belia-glp.com/zcvisitor/31ffddf2-5412-11ed-8ad1-0acbe10f220d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
35.174.150.83200 996 B URL HTTP/1.1 belia-glp.com/zcvisitor/31ffddf2-5412-11ed-8ad1-0acbe10f220d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
IP 35.174.150.83:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f3e248f286385665fca97e300636958f
c1a3aba2426c011a5f10563f3ba9259370822a3d
a0eba1f76e0fd572fb1163a95c14f85dfa5ae4927fb326473db0af00478f11fb
Analyzer Verdict Alert quad9 Sinkholed
GET /zcvisitor/31ffddf2-5412-11ed-8ad1-0acbe10f220d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97 HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://social.medialinks.cc/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 25 Oct 2022 03:07:45 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: DSXqxqRc
push.services.mozilla.com/
44.242.41.15101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.242.41.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: p69CiuxggWdlT0XlNejX2Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: K2TX2H1BZWnhNmbX1cHI/hUYZV8=
belia-glp.com/zcredirect?visitid=31ffddf2-5412-11ed-8ad1-0acbe10f220d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
35.174.150.83200 426 B URL HTTP/1.1 belia-glp.com/zcredirect?visitid=31ffddf2-5412-11ed-8ad1-0acbe10f220d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP 35.174.150.83:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ef789a411e406527d0a4a0415a507bd1
48b9d980de6fb763d4b29a68c46073c658d24b4d
839f351feb75103c2edccb613f225aa73bdcd2f4bf374b70ef3d8b25884909f4
Analyzer Verdict Alert quad9 Sinkholed
GET /zcredirect?visitid=31ffddf2-5412-11ed-8ad1-0acbe10f220d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcvisitor/31ffddf2-5412-11ed-8ad1-0acbe10f220d/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 25 Oct 2022 03:07:45 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: kaSiptpY
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 141bd03d3128b77623995352d5f12f3b
d6e025f8accf82bc30980b25aa0c45725d0edbe6
802350792ee8f8572ecac2317dd4ce562eb84fb7e6e38bf4f1d885674dbccc01
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 03:07:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 14:26:22 GMT
Expires: Mon, 31 Oct 2022 14:26:21 GMT
Etag: "d6e025f8accf82bc30980b25aa0c45725d0edbe6"
Cache-Control: max-age=558515,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f7be691f2cb4fa-OSL
belia-glp.com/favicon.ico
35.174.150.83404 653 B URL HTTP/1.1 belia-glp.com/favicon.ico
IP 35.174.150.83:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcredirect?visitid=31ffddf2-5412-11ed-8ad1-0acbe10f220d&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Tue, 25 Oct 2022 03:07:45 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: mZKObbFk
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash aa8ce6b6735ec18605ece6de83d613fd
9293ac3a23952dd258ae41ade725130ec41c8bd0
870a74c67bf3b01e331483fcb2240608a3113228ffe00b3161a49a0dc4701445
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 03:07:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogIjQ0ZmZkNTU1LWU2ZmQtNDc2Ny1iYzU0LTNjYjU4MzNiMzI3NzoyMDY4NTIzYTgyMzFjMDBmOTM4ODQ1YmMxMjExNzdhNDRmOWQ0MTliIn0=
216.58.211.16200 OK 1.4 kB URL HTTP/2 storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogIjQ0ZmZkNTU1LWU2ZmQtNDc2Ny1iYzU0LTNjYjU4MzNiMzI3NzoyMDY4NTIzYTgyMzFjMDBmOTM4ODQ1YmMxMjExNzdhNDRmOWQ0MTliIn0=
IP 216.58.211.16:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 54f99c9e98a5b4f17b219e94417e6d2f
80247746ede724755155d0aa8c0082c8b00542bf
c7f94d1b21fdadbcc934c2d31503832763070136eafd23d65cec53f6e49b5634
GET /tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogIjQ0ZmZkNTU1LWU2ZmQtNDc2Ny1iYzU0LTNjYjU4MzNiMzI3NzoyMDY4NTIzYTgyMzFjMDBmOTM4ODQ1YmMxMjExNzdhNDRmOWQ0MTliIn0= HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvZ6sMgjCKMppyySQgQec9xnRMsS4w0iOjT406hKJle6TCRgXtMCI2PIOMcvJranqraTBazLfWT_29jEKaEszrU1w
expires: Tue, 25 Oct 2022 04:07:45 GMT
date: Tue, 25 Oct 2022 03:07:45 GMT
cache-control: public, max-age=3600
last-modified: Mon, 10 Jun 2019 16:09:51 GMT
etag: "54f99c9e98a5b4f17b219e94417e6d2f"
x-goog-generation: 1560182991115409
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1357
content-type: text/html
x-goog-hash: crc32c=+7k9hA==, md5=VPmcnpiltPF7IZ6UQX5tLw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1357
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1865e08ae4.smapp.work/api/v1/click/confirm.js?data=gAAAAABjV1MB6cAiq-COFHGxKGwazCD5vzLDdvvQnreQuJyJIqBmr-KmKoUAxcTajPrrC2CGwIOrjf8WYXdguYWZVRBK3Fceqb5sQG9H5KQTT8vqY_faPe3z0hF1v7kHHzvn3fp6BLMeDOMCtT7Emk8UojtD_kevUrQDygnBV8ud4b5oAGpjycuAineS5bH0K39wgEAZhfGq7mhHnnhnRbaBM_pBdVKo1Lk7qTdTpiiFp_8-DmcPu0VEtWaTxKsfkYaKhyj4bMNGl-nzuWyAWlXi5VeWjcs3wLI9cD2LqLv1cYHb8aXcDWej1yMzd7MlV0xQDn0C3_f3Vd7D7hd1upeqMwBQ6xHjjB9QMfTOXGWqTfTEsOPUn8oqblNM3NA9eQbJCZHfAH8v5N7nENxlUS1P3ArDIIFZM9AL20ErBnK92_f0tAJHIEIEPx0zCdUbb1VBsHK_MtJQcPbkVuJ3FyvBajoiINPCa18WBREvebv_ty2hxoPYcW4g-MPRKrvYGvvPNEy4yOFWYfLzn4IWpVYcpQa5oC-GkehikEVv03XtKZcF2dRkmrq9mzGMvdFQd9gUgEjDOzTOIGeBQX9NU5_ytO_j8lp1JeIv--wjxm7iMRnA4OelmgJwKkJx1z0idnI_754-QMGGY2Qqb7yQcy7Q4e-d0snuogEENOk-W-0IrPK9k3-NKbup6-b6OheQSzERK4xQg3OADAqKzN8Vud3cZjrzLWbQxthWBKIf3WTrYCLJ0zbLZxn2WN_fvv5YcAU1th3DN66Y2gh8zHnpN0sW4UFzBfxs90N6ofzjengSHq4JbC-7H7hLfkBM4ZvBBK5-uzLcXZv2lz7UCC362RcGPS2MCNoPE35wBxldGPSgJudRt1mQCTdkRYzTQGsazckmnwJ3lZTkOsZAKvVppdig7YFb2zouo18D4t2jyI46ji4KtK_9REnKp-dsmG0EkrNDclxXQl2lvUb3KpK4e-bA6Ia5bg9HudWBFLK3jncE5nBRzjGw6pTugtPUSwj8uyYjUjBHUjAjNGRU-qhlOrYyvb66w_5_WhKEZyUYSVqiM4Z5PFKACZoBlpjfqOmChGQT6h1N9juEiD4ioqYIC7DXDi-hRiVjDYawhPUZrpRr_T329ocvJxPn6RAo80joIrNU-KPzUD7JQtcDloLiT9NWMLg9JpSb5bOzGE-n8wjpqfH501wGQJ_Af32_T7Zvm_WIywrSTjt7UfS-nZ22k0s-G3yoYOAtNS_dtaQvIO2CrHHTQocUuA9n5kG1zd_hYnwz79WgtD4DbdtcWDQX8b5mh4-zqjHOq5__vm_NDQTZwEs1mQXLmYPfSEwMd1F_3rj5k86KHUA9DPwG8XWa5N_AzOnLG89ht6xSAjl77MWaofvsIL7DCq_e0ZKA3TO2nZrR602oryozFmVsA53-eFoy9KmNhD_FTtS11Hr7RVTedGo1q69kMEZ8rJSjWSWguK7oTJ5AuEzHrQkLxZIiX3f4IslBLR7GnS8f0XRci3jAPxhQJTLdYcbLeAKrjD-2oMPyS8HWnGMzMV5CM7zimI1-pBENddGs-TJvAedFqvJchls4q0jyhLfKQHuKDTYT32Ewh4PAeKi71WCOn6EizYJuSH9Wm04FbVNaxZJE2J4NM2E4JINnNB_S8Wu0lP4Ft5kz5Pg8caDA3mdBEVHfwj6ju5Pz1I4tEm7nKNiBNNC6LBOkv8091vE8WezJKBL_nkMdYnx_-OWz3xeJY1A9tISy4SJIpfLw4OoMzRsPzzIW4RDLEy4r_tkJe3GFqygYS7kW3eZrPsd9g4-dgU19IOJz6jOe4huRRO82A6mCMdnfxIhJc5UfAYp9s_wpmDiILpsKII2J4tQRW7cQ0mGQcu5IUJwCkKyPYsqjQl-CO5FmdhX-l5-LEQAK-4tJx32V2Ggk-PmSezdmYqEz3oIDb1A3-iJ0p24OBTEcRrelakMoXTY1htN8k_bKuWSWoXXbWAQNhbLeasA-NIQX4eOblxHfmbNd00ce4sdRadPWWRuEt3-GG_xB1mw1FjZMiPI_UIGlzRBXHAYq3nsAHxi3t5tvIF0Wysj94hOrFaqKpArOrs_O42SL4CWEYICtoeIteqxQGWCOjiYDMhbaCzJOb1McTUJ4EhXn8pD1iSm2Uk6B5CTZpMHTNzRVexxEnHXmTLKw3iGOyBkZY_KJQwniicgVL4ewQjjjpJWv6rNx173vtiyZuT4hjKecjwn7iGeVujkavT3hiywWyWWq5LGmB9lXInJfNHfHqWi68fqR893tcfBgGVgnbFi_4A2RNZT11izpTYPQRS3Est6Jg7z127vpVfiVFENTxD-ZYgaFT0fzt15ybb_K8VQ2nyku5i5Nlv4BxX61ana7PcQrORs7gxKZg_iqWAieU8AKPoADaCpUkgl7bLd3XLuMRVndrQR4azTp3wE2aQt8JIhqSNvmTjjEaoEs2qCD6sdN8uyzDFA1yy_JHNtjBp6ircj6dTd7GCT3khICypDy01rt339O6HLRroUdSERics5v-jUVS3ou5brwK3f-QxwcO-0iN9kOOfZVGOS5W9ZL6Qpq5XOn0LX2BVw690-zwdtttTxdagh4m21dK_Z6dic6P_BQ0RmNwIQpqIRqDfBe
35.186.250.143200 OK 0 B URL HTTP/2 1865e08ae4.smapp.work/api/v1/click/confirm.js?data=gAAAAABjV1MB6cAiq-COFHGxKGwazCD5vzLDdvvQnreQuJyJIqBmr-KmKoUAxcTajPrrC2CGwIOrjf8WYXdguYWZVRBK3Fceqb5sQG9H5KQTT8vqY_faPe3z0hF1v7kHHzvn3fp6BLMeDOMCtT7Emk8UojtD_kevUrQDygnBV8ud4b5oAGpjycuAineS5bH0K39wgEAZhfGq7mhHnnhnRbaBM_pBdVKo1Lk7qTdTpiiFp_8-DmcPu0VEtWaTxKsfkYaKhyj4bMNGl-nzuWyAWlXi5VeWjcs3wLI9cD2LqLv1cYHb8aXcDWej1yMzd7MlV0xQDn0C3_f3Vd7D7hd1upeqMwBQ6xHjjB9QMfTOXGWqTfTEsOPUn8oqblNM3NA9eQbJCZHfAH8v5N7nENxlUS1P3ArDIIFZM9AL20ErBnK92_f0tAJHIEIEPx0zCdUbb1VBsHK_MtJQcPbkVuJ3FyvBajoiINPCa18WBREvebv_ty2hxoPYcW4g-MPRKrvYGvvPNEy4yOFWYfLzn4IWpVYcpQa5oC-GkehikEVv03XtKZcF2dRkmrq9mzGMvdFQd9gUgEjDOzTOIGeBQX9NU5_ytO_j8lp1JeIv--wjxm7iMRnA4OelmgJwKkJx1z0idnI_754-QMGGY2Qqb7yQcy7Q4e-d0snuogEENOk-W-0IrPK9k3-NKbup6-b6OheQSzERK4xQg3OADAqKzN8Vud3cZjrzLWbQxthWBKIf3WTrYCLJ0zbLZxn2WN_fvv5YcAU1th3DN66Y2gh8zHnpN0sW4UFzBfxs90N6ofzjengSHq4JbC-7H7hLfkBM4ZvBBK5-uzLcXZv2lz7UCC362RcGPS2MCNoPE35wBxldGPSgJudRt1mQCTdkRYzTQGsazckmnwJ3lZTkOsZAKvVppdig7YFb2zouo18D4t2jyI46ji4KtK_9REnKp-dsmG0EkrNDclxXQl2lvUb3KpK4e-bA6Ia5bg9HudWBFLK3jncE5nBRzjGw6pTugtPUSwj8uyYjUjBHUjAjNGRU-qhlOrYyvb66w_5_WhKEZyUYSVqiM4Z5PFKACZoBlpjfqOmChGQT6h1N9juEiD4ioqYIC7DXDi-hRiVjDYawhPUZrpRr_T329ocvJxPn6RAo80joIrNU-KPzUD7JQtcDloLiT9NWMLg9JpSb5bOzGE-n8wjpqfH501wGQJ_Af32_T7Zvm_WIywrSTjt7UfS-nZ22k0s-G3yoYOAtNS_dtaQvIO2CrHHTQocUuA9n5kG1zd_hYnwz79WgtD4DbdtcWDQX8b5mh4-zqjHOq5__vm_NDQTZwEs1mQXLmYPfSEwMd1F_3rj5k86KHUA9DPwG8XWa5N_AzOnLG89ht6xSAjl77MWaofvsIL7DCq_e0ZKA3TO2nZrR602oryozFmVsA53-eFoy9KmNhD_FTtS11Hr7RVTedGo1q69kMEZ8rJSjWSWguK7oTJ5AuEzHrQkLxZIiX3f4IslBLR7GnS8f0XRci3jAPxhQJTLdYcbLeAKrjD-2oMPyS8HWnGMzMV5CM7zimI1-pBENddGs-TJvAedFqvJchls4q0jyhLfKQHuKDTYT32Ewh4PAeKi71WCOn6EizYJuSH9Wm04FbVNaxZJE2J4NM2E4JINnNB_S8Wu0lP4Ft5kz5Pg8caDA3mdBEVHfwj6ju5Pz1I4tEm7nKNiBNNC6LBOkv8091vE8WezJKBL_nkMdYnx_-OWz3xeJY1A9tISy4SJIpfLw4OoMzRsPzzIW4RDLEy4r_tkJe3GFqygYS7kW3eZrPsd9g4-dgU19IOJz6jOe4huRRO82A6mCMdnfxIhJc5UfAYp9s_wpmDiILpsKII2J4tQRW7cQ0mGQcu5IUJwCkKyPYsqjQl-CO5FmdhX-l5-LEQAK-4tJx32V2Ggk-PmSezdmYqEz3oIDb1A3-iJ0p24OBTEcRrelakMoXTY1htN8k_bKuWSWoXXbWAQNhbLeasA-NIQX4eOblxHfmbNd00ce4sdRadPWWRuEt3-GG_xB1mw1FjZMiPI_UIGlzRBXHAYq3nsAHxi3t5tvIF0Wysj94hOrFaqKpArOrs_O42SL4CWEYICtoeIteqxQGWCOjiYDMhbaCzJOb1McTUJ4EhXn8pD1iSm2Uk6B5CTZpMHTNzRVexxEnHXmTLKw3iGOyBkZY_KJQwniicgVL4ewQjjjpJWv6rNx173vtiyZuT4hjKecjwn7iGeVujkavT3hiywWyWWq5LGmB9lXInJfNHfHqWi68fqR893tcfBgGVgnbFi_4A2RNZT11izpTYPQRS3Est6Jg7z127vpVfiVFENTxD-ZYgaFT0fzt15ybb_K8VQ2nyku5i5Nlv4BxX61ana7PcQrORs7gxKZg_iqWAieU8AKPoADaCpUkgl7bLd3XLuMRVndrQR4azTp3wE2aQt8JIhqSNvmTjjEaoEs2qCD6sdN8uyzDFA1yy_JHNtjBp6ircj6dTd7GCT3khICypDy01rt339O6HLRroUdSERics5v-jUVS3ou5brwK3f-QxwcO-0iN9kOOfZVGOS5W9ZL6Qpq5XOn0LX2BVw690-zwdtttTxdagh4m21dK_Z6dic6P_BQ0RmNwIQpqIRqDfBe
IP 35.186.250.143:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/click/confirm.js?data=gAAAAABjV1MB6cAiq-COFHGxKGwazCD5vzLDdvvQnreQuJyJIqBmr-KmKoUAxcTajPrrC2CGwIOrjf8WYXdguYWZVRBK3Fceqb5sQG9H5KQTT8vqY_faPe3z0hF1v7kHHzvn3fp6BLMeDOMCtT7Emk8UojtD_kevUrQDygnBV8ud4b5oAGpjycuAineS5bH0K39wgEAZhfGq7mhHnnhnRbaBM_pBdVKo1Lk7qTdTpiiFp_8-DmcPu0VEtWaTxKsfkYaKhyj4bMNGl-nzuWyAWlXi5VeWjcs3wLI9cD2LqLv1cYHb8aXcDWej1yMzd7MlV0xQDn0C3_f3Vd7D7hd1upeqMwBQ6xHjjB9QMfTOXGWqTfTEsOPUn8oqblNM3NA9eQbJCZHfAH8v5N7nENxlUS1P3ArDIIFZM9AL20ErBnK92_f0tAJHIEIEPx0zCdUbb1VBsHK_MtJQcPbkVuJ3FyvBajoiINPCa18WBREvebv_ty2hxoPYcW4g-MPRKrvYGvvPNEy4yOFWYfLzn4IWpVYcpQa5oC-GkehikEVv03XtKZcF2dRkmrq9mzGMvdFQd9gUgEjDOzTOIGeBQX9NU5_ytO_j8lp1JeIv--wjxm7iMRnA4OelmgJwKkJx1z0idnI_754-QMGGY2Qqb7yQcy7Q4e-d0snuogEENOk-W-0IrPK9k3-NKbup6-b6OheQSzERK4xQg3OADAqKzN8Vud3cZjrzLWbQxthWBKIf3WTrYCLJ0zbLZxn2WN_fvv5YcAU1th3DN66Y2gh8zHnpN0sW4UFzBfxs90N6ofzjengSHq4JbC-7H7hLfkBM4ZvBBK5-uzLcXZv2lz7UCC362RcGPS2MCNoPE35wBxldGPSgJudRt1mQCTdkRYzTQGsazckmnwJ3lZTkOsZAKvVppdig7YFb2zouo18D4t2jyI46ji4KtK_9REnKp-dsmG0EkrNDclxXQl2lvUb3KpK4e-bA6Ia5bg9HudWBFLK3jncE5nBRzjGw6pTugtPUSwj8uyYjUjBHUjAjNGRU-qhlOrYyvb66w_5_WhKEZyUYSVqiM4Z5PFKACZoBlpjfqOmChGQT6h1N9juEiD4ioqYIC7DXDi-hRiVjDYawhPUZrpRr_T329ocvJxPn6RAo80joIrNU-KPzUD7JQtcDloLiT9NWMLg9JpSb5bOzGE-n8wjpqfH501wGQJ_Af32_T7Zvm_WIywrSTjt7UfS-nZ22k0s-G3yoYOAtNS_dtaQvIO2CrHHTQocUuA9n5kG1zd_hYnwz79WgtD4DbdtcWDQX8b5mh4-zqjHOq5__vm_NDQTZwEs1mQXLmYPfSEwMd1F_3rj5k86KHUA9DPwG8XWa5N_AzOnLG89ht6xSAjl77MWaofvsIL7DCq_e0ZKA3TO2nZrR602oryozFmVsA53-eFoy9KmNhD_FTtS11Hr7RVTedGo1q69kMEZ8rJSjWSWguK7oTJ5AuEzHrQkLxZIiX3f4IslBLR7GnS8f0XRci3jAPxhQJTLdYcbLeAKrjD-2oMPyS8HWnGMzMV5CM7zimI1-pBENddGs-TJvAedFqvJchls4q0jyhLfKQHuKDTYT32Ewh4PAeKi71WCOn6EizYJuSH9Wm04FbVNaxZJE2J4NM2E4JINnNB_S8Wu0lP4Ft5kz5Pg8caDA3mdBEVHfwj6ju5Pz1I4tEm7nKNiBNNC6LBOkv8091vE8WezJKBL_nkMdYnx_-OWz3xeJY1A9tISy4SJIpfLw4OoMzRsPzzIW4RDLEy4r_tkJe3GFqygYS7kW3eZrPsd9g4-dgU19IOJz6jOe4huRRO82A6mCMdnfxIhJc5UfAYp9s_wpmDiILpsKII2J4tQRW7cQ0mGQcu5IUJwCkKyPYsqjQl-CO5FmdhX-l5-LEQAK-4tJx32V2Ggk-PmSezdmYqEz3oIDb1A3-iJ0p24OBTEcRrelakMoXTY1htN8k_bKuWSWoXXbWAQNhbLeasA-NIQX4eOblxHfmbNd00ce4sdRadPWWRuEt3-GG_xB1mw1FjZMiPI_UIGlzRBXHAYq3nsAHxi3t5tvIF0Wysj94hOrFaqKpArOrs_O42SL4CWEYICtoeIteqxQGWCOjiYDMhbaCzJOb1McTUJ4EhXn8pD1iSm2Uk6B5CTZpMHTNzRVexxEnHXmTLKw3iGOyBkZY_KJQwniicgVL4ewQjjjpJWv6rNx173vtiyZuT4hjKecjwn7iGeVujkavT3hiywWyWWq5LGmB9lXInJfNHfHqWi68fqR893tcfBgGVgnbFi_4A2RNZT11izpTYPQRS3Est6Jg7z127vpVfiVFENTxD-ZYgaFT0fzt15ybb_K8VQ2nyku5i5Nlv4BxX61ana7PcQrORs7gxKZg_iqWAieU8AKPoADaCpUkgl7bLd3XLuMRVndrQR4azTp3wE2aQt8JIhqSNvmTjjEaoEs2qCD6sdN8uyzDFA1yy_JHNtjBp6ircj6dTd7GCT3khICypDy01rt339O6HLRroUdSERics5v-jUVS3ou5brwK3f-QxwcO-0iN9kOOfZVGOS5W9ZL6Qpq5XOn0LX2BVw690-zwdtttTxdagh4m21dK_Z6dic6P_BQ0RmNwIQpqIRqDfBe HTTP/1.1
Host: 1865e08ae4.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=yankee-dor-xpverh2m6
Cookie: cx_ntsl_i=8614ad56-f73f-4f15-8daa-b2c47482b583; instal-cookie="2|1:0|10:1666667265|13:instal-cookie|248:eyIzMjQ0NjgwIjogIjgyYmU2ODg2LTg2YmMtNGZlYy04ZmI1LWZmOGM2NDJjNWJmYjphMjc5NTgyMWY3YjFmNGQxNWVmNjc2NTZjNjZkNDZhNWQzN2U5OTFkIiwgIjMyNDQ2ODAiOiAiNDRmZmQ1NTUtZTZmZC00NzY3LWJjNTQtM2NiNTgzM2IzMjc3OjIwNjg1MjNhODIzMWMwMGY5Mzg4NDViYzEyMTE3N2E0NGY5ZDQxOWIifQ==|8ff7e6104b6a132204e640b9745f7f9c2296551d0b22c31ad01cd150898f2536"
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:45 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: TornadoServer/5.1.1
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash c565f63ce31adb42ad451c9c8174f123
69d52c95835eefce43cd4d99068e128291c1a9f0
c3558dc2b6478c7ca0cbe96698ad6487db13693dee5c321ef8fef04c7b088b67
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 03:07:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 141bd03d3128b77623995352d5f12f3b
d6e025f8accf82bc30980b25aa0c45725d0edbe6
802350792ee8f8572ecac2317dd4ce562eb84fb7e6e38bf4f1d885674dbccc01
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 03:07:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 14:26:22 GMT
Expires: Mon, 31 Oct 2022 14:26:21 GMT
Etag: "d6e025f8accf82bc30980b25aa0c45725d0edbe6"
Cache-Control: max-age=558515,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f7be6a8faab4fa-OSL
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash ff014958b4fbbdf166c514fc28c94c60
d1352a99f408b7a1e4e781a6f6a22c47243f1b0d
8dfdb686d7ad41753de358b24ba317fcd00acece779e93272507ee7fe4bf0ee3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=157298
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 03:07:46 GMT
Etag: "63571674-118"
Expires: Wed, 26 Oct 2022 22:49:24 GMT
Last-Modified: Mon, 24 Oct 2022 22:49:24 GMT
Server: nginx
Content-Length: 280
findyourhalf.top/img/dating/jessica.jpg
172.67.70.156200 OK 34 kB URL HTTP/2 findyourhalf.top/img/dating/jessica.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x390, components 3\012- data
Hash e38526805379a23a1bcfefabf38befa2
afe5306e0df615f7238ad8fe41b33ecd38c10fd7
999863c911c86160c1f2721524580942426d157547b36985f643aeea0dab4aa1
GET /img/dating/jessica.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 33612
cf-bgj: h2pri
etag: "63569786-834c"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zlDDsHEMPu%2BdCdQRXijrd2HZPYMP2kM8hG0vt0yovdyg7iI4PCNgQ7F8RBBanJTagqj7vNyn%2FbDFVeIqTJe4FoRZN1VhnILB31fscv%2BMJQb341bhjP2AbpFKeB0RTSXx84c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d5f5cb4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/location.png
172.67.70.156200 OK 1.6 kB URL HTTP/2 findyourhalf.top/img/dating/location.png
IP 172.67.70.156:0
File type PNG image data, 61 x 98, 8-bit colormap, non-interlaced\012- data
Hash 214628994adff396733825e7b9778ad8
cfcdb02dd750c2c56ce0df960f032865d0315d24
072083cb6a8af8fdfad3087d4aafe1fbb1ef96c4863dc53d9f1483ce83937dfb
GET /img/dating/location.png HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/png
content-length: 1574
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
etag: "63569786-626"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BTGsjdrrwj8kMCxM9g3yNpaRXDHcaig0INOMDPQIwPVI%2FdDzy2NPnuKt%2FNZ%2FtCS2hXRn4Nhr0zh%2Fu%2F6atGYDXIc%2BS6kD6wXciO73UmuOxw4UdwOtn06yJmRUi6C%2BhGY1WLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d5f5db4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/anna.jpg
172.67.70.156200 OK 34 kB URL HTTP/2 findyourhalf.top/img/dating/anna.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x499, components 3\012- data
Hash 785457fd7f81715119251bcf4c1a8f56
66cbede5b601e6d0857441c939e9798493e812c2
32bfa591e8f2fb193889b21a3ec397e4029a5eeb22b4f1a718b056978013580c
GET /img/dating/anna.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 33816
cf-bgj: h2pri
etag: "63569786-8418"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B2weAoEvq0Cv8tOCdNeqFbrtMWi24HzJ013jfqCtaq2gvqSzj7CVU4TYQbXP7okUsk%2FtQbNDor4f7vq4bb%2BwiWFQQCoRUdhDBdPtHuwFj%2B8DG6l7X1R0PZcFNawJQsEauQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d5f5eb4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/milana.jpg
172.67.70.156200 OK 21 kB URL HTTP/2 findyourhalf.top/img/dating/milana.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x375, components 3\012- data
Hash 0d0464ad4924d5189707d2508a818e37
d40c4e3dcaeaaae3eb66d3ca096f8569c4605e21
d8b8c213ff1fcd97e0cbb4ec056712bfed39405c65a20135135328b5ad1104af
GET /img/dating/milana.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 20712
cf-bgj: h2pri
etag: "63569786-50e8"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2B3I4ecq%2BHwJXVXQbMJQqIoOXT%2BXFXXAhUlFrvCgWs39NpfSWHCsbxJM17iRk3PnFhtfTb%2BvBoToH%2F5oNeWaL74dx8oBOHlc%2B0Tb8%2BPS3v%2BWEdBgmPlW6KuaVkrWqJzR%2BvI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d5f5fb4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/adriana.jpg
172.67.70.156200 OK 21 kB URL HTTP/2 findyourhalf.top/img/dating/adriana.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3\012- data
Hash 56b1d087e07bfce17502f3d15a29599d
1a3fdece929142b64a427a813298a4278f9c9a3b
06bda10f4f886bd1dc58e72919dce1d5ef8395a9103cc719c333088ae7cf6677
GET /img/dating/adriana.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 20958
cf-bgj: h2pri
etag: "63569786-51de"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2FGSIhj4a2TaJK9EPfacwlWBl0dXr3ojDyaFMzNkmEWTo567h7gN%2Bfa8reRyzw9i9HCrUkJGSOBMeh0dRtSYW%2F85j30YxC1mvu6do19yEQeVCfPaPm0UdludC%2FX1kun3Xqw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d6f63b4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/jayden.jpg
172.67.70.156200 OK 12 kB URL HTTP/2 findyourhalf.top/img/dating/jayden.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 360x241, components 3\012- data
Hash 147a131b97e24b606548d78e8fa56e63
b746629c163d2cc3f3ac1d81b9bed35e682e85fc
10e26b8306c1bc3958e6b243fa4dd0aae70c197f460a9eec192dff846ba8aeaa
GET /img/dating/jayden.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 12409
cf-bgj: h2pri
etag: "63569786-3079"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o17GJlHApDstbWTKkwul11KKC45rI9g1lRVwHboQ9cq9HrPIY6wOg6ALqNjkZTNU90jTOhfSCRDGgUGisz2ttteISgEXMTNG%2FKnLZmZgMuhSQfoKOBuHXmYJsGm1R9wDGdY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d6f64b4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/melisa.jpg
172.67.70.156200 OK 55 kB URL HTTP/2 findyourhalf.top/img/dating/melisa.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 554x414, components 3\012- data
Hash 6d4697c58b5ca314ed5e18bd8ca6b9ce
2a6e9b8a93d359dd492fb3cfbb2bd768c28aa6cb
7d38705aa944831049bd714c99d3912f3528c27c5bbdac5bbd6fdcabef869bfa
GET /img/dating/melisa.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 54789
cf-bgj: h2pri
etag: "63569786-d605"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QrtqhD3QrmSEHOwUo1t6r4aVS9jiXhQUS4uGANPzXewX5SJmxun3Ps8gGTZSf7RDGYgw%2FNTXwAO2D663RH4l1zdoCEqxKj%2F6rmjq9W06cjV%2Bgpt%2BzPmM%2BZ%2FucMKYrNq3MFk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d6f66b4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/tiffany.jpg
172.67.70.156200 OK 118 kB URL HTTP/2 findyourhalf.top/img/dating/tiffany.jpg
IP 172.67.70.156:0
File type PNG image data, 507 x 500, 8-bit colormap, non-interlaced\012- data
Size 118 kB (118495 bytes)
Hash fafd80f19f1c7b5806ec7f6935872cb4
d8c6a473659ac0ba5472bcdfa4b7dab91470ed07
e65ad8065b9444d3881bb4d2fdd160f90f1babeb7a0f712f288a77aeef18ad87
GET /img/dating/tiffany.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 118495
cf-bgj: h2pri
etag: "63569786-1cedf"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zLWBI%2Fv%2BXTGRf4jx0qFubr7II3%2F%2F88Je5sKG8uhtHOP2WP0xodQXY%2BuazJFwY%2B4IgA24%2Fz6U7bYqV0MmnSSGKuLQR7E%2BdTIpdqnqEmVuz1Egz4OBHj8wVZicjwiieGK%2F978%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d6f67b4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/jasmine.jpg
172.67.70.156200 OK 55 kB URL HTTP/2 findyourhalf.top/img/dating/jasmine.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x620, components 3\012- data
Hash 9ddc7b6cb356a6d2e99eed41cc1734de
e1da98ccc6c5198d528384dcf0796de766475488
b80543c059b42b12ff905047b8a8f5d6f4b676febb7edc65aa602e64248dd837
GET /img/dating/jasmine.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 55200
cf-bgj: h2pri
etag: "63569786-d7a0"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vUJ5KecXxb8LTF1bxbn07LF8Jx1%2F920zS39x2BcLUsgNy0GeugZqROr8rmmmgTHfAz9xFnMV9C8sg7JMFdtdPgHNuQOQV0YtyQPIHJDrsfs7j32xlCC5GrN57VzDbj5XwGI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d6f69b4ff-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/dating/map.jpg
172.67.70.156200 OK 52 kB URL HTTP/2 findyourhalf.top/img/dating/map.jpg
IP 172.67.70.156:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 580x580, components 3\012- data
Hash e995c62855e79bc0a572d8df717e70b9
e41bf68cfa6bc8a5edcd48cfa20fec6df4a9e494
679a6ed56604e14b1f0d997c72c7252dfc472e48c0b8049fde01513c120475bc
GET /img/dating/map.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findyourhalf.top/css/survey-dating.css
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/jpeg
content-length: 52520
cf-bgj: h2pri
etag: "63569786-cd28"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t7BvYca9fOG77LpBl0ozvrp%2BA5J0gZqPo2q%2BRzTk0JUo7viLSj0YppdVba%2BKHMjNEE0fLjKwWAE8DcPnSoZl2a9omTN7qaBbi2A%2FqwC7iD2IK2jzGFsMtv8vDih5gCMdEwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d9f8bb4ff-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5374
Expires: Tue, 25 Oct 2022 04:37:20 GMT
Date: Tue, 25 Oct 2022 03:07:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5374
Expires: Tue, 25 Oct 2022 04:37:20 GMT
Date: Tue, 25 Oct 2022 03:07:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5374
Expires: Tue, 25 Oct 2022 04:37:20 GMT
Date: Tue, 25 Oct 2022 03:07:46 GMT
Connection: keep-alive
findyourhalf.top/js/data/sd-529026.js?v=4
172.67.70.156200 OK 1.6 kB URL HTTP/2 findyourhalf.top/js/data/sd-529026.js?v=4
IP 172.67.70.156:0
File type Unicode text, UTF-8 text, with very long lines (4000), with no line terminators
Hash 5c50f898aac128fc14411ccacf101da6
4d9548784606dc8c23c4fb5b84ccf7f19c213191
d77e28ad3dbfe58469a4282c99f30e93895486a74bd2d018a975e6ceba9f9335
GET /js/data/sd-529026.js?v=4 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6073
etag: W/"63569786-17b9"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ylwa%2Falr2yuaH6PtXYOFGmwEJp55McYw%2Fh9J6rA%2BYP%2FnF4fUNq1XbFDXNPEO%2B%2Bo5ajiunpghSq64q6JZEye3pfzzHlszdERwKyVTVpjNah6PcKy9Jiosogcdz4qVl0ERz%2FU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6e5ff2b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ab86bff-a678-4d24-8c74-b3d5fb6495e3.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ab86bff-a678-4d24-8c74-b3d5fb6495e3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b8f7dec290a5b32d2e1760ea01e0f160
bac869e97622c00d8ba2349ac03c6390229f8929
aa5d7fcb93818d291acce653a883c312595314685b9de29d788491d9310efcbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ab86bff-a678-4d24-8c74-b3d5fb6495e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4513
x-amzn-requestid: 32d9a3be-9964-4e53-a31c-ca4edffab306
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: acDxnGtTIAMFeVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6354b33d-371bb2cb770b34624ec753de;Sampled=0
x-amzn-remapped-date: Sun, 23 Oct 2022 03:21:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sJv7RKOQsKqptRmrvXqAZZ8PzLWt9nCP9MNl--wcLRVe3zxjYdMCwA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:32 GMT
age: 19034
etag: "bac869e97622c00d8ba2349ac03c6390229f8929"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33fda234-9118-4b4b-86d9-02c36810eda5.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33fda234-9118-4b4b-86d9-02c36810eda5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b949df0edd9d64aa962e3bf4b267889e
3ef04f8c638dddf8bb8b70aae74770892307c814
e6c42bdd84bc9661c25a201599c29257b843d86d638ec479e7b5fa7bf81bc961
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33fda234-9118-4b4b-86d9-02c36810eda5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11622
x-amzn-requestid: 2d6c3eb8-6a67-40bb-b970-a92caf783a4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYPSZFWpoAMFU1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63532c0f-14a2cd9f68bda5a01a765a2d;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 23:32:31 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _AwDcPb8X7mPlOseeJZxw4kaQsR4d_HDyqEUM7I4RfurX2iDap87YA==
via: 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 03:36:20 GMT
age: 84686
etag: "3ef04f8c638dddf8bb8b70aae74770892307c814"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01dacddfb62128799a20e0541bf5a18c
1bb8047c270b76c9dfcd8dba4a63b25c7604f03d
65f5c51b84ff7a131a3a695142ae9d82a73a516792abdd2d137714a1a3cf3bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f505e74-07f3-4154-bfa4-5dfc184b8262.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7361
x-amzn-requestid: 33e339c8-c7e8-439d-a593-d7e19bd3b3eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aYvRkGGIIAMFdYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63535f3d-7cbcf593571aa2df6a97f077;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 03:10:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0iPBD-KhZZI_L24QKVStukb8MwWC7Q2AzSOfwnV--BxOreqD4e9Kfw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 05:43:46 GMT
age: 77040
etag: "1bb8047c270b76c9dfcd8dba4a63b25c7604f03d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 80bab61eeda285e378b86b3efc4f87f9
5c690531e195332c04092ce22e7bdcecccc3c9d5
0c4dec046835501b598b5165acd592c3baeb2d6e21b6ac5fd549e790a802cd02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf8cfe72-ca76-42ae-a95f-b33a2edb91b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7977
x-amzn-requestid: 3e217877-33a2-4efc-a21f-b75764a8ced9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3FWGRooAMFagw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570555-2bc77cb653ef022b4aab7f71;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CWRIYnB8Zcc-9L-EdFq_ahTPlv8AMqnBGlZmRTN-0BsZIUWF3eUOfg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:37:08 GMT
age: 19838
etag: "5c690531e195332c04092ce22e7bdcecccc3c9d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cf322f19151bcfa374c2e32b9ac986f
e8e69ac951def18bc1e03ecd4fe8a21d3b825b27
54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: jiu-Z6DMgXxXdZ5BDwjNoq5Y15kBgM894k4EY2qSRZKdvk0bfkn89A==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:16 GMT
age: 19050
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fe81c53-d1b6-41f3-80b6-2deb2f9910a2.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fe81c53-d1b6-41f3-80b6-2deb2f9910a2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f9dcb593f8cda6614f0038cd9d9f240
5f466d8c8fac2fad3e4539e92ac8f7f8fab4dc53
c111e59b70b4bca5f935cd53cbb6c5287d549a2364f537b8258da64d4405ad3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fe81c53-d1b6-41f3-80b6-2deb2f9910a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4606
x-amzn-requestid: 27a36481-c1d3-4bf3-a6b0-61a00b6bb058
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3JBHEzIAMF4aQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357056c-0e3cf1f16c80195571efe893;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: XW-ciDnnHUUdvqVriEU4ALAwx_oRvWG2gmKAoyBXQw20Y2b6_A_s3A==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:50:18 GMT
age: 19048
etag: "5f466d8c8fac2fad3e4539e92ac8f7f8fab4dc53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash d89151f708ba953e0e260eceb010a9dc
5d6d7a6fd3493d9597ed9f3b7bf2c5c332538e35
33dd2066093ba4a72d8387c2e317225330554414e3098c69b518c91f4cf52f1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5728
Cache-Control: max-age=164072
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 03:07:46 GMT
Etag: "63571a8a-118"
Expires: Thu, 27 Oct 2022 00:42:18 GMT
Last-Modified: Mon, 24 Oct 2022 23:06:50 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash d89151f708ba953e0e260eceb010a9dc
5d6d7a6fd3493d9597ed9f3b7bf2c5c332538e35
33dd2066093ba4a72d8387c2e317225330554414e3098c69b518c91f4cf52f1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5728
Cache-Control: max-age=164072
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 03:07:46 GMT
Etag: "63571a8a-118"
Expires: Thu, 27 Oct 2022 00:42:18 GMT
Last-Modified: Mon, 24 Oct 2022 23:06:50 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 280
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash e4e9602f1062e692c3df5dc1eec489cb
ab47ab5548fed1ea1e145becb03a9885eacf7ddb
036e9d4e5c9e9bc75cbb78389fbcc4a5cdfa3463feddd5db8a11375b8c964af0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 03:07:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 06:25:20 GMT
Expires: Mon, 31 Oct 2022 06:25:19 GMT
Etag: "ab47ab5548fed1ea1e145becb03a9885eacf7ddb"
Cache-Control: max-age=529652,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f7be7019d6b4fa-OSL
my.rtmark.net/gid.js
139.45.195.8200 OK 65 B IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash cfa2b456bcfdaff1ed7b826c5f97e182
c9639f483417dd628f4886bddec0906f60571ab4
46d53e8d6ca0158ab9e26d9f4d21c513306bad476092368f1e15399d5608937a
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Cookie: ID=f87fc4e265684dffab33c2e0d52e97f2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://findyourhalf.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f87fc4e265684dffab33c2e0d52e97f2; expires=Wed, 25 Oct 2023 03:07:46 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ccd8fbe518cbd1441001b345b95ca3b3
77850bdd997598c7e7e0d2efdefa2cac2ed039ae
391141bdc841d1f4ac8600ed8be111a3b22a67ac162f79156ebcb09548038f67
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "391141BDC841D1F4AC8600ED8BE111A3B22A67AC162F79156EBCB09548038F67"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8604
Expires: Tue, 25 Oct 2022 05:31:10 GMT
Date: Tue, 25 Oct 2022 03:07:46 GMT
Connection: keep-alive
itcleffaom.com/track?offer_id=2061&z=4655142&request_var=6100_305&variable2=44ffd555-e6fd-4767-bc54-3cb5833b3277:2068523a8231c00f938845bc121177a44f9d419b
139.45.197.237200 OK 143 B URL HTTP/2 itcleffaom.com/track?offer_id=2061&z=4655142&request_var=6100_305&variable2=44ffd555-e6fd-4767-bc54-3cb5833b3277:2068523a8231c00f938845bc121177a44f9d419b
IP 139.45.197.237:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 77828031efc3995c75c0f733d34c0b96
38cc2e547dfb1621c599f6e9821a0a09abf3d843
8f774c2928d2a9c0976780b1fa799107482f4c4a2e9737b494712328424a63bf
Analyzer Verdict Alert quad9 Sinkholed
GET /track?offer_id=2061&z=4655142&request_var=6100_305&variable2=44ffd555-e6fd-4767-bc54-3cb5833b3277:2068523a8231c00f938845bc121177a44f9d419b HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/json
content-length: 143
x-trace-id: d69b2780fba2c830230f264b69960b42
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash da275afef2c120cef63dae40154284da
569947d789ce819632a881cb49b16b79ef6353ec
d5efa3c3f1c8e805662f74e42a3fac2993f0c8dd03129f28a9e6930cd98e98e1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 03:07:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 01:33:16 GMT
Expires: Tue, 01 Nov 2022 01:33:15 GMT
Etag: "569947d789ce819632a881cb49b16b79ef6353ec"
Cache-Control: max-age=598528,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75f7be717a37b4fa-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
139.45.195.253200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 139.45.195.253:0
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1144
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 25 Oct 2022 03:07:46 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://findyourhalf.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
itcleffaom.com/rotate?zz=5425733;5425834;5425795;5425847;5425740;5428097;5428278;5381307&var=4655142&ymid=6100_305&uid=f87fc4e265684dffab33c2e0d52e97f2
139.45.197.237200 OK 3.3 kB URL HTTP/2 itcleffaom.com/rotate?zz=5425733;5425834;5425795;5425847;5425740;5428097;5428278;5381307&var=4655142&ymid=6100_305&uid=f87fc4e265684dffab33c2e0d52e97f2
IP 139.45.197.237:0
Hash b571140027dd34e35bc1ccf5a6086ad8
28332665c7fe4805e43845e59c699642cb14e286
f20c599772a8cf77514cd84d32edbbf522d803a5e5d572d729e2cb673974bd5b
Analyzer Verdict Alert quad9 Sinkholed
GET /rotate?zz=5425733;5425834;5425795;5425847;5425740;5428097;5428278;5381307&var=4655142&ymid=6100_305&uid=f87fc4e265684dffab33c2e0d52e97f2 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/javascript
x-trace-id: 3aaec7862534418242b350386ea052ef
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
vary: Origin
access-control-allow-origin: https://findyourhalf.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=f87fc4e265684dffab33c2e0d52e97f2; expires=Wed, 25 Oct 2023 03:07:46 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
findyourhalf.top/img/fav/heart-apple-60.png
172.67.70.156200 OK 4.7 kB URL HTTP/2 findyourhalf.top/img/fav/heart-apple-60.png
IP 172.67.70.156:0
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash df363aa0b52e70e713d8279bf63d7c11
a78e2139a964ccd9dc48892985cd8f47ba982eda
0710e7435d9fb61d35b26d23efaef1e09caa18d9d0123652a5095d36e2413ae7
GET /img/fav/heart-apple-60.png HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: image/png
content-length: 4742
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
etag: "63569786-1286"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ixXODksAejINC1yyDoa4atOwQwSPnGRnHinjwWmLsytvvQ%2FNMrAgzDtAdQdepqF7TLTJ0fV45GVERQiFCidk2H3WYaIhOpsOgO0TiRg2GpXCdNzlh9O1Oc6%2BkZ1UAHmGM9o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be721930b4ff-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 5a50627094b9c26876a0c23d4c3a90ff
f83cb4d3c29c30f44ca9c2712792a5040cec832a
5e2026dec587378f7ce8463ddbe17c97fd38ae94a77a3643d280c3dac61c4c93
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 03:07:46 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 29 Oct 2022 00:21:15 GMT
ETag: "f83cb4d3c29c30f44ca9c2712792a5040cec832a"
Last-Modified: Tue, 25 Oct 2022 00:21:16 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2140
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75f7be729965b4ff-OSL
mc.yandex.ru/metrika/tag.js
87.250.250.119200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.250.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (731)
Hash 64adf2282f72dc350e916cb82af41ab7
d5c10f65a7ac0cce6eb0c78df805965a9a3ad017
4942011d5f3623476ceff936e757245d89ce2af664558a7031497d370a3d3771
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73219
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: *
etag: "6351126c-11e03"
expires: Tue, 25 Oct 2022 04:07:47 GMT
last-modified: Thu, 20 Oct 2022 12:18:36 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A286576788%3Arqn%3A12%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C1%2C1%2C0%2C%2C134%2C2%2C%2C%2C%2C287%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
87.250.250.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A286576788%3Arqn%3A12%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C1%2C1%2C0%2C%2C134%2C2%2C%2C%2C%2C287%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP 87.250.250.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 6d85866882d35ccdca9812ca48ad0151
d794a8cdb7ebd55f2eac88ea1ad2ba5fe9b6d31a
16df3be60ee774fbee9ea73bac56d54e908cdb333a23132836758e271f113c9b
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A286576788%3Arqn%3A12%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C1%2C1%2C0%2C%2C134%2C2%2C%2C%2C%2C287%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 25 Oct 2022 03:07:47 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexCall&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A633124504%3Arqn%3A14%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexCall&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A633124504%3Arqn%3A14%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexCall&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A633124504%3Arqn%3A14%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A286576788%3Arqn%3A12%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C1%2C1%2C0%2C%2C134%2C2%2C%2C%2C%2C287%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
87.250.250.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A286576788%3Arqn%3A12%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C1%2C1%2C0%2C%2C134%2C2%2C%2C%2C%2C287%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A286576788%3Arqn%3A12%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C1%2C1%2C0%2C%2C134%2C2%2C%2C%2C%2C287%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A180%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A286576788%3Arqn%3A12%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C64%2C1%2C1%2C0%2C%2C134%2C2%2C%2C%2C%2C287%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
set-cookie: yandexuid=5271183451666667267; Expires=Wed, 25-Oct-2023 03:07:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5271183451666667267; Expires=Wed, 25-Oct-2023 03:07:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=459765241666667267; Path=/; SameSite=None; Secure
i=u3aaxpaxAOzBSp0srhW+tkav1JSAWQfLPBSRBO3XpdvTs4PXTqGYwacnETIUe3dRIrcmnexKNRLF4WJNW/VTCDkRRNU=; Expires=Fri, 22-Oct-2032 03:07:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1698203267.yrts.1666667267#1698203267.yrtsi.1666667267; Expires=Wed, 25-Oct-2023 03:07:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonStepChange&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A217351320%3Arqn%3A16%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonStepChange&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A217351320%3Arqn%3A16%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonStepChange&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A217351320%3Arqn%3A16%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonUnique&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A1054492216%3Arqn%3A15%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonUnique&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A1054492216%3Arqn%3A15%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonUnique&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A1054492216%3Arqn%3A15%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexLoad&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A946703021%3Arqn%3A17%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexLoad&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A946703021%3Arqn%3A17%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexLoad&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A946703021%3Arqn%3A17%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A590531685%3Arqn%3A18%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A590531685%3Arqn%3A18%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A590531685%3Arqn%3A18%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A982611677%3Arqn%3A20%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A982611677%3Arqn%3A20%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A982611677%3Arqn%3A20%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonTrackImpression&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A617907914%3Arqn%3A19%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonTrackImpression&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A617907914%3Arqn%3A19%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonTrackImpression&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A617907914%3Arqn%3A19%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 190
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonGetIppRotate&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A947558964%3Arqn%3A21%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonGetIppRotate&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A947558964%3Arqn%3A21%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonGetIppRotate&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030745%3Aet%3A1666667266%3Ac%3A1%3Arn%3A947558964%3Arqn%3A21%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 384
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_3331%26ymid%3D82be6886-86bc-4fec-8fb5-ff8c642c5bfb%253Aa2795821f7b1f4d15ef67656c66d46a5d37e991d%26utm_campaign%3D6100_3331%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666658012_e50a3bb76e5c98f1d9dfab0e65de126d7f7aed997ae6faf3e57fa61039835067&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A11349622%3Az%3A0%3Ai%3A20221025003335%3Aet%3A1666658016%3Ac%3A1%3Arn%3A793648015%3Arqn%3A11%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666658009982%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_3331%26ymid%3D82be6886-86bc-4fec-8fb5-ff8c642c5bfb%253Aa2795821f7b1f4d15ef67656c66d46a5d37e991d%26utm_campaign%3D6100_3331%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666658012_e50a3bb76e5c98f1d9dfab0e65de126d7f7aed997ae6faf3e57fa61039835067&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A11349622%3Az%3A0%3Ai%3A20221025003335%3Aet%3A1666658016%3Ac%3A1%3Arn%3A793648015%3Arqn%3A11%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666658009982%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_3331%26ymid%3D82be6886-86bc-4fec-8fb5-ff8c642c5bfb%253Aa2795821f7b1f4d15ef67656c66d46a5d37e991d%26utm_campaign%3D6100_3331%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666658012_e50a3bb76e5c98f1d9dfab0e65de126d7f7aed997ae6faf3e57fa61039835067&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A11349622%3Az%3A0%3Ai%3A20221025003335%3Aet%3A1666658016%3Ac%3A1%3Arn%3A793648015%3Arqn%3A11%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666658009982%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 84ee817a680682f02e8e5cef1c74e129
8deb0e81bf7a841c01850e5f0d2ceb3277312dcf
350a720ec69c3f4762990f276820f346a1801eb663dc872c17ffe58c69b0fa6d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "350A720EC69C3F4762990F276820F346A1801EB663DC872C17FFE58C69B0FA6D"
Last-Modified: Sat, 22 Oct 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8622
Expires: Tue, 25 Oct 2022 05:31:34 GMT
Date: Tue, 25 Oct 2022 03:07:52 GMT
Connection: keep-alive
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030751%3Aet%3A1666667271%3Ac%3A1%3Arn%3A120754401%3Arqn%3A22%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667271%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(11)ecs(1)fid(500)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030751%3Aet%3A1666667271%3Ac%3A1%3Arn%3A120754401%3Arqn%3A22%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667271%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(11)ecs(1)fid(500)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D44ffd555-e6fd-4767-bc54-3cb5833b3277%253A2068523a8231c00f938845bc121177a44f9d419b%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666667267_fd2c5a13c34c974a9b4a67273af4d0fac756e617fbe54dcb26d58ac3487db2f3&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A656355436%3Az%3A0%3Ai%3A20221025030751%3Aet%3A1666667271%3Ac%3A1%3Arn%3A120754401%3Arqn%3A22%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666667264629%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666667271%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(11)ecs(1)fid(500)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 03:07:52 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:52 GMT
last-modified: Tue, 25-Oct-2022 03:07:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
172.67.149.153200 OK 0 B URL HTTP/2 cdntechone.com/stattag.js
IP 172.67.149.153:0
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:52 GMT
etag: W/"634eb2c0-32b7"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1197
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EicWg3ErNMFIDNJWqnMZb18lmsFp0x46336RKYppCaTJuQ4uo3xEYA1RL6e6pFIYGL0ogHtWFNVMV9P96%2BffqeiRgz%2F%2BLnlUD8kMOCKp9iLwtszMeB%2BM%2FeeUdq%2BsUpeDRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be701daeb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
findyourhalf.top/js/dict/cookie-consent-1.json?v=1
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/js/dict/cookie-consent-1.json?v=1
IP 172.67.70.156:0
GET /js/dict/cookie-consent-1.json?v=1 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/json
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
etag: W/"63569786-168d"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2Fqea5zoyDE1AqhstclYVKKk8p%2FwvNQqLUud0amjInjkC09AgssKw3AE%2Bv46WzhUociz%2BwdW2rloot7Aze%2FqVA3YlOktkH2MkUpgDUlc3UZAWbJjgxliXz8%2FwBl2sbaD7lY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be70087ab4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=yankee-dor-xpverh2m6
35.186.250.143200 OK 0 B URL HTTP/2 1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=yankee-dor-xpverh2m6
IP 35.186.250.143:0
GET /trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=yankee-dor-xpverh2m6 HTTP/1.1
Host: 1865e08ae4.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://belia-glp.com/
Cookie: cx_ntsl_i=8614ad56-f73f-4f15-8daa-b2c47482b583; instal-cookie="2|1:0|10:1666658010|13:instal-cookie|124:eyIzMjQ0NjgwIjogIjgyYmU2ODg2LTg2YmMtNGZlYy04ZmI1LWZmOGM2NDJjNWJmYjphMjc5NTgyMWY3YjFmNGQxNWVmNjc2NTZjNjZkNDZhNWQzN2U5OTFkIn0=|d47df960214a433f7143747750512999e83ac25e754732ac73a1e1d7d9eb8a66"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:45 GMT
content-type: text/html; charset=UTF-8
server: TornadoServer/5.1.1
clickid: 44ffd555-e6fd-4767-bc54-3cb5833b3277:2068523a8231c00f938845bc121177a44f9d419b
x-service-version: 2.0.1
x-frame-options: SAMEORIGIN
etag: W/"82f545ffb93a5e6e2397cb7e7a79d346d8c15e94"
set-cookie: instal-cookie="2|1:0|10:1666667265|13:instal-cookie|248:eyIzMjQ0NjgwIjogIjgyYmU2ODg2LTg2YmMtNGZlYy04ZmI1LWZmOGM2NDJjNWJmYjphMjc5NTgyMWY3YjFmNGQxNWVmNjc2NTZjNjZkNDZhNWQzN2U5OTFkIiwgIjMyNDQ2ODAiOiAiNDRmZmQ1NTUtZTZmZC00NzY3LWJjNTQtM2NiNTgzM2IzMjc3OjIwNjg1MjNhODIzMWMwMGY5Mzg4NDViYzEyMTE3N2E0NGY5ZDQxOWIifQ==|8ff7e6104b6a132204e640b9745f7f9c2296551d0b22c31ad01cd150898f2536"; expires=Thu, 24 Nov 2022 03:07:45 GMT; Path=/; SameSite=None; Secure
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=44ffd555-e6fd-4767-bc54-3cb5833b3277:2068523a8231c00f938845bc121177a44f9d419b
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=44ffd555-e6fd-4767-bc54-3cb5833b3277:2068523a8231c00f938845bc121177a44f9d419b
IP 172.67.70.156:0
GET /dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=44ffd555-e6fd-4767-bc54-3cb5833b3277:2068523a8231c00f938845bc121177a44f9d419b HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: text/html
last-modified: Mon, 24 Oct 2022 13:47:49 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vKpvWSp8gadT9EZX%2FyCZ1xabLdi7jFJEth13ePbtOp7XSj5AQMmn%2FGnuOk3Js61pe5nMZnCaO3mwjYP3KuzP1Y5hWUWGSTn2hKFd%2FqzH5Gc51vSwZt3sw5efd6OsN9Ytagg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6cbf1cb4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/data/_global-config-sd.js?v=3
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/js/data/_global-config-sd.js?v=3
IP 172.67.70.156:0
GET /js/data/_global-config-sd.js?v=3 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=683
etag: W/"63569786-2ab"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3342
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tu8DHfxTczAMa8MCLdYcnmpQSNJQ4c1ghipefVgLzB1w4I6XKujP8LVooWFRSez7HzDBll2uBB%2Bx6HA5G8pGleIm7DlhtCtt7LSAOf425Z0WB3UndL9EUvBh1MpCAVOSwNY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75f7be6d4f4eb4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/data/rtc.js?v=1
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/js/data/rtc.js?v=1
IP 172.67.70.156:0
GET /js/data/rtc.js?v=1 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=14949
etag: W/"63569786-3a65"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3342
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z%2B2VEI7rhO70sl4bR%2FfTpH12zKnrvslkI7i1n6%2FbEQPL24SPypktZ0uBnbPBNLqf7kjvT3AMi0WqXluEYWQY15icMrgudaXWVOcXn7dgYGx%2BYRfyLUMGXYGgCs%2BvNIoRugg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6d4f50b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/css/survey.css?v=1
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/css/survey.css?v=1
IP 172.67.70.156:0
GET /css/survey.css?v=1 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19835
etag: W/"63569786-4d7b"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3342
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jGltSQTO5ZtSMdHENNlNqec2Rh0p52vKYaeqRNC6yXykjCuPuczpAuoOjsmSpBMBcX2BmpNLjWTI2k9GzhyQ5v4khoaJrSdp9bsJEOunjxsF7LRKFKGLpg7SdpbBIyuHDzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6d4f52b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=44ffd555-e6fd-4767-bc54-3cb5833b3277%3A2068523a8231c00f938845bc121177a44f9d419b&utm_campaign=6100_305&utm_medium=4655142&utm_content=zd_public_v2
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=44ffd555-e6fd-4767-bc54-3cb5833b3277%3A2068523a8231c00f938845bc121177a44f9d419b&utm_campaign=6100_305&utm_medium=4655142&utm_content=zd_public_v2
IP 172.67.70.156:0
GET /dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=44ffd555-e6fd-4767-bc54-3cb5833b3277%3A2068523a8231c00f938845bc121177a44f9d419b&utm_campaign=6100_305&utm_medium=4655142&utm_content=zd_public_v2 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: text/html
last-modified: Mon, 24 Oct 2022 13:47:49 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u4KUl4LCaapk2OX%2FgQj8bDYJ0Zax1tMW3FlqZTr0ar%2FyLRVp8j68s48yBkGBT%2BZOLJm5YoYPKga0oc7%2BAbmN%2Ff7RGAl6thIsPJQ68fuBs61vauUYyd9MYRQlcP45huzBaIY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6e4fe8b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/css/survey-dating.css
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/css/survey-dating.css
IP 172.67.70.156:0
GET /css/survey-dating.css HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=9801
etag: W/"63569786-2649"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 2508
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=11tQNi0Re3KN8ROdRazBjxP9Rh3mCGILkhTw2V3swGP8%2BU6z5WisTyGMzmfPGjq4XiX4CZGomQZmHhSH4raChPwcp6a130PV4NKFzW0iJsDdEHV0X0lYi5O1ThITiLsmEOM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6d5f55b4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/survey-dating.js?v=1
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/js/survey-dating.js?v=1
IP 172.67.70.156:0
GET /js/survey-dating.js?v=1 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63569786-60d"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bl9SFx8BOZT7XPiaKwT9xPgFCC%2F7CQsgV%2B4FEFpqxni3u5qVtnNJaA9CVEWMlWdhVlIimFbRGmcbpFVscm9Mruu5GyDq0%2Bg2rVuG%2BCfnVkeZki6PfVSTbWkz5g07LxD14Yg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6d7f6eb4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/survey.js?v=14
172.67.70.156200 OK 0 B URL HTTP/2 findyourhalf.top/js/survey.js?v=14
IP 172.67.70.156:0
GET /js/survey.js?v=14 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16666580111002136150; _ym_d=1666658011; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 03:07:46 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63569786-4a5a2"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3341
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zW3QPpYC3uxlK3l0YDAplJpdHnGJcs0SdkI2%2BfITL9uexsMfcMRsaocT%2F2DYKrz5BbIj7j96JR52oP2uDls0bFNL67XLz4b5j65jvb793KhNrlnrjBS92E17d6TYH9Ftwyw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75f7be6d7f6db4ff-OSL
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_3331%26ymid%3D82be6886-86bc-4fec-8fb5-ff8c642c5bfb%253Aa2795821f7b1f4d15ef67656c66d46a5d37e991d%26utm_campaign%3D6100_3331%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666658012_e50a3bb76e5c98f1d9dfab0e65de126d7f7aed997ae6faf3e57fa61039835067&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A11349622%3Az%3A0%3Ai%3A20221025003335%3Aet%3A1666658016%3Ac%3A1%3Arn%3A793648015%3Arqn%3A11%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666658009982%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)rqnl(2)ti(2)
87.250.250.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/66423859?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_3331%26ymid%3D82be6886-86bc-4fec-8fb5-ff8c642c5bfb%253Aa2795821f7b1f4d15ef67656c66d46a5d37e991d%26utm_campaign%3D6100_3331%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666658012_e50a3bb76e5c98f1d9dfab0e65de126d7f7aed997ae6faf3e57fa61039835067&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A11349622%3Az%3A0%3Ai%3A20221025003335%3Aet%3A1666658016%3Ac%3A1%3Arn%3A793648015%3Arqn%3A11%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666658009982%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)rqnl(2)ti(2)
IP 87.250.250.119:0
POST /watch/66423859?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_3331%26ymid%3D82be6886-86bc-4fec-8fb5-ff8c642c5bfb%253Aa2795821f7b1f4d15ef67656c66d46a5d37e991d%26utm_campaign%3D6100_3331%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666658012_e50a3bb76e5c98f1d9dfab0e65de126d7f7aed997ae6faf3e57fa61039835067&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A11349622%3Az%3A0%3Ai%3A20221025003335%3Aet%3A1666658016%3Ac%3A1%3Arn%3A793648015%3Arqn%3A11%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666658009982%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr(14)rqnl(2)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_3331%26ymid%3D82be6886-86bc-4fec-8fb5-ff8c642c5bfb%253Aa2795821f7b1f4d15ef67656c66d46a5d37e991d%26utm_campaign%3D6100_3331%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666658012_e50a3bb76e5c98f1d9dfab0e65de126d7f7aed997ae6faf3e57fa61039835067&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1317598942335%3Ahid%3A11349622%3Az%3A0%3Ai%3A20221025003335%3Aet%3A1666658016%3Ac%3A1%3Arn%3A793648015%3Arqn%3A11%3Au%3A16666580111002136150%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1666658009982%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1666667266%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29
date: Tue, 25 Oct 2022 03:07:47 GMT
access-control-allow-origin: https://findyourhalf.top
set-cookie: yandexuid=3914975651666667267; Expires=Wed, 25-Oct-2023 03:07:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3914975651666667267; Expires=Wed, 25-Oct-2023 03:07:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=184301751666667267; Path=/; SameSite=None; Secure
i=eWXmCfaKpj0R2jufRlCwtYgocF7ugT2/rdXYdGr36Wugs3zfjbdaxkRc0L27wgeEJzAN/5/lBfnvchVGfvD1M3DqUyY=; Expires=Fri, 22-Oct-2032 03:07:46 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1698203267.yrts.1666667267#1698203267.yrtsi.1666667267; Expires=Wed, 25-Oct-2023 03:07:47 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 03:07:47 GMT
last-modified: Tue, 25-Oct-2022 03:07:47 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2