ebpxzn.ee.wy5532.com/
81.171.22.6200 OK 481 B IP 81.171.22.6:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (481), with no line terminators
Hash 1126a4d8cf8df9ef1ab0855dcb7b7afb
51ea9155e5c76c064aa1c64bf074922b28566548
4ee0f5a2521149b00e64a1e011b6cb1fe05c7e500c2b341274828f746bdc89f8
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: ebpxzn.ee.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: sid=1cd1c6b8-6e21-11ed-a2a7-da67f386bfdc
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 481
content-type: text/html; charset=utf-8
date: Sun, 27 Nov 2022 07:47:49 GMT
server: nginx
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8400
Expires: Sun, 27 Nov 2022 10:07:50 GMT
Date: Sun, 27 Nov 2022 07:47:50 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3321
Cache-Control: max-age=99519
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 07:47:50 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:26:29 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 07:19:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1709
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11492
Expires: Sun, 27 Nov 2022 10:59:22 GMT
Date: Sun, 27 Nov 2022 07:47:50 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: hUWxrjzdpqIMiAc9DAtc1pd9II1gzdk3uVuATaxkL8C0u2wpf5sUCws+m5ddWBGpL3sc5LOETgg=
x-amz-request-id: YXPJES1YFGQYXQG5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 07:44:33 GMT
age: 197
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 07:47:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ebpxzn.ee.wy5532.com/favicon.ico
81.171.22.6404 Not Found 9 B URL HTTP/1.1 ebpxzn.ee.wy5532.com/favicon.ico
IP 81.171.22.6:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: ebpxzn.ee.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ebpxzn.ee.wy5532.com/
Cookie: sid=1cd1c6b8-6e21-11ed-a2a7-da67f386bfdc
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 27 Nov 2022 07:47:50 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 07:08:54 GMT
cache-control: public,max-age=3600
age: 2336
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ebpxzn.ee.wy5532.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2OTU0MjQ3MCwiaWF0IjoxNjY5NTM1MjcwLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2xtMnVzOTY3ajdvNW0yY28xdDZ2aTMiLCJuYmYiOjE2Njk1MzUyNzAsInRzIjoxNjY5NTM1MjcwMDgxNDU3fQ.3R6MaSlBQGd_g6oObE1GvM3Z-Tdl1-VVRXU-xpZrU4I&sid=1cd1c6b8-6e21-11ed-a2a7-da67f386bfdc
81.171.22.6302 Found 11 B URL HTTP/1.1 ebpxzn.ee.wy5532.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2OTU0MjQ3MCwiaWF0IjoxNjY5NTM1MjcwLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2xtMnVzOTY3ajdvNW0yY28xdDZ2aTMiLCJuYmYiOjE2Njk1MzUyNzAsInRzIjoxNjY5NTM1MjcwMDgxNDU3fQ.3R6MaSlBQGd_g6oObE1GvM3Z-Tdl1-VVRXU-xpZrU4I&sid=1cd1c6b8-6e21-11ed-a2a7-da67f386bfdc
IP 81.171.22.6:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2OTU0MjQ3MCwiaWF0IjoxNjY5NTM1MjcwLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2xtMnVzOTY3ajdvNW0yY28xdDZ2aTMiLCJuYmYiOjE2Njk1MzUyNzAsInRzIjoxNjY5NTM1MjcwMDgxNDU3fQ.3R6MaSlBQGd_g6oObE1GvM3Z-Tdl1-VVRXU-xpZrU4I&sid=1cd1c6b8-6e21-11ed-a2a7-da67f386bfdc HTTP/1.1
Host: ebpxzn.ee.wy5532.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ebpxzn.ee.wy5532.com/
Cookie: sid=1cd1c6b8-6e21-11ed-a2a7-da67f386bfdc
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 27 Nov 2022 07:47:50 GMT
location: http://belia-glp.com/zcvisitor/caedb7b6-6e27-11ed-8285-0a033d3b8991/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
server: nginx
set-cookie: sid=1cd1c6b8-6e21-11ed-a2a7-da67f386bfdc; path=/; domain=.wy5532.com; expires=Fri, 15 Dec 2090 11:01:57 GMT; max-age=2147483647; HttpOnly
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 87
Cache-Control: max-age=91227
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 07:47:51 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:08:18 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
belia-glp.com/zcvisitor/caedb7b6-6e27-11ed-8285-0a033d3b8991/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
3.212.50.125200 1.1 kB URL HTTP/1.1 belia-glp.com/zcvisitor/caedb7b6-6e27-11ed-8285-0a033d3b8991/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
IP 3.212.50.125:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 47ae612c0ba73e8288d15ed61bc3a352
964313d19962b313bfec96ce62be1231666bc471
c3bd4c5c38bad43efa8c756ab5a7073ccd2313bc44205081dce1fdc395ffed72
GET /zcvisitor/caedb7b6-6e27-11ed-8285-0a033d3b8991/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97 HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ebpxzn.ee.wy5532.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 27 Nov 2022 07:47:51 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: ALZgEdAD
push.services.mozilla.com/
52.43.253.52101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.253.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Nc3jFhBCV0AvTa04XJu0AA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jYvdXOljzJClwrB801mKAS+RPXE=
belia-glp.com/zcredirect?visitid=caedb7b6-6e27-11ed-8285-0a033d3b8991&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
3.212.50.125200 426 B URL HTTP/1.1 belia-glp.com/zcredirect?visitid=caedb7b6-6e27-11ed-8285-0a033d3b8991&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
IP 3.212.50.125:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 104a2f14892e426a4787dfbb3fb92be2
b262afbb6d3de2841b4d716edbeed186faf469b1
690de3ff202e994cdf8dec9a992c6785aa30fd95c35d7395270a229f66677a29
GET /zcredirect?visitid=caedb7b6-6e27-11ed-8285-0a033d3b8991&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcvisitor/caedb7b6-6e27-11ed-8285-0a033d3b8991/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=0274e090-43d2-11ec-ba04-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 27 Nov 2022 07:47:51 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: HWzayRGX
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 8538f54cbf8ecd0533235955726ffa48
95120b50243127f97c8734442dd2f959106b6d02
61b104d1a69ac4bcd1d27eb00c97992397c9c04529834250ce7603e94b024240
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 07:47:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 02:26:18 GMT
Expires: Fri, 02 Dec 2022 02:26:17 GMT
Etag: "95120b50243127f97c8734442dd2f959106b6d02"
Cache-Control: max-age=412105,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7709421748e2b4ff-OSL
belia-glp.com/favicon.ico
3.212.50.125404 653 B URL HTTP/1.1 belia-glp.com/favicon.ico
IP 3.212.50.125:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcredirect?visitid=caedb7b6-6e27-11ed-8285-0a033d3b8991&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false&webdriverDetected=false
HTTP/1.1 404
Date: Sun, 27 Nov 2022 07:47:51 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: HWzayRGX
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 8538f54cbf8ecd0533235955726ffa48
95120b50243127f97c8734442dd2f959106b6d02
61b104d1a69ac4bcd1d27eb00c97992397c9c04529834250ce7603e94b024240
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 07:47:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 02:26:18 GMT
Expires: Fri, 02 Dec 2022 02:26:17 GMT
Etag: "95120b50243127f97c8734442dd2f959106b6d02"
Cache-Control: max-age=412105,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77094218c9e7b4ff-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bb15b617d76f3d7e96150787c735c5b0
1c6333e9ff6e8ebe2dc3b9fd0f095cc6ec8c38d6
eb41d1be114958b1314fe681f8b216af09bb4bf5a662800b37976936c6c494a3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 07:47:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogImIxOWUxY2U2LTEwMWQtNDQ5YS1hODk4LWNhMTFiZmZiNzE0OTo5ZDdiYWIwMmQzNmVhOTAwNzViNjY0NTQ3NTNlYzk1ZjJkODU0M2Q1In0=
216.58.211.16200 OK 1.4 kB URL HTTP/2 storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogImIxOWUxY2U2LTEwMWQtNDQ5YS1hODk4LWNhMTFiZmZiNzE0OTo5ZDdiYWIwMmQzNmVhOTAwNzViNjY0NTQ3NTNlYzk1ZjJkODU0M2Q1In0=
IP 216.58.211.16:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 54f99c9e98a5b4f17b219e94417e6d2f
80247746ede724755155d0aa8c0082c8b00542bf
c7f94d1b21fdadbcc934c2d31503832763070136eafd23d65cec53f6e49b5634
GET /tmp-static/instal-impressions/impressions.html?data=eyJjb3VudHJ5IjogIk5PIiwgImNsaWNrX2lkIjogImIxOWUxY2U2LTEwMWQtNDQ5YS1hODk4LWNhMTFiZmZiNzE0OTo5ZDdiYWIwMmQzNmVhOTAwNzViNjY0NTQ3NTNlYzk1ZjJkODU0M2Q1In0= HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdu1Sfv3QDg4UueFek-KzmhE7E2wPn8PS0KUg72Z1o2pkYrqwMAPyMUMW-YuuWOCw5e8IFb_d4oxSiZoAJAJLCYG
expires: Sun, 27 Nov 2022 08:47:51 GMT
date: Sun, 27 Nov 2022 07:47:51 GMT
cache-control: public, max-age=3600
last-modified: Mon, 10 Jun 2019 16:09:51 GMT
etag: "54f99c9e98a5b4f17b219e94417e6d2f"
x-goog-generation: 1560182991115409
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1357
content-type: text/html
x-goog-hash: crc32c=+7k9hA==, md5=VPmcnpiltPF7IZ6UQX5tLw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1357
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1865e08ae4.smapp.work/api/v1/click/confirm.js?data=gAAAAABjgxYnWK4popu6e-anSn3Hrr8i7_d9vKVBRLgj_nbb7mtw19LIyHf_sPPlPGa82rZbolKgmmQrYGFJzYC19OH5O1w_Z4Bzsf_kYBgv4dX5gQFpQaz0mM95ZK3q0YvWx4Oi8W_A4QPXYuBGV0CENtKuHuIlg_2JF5NfCQ29K-hWqskcBs_PwdQqRrUZ5KwKb6kHG_svf3zTdb8I3ePFzgvOQYC836kvqHSRglxOHSAmff2vYarLHFo3ZK-PT7OYhMWaK3PvbtAFzH4NIYTkeLhHaN1mUW3u2_qDXxgoZ7bAZqQY4DcWxsopMtDq5EqyEnvVBoPNuDBO6kARf_3Psh-TJEbX0zIBwyyTxb8u0mmjTGHarHA8US3l4cwwrfsG4o8Sv09thJzpOTRXXycn8jwrMPCLhpIBQlgXP86AGK4FFP732eMrXCaY01cBJ6uJrvhtVtErPiMJ0ygftP5Hk3fLhUTAPGClwoVA8-c-fPPuY-Kdi0HaI6Y490WQE8HeseGyMShrVz9I8S6pRE0RZ-N7GeQG5NtaVK0J5QTksmCnJ5gprnap_OSNRznF0gRaMwBqHExv_tKtyswVBAt_jcgpCCoETTqJa5LAe08exa3sroQ3tEi2Btt23uW-SqePQLSRqkVCQgHdwazYI2XQj4CM_Qf-azvOhsIwkQ7Xa8nATqDIkSU6RjEzSA573AakoBy5r_wQYbp4_XUXWo1IylrHYPt7mRkMukklbfB8cJB7t11uK_n-mWpraP_cHq-rZyalE2NAvaKjmylemK2yx7ty3Kzdjy7puzxvTEIYM7CkLhh22QxdbzF4h2k6gET7ZJ6-WDnry9YyAcl7SWMUpeGyEUKJlewTpqewbYRoDOZq0vvKgPyZQQ6Pe1k4-9-KrjKZbgm006aECTQimCfx4fRCMyZnkfpzBkkj17pBL73ZriCkbbGuHlpEf1aSUSf-xGRlmnxVib4HrsUe2D4_GXAfjjLuXirZYBLghT8PxJp7fqrVKpIPmER1WTnTynuwcWU2tRaaA0MUeY2udSfVf69GMyd3qh3W0OPXa0WLNXjKgsbZl6Be3i28ApczkYztmGEW_Lt-9kzYGM3gUcgr_446b-ZXFKDOk6exrTEVzAiI0-MuRJWlGuIcWISvDB2kJ2RW_FMOYW8r8egAeKKYleYHuprQa9Ciio0EPf9uP-X6-IQPi2vwttEhUtUTU7QHybiDoMEWnt4xUG0NlmHs3E2e-w4ewqo5XRT1lRvA4cBbIUC0cOPkFvBl3ezhITevHIQ4siqgkvfVVQYYmR7S6VLwmdxyu9-XXDYAtmI0t9vlV2xO9PaZd_y_FflBcPoWfwtOM5K3s_PmvwLEMPNFEhq9lljtd1uIew7QQKAu1e88prtjrReWR11JKLL9MbCVWiXnVAKDT4oKufH-ud96_t78Oj_B6Z9-93PKaOmRZ3EAXVpTRlDbOKCdhNKXqoT8KI9eNJcArysBqujMYRXbhcZ6F9bGwlKGW7hpS7twNKjO6ENx3Dg4B6qCdXOMFfgf6hNUvvu4Xtfph1cao0h_QNLAqYu8oR-KPSgNbqiY19d8edP5GUw2wlzUEq4m1a9auPqa4RtDUfrquoko5CaPthzdPq1sPQ1fP_DZHSkKLiHdRNJB-a4-6TNdP-wTguAcmfTjvN1ZMCFk7gGsoeNd34FcxNLrnuDGeFNB3YlIETeNzQJsrk4brW3OssoB7PH47wIUIVHsxsC3BrnRjfJv2K9XBVp1-iUzxmWydY5Rjz0SMM3-9C_HUB8q2VZhWpRskzo9qTEC3_0eHlsepDU5Sa0br-ksTywAUcR_v53mndcpIFyqb4mGZ5FJqQeG-ui2_6LwVwXnf0JxXUVo6mjtO2MAyFfnBCBARdu4AheIwpBbmWbqSXhVPCuurwVLRIGM5XFscSqih49Wn3WncctBH3fg8beyazTMITr_U6qPLoXRAjHWYI5HxPn_Li0l7OwR5HnTGQ_7_Bcwu6ZmIAC-ik8-3ulC2GfjGX5xml-2tEjhkBizRwdbPMUm9IKgZ1wZMgHBfHuFeMhs_8Eb9s6vGeZgUvdChl6PiZYvzUwEd1lHQnEXH43yRyNxopMaUHvJjUmtgtRPHkH-IUjSXORvYztZnFD3Yi8H2uaI-irD9K0Dpy58ujjJ6Uagk2ftfWop1Id2WxLlv1SfjXzDNp7RzHz3ZZ9iyETvCdSRFJIkWeoR5smWjyTwApmd-0JtbCyavPcHjgt8UO6sxPvbUJHJvxE_yMin0onri84LpGcoTZKhbxvSK951c7Bdhvd-ZUL4tcDUJ0rKq4GuuQ_UPV08l3K6dbUpXN-FQ0V9XXHWgF8RJn-1IbleO-Xy8tTzsaC8QCq6XMvDBjGwvJmFQvhl3ClIbL09r6xfWJBgEmo1srb_xHNM5ajPBehtn6Eyl-9eC5IS9yNiZcWJlLae2O0XxJohc6JBr9wo106ATgWeXj7geQ-IEayEDTAPP9qNBH_l-C3btMhKlY0JfRsZMTY5eeOoA6gI-ZA_dx_xvdmO2xQWNo5vg-llIlwx7B_wbi1M2kf7u3rjRPNrqj-3mi8HGir0cL0rib75DVeuCvq5zq_RBDe-oYraNrc7gdc021nWq1YzBe8sutyJHaHSF6UzktinY658hp1xtUGNW7q85HZKXSkBJO8%3D
35.186.250.143200 OK 0 B URL HTTP/2 1865e08ae4.smapp.work/api/v1/click/confirm.js?data=gAAAAABjgxYnWK4popu6e-anSn3Hrr8i7_d9vKVBRLgj_nbb7mtw19LIyHf_sPPlPGa82rZbolKgmmQrYGFJzYC19OH5O1w_Z4Bzsf_kYBgv4dX5gQFpQaz0mM95ZK3q0YvWx4Oi8W_A4QPXYuBGV0CENtKuHuIlg_2JF5NfCQ29K-hWqskcBs_PwdQqRrUZ5KwKb6kHG_svf3zTdb8I3ePFzgvOQYC836kvqHSRglxOHSAmff2vYarLHFo3ZK-PT7OYhMWaK3PvbtAFzH4NIYTkeLhHaN1mUW3u2_qDXxgoZ7bAZqQY4DcWxsopMtDq5EqyEnvVBoPNuDBO6kARf_3Psh-TJEbX0zIBwyyTxb8u0mmjTGHarHA8US3l4cwwrfsG4o8Sv09thJzpOTRXXycn8jwrMPCLhpIBQlgXP86AGK4FFP732eMrXCaY01cBJ6uJrvhtVtErPiMJ0ygftP5Hk3fLhUTAPGClwoVA8-c-fPPuY-Kdi0HaI6Y490WQE8HeseGyMShrVz9I8S6pRE0RZ-N7GeQG5NtaVK0J5QTksmCnJ5gprnap_OSNRznF0gRaMwBqHExv_tKtyswVBAt_jcgpCCoETTqJa5LAe08exa3sroQ3tEi2Btt23uW-SqePQLSRqkVCQgHdwazYI2XQj4CM_Qf-azvOhsIwkQ7Xa8nATqDIkSU6RjEzSA573AakoBy5r_wQYbp4_XUXWo1IylrHYPt7mRkMukklbfB8cJB7t11uK_n-mWpraP_cHq-rZyalE2NAvaKjmylemK2yx7ty3Kzdjy7puzxvTEIYM7CkLhh22QxdbzF4h2k6gET7ZJ6-WDnry9YyAcl7SWMUpeGyEUKJlewTpqewbYRoDOZq0vvKgPyZQQ6Pe1k4-9-KrjKZbgm006aECTQimCfx4fRCMyZnkfpzBkkj17pBL73ZriCkbbGuHlpEf1aSUSf-xGRlmnxVib4HrsUe2D4_GXAfjjLuXirZYBLghT8PxJp7fqrVKpIPmER1WTnTynuwcWU2tRaaA0MUeY2udSfVf69GMyd3qh3W0OPXa0WLNXjKgsbZl6Be3i28ApczkYztmGEW_Lt-9kzYGM3gUcgr_446b-ZXFKDOk6exrTEVzAiI0-MuRJWlGuIcWISvDB2kJ2RW_FMOYW8r8egAeKKYleYHuprQa9Ciio0EPf9uP-X6-IQPi2vwttEhUtUTU7QHybiDoMEWnt4xUG0NlmHs3E2e-w4ewqo5XRT1lRvA4cBbIUC0cOPkFvBl3ezhITevHIQ4siqgkvfVVQYYmR7S6VLwmdxyu9-XXDYAtmI0t9vlV2xO9PaZd_y_FflBcPoWfwtOM5K3s_PmvwLEMPNFEhq9lljtd1uIew7QQKAu1e88prtjrReWR11JKLL9MbCVWiXnVAKDT4oKufH-ud96_t78Oj_B6Z9-93PKaOmRZ3EAXVpTRlDbOKCdhNKXqoT8KI9eNJcArysBqujMYRXbhcZ6F9bGwlKGW7hpS7twNKjO6ENx3Dg4B6qCdXOMFfgf6hNUvvu4Xtfph1cao0h_QNLAqYu8oR-KPSgNbqiY19d8edP5GUw2wlzUEq4m1a9auPqa4RtDUfrquoko5CaPthzdPq1sPQ1fP_DZHSkKLiHdRNJB-a4-6TNdP-wTguAcmfTjvN1ZMCFk7gGsoeNd34FcxNLrnuDGeFNB3YlIETeNzQJsrk4brW3OssoB7PH47wIUIVHsxsC3BrnRjfJv2K9XBVp1-iUzxmWydY5Rjz0SMM3-9C_HUB8q2VZhWpRskzo9qTEC3_0eHlsepDU5Sa0br-ksTywAUcR_v53mndcpIFyqb4mGZ5FJqQeG-ui2_6LwVwXnf0JxXUVo6mjtO2MAyFfnBCBARdu4AheIwpBbmWbqSXhVPCuurwVLRIGM5XFscSqih49Wn3WncctBH3fg8beyazTMITr_U6qPLoXRAjHWYI5HxPn_Li0l7OwR5HnTGQ_7_Bcwu6ZmIAC-ik8-3ulC2GfjGX5xml-2tEjhkBizRwdbPMUm9IKgZ1wZMgHBfHuFeMhs_8Eb9s6vGeZgUvdChl6PiZYvzUwEd1lHQnEXH43yRyNxopMaUHvJjUmtgtRPHkH-IUjSXORvYztZnFD3Yi8H2uaI-irD9K0Dpy58ujjJ6Uagk2ftfWop1Id2WxLlv1SfjXzDNp7RzHz3ZZ9iyETvCdSRFJIkWeoR5smWjyTwApmd-0JtbCyavPcHjgt8UO6sxPvbUJHJvxE_yMin0onri84LpGcoTZKhbxvSK951c7Bdhvd-ZUL4tcDUJ0rKq4GuuQ_UPV08l3K6dbUpXN-FQ0V9XXHWgF8RJn-1IbleO-Xy8tTzsaC8QCq6XMvDBjGwvJmFQvhl3ClIbL09r6xfWJBgEmo1srb_xHNM5ajPBehtn6Eyl-9eC5IS9yNiZcWJlLae2O0XxJohc6JBr9wo106ATgWeXj7geQ-IEayEDTAPP9qNBH_l-C3btMhKlY0JfRsZMTY5eeOoA6gI-ZA_dx_xvdmO2xQWNo5vg-llIlwx7B_wbi1M2kf7u3rjRPNrqj-3mi8HGir0cL0rib75DVeuCvq5zq_RBDe-oYraNrc7gdc021nWq1YzBe8sutyJHaHSF6UzktinY658hp1xtUGNW7q85HZKXSkBJO8%3D
IP 35.186.250.143:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/click/confirm.js?data=gAAAAABjgxYnWK4popu6e-anSn3Hrr8i7_d9vKVBRLgj_nbb7mtw19LIyHf_sPPlPGa82rZbolKgmmQrYGFJzYC19OH5O1w_Z4Bzsf_kYBgv4dX5gQFpQaz0mM95ZK3q0YvWx4Oi8W_A4QPXYuBGV0CENtKuHuIlg_2JF5NfCQ29K-hWqskcBs_PwdQqRrUZ5KwKb6kHG_svf3zTdb8I3ePFzgvOQYC836kvqHSRglxOHSAmff2vYarLHFo3ZK-PT7OYhMWaK3PvbtAFzH4NIYTkeLhHaN1mUW3u2_qDXxgoZ7bAZqQY4DcWxsopMtDq5EqyEnvVBoPNuDBO6kARf_3Psh-TJEbX0zIBwyyTxb8u0mmjTGHarHA8US3l4cwwrfsG4o8Sv09thJzpOTRXXycn8jwrMPCLhpIBQlgXP86AGK4FFP732eMrXCaY01cBJ6uJrvhtVtErPiMJ0ygftP5Hk3fLhUTAPGClwoVA8-c-fPPuY-Kdi0HaI6Y490WQE8HeseGyMShrVz9I8S6pRE0RZ-N7GeQG5NtaVK0J5QTksmCnJ5gprnap_OSNRznF0gRaMwBqHExv_tKtyswVBAt_jcgpCCoETTqJa5LAe08exa3sroQ3tEi2Btt23uW-SqePQLSRqkVCQgHdwazYI2XQj4CM_Qf-azvOhsIwkQ7Xa8nATqDIkSU6RjEzSA573AakoBy5r_wQYbp4_XUXWo1IylrHYPt7mRkMukklbfB8cJB7t11uK_n-mWpraP_cHq-rZyalE2NAvaKjmylemK2yx7ty3Kzdjy7puzxvTEIYM7CkLhh22QxdbzF4h2k6gET7ZJ6-WDnry9YyAcl7SWMUpeGyEUKJlewTpqewbYRoDOZq0vvKgPyZQQ6Pe1k4-9-KrjKZbgm006aECTQimCfx4fRCMyZnkfpzBkkj17pBL73ZriCkbbGuHlpEf1aSUSf-xGRlmnxVib4HrsUe2D4_GXAfjjLuXirZYBLghT8PxJp7fqrVKpIPmER1WTnTynuwcWU2tRaaA0MUeY2udSfVf69GMyd3qh3W0OPXa0WLNXjKgsbZl6Be3i28ApczkYztmGEW_Lt-9kzYGM3gUcgr_446b-ZXFKDOk6exrTEVzAiI0-MuRJWlGuIcWISvDB2kJ2RW_FMOYW8r8egAeKKYleYHuprQa9Ciio0EPf9uP-X6-IQPi2vwttEhUtUTU7QHybiDoMEWnt4xUG0NlmHs3E2e-w4ewqo5XRT1lRvA4cBbIUC0cOPkFvBl3ezhITevHIQ4siqgkvfVVQYYmR7S6VLwmdxyu9-XXDYAtmI0t9vlV2xO9PaZd_y_FflBcPoWfwtOM5K3s_PmvwLEMPNFEhq9lljtd1uIew7QQKAu1e88prtjrReWR11JKLL9MbCVWiXnVAKDT4oKufH-ud96_t78Oj_B6Z9-93PKaOmRZ3EAXVpTRlDbOKCdhNKXqoT8KI9eNJcArysBqujMYRXbhcZ6F9bGwlKGW7hpS7twNKjO6ENx3Dg4B6qCdXOMFfgf6hNUvvu4Xtfph1cao0h_QNLAqYu8oR-KPSgNbqiY19d8edP5GUw2wlzUEq4m1a9auPqa4RtDUfrquoko5CaPthzdPq1sPQ1fP_DZHSkKLiHdRNJB-a4-6TNdP-wTguAcmfTjvN1ZMCFk7gGsoeNd34FcxNLrnuDGeFNB3YlIETeNzQJsrk4brW3OssoB7PH47wIUIVHsxsC3BrnRjfJv2K9XBVp1-iUzxmWydY5Rjz0SMM3-9C_HUB8q2VZhWpRskzo9qTEC3_0eHlsepDU5Sa0br-ksTywAUcR_v53mndcpIFyqb4mGZ5FJqQeG-ui2_6LwVwXnf0JxXUVo6mjtO2MAyFfnBCBARdu4AheIwpBbmWbqSXhVPCuurwVLRIGM5XFscSqih49Wn3WncctBH3fg8beyazTMITr_U6qPLoXRAjHWYI5HxPn_Li0l7OwR5HnTGQ_7_Bcwu6ZmIAC-ik8-3ulC2GfjGX5xml-2tEjhkBizRwdbPMUm9IKgZ1wZMgHBfHuFeMhs_8Eb9s6vGeZgUvdChl6PiZYvzUwEd1lHQnEXH43yRyNxopMaUHvJjUmtgtRPHkH-IUjSXORvYztZnFD3Yi8H2uaI-irD9K0Dpy58ujjJ6Uagk2ftfWop1Id2WxLlv1SfjXzDNp7RzHz3ZZ9iyETvCdSRFJIkWeoR5smWjyTwApmd-0JtbCyavPcHjgt8UO6sxPvbUJHJvxE_yMin0onri84LpGcoTZKhbxvSK951c7Bdhvd-ZUL4tcDUJ0rKq4GuuQ_UPV08l3K6dbUpXN-FQ0V9XXHWgF8RJn-1IbleO-Xy8tTzsaC8QCq6XMvDBjGwvJmFQvhl3ClIbL09r6xfWJBgEmo1srb_xHNM5ajPBehtn6Eyl-9eC5IS9yNiZcWJlLae2O0XxJohc6JBr9wo106ATgWeXj7geQ-IEayEDTAPP9qNBH_l-C3btMhKlY0JfRsZMTY5eeOoA6gI-ZA_dx_xvdmO2xQWNo5vg-llIlwx7B_wbi1M2kf7u3rjRPNrqj-3mi8HGir0cL0rib75DVeuCvq5zq_RBDe-oYraNrc7gdc021nWq1YzBe8sutyJHaHSF6UzktinY658hp1xtUGNW7q85HZKXSkBJO8%3D HTTP/1.1
Host: 1865e08ae4.smapp.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=romeo-sic-vqpeyj59e3
Cookie: cx_ntsl_i=1e99b11a-537d-40da-a7ba-34d9b6455824; instal-cookie="2|1:0|10:1669535271|13:instal-cookie|248:eyIzMjQ0NjgwIjogIjg4ZjlkZTFkLTYyYjctNDk2My04NjYwLTVjY2ViMDUwNTI0Mjo5MTMzMjQyMzIyMDkzYWVjMmQ1YWM5NzM5YWEzMGY3MTc0YmE4M2U1IiwgIjMyNDQ2ODAiOiAiYjE5ZTFjZTYtMTAxZC00NDlhLWE4OTgtY2ExMWJmZmI3MTQ5OjlkN2JhYjAyZDM2ZWE5MDA3NWI2NjQ1NDc1M2VjOTVmMmQ4NTQzZDUifQ==|ea08f388c488a7a5ebd1cf6ce3021390419e3e5d2a70ea9dfe91cd040aa8cd87"
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: TornadoServer/5.1.1
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bb15b617d76f3d7e96150787c735c5b0
1c6333e9ff6e8ebe2dc3b9fd0f095cc6ec8c38d6
eb41d1be114958b1314fe681f8b216af09bb4bf5a662800b37976936c6c494a3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 07:47:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 4580d0b0755e0ee2dda453e693deaf5f
76c1bd828e97e2fcf15b92aaa725fb64a852a1ed
582c0b2cff21829df8c064e3d0d63791a42c39722e02beb7be2f41b070d07e7b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=144092
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 07:47:51 GMT
Etag: "6382a603-118"
Expires: Mon, 28 Nov 2022 23:49:23 GMT
Last-Modified: Sat, 26 Nov 2022 23:49:23 GMT
Server: nginx
Content-Length: 280
findyourhalf.top/assets/032bcaf74c0de2c93c8e.jpg
104.26.14.100200 OK 34 kB URL HTTP/2 findyourhalf.top/assets/032bcaf74c0de2c93c8e.jpg
IP 104.26.14.100:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x390, components 3\012- data
Hash e38526805379a23a1bcfefabf38befa2
afe5306e0df615f7238ad8fe41b33ecd38c10fd7
999863c911c86160c1f2721524580942426d157547b36985f643aeea0dab4aa1
GET /assets/032bcaf74c0de2c93c8e.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 33612
cf-bgj: h2pri
etag: "63809bf7-834c"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mR25UddcwGuN75KcRGRIhHCDNy2QS60wJMs%2FNGnexWuTi2S7WaS1JvRSW1%2ByDqgU0liCwQaDoUr7qPfpy6KLyFoupuDa1NYAHbXdgMzX1D4tjc1L3eYZmOCCjU1IXjJE1Js%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b0807fab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/2c7be58264048611fef5.png
104.26.14.100200 OK 1.6 kB URL HTTP/2 findyourhalf.top/assets/2c7be58264048611fef5.png
IP 104.26.14.100:0
File type PNG image data, 61 x 98, 8-bit colormap, non-interlaced\012- data
Hash 214628994adff396733825e7b9778ad8
cfcdb02dd750c2c56ce0df960f032865d0315d24
072083cb6a8af8fdfad3087d4aafe1fbb1ef96c4863dc53d9f1483ce83937dfb
GET /assets/2c7be58264048611fef5.png HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/png
content-length: 1574
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
etag: "63809bf7-626"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y9ysVICIgCHaJXlrZB4U%2B%2F8BaCyAL23NJBLl0Ct%2Bsj6b%2BGo0jhOJ5ydvUBXo56tg0wOxR8cPbagk8Y1GgsDTjiJEWcMX3BW5POXEdV1Vh2fk3%2Fs0Wm0irRzXUtGGbb0CGag%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b0809fab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/848c59c46246f7f3cae9.jpg
104.26.14.100200 OK 12 kB URL HTTP/2 findyourhalf.top/assets/848c59c46246f7f3cae9.jpg
IP 104.26.14.100:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 360x241, components 3\012- data
Hash 147a131b97e24b606548d78e8fa56e63
b746629c163d2cc3f3ac1d81b9bed35e682e85fc
10e26b8306c1bc3958e6b243fa4dd0aae70c197f460a9eec192dff846ba8aeaa
GET /assets/848c59c46246f7f3cae9.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 12409
cf-bgj: h2pri
etag: "63809bf7-3079"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MAFPQEm4kmqU355UTbn%2FdLtBsGjbsBsBY2lfnCiSLwZNvaXeUWyokLmbNBJwMY1cHqxPKRmTe2wqEOpAeZxW12HzkckG48W9brRHG19uSPJiSkXFkKlScWKxjCBHHkmHjI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b180efab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/d4df7c721715d3197d35.jpg
104.26.14.100200 OK 34 kB URL HTTP/2 findyourhalf.top/assets/d4df7c721715d3197d35.jpg
IP 104.26.14.100:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x499, components 3\012- data
Hash 785457fd7f81715119251bcf4c1a8f56
66cbede5b601e6d0857441c939e9798493e812c2
32bfa591e8f2fb193889b21a3ec397e4029a5eeb22b4f1a718b056978013580c
GET /assets/d4df7c721715d3197d35.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 33816
cf-bgj: h2pri
etag: "63809bf7-8418"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VzuHHzehsEKYJDb7EnNlA6gm%2BR1qj8YeF0wKvPuL%2BeQ3PWigVgTYRMpwE%2FZA%2B8yUieeF9yjAgpW0fVjBmwa56ItFXn3rp6i2ZKSEduNgf02I466vIgIodg0yashGEeVlM2g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b080afab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/06c49b18302a6f35f315.jpg
104.26.14.100200 OK 21 kB URL HTTP/2 findyourhalf.top/assets/06c49b18302a6f35f315.jpg
IP 104.26.14.100:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x375, components 3\012- data
Hash 0d0464ad4924d5189707d2508a818e37
d40c4e3dcaeaaae3eb66d3ca096f8569c4605e21
d8b8c213ff1fcd97e0cbb4ec056712bfed39405c65a20135135328b5ad1104af
GET /assets/06c49b18302a6f35f315.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 20712
cf-bgj: h2pri
etag: "63809bf7-50e8"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ztVQeWFvj17oO5%2FC%2BQEZncMjjsJ1RwaRHQOPFJXV%2BXWf6lf%2FleUC4FcNikA9yeASsDeq%2FrIAwKnQvRce6eCj75OYrGcHTZjs5123%2BBnIra3JbnpOHBhAvDbVFb2SDNdwuUo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b180cfab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/0e8214b6a04a80b2ed65.jpg
104.26.14.100200 OK 118 kB URL HTTP/2 findyourhalf.top/assets/0e8214b6a04a80b2ed65.jpg
IP 104.26.14.100:0
File type PNG image data, 507 x 500, 8-bit colormap, non-interlaced\012- data
Size 118 kB (118495 bytes)
Hash fafd80f19f1c7b5806ec7f6935872cb4
d8c6a473659ac0ba5472bcdfa4b7dab91470ed07
e65ad8065b9444d3881bb4d2fdd160f90f1babeb7a0f712f288a77aeef18ad87
GET /assets/0e8214b6a04a80b2ed65.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 118495
cf-bgj: h2pri
etag: "63809bf7-1cedf"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sXc1riXvAAYBfDNS8WeEiqXgfpeNZMh2i2x6ZfZFKxc8xtTmHJKuVQ81MY6g0TS2chckF%2FfYmeNr4Dymg7cOokwFbkqJZ9YYFnMKI7E7O5sZget194SQr7bixeCDYtSpqtw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b1810fab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/1418d3d54dbb9471fdf4.jpg
104.26.14.100200 OK 55 kB URL HTTP/2 findyourhalf.top/assets/1418d3d54dbb9471fdf4.jpg
IP 104.26.14.100:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 554x414, components 3\012- data
Hash 6d4697c58b5ca314ed5e18bd8ca6b9ce
2a6e9b8a93d359dd492fb3cfbb2bd768c28aa6cb
7d38705aa944831049bd714c99d3912f3528c27c5bbdac5bbd6fdcabef869bfa
GET /assets/1418d3d54dbb9471fdf4.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 54789
cf-bgj: h2pri
etag: "63809bf7-d605"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1kH7k3eq2QjgvujewASstQ680MSx%2BH3PmuGCECX%2FCwVmFyiCJ2T1qYGIgLiVUW01tCIzK7H5Col2LqmqSO3M9l%2BptDq5b93Xd7kUu9SnVsmC8bQt%2FwsL%2F4yyq6SsTrBZOww%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b180ffab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/56d040d1d8bf3bf21d63.jpg
104.26.14.100200 OK 55 kB URL HTTP/2 findyourhalf.top/assets/56d040d1d8bf3bf21d63.jpg
IP 104.26.14.100:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 500x620, components 3\012- data
Hash 9ddc7b6cb356a6d2e99eed41cc1734de
e1da98ccc6c5198d528384dcf0796de766475488
b80543c059b42b12ff905047b8a8f5d6f4b676febb7edc65aa602e64248dd837
GET /assets/56d040d1d8bf3bf21d63.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 55200
cf-bgj: h2pri
etag: "63809bf7-d7a0"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x6tIncKx7a9LNlKhoXBo5AgpLBJcXJ824X6mmBKb57P8OwjPZ82WzI%2Fo7wcH8SXNNhhOnUEbrjS4AEfw0%2BGUsvN91CGVWiWK7QO1SNDxsPGurtX9%2FfibA2AIN%2BjtulW2dYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b1811fab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/assets/47ae6a5ba10cda2c9e0b.jpg
104.26.14.100200 OK 21 kB URL HTTP/2 findyourhalf.top/assets/47ae6a5ba10cda2c9e0b.jpg
IP 104.26.14.100:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3\012- data
Hash 56b1d087e07bfce17502f3d15a29599d
1a3fdece929142b64a427a813298a4278f9c9a3b
06bda10f4f886bd1dc58e72919dce1d5ef8395a9103cc719c333088ae7cf6677
GET /assets/47ae6a5ba10cda2c9e0b.jpg HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: image/jpeg
content-length: 20958
cf-bgj: h2pri
etag: "63809bf7-51de"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pjA2N%2Bmimkh6QSZXBm0R17m8sgic5PUHYtieB%2BKZtzKGnIBBn5BFV0RTgTUd4KusTxITr%2FSAGdibMQuefp1Fsrtq1%2B6Ndy9bo2wjI415vfmExgz5xsdsb9DpGJvRaVsXUpE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b180dfab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/js/_global-config-sd.82962a7b.js
104.26.14.100200 OK 53 kB URL HTTP/2 findyourhalf.top/js/_global-config-sd.82962a7b.js
IP 104.26.14.100:0
File type ASCII text, with very long lines (365), with no line terminators
Hash 520eaa068cdb9b6f72789e9e987be6c8
a7affed624960476b09e6c0477b7786d2995181f
1e57c4b5fb32d362ea41ba2c2af94e2973d4f63f8aabc8b378878beefab118f1
GET /js/_global-config-sd.82962a7b.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63809bf7-16d"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1554
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ICb12zkh33DX%2BVyjM5hB9W3%2BB5%2B4mmVWmlPpIexu3%2FFk60RozKvqAjs2hhpbMTRoNGdGks1J6lryVwjImJF21tcxN%2Ft6iKjOGPPP3VCi3lhK6QCh2mXi0c2WumHuFmsy4tc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421afff7fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e413346bdf4cea48847886fc7871e4d8
5d89ec3ae90ebf5069321bfc6fb0abeff77db028
85398a907af9d7c7041b28ec00595c5056ee3ecb51d9f09e4e75b6bfa0859d84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85398A907AF9D7C7041B28EC00595C5056EE3ECB51D9F09E4E75B6BFA0859D84"
Last-Modified: Sat, 26 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7497
Expires: Sun, 27 Nov 2022 09:52:49 GMT
Date: Sun, 27 Nov 2022 07:47:52 GMT
Connection: keep-alive
my.rtmark.net/gid.js
139.45.195.8200 OK 65 B IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 89ab2abcc1ea983076d3846482eb7508
5a11a5676b01ec62fe7bc1527928c6d873978c16
cc1e8cf4a2c945570fdfa39fbcedd57481e90d42ffaa68dab312c214b528ff3c
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Cookie: ID=d3c9bc14e4b04d2c81fb7dab8b6acf70
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://findyourhalf.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d3c9bc14e4b04d2c81fb7dab8b6acf70; expires=Mon, 27 Nov 2023 07:47:52 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11853
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 07:47:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11853
Expires: Sun, 27 Nov 2022 11:05:25 GMT
Date: Sun, 27 Nov 2022 07:47:52 GMT
Connection: keep-alive
findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=b19e1ce6-101d-449a-a898-ca11bffb7149%3A9d7bab02d36ea90075b66454753ec95f2d8543d5&utm_campaign=6100_305&utm_medium=4655142&utm_content=zd_public_v2
104.26.14.100200 OK 27 kB URL HTTP/2 findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=b19e1ce6-101d-449a-a898-ca11bffb7149%3A9d7bab02d36ea90075b66454753ec95f2d8543d5&utm_campaign=6100_305&utm_medium=4655142&utm_content=zd_public_v2
IP 104.26.14.100:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7b8377358eb3f2fc93a87ee41c77621e
cf0cbd8168e3a849c1ef9952c177d44a7adb1dae
2334b44e4c3f780a4dbb77057ab7e6b4bb03e30d245c01fa2c06a33cf9187ed7
GET /dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=b19e1ce6-101d-449a-a898-ca11bffb7149%3A9d7bab02d36ea90075b66454753ec95f2d8543d5&utm_campaign=6100_305&utm_medium=4655142&utm_content=zd_public_v2 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: text/html
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lWSGsosXUFMbWI62OXI0mUS3hgHIKZly6pCdFaM9O9nciWHArrnVUxN8%2F7xUC1QgXXpUih4iRIsIJOMiNh2cpdPh4lrRfs9qiUH7glfE%2BLR%2FeEZSetILKG%2BeyydFpMYUVYQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421bd873fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y0ofyT6UcPjB8mfRR1VMjHSTW64Qb_EQ0rrjsOdbby1CG-xMIFJMPw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:49:19 GMT
age: 35913
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K2eKLQhrsCdd4ASsfEibRuZAYW4CpPTlO3fZs7xdoKrw1HBxfTGkEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
age: 36338
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg
34.120.237.76200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9de86e0161ef1255306ddfce1c2549d7
f77ff5378766c6b14125de0e003b21f34726672b
7db14b31e7e2d882eb446bd6056ad9e8eed6e1581837a6d54d2e0d26aa2600bb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F183848d2-b6cc-4349-b07a-3fd8540a63e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4023
x-amzn-requestid: e9fe84db-d488-4ec7-81e6-c819bb625944
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b44BuHsmIAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d3a4-54fbd7892170110e4bafc899;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:13:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DclAu4C4JasM2abF5ykmvdcx504CxPK26WXw2Z_YbcNZgW51ZLz05A==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 09:26:58 GMT
age: 80454
etag: "f77ff5378766c6b14125de0e003b21f34726672b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
age: 36338
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e615cdc2e330b5cf76435abce9aa631a
71f737c3cee7766494157cd6491ce247a785c09e
853f68bf79a553b9fbf0e10391424faf0a3c071370d05d369563f7824d1bda84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46a2bb7d-e57c-4751-a56f-0802ae9eaee6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9063
x-amzn-requestid: f00ac8bd-6466-4c92-9b99-0e71b4b2345c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8Jr4ENtoAMFzvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2318-0e3a57932987e29521388dd7;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:04:56 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ntfumip5IjOlyoe6ASlwJ1PjPLN1yZHkK_iiDDKfmMCyI__PrrGVMA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 82893cc36087a50f9a150a621d10e740.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 12:27:26 GMT
age: 69626
etag: "71f737c3cee7766494157cd6491ce247a785c09e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
age: 36338
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
findyourhalf.top/pfe/current/micro.tag.min.js?z=5473364&sw=/sw/sw5473364.js&var=4655142&var_3=null&ymid=6100_305&cdn=1&domain=laugoust.com
104.26.14.100200 OK 25 kB URL HTTP/2 findyourhalf.top/pfe/current/micro.tag.min.js?z=5473364&sw=/sw/sw5473364.js&var=4655142&var_3=null&ymid=6100_305&cdn=1&domain=laugoust.com
IP 104.26.14.100:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash fd3d370a2edd64fcb068b4977eaefad1
fd616ac6bb73e188fc70f94201640b91669d0497
a7904484f1de66fa793b81f0ffc5eea9aa4d2ab27520b2d741aadcc14d820821
GET /pfe/current/micro.tag.min.js?z=5473364&sw=/sw/sw5473364.js&var=4655142&var_3=null&ymid=6100_305&cdn=1&domain=laugoust.com HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
etag: W/"63809bf7-1325e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2868
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PGPFVEL9uj6W6UuwbVvwi0smvupPT1jZ4lKQL0kVg2R1OBSl0otNqK0NzsJlQ385nt%2FRB%2BG79%2BZ4IEHZ4YWrQKFwLiDIWtFITCYeGzJFhEiz2STbqmyHyHcfSDaP%2FfNptkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421e299bfab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
itcleffaom.com/track?offer_id=2061&z=4655142&request_var=6100_305&variable2=b19e1ce6-101d-449a-a898-ca11bffb7149:9d7bab02d36ea90075b66454753ec95f2d8543d5
139.45.197.237200 OK 148 B URL HTTP/2 itcleffaom.com/track?offer_id=2061&z=4655142&request_var=6100_305&variable2=b19e1ce6-101d-449a-a898-ca11bffb7149:9d7bab02d36ea90075b66454753ec95f2d8543d5
IP 139.45.197.237:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 673cfa6261713c037f5e6d0d8cebc7e5
3fa4ef98e3409901f9d51f1bd651a130506aed6b
546d54b13b6ae34900ec662401d1df42e740d9bc40c24cca29863414f9affe39
Analyzer Verdict Alert quad9 Sinkholed
GET /track?offer_id=2061&z=4655142&request_var=6100_305&variable2=b19e1ce6-101d-449a-a898-ca11bffb7149:9d7bab02d36ea90075b66454753ec95f2d8543d5 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/json
content-length: 148
x-trace-id: 318a7a950a4c5a0488974fbc0b3c3dbd
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7991f4ffc45da6a67e18b47660ad0596
992d9dd8f539fb5c035b64e6b7e907252312b846
1feeaaf58bfce72640e932a4b9104d668db288ba56091ec9a4e760dba4f045d1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1FEEAAF58BFCE72640E932A4B9104D668DB288BA56091EC9A4E760DBA4F045D1"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6585
Expires: Sun, 27 Nov 2022 09:37:37 GMT
Date: Sun, 27 Nov 2022 07:47:52 GMT
Connection: keep-alive
findyourhalf.top/img/fav/heart-apple-60.png
104.26.14.100200 OK 4.7 kB URL HTTP/2 findyourhalf.top/img/fav/heart-apple-60.png
IP 104.26.14.100:0
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash df363aa0b52e70e713d8279bf63d7c11
a78e2139a964ccd9dc48892985cd8f47ba982eda
0710e7435d9fb61d35b26d23efaef1e09caa18d9d0123652a5095d36e2413ae7
GET /img/fav/heart-apple-60.png HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:53 GMT
content-type: image/png
content-length: 4742
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
etag: "63809bf7-1286"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rnv0HhFCNkb5ly3CnnPKQcfEh%2B%2Brhn27IRIxrW8YW5%2BfO4E38hqNHzyC0WQG34%2BaCFDhq1NVYBEJ4hHWymFdKrGlOwW0p%2FjHmYb8YZxQbNEeNm31hRq%2Bc%2FB6othmCbzI9s0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770942204ab5fab8-OSL
X-Firefox-Spdy: h2
findyourhalf.top/img/fav/heart-16.png
104.26.14.100200 OK 5.9 kB URL HTTP/2 findyourhalf.top/img/fav/heart-16.png
IP 104.26.14.100:0
Hash 87610f3a6fa47442da9e2ebe90eeede5
9ad1035281367538ab249d668958c5a865fc45ac
f04051b0964721b5fe987d39820c59710f009785298f380d117e2f37abf46855
GET /img/fav/heart-16.png HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:53 GMT
content-type: image/png
content-length: 670
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
etag: "63809bf7-29e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2869
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A46U9ajHRzi6rRbj%2B4wEEAMgVzkf3ElgnbHr6TwU4uDK1ifc4YngC8i1KOadB8CnJJ3niubRJ0GAVqpe1GHyhmPQ%2BXPE9iQytNEnQdYJE%2FRNM3B5nLPkPi%2FDNpiiNR6qbwM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 770942204ab7fab8-OSL
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash ddf40043909d6642409e3a6264244bd7
411dc2418d0e4f0836702ba605f9f210f3d5b6d9
13c0a6affbf0a68e6bda2f1ba620b8088e5d1fd33472c1077e37bb1dc9202f5e
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 07:47:53 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Thu, 01 Dec 2022 05:05:31 GMT
ETag: "411dc2418d0e4f0836702ba605f9f210f3d5b6d9"
Last-Modified: Sun, 27 Nov 2022 05:05:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2823
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77094220ba55b51d-OSL
mc.yandex.ru/metrika/tag.js
87.250.250.119200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 87.250.250.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 1d79426653c3b55939eaec59a2ce8ef5
c6db0314df7a4e5c08047f6306e0b79a1ad3bab2
2729cfe8b2f5142cf99734cbb4e1a3c6cd35868d279cd796db49ef62742ef993
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73267
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: *
etag: "637f41b2-11e33"
expires: Sun, 27 Nov 2022 08:47:53 GMT
last-modified: Thu, 24 Nov 2022 13:04:34 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
findyourhalf.top/js/v-index.js.7d7ee9d3.js
104.26.14.100200 OK 17 kB URL HTTP/2 findyourhalf.top/js/v-index.js.7d7ee9d3.js
IP 104.26.14.100:0
File type ASCII text, with very long lines (35835), with no line terminators
Hash 59aecbab23cbbbabc0bf0f54a75ec85a
b75e25e508da4e5e892d1e75ad98bf8ca7c1eac2
fa8e7aa571c99a6d8e4c9998ced81204c6ca767c7e23bb60f443108468e05b8f
GET /js/v-index.js.7d7ee9d3.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63809bf7-8bfb"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JB%2Bhwe93r2LCoq6p4BAiI5BSQ5fmTn2c1TleUtquj3zFWtWeiOQKrLSZix1bpT7ThCCnY1Lsls3l%2BI75owxbB8SCB0kvnydnHxFDEheCnS8GW3Ng2roPRUaS8B1iGJrn9Lk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421afff9fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A271%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A518948331%3Arqn%3A12%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C74%2C0%2C1%2C0%2C%2C166%2C2%2C%2C%2C%2C329%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
87.250.250.119302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A271%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A518948331%3Arqn%3A12%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C74%2C0%2C1%2C0%2C%2C166%2C2%2C%2C%2C%2C329%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash ed87f0d285e2808255b663ddae271f1f
aeea6bca512741dc3715141e9b8b6c8854ea0def
9ce879521dad756beb2f2b3f3b11358ef1f2cab9e757652c5beb2720fbe8af36
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A271%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A518948331%3Arqn%3A12%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C74%2C0%2C1%2C0%2C%2C166%2C2%2C%2C%2C%2C329%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A271%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A518948331%3Arqn%3A12%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C74%2C0%2C1%2C0%2C%2C166%2C2%2C%2C%2C%2C329%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
set-cookie: yandexuid=7506721611669535273; Expires=Mon, 27-Nov-2023 07:47:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7506721611669535273; Expires=Mon, 27-Nov-2023 07:47:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=587133911669535273; Path=/; SameSite=None; Secure
i=pOrM+p/dpdzfI5VIRtD0kMu3XZuAxfDhWuq9R80KDWmLtaJD+1lC7zWE2VulUivRos1apY2/GShxAJvbl3S7bYCYz4s=; Expires=Wed, 24-Nov-2032 07:47:52 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701071273.yc.1669535273#1701071273.yrts.1669535273#1701071273.yrtsi.1669535273; Expires=Mon, 27-Nov-2023 07:47:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonSurveyStart&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A376611935%3Arqn%3A13%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1055%2C1055%2C0%2C%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonSurveyStart&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A376611935%3Arqn%3A13%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1055%2C1055%2C0%2C%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonSurveyStart&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A376611935%3Arqn%3A13%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1055%2C1055%2C0%2C%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 78
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonUnique&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A393423455%3Arqn%3A14%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonUnique&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A393423455%3Arqn%3A14%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonUnique&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A393423455%3Arqn%3A14%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=romeo-sic-vqpeyj59e3
35.186.250.143200 OK 7.7 kB URL HTTP/2 1865e08ae4.smapp.work/trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=romeo-sic-vqpeyj59e3
IP 35.186.250.143:0
Hash 032100333cc96c0b6e8a4ea16ee39db8
f7cc9bced1b3a24f7c3704f3b8b1d4d5539ba5de
8ccb4692b6fc6cab003352f7c5076e7505e78b8749c0d14e0d7158d816ed4044
GET /trkclk/?pid=6100&cid=3244680&custom1=CPC&fw1=badious-buzzard&aff_sub_id=romeo-sic-vqpeyj59e3 HTTP/1.1
Host: 1865e08ae4.smapp.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://belia-glp.com/
Cookie: cx_ntsl_i=1e99b11a-537d-40da-a7ba-34d9b6455824; instal-cookie="2|1:0|10:1669532403|13:instal-cookie|124:eyIzMjQ0NjgwIjogIjg4ZjlkZTFkLTYyYjctNDk2My04NjYwLTVjY2ViMDUwNTI0Mjo5MTMzMjQyMzIyMDkzYWVjMmQ1YWM5NzM5YWEzMGY3MTc0YmE4M2U1In0=|0871fece8229f0fc5db0f36ab8c9e5343a10f11792e141d492025ba1f68d268f"
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:51 GMT
content-type: text/html; charset=UTF-8
server: TornadoServer/5.1.1
clickid: b19e1ce6-101d-449a-a898-ca11bffb7149:9d7bab02d36ea90075b66454753ec95f2d8543d5
x-service-version: 2.0.1
x-frame-options: SAMEORIGIN
etag: W/"da6dd834a7b1a4c3e7c98754ffe8988f79d596aa"
set-cookie: instal-cookie="2|1:0|10:1669535271|13:instal-cookie|248:eyIzMjQ0NjgwIjogIjg4ZjlkZTFkLTYyYjctNDk2My04NjYwLTVjY2ViMDUwNTI0Mjo5MTMzMjQyMzIyMDkzYWVjMmQ1YWM5NzM5YWEzMGY3MTc0YmE4M2U1IiwgIjMyNDQ2ODAiOiAiYjE5ZTFjZTYtMTAxZC00NDlhLWE4OTgtY2ExMWJmZmI3MTQ5OjlkN2JhYjAyZDM2ZWE5MDA3NWI2NjQ1NDc1M2VjOTVmMmQ4NTQzZDUifQ==|ea08f388c488a7a5ebd1cf6ce3021390419e3e5d2a70ea9dfe91cd040aa8cd87"; expires=Tue, 27 Dec 2022 07:47:51 GMT; Path=/; SameSite=None; Secure
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A1023973233%3Arqn%3A16%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A1023973233%3Arqn%3A16%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A1023973233%3Arqn%3A16%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
findyourhalf.top/js/v-xhr.js.13124150.js
104.26.14.100200 OK 1.5 kB URL HTTP/2 findyourhalf.top/js/v-xhr.js.13124150.js
IP 104.26.14.100:0
File type ASCII text, with very long lines (2995), with no line terminators
Hash 13f288ba5ebc4287c8ed5242cf8318d7
1e38a45c7b2af48ced3210580242425de27663b9
0e46cbf4d4b78c860e80d5bab37830c54fc847f58c1e8944b24cdd822f34bd09
GET /js/v-xhr.js.13124150.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63809bf7-bb3"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z1vKMWsINfrlOBnk5n6YTl3XUv909LfSLId7FYo7XeAQcukR94ESD5ZF1v5oTqTQjRsJOnfq%2BGs%2BpU%2B%2BnfhNHGDm9X2Uf7GSaLduiM8JwjYhaqRcT%2FpqY1WPwFzLKVooFVQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421afffcfab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexLoad&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A977423196%3Arqn%3A19%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexLoad&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A977423196%3Arqn%3A19%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexLoad&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A977423196%3Arqn%3A19%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexCall&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A490638046%3Arqn%3A17%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexCall&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A490638046%3Arqn%3A17%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonAdexCall&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A490638046%3Arqn%3A17%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
findyourhalf.top/js/each-land-config.11fbe7f1.js
104.26.14.100200 OK 24 kB URL HTTP/2 findyourhalf.top/js/each-land-config.11fbe7f1.js
IP 104.26.14.100:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash a82d70ea9b1dc7466bcd224239e5e268
9c7c105cb17a71b787599d3552c151f3018063f5
5ee50218e83b2215d0ead6d44fb8dee9bd476c8022a7067780d2e568cd3e5ceb
GET /js/each-land-config.11fbe7f1.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=75526
etag: W/"63809bf7-12706"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HF1CkK6NxXBx9aB%2F%2BwcSTpugWHG4R8kXVSRqOxKPy7yd%2FHwGkyY0m1g5xdiTjPeBMH80a3qaI6c09TYj40XpXrt%2BJjcVwz8w0Piv4OkoSTfUSDXyqbReZ2pexImpp2kEcjg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b0802fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonGetIppRotate&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A344280972%3Arqn%3A20%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonGetIppRotate&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A344280972%3Arqn%3A20%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonGetIppRotate&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074753%3Aet%3A1669535273%3Ac%3A1%3Arn%3A344280972%3Arqn%3A20%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 384
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D88f9de1d-62b7-4963-8660-5cceb0505242%253A9133242322093aec2d5ac9739aa30f7174ba83e5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669532405_90c07fbf14bfc927e9f54185b886f773ffe74114b075e4ff86ccf676ccc7457a&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A504398775%3Az%3A0%3Ai%3A20221127070010%3Aet%3A1669532410%3Ac%3A1%3Arn%3A288287099%3Arqn%3A11%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669532404404%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D88f9de1d-62b7-4963-8660-5cceb0505242%253A9133242322093aec2d5ac9739aa30f7174ba83e5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669532405_90c07fbf14bfc927e9f54185b886f773ffe74114b075e4ff86ccf676ccc7457a&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A504398775%3Az%3A0%3Ai%3A20221127070010%3Aet%3A1669532410%3Ac%3A1%3Arn%3A288287099%3Arqn%3A11%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669532404404%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D88f9de1d-62b7-4963-8660-5cceb0505242%253A9133242322093aec2d5ac9739aa30f7174ba83e5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669532405_90c07fbf14bfc927e9f54185b886f773ffe74114b075e4ff86ccf676ccc7457a&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A504398775%3Az%3A0%3Ai%3A20221127070010%3Aet%3A1669532410%3Ac%3A1%3Arn%3A288287099%3Arqn%3A11%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669532404404%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074758%3Aet%3A1669535279%3Ac%3A1%3Arn%3A5251777%3Arqn%3A22%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535279%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(11)aw(1)ecs(1)fid(200)fip(1)rqnl(1)ti(2)
87.250.250.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074758%3Aet%3A1669535279%3Ac%3A1%3Arn%3A5251777%3Arqn%3A22%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535279%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(11)aw(1)ecs(1)fid(200)fip(1)rqnl(1)ti(2)
IP 87.250.250.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3Db19e1ce6-101d-449a-a898-ca11bffb7149%253A9d7bab02d36ea90075b66454753ec95f2d8543d5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669535273_75b3e8a1348c90aa635c552f7e715b05c24274c2f443991fbda8b1c8c16559b6&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A808493939%3Az%3A0%3Ai%3A20221127074758%3Aet%3A1669535279%3Ac%3A1%3Arn%3A5251777%3Arqn%3A22%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669535272052%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669535279%3At%3ALove%20Test%20%3C3&t=gdpr(14)mc(g-9)clc(0-0-0)rqnt(11)aw(1)ecs(1)fid(200)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 27 Nov 2022 07:47:58 GMT
access-control-allow-origin: https://findyourhalf.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:58 GMT
last-modified: Sun, 27-Nov-2022 07:47:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
findyourhalf.top/js/config/data/sd-20610201.js?v=10
104.26.14.100200 OK 1.4 kB URL HTTP/2 findyourhalf.top/js/config/data/sd-20610201.js?v=10
IP 104.26.14.100:0
File type Unicode text, UTF-8 text, with very long lines (2518), with no line terminators
Hash db4ea9e6d0d72e80172480bb4510e732
52eae7b62a46263dac1743c299b6649f4fae0939
cc336423385da6df02efbaa7420a4446f233e94f7bb426d99b4466552cd0d608
GET /js/config/data/sd-20610201.js?v=10 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
etag: W/"63809bf7-9f0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uoUlFvLNDJmH22zzPUs5%2Beu10fJabuFnZLqUeN9lFDPSOMCeeQ4AaA6EhFbatFqfFm0Hp3Mvlx%2BN6U5kSEvwbtRxtz857mN18KuLKDYEyfjwRrlBZ04NDA%2F3hts5YlMxMFc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421bd877fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/survey-dating.42e30ea1.js
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/js/survey-dating.42e30ea1.js
IP 104.26.14.100:0
GET /js/survey-dating.42e30ea1.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63809bf7-476"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pd4iyEIs1R3M4jORZ4Sa%2F7pSmoy10J4qrU1bCHYz9AYnYEzTAO2gaaf3kFsB%2Fr0nORmSWnGIEgbxwfoU%2Fu9Z00rvCvfiQU9wY7SjQgR8cQ1c55MXxJ8VTng9N53laWiH%2FKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b1817fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/css/survey.cc3533c8.css
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/css/survey.cc3533c8.css
IP 104.26.14.100:0
GET /css/survey.cc3533c8.css HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19937
etag: W/"63809bf7-4de1"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tSBuZYskBste3ximORNbG3OSzfeStHnCPDU8D8SYSi%2FRRHWHmIbb9cXKgta2JFWB%2BdOeLBIOmT9lrPljsF65tiNk%2FIiOm01dL4yNa5TTYdJ%2FhtZ1SYxgHfxn0QzkCDZW9wM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b0804fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/v-utils.js.f7e0c462.js
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/js/v-utils.js.f7e0c462.js
IP 104.26.14.100:0
GET /js/v-utils.js.f7e0c462.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=7119
etag: W/"63809bf7-1bcf"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FJnMfAO5wacMYl81DBguwd4IWw36fG8Y94F33m8U3UuQnudmepBdku369SBBbLTPGfjDvOaF0Kf6h60ectoRQkGmDFuxQjsnPTcGRubw0qxCHMAMBtMrKY25PkqPCvWp6JE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421afffafab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/css/survey-dating.9803a52c.css
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/css/survey-dating.9803a52c.css
IP 104.26.14.100:0
GET /css/survey-dating.9803a52c.css HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=9872
etag: W/"63809bf7-2690"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aX3Fd5imxiy%2F6FRLs6ui8NP3HR0uIVMALRErmn2KuqQBHKUkWPmjZbt0mi2CbP5TvyzcHuh6IunSZlTUHfw%2FrhkT7hAYuUUeZQg8p7j8UnIPABcTIX0cwyE5HxpTy9jDvw4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b0806fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/v-redux-toolkit.esm.js.c3039cb3.js
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/js/v-redux-toolkit.esm.js.c3039cb3.js
IP 104.26.14.100:0
GET /js/v-redux-toolkit.esm.js.c3039cb3.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63809bf7-273a"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mSnD2VFNIX%2FFvPVaPX3ozdOCvLgImeRfCOUooXlhS%2Fxd40%2Bcjsl51jVQo5me0vDYd09Jz5r4PEmqTCPGcqJxSxpKxyks0YsdAVmxWGu0XMhisEGfutadsF9bM2eXZ%2BhfUrc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b1814fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/survey.6.96b8b465.js
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/js/survey.6.96b8b465.js
IP 104.26.14.100:0
GET /js/survey.6.96b8b465.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=191210
etag: W/"63809bf7-2eaea"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dw6cfSFz20KudDiplnRtubOcHECdLFefPS4X5mig%2BEsj%2F%2FoiYQ2oZr4wC0BC2T%2B5ME8Emt7o9MU4xRDI5mISbkhEVikZ2Z8cfaaymfMPL7e7ZZqwydg9GQhY%2BBFoS1OMa6o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b1815fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
itcleffaom.com/rotate?zz=5473375;5473392;5473384;5473397;5473381;5473436;5473414;5473400&var=4655142&ymid=6100_305&uid=d3c9bc14e4b04d2c81fb7dab8b6acf70
139.45.197.237200 OK 0 B URL HTTP/2 itcleffaom.com/rotate?zz=5473375;5473392;5473384;5473397;5473381;5473436;5473414;5473400&var=4655142&ymid=6100_305&uid=d3c9bc14e4b04d2c81fb7dab8b6acf70
IP 139.45.197.237:0
Analyzer Verdict Alert quad9 Sinkholed
GET /rotate?zz=5473375;5473392;5473384;5473397;5473381;5473436;5473414;5473400&var=4655142&ymid=6100_305&uid=d3c9bc14e4b04d2c81fb7dab8b6acf70 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
x-trace-id: 0c71edfb622e9bc6fe3e96e307d5464f
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://findyourhalf.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=d3c9bc14e4b04d2c81fb7dab8b6acf70; expires=Mon, 27 Nov 2023 07:47:52 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
findyourhalf.top/js/v-AxiosHeaders.js.f509efe9.js
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/js/v-AxiosHeaders.js.f509efe9.js
IP 104.26.14.100:0
GET /js/v-AxiosHeaders.js.f509efe9.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63809bf7-b9f"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2R3nWCKoE9SOTRXC3ek4XcOliSK5qe%2BGCaTD1J6BdovZEQ%2FTdDdqSuXbfzUjMx82vrtSJgioiMByU13uQPdizOVLd%2FwnuUSEZAtDmTcwl4MH7%2BEr19%2FGQRE9SPu6ZqNKazw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b0ffffab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/js/config/dict/cookie-consent-1.json?v=10
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/js/config/dict/cookie-consent-1.json?v=10
IP 104.26.14.100:0
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/json
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
etag: W/"63809bf7-1760"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GqDcr5OMDiCZsbrA8NVgyIKDH7O8heNvhZ6gDm2OP%2BeAvAhRGmRptcDG%2BrLH7HuTxIgndgCLFD45fbWbPyeoaxgDFS977480rXVxBgdeToPMFzjAMnyKS2HsI5zzKR8gNao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421e299dfab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D88f9de1d-62b7-4963-8660-5cceb0505242%253A9133242322093aec2d5ac9739aa30f7174ba83e5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669532405_90c07fbf14bfc927e9f54185b886f773ffe74114b075e4ff86ccf676ccc7457a&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A504398775%3Az%3A0%3Ai%3A20221127070010%3Aet%3A1669532410%3Ac%3A1%3Arn%3A288287099%3Arqn%3A11%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669532404404%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)rqnl(2)ti(2)
87.250.250.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/66423859?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D88f9de1d-62b7-4963-8660-5cceb0505242%253A9133242322093aec2d5ac9739aa30f7174ba83e5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669532405_90c07fbf14bfc927e9f54185b886f773ffe74114b075e4ff86ccf676ccc7457a&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A504398775%3Az%3A0%3Ai%3A20221127070010%3Aet%3A1669532410%3Ac%3A1%3Arn%3A288287099%3Arqn%3A11%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669532404404%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)rqnl(2)ti(2)
IP 87.250.250.119:0
POST /watch/66423859?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D88f9de1d-62b7-4963-8660-5cceb0505242%253A9133242322093aec2d5ac9739aa30f7174ba83e5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669532405_90c07fbf14bfc927e9f54185b886f773ffe74114b075e4ff86ccf676ccc7457a&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A504398775%3Az%3A0%3Ai%3A20221127070010%3Aet%3A1669532410%3Ac%3A1%3Arn%3A288287099%3Arqn%3A11%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669532404404%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr(14)rqnl(2)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://findyourhalf.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?page-url=goal%3A%2F%2Ffindyourhalf.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ffindyourhalf.top%2Fdating-survey.html%3Fz%3D4655142%26offer_id%3D2061%26var%3D6100_305%26ymid%3D88f9de1d-62b7-4963-8660-5cceb0505242%253A9133242322093aec2d5ac9739aa30f7174ba83e5%26utm_campaign%3D6100_305%26utm_medium%3D4655142%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1669532405_90c07fbf14bfc927e9f54185b886f773ffe74114b075e4ff86ccf676ccc7457a&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A391625668528%3Ahid%3A504398775%3Az%3A0%3Ai%3A20221127070010%3Aet%3A1669532410%3Ac%3A1%3Arn%3A288287099%3Arqn%3A11%3Au%3A16695324051038291169%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1669532404404%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A2%3Ast%3A1669535273%3At%3ALove%20Test%20%3C3&t=gdpr%2814%29rqnl%282%29ti%282%29
date: Sun, 27 Nov 2022 07:47:53 GMT
access-control-allow-origin: https://findyourhalf.top
set-cookie: yandexuid=2259490781669535273; Expires=Mon, 27-Nov-2023 07:47:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2259490781669535273; Expires=Mon, 27-Nov-2023 07:47:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1539926481669535273; Path=/; SameSite=None; Secure
i=3mq5awRH2wpmp/95LeO03OvikvxjaxLBAko2SrqGWDjmer3RvRZ/LGac8j+AjtBCmA7HWWBryh+8gQORaT8+Fc7ois0=; Expires=Wed, 24-Nov-2032 07:47:50 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1701071273.yc.1669535273#1701071273.yrts.1669535273#1701071273.yrtsi.1669535273; Expires=Mon, 27-Nov-2023 07:47:53 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 27-Nov-2022 07:47:53 GMT
last-modified: Sun, 27-Nov-2022 07:47:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
findyourhalf.top/js/v-react-dom.production.min.js.f6c95ef9.js
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/js/v-react-dom.production.min.js.f6c95ef9.js
IP 104.26.14.100:0
GET /js/v-react-dom.production.min.js.f6c95ef9.js HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63809bf7-1f80c"
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6124
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nmOl9B3VubivhxVAcVloLrMBT%2BAr4dPYvAnrW7fiKORsJfj%2FFh6ZUFeUHB4sO5%2BnwMntSe7nH3okrRSIb5gJznnZq1ByU2qDzHtBA%2F48g9sC7qi3E0hXKvFhoNApMLWv%2B%2BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421b1813fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2
findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=b19e1ce6-101d-449a-a898-ca11bffb7149:9d7bab02d36ea90075b66454753ec95f2d8543d5
104.26.14.100200 OK 0 B URL HTTP/2 findyourhalf.top/dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=b19e1ce6-101d-449a-a898-ca11bffb7149:9d7bab02d36ea90075b66454753ec95f2d8543d5
IP 104.26.14.100:0
GET /dating-survey.html?z=4655142&offer_id=2061&var=6100_305&ymid=b19e1ce6-101d-449a-a898-ca11bffb7149:9d7bab02d36ea90075b66454753ec95f2d8543d5 HTTP/1.1
Host: findyourhalf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1865e08ae4.smapp.work/
Cookie: _ym_uid=16695324051038291169; _ym_d=1669532405; _ym_isad=2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 07:47:52 GMT
content-type: text/html
last-modified: Fri, 25 Nov 2022 10:41:59 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fPh0wCl0sA6gkosF0jDc7TPDTQVOyJ8u2sLJi7YaZcWCN3FMC6gvgt8BLsCDKqjzbKQuu%2Fl6LbK9LCClOqPneKUNtO8xh3bNQD4Fbp%2FBZQWdPaJdE2Nec5PdQu8lwRfIhoU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7709421a2fa8fab8-OSL
content-encoding: br
X-Firefox-Spdy: h2