forwoobatan.com/zone?&pub=0&zone_id=4470214&is_mobile=false&domain=forwoobatan.com&var=3744083-887628016-0&ymid=%24170228054610000TUSTV418068771884Vb4&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
0 B URL forwoobatan.com/zone?&pub=0&zone_id=4470214&is_mobile=false&domain=forwoobatan.com&var=3744083-887628016-0&ymid=%24170228054610000TUSTV418068771884Vb4&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=4470214&is_mobile=false&domain=forwoobatan.com&var=3744083-887628016-0&ymid=%24170228054610000TUSTV418068771884Vb4&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forwoobatan.com
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228054610000TUSTV418068771884Vb4&z=3744083-887628016-0
Cookie: reverse=eYWkNY_fM4ho5j-QyblpGIrXI-lW-OMC31AeGTnw17c; OAID=76b142321b33c45121589d33e8015511; oaidts=1702280564
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:44 GMT
content-length: 0
x-trace-id: 1d04c0410066fad8fb9bfef6be933ce2
access-control-allow-origin: https://forwoobatan.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=76b142321b33c45121589d33e8015511
65 B URL my.rtmark.net/gid.js?userId=76b142321b33c45121589d33e8015511
IP
Hash d32b87364b9b7316afdc3273b82ea6d0
340fe966a09939b95b819deccadafd060d0d0d2d
fe3b917fbbdbcf9b17a71fd66631d459d13e5aba040ff6ec9b775a9000d50ff4
GET /gid.js?userId=76b142321b33c45121589d33e8015511 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forwoobatan.com/
Origin: https://forwoobatan.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:44 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://forwoobatan.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=76b142321b33c45121589d33e8015511; expires=Tue, 10 Dec 2024 07:42:44 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
forwoobatan.com/favicon.ico
0 B URL forwoobatan.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228054610000TUSTV418068771884Vb4&z=3744083-887628016-0
Cookie: reverse=eYWkNY_fM4ho5j-QyblpGIrXI-lW-OMC31AeGTnw17c; OAID=76b142321b33c45121589d33e8015511; oaidts=1702280564; prefetchAd_4470223=true; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 11 Dec 2023 07:42:45 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
forwoobatan.com/cat.php?userId=76b142321b33c45121589d33e8015511&zoneid=4470223&rb=sr7uQL6H33TKWeFKg6tf6xB-stV2b-7aKkROuaWvceRUUTGTKCr6OBOnvtQkfJuYjaYfUtZW4SrYTLCBkJwzcx1HQajaGVyydZjRW09kJrwm7afSeCFrr8eDXoSbp4WwfYAVL9F1Le6Vmc0KrqYxmyPxSg95IBiU9WUoAOi1welOek9Bu1eYUawV1GHKlRczuGBee90J0fyeME7j8YFJCKvADsE1kV7sMVoN85N9lzOxM85J9V9nOFZh9OE2VSYUwEygxp0Uhu-pr157b1mHoWaSVQVV9pRBFu9mrjDlDpdvMLxLjSJPi8G_IcpNa1F5rpx8UDuaM1eoVng27KqbQd_5DfZ0lJfZGsPftqgrBNmDY0j88D4UtPOSl9jfwlvAgTzdVLys4XoZ1u3VsWSgY7Aqn4DoBSAE&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1
0 B URL forwoobatan.com/cat.php?userId=76b142321b33c45121589d33e8015511&zoneid=4470223&rb=sr7uQL6H33TKWeFKg6tf6xB-stV2b-7aKkROuaWvceRUUTGTKCr6OBOnvtQkfJuYjaYfUtZW4SrYTLCBkJwzcx1HQajaGVyydZjRW09kJrwm7afSeCFrr8eDXoSbp4WwfYAVL9F1Le6Vmc0KrqYxmyPxSg95IBiU9WUoAOi1welOek9Bu1eYUawV1GHKlRczuGBee90J0fyeME7j8YFJCKvADsE1kV7sMVoN85N9lzOxM85J9V9nOFZh9OE2VSYUwEygxp0Uhu-pr157b1mHoWaSVQVV9pRBFu9mrjDlDpdvMLxLjSJPi8G_IcpNa1F5rpx8UDuaM1eoVng27KqbQd_5DfZ0lJfZGsPftqgrBNmDY0j88D4UtPOSl9jfwlvAgTzdVLys4XoZ1u3VsWSgY7Aqn4DoBSAE&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /cat.php?userId=76b142321b33c45121589d33e8015511&zoneid=4470223&rb=sr7uQL6H33TKWeFKg6tf6xB-stV2b-7aKkROuaWvceRUUTGTKCr6OBOnvtQkfJuYjaYfUtZW4SrYTLCBkJwzcx1HQajaGVyydZjRW09kJrwm7afSeCFrr8eDXoSbp4WwfYAVL9F1Le6Vmc0KrqYxmyPxSg95IBiU9WUoAOi1welOek9Bu1eYUawV1GHKlRczuGBee90J0fyeME7j8YFJCKvADsE1kV7sMVoN85N9lzOxM85J9V9nOFZh9OE2VSYUwEygxp0Uhu-pr157b1mHoWaSVQVV9pRBFu9mrjDlDpdvMLxLjSJPi8G_IcpNa1F5rpx8UDuaM1eoVng27KqbQd_5DfZ0lJfZGsPftqgrBNmDY0j88D4UtPOSl9jfwlvAgTzdVLys4XoZ1u3VsWSgY7Aqn4DoBSAE&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1 HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1453
Origin: https://forwoobatan.com
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228054610000TUSTV418068771884Vb4&z=3744083-887628016-0
Cookie: reverse=eYWkNY_fM4ho5j-QyblpGIrXI-lW-OMC31AeGTnw17c; OAID=76b142321b33c45121589d33e8015511; oaidts=1702280564; prefetchAd_4470223=true; syncedCookie=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:45 GMT
content-length: 0
x-trace-id: 6b37804d25e52df5e732fd20137ced46
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://forwoobatan.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
forwoobatan.com/rhd?rb=sr7uQL6H33TKWeFKg6tf6xB-stV2b-7aKkROuaWvceRUUTGTKCr6OBOnvtQkfJuYjaYfUtZW4SrYTLCBkJwzcx1HQajaGVyydZjRW09kJrwm7afSeCFrr8eDXoSbp4WwfYAVL9F1Le6Vmc0KrqYxmyPxSg95IBiU9WUoAOi1welOek9Bu1eYUawV1GHKlRczuGBee90J0fyeME7j8YFJCKvADsE1kV7sMVoN85N9lzOxM85J9V9nOFZh9OE2VSYUwEygxp0Uhu-pr157b1mHoWaSVQVV9pRBFu9mrjDlDpdvMLxLjSJPi8G_IcpNa1F5rpx8UDuaM1eoVng27KqbQd_5DfZ0lJfZGsPftqgrBNmDY0j88D4UtPOSl9jfwlvAgTzdVLys4XoZ1u3VsWSgY7Aqn4DoBSAE&request_ab2=0&zoneid=4470223&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fforwoobatan.com%2F%3Fl%3D02GYUEFO3sEAauR%26s%3D%24170228054610000TUSTV418068771884Vb4%26z%3D3744083-887628016-0&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1&m=link
2.0 kB URL forwoobatan.com/rhd?rb=sr7uQL6H33TKWeFKg6tf6xB-stV2b-7aKkROuaWvceRUUTGTKCr6OBOnvtQkfJuYjaYfUtZW4SrYTLCBkJwzcx1HQajaGVyydZjRW09kJrwm7afSeCFrr8eDXoSbp4WwfYAVL9F1Le6Vmc0KrqYxmyPxSg95IBiU9WUoAOi1welOek9Bu1eYUawV1GHKlRczuGBee90J0fyeME7j8YFJCKvADsE1kV7sMVoN85N9lzOxM85J9V9nOFZh9OE2VSYUwEygxp0Uhu-pr157b1mHoWaSVQVV9pRBFu9mrjDlDpdvMLxLjSJPi8G_IcpNa1F5rpx8UDuaM1eoVng27KqbQd_5DfZ0lJfZGsPftqgrBNmDY0j88D4UtPOSl9jfwlvAgTzdVLys4XoZ1u3VsWSgY7Aqn4DoBSAE&request_ab2=0&zoneid=4470223&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fforwoobatan.com%2F%3Fl%3D02GYUEFO3sEAauR%26s%3D%24170228054610000TUSTV418068771884Vb4%26z%3D3744083-887628016-0&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1&m=link
IP
File type JSON data
- , ASCII text, with very long lines (2114), with no line terminators
Hash dfec0c5938c8f6588a9e95e5c6474858
e6a5c8cceb4d29a4ff07792696ea65e00478c946
063740180c8da7dd524036a8eb47553ec230d03524cf304eee5ebde5a275fd6d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rhd?rb=sr7uQL6H33TKWeFKg6tf6xB-stV2b-7aKkROuaWvceRUUTGTKCr6OBOnvtQkfJuYjaYfUtZW4SrYTLCBkJwzcx1HQajaGVyydZjRW09kJrwm7afSeCFrr8eDXoSbp4WwfYAVL9F1Le6Vmc0KrqYxmyPxSg95IBiU9WUoAOi1welOek9Bu1eYUawV1GHKlRczuGBee90J0fyeME7j8YFJCKvADsE1kV7sMVoN85N9lzOxM85J9V9nOFZh9OE2VSYUwEygxp0Uhu-pr157b1mHoWaSVQVV9pRBFu9mrjDlDpdvMLxLjSJPi8G_IcpNa1F5rpx8UDuaM1eoVng27KqbQd_5DfZ0lJfZGsPftqgrBNmDY0j88D4UtPOSl9jfwlvAgTzdVLys4XoZ1u3VsWSgY7Aqn4DoBSAE&request_ab2=0&zoneid=4470223&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fforwoobatan.com%2F%3Fl%3D02GYUEFO3sEAauR%26s%3D%24170228054610000TUSTV418068771884Vb4%26z%3D3744083-887628016-0&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1&m=link HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228054610000TUSTV418068771884Vb4&z=3744083-887628016-0
DNT: 1
Connection: keep-alive
Cookie: reverse=eYWkNY_fM4ho5j-QyblpGIrXI-lW-OMC31AeGTnw17c; OAID=76b142321b33c45121589d33e8015511; oaidts=1702280564; prefetchAd_4470223=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:45 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 705781644e7eeadd15fc840749e6ce0e
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=76b142321b33c45121589d33e8015511; expires=Tue, 10 Dec 2024 07:42:44 GMT; path=/; secure; SameSite=None
oaidts=1702280564; expires=Tue, 10 Dec 2024 07:42:44 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
200 OK 2.8 kB URL User Request GET HTTP/2 www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
IP
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 text, with very long lines (4258)
Hash 3aa7a410499e6cf6fa4237d5b0c72c60
803ba694b65cc092e56b0792490da8486530c9b0
0f39ad3bfa7fbca5120d0c01b79465e2c77d940d3163861301230f343268f3d9
GET /c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511 HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:45 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6576bd7500073602; Path=/; Expires=Fri, 09 Feb 2024 07:42:45 GMT; Secure; SameSite=None
unique_id2=6576bd7500073dd8; Path=/; Expires=Sun, 10 Mar 2024 07:42:45 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Mon, 11 Dec 2023 07:42:45 GMT; Secure; SameSite=None
6576bd7500073dd8_sl=[277423]; Path=/; Expires=Mon, 25 Dec 2023 07:42:45 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277423/1669996037/js/secondofferv2.js?1669996037
200 OK 454 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277423/1669996037/js/secondofferv2.js?1669996037
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash 9bbe216b8e526fd98d219f2b91ccaa57
3f5d1be91ba58b6501c022155fe6778ce82b1663
1c83d2863f746a234e46c5578826ceeb8cbe126bc4c274ca679295441c44b948
GET /landings/277423/1669996037/js/secondofferv2.js?1669996037 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: TBXznBQnjCkBzBBFj9JkzFMaDIYn8xvJBUm1XIV1OQobif1haYm4G918n4r7TuaZ4fb9w7KqUB8=
x-amz-request-id: VBQAT92HF3YSW2PR
Last-Modified: Fri, 02 Dec 2022 15:47:20 GMT
ETag: "9bbe216b8e526fd98d219f2b91ccaa57"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:42:45 GMT
Content-Length: 454
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277423/1669996037/js/MB_push_NEW.js?1669996037
200 OK 671 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277423/1669996037/js/MB_push_NEW.js?1669996037
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 533a9cb9c41907529c3d603edb25d5d9
222bee472465971cf71bfa210d04136eb765ccc0
45d257677164ebc2c1fd4ff44b4ee5a1ce9c87682f165836a3e38113d1e09eaf
GET /landings/277423/1669996037/js/MB_push_NEW.js?1669996037 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: TwtcLsNEPH0+dOTQxWCH0dp8vLuCBDIrT/t2FyN4HhkY5jqf77SoMEMiHK+TLdb/FDICBNRSev0=
x-amz-request-id: 9HZQ5999SNHCV322
Last-Modified: Fri, 02 Dec 2022 15:47:20 GMT
ETag: "533a9cb9c41907529c3d603edb25d5d9"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 671
Date: Mon, 11 Dec 2023 07:42:45 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277423/1669996037/js/jquery.min.js?1669996037
200 OK 30 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277423/1669996037/js/jquery.min.js?1669996037
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /landings/277423/1669996037/js/jquery.min.js?1669996037 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: JrgOilEZ3uRoKC6ngsupgtvA0XmkXUSz0XfNR3rzF0zCH3hHZ06hF/4c6ZKPwM6mVuOMVG+QbPk=
x-amz-request-id: 9HZTD5K3AZSVMWET
Last-Modified: Fri, 02 Dec 2022 15:47:19 GMT
ETag: "2f6b11a7e914718e0290410e85366fe9"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:42:45 GMT
Content-Length: 29855
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277423/1669996037/js/main.js?1669996037
200 OK 40 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277423/1669996037/js/main.js?1669996037
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (568), with CRLF line terminators
Hash a0f4da40bd81c65d824afc106743d47f
55b2d4c57fdb017314f62ac2fe8a3e287dcadf7f
e40e7cc368c897d6a3a5095fae6ccd6d9a3f88af5ef9c590f79b9fd22293ad10
GET /landings/277423/1669996037/js/main.js?1669996037 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: g+E+f+ZbK/fcOZUXAojseAsPNRn67mWzaCqIfISD2cC6tTHSKxejVPkwtmuzMSGis2iwjqPrvFI=
x-amz-request-id: 9HZQGJ3RYAASCRS4
Last-Modified: Fri, 02 Dec 2022 15:47:19 GMT
ETag: "a0f4da40bd81c65d824afc106743d47f"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:42:45 GMT
Content-Length: 40511
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277423/1669996037/images/bg.gif
200 OK 1.2 MB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277423/1669996037/images/bg.gif
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type GIF image data, version 89a, 298 x 517
- data
Size 1.2 MB (1235704 bytes)
Hash 24834ba3652037ba5e9dd83bfe2c5c50
955eddd177b4135779733c22c6460e78f8b68a41
50584cbf4273096c0c420aedf9c04ddc0b6651eb26d75994df7665f4191c7705
GET /landings/277423/1669996037/images/bg.gif HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/277423/1669996037/css/stylesheet.css?1669996037
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: tG/yOycB7uc1KVXLa4AHQUnMI3lStDs13OpaZ4ApoZNGSHQTSzQc8k22EhV76yoN2rF+j0Eo6Yk=
x-amz-request-id: VBQB08MQ2M49GF38
Last-Modified: Fri, 02 Dec 2022 15:47:19 GMT
ETag: "24834ba3652037ba5e9dd83bfe2c5c50"
Accept-Ranges: bytes
Content-Type: image/gif
Server: AmazonS3
Content-Length: 1235704
Date: Mon, 11 Dec 2023 07:42:46 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
forwoobatan.com/19/4470223/?abt_opts=1&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1
62 kB URL forwoobatan.com/19/4470223/?abt_opts=1&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1
IP
File type JSON data
- , ASCII text, with very long lines (2958), with no line terminators
Hash b619ce66cc3759cdddf4bd44f35e9899
a3259dfcf36bc11ab3ddc5741a4a2c0be421cd05
765968285b08cd12aaaab59ea638b4e9b8f9266fe168e81458d28da2496cc8c8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /19/4470223/?abt_opts=1&var=3744083-887628016-0&var3=%24170228054610000TUSTV418068771884Vb4&ymid=&rhd=1 HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228054610000TUSTV418068771884Vb4&z=3744083-887628016-0
Cookie: reverse=eYWkNY_fM4ho5j-QyblpGIrXI-lW-OMC31AeGTnw17c; OAID=76b142321b33c45121589d33e8015511; oaidts=1702280564
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:44 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 423cbcf390abffbfc212350b3af173aa
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=76b142321b33c45121589d33e8015511; expires=Tue, 10 Dec 2024 07:42:44 GMT; path=/; secure; SameSite=None
oaidts=1702280564; expires=Tue, 10 Dec 2024 07:42:44 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
www.mysexymatches.com/js/pushjs/1.0.0/utils.js
200 OK 3.9 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/utils.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type gzip compressed data, from Unix
- data
Hash d728738c46520e69dd356004cac8f166
3274c850ea2e6ffd0bfdea606b33f7cc44431b98
46141bceb2da1453fefa8b228fc27903c6cd26dc416cf6259b09254c8f9be85f
GET /js/pushjs/1.0.0/utils.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Cookie: unique_id=6576bd7500073602; unique_id2=6576bd7500073dd8; 6576bd7500073dd8_sl=[277423]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:46 GMT
content-type: application/javascript
expires: Mon, 18 Dec 2023 07:42:46 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/images/favicon.ico
200 OK 4.1 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/images/favicon.ico
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
- data
Hash 4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI=
x-amz-request-id: 78F19547EBC3B810
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
Date: Mon, 11 Dec 2023 07:42:46 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
200 OK 10 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (35547)
Hash 0cb7a0eb328ea70ab360f861314c8820
e3e20eb50dae36f4cbcef1890b1cc7878acb537a
4569845f7c550a55311814032e88541bd3b4a055ec3894e9cf58c4fff1be91d9
GET /firebasejs/5.0.2/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:43:45 GMT
expires: Fri, 06 Dec 2024 15:43:45 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 10 May 2018 20:35:52 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 316741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.0.2/firebase-app.js
200 OK 8.6 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-app.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (25088)
Hash 9164d0e8a317eceb870cca88c9683127
4617c910005f7100b4ff26a458a8b4463e33cdc6
15c9bd66992ef54979c981763cae280f28b6845520020ed38b5ab5f3f70f7931
GET /firebasejs/5.0.2/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 8604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 10 Dec 2023 12:53:53 GMT
expires: Mon, 09 Dec 2024 12:53:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 10 May 2018 20:35:51 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 67733
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1556390647
200 OK 20 B URL GET HTTP/1.1 syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1556390647
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint8D:40:F0:75:CC:6E:55:85:E3:CD:04:C6:BF:F5:9F:81:74:ED:C3:24
ValidityThu, 05 Oct 2023 15:23:51 GMT - Wed, 03 Jan 2024 15:23:50 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1556390647 HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:42:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:42:46 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=904786007
200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=904786007
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=904786007 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:42:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:42:46 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.pemsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1810821816
200 OK 20 B URL GET HTTP/1.1 s.pemsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1810821816
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint40:E8:94:FF:56:F9:C8:1A:71:42:46:90:F1:80:43:D0:63:BB:7B:54
ValidityThu, 05 Oct 2023 15:33:19 GMT - Wed, 03 Jan 2024 15:33:18 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1810821816 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:42:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:42:46 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.zlinkd.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=2101472194
200 OK 20 B URL GET HTTP/1.1 s.zlinkd.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=2101472194
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subjectzlinkd.com
FingerprintC8:FB:68:B1:33:12:3C:36:71:BF:84:18:E9:3D:AD:E1:D3:69:AC:13
ValidityThu, 05 Oct 2023 15:39:08 GMT - Wed, 03 Jan 2024 15:39:07 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=2101472194 HTTP/1.1
Host: s.zlinkd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:42:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:42:46 GMT; path=/; domain=.zlinkd.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.orbsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=203336660
200 OK 20 B URL GET HTTP/1.1 s.orbsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=203336660
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subjectorbsrv.com
FingerprintC1:06:45:A2:28:F1:95:0E:76:B9:25:AE:56:75:E5:60:63:2E:D3:34
ValidityThu, 05 Oct 2023 15:32:45 GMT - Wed, 03 Jan 2024 15:32:44 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=203336660 HTTP/1.1
Host: s.orbsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:42:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:42:46 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:46 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 0c796541eca62d83
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Tue, 10 Dec 2024 07:42:46 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:46 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 2
x-request-id: 0eba0d1b20f06e8f
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Tue, 10 Dec 2024 07:42:46 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277423/1669996037/css/stylesheet.css?1669996037
200 OK 3.7 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277423/1669996037/css/stylesheet.css?1669996037
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3923), with no line terminators
Hash 85b0cd56bd43303e7695f11e15348504
3f1ec59a8b25bf79d495b985cedfbecc714cd0b0
0b9b08c7f1525cca3a30596be5264332a8e5d818de64bb0354a507dff0c824d2
GET /landings/277423/1669996037/css/stylesheet.css?1669996037 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: IyESBznHP7Ein0nvpfWYoHLdKF/ERsmL3RJ/hMTJ90TlFJanGi/X0MkZPhsbXrD2m2l5iVtiMdI=
x-amz-request-id: 9HZPW3V4SPRRPM3J
Last-Modified: Fri, 02 Dec 2022 15:47:19 GMT
ETag: "c4709de8c9c356021de98176f13270b3"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:42:45 GMT
Content-Length: 1266
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
200 OK 169 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (5261)
Size 169 kB (169110 bytes)
Hash 7f6e7c8bf59dcc185880ebe4e7ff628a
0fc98e5d84ec1f88a4559ec443a7c8b01f7138be
1f4a39e236eb4097821f8f49fbeb315af43c85802a2c826f63e67eca242cfba3
GET /gtm.js?id=GTM-MLVPDTJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 07:42:46 GMT
expires: Mon, 11 Dec 2023 07:42:46 GMT
cache-control: private, max-age=900
last-modified: Mon, 11 Dec 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 60992
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
forwoobatan.com/submenu/4470223/?rhd=1&var=3744083-887628016-0&var3=$170228054610000TUSTV418068771884Vb4&oaid=76b142321b33c45121589d33e8015511&os_version=10.0
0 B URL User Request GET forwoobatan.com/submenu/4470223/?rhd=1&var=3744083-887628016-0&var3=$170228054610000TUSTV418068771884Vb4&oaid=76b142321b33c45121589d33e8015511&os_version=10.0
IP
Certificate IssuerLet's Encrypt
Subjectforwoobatan.com
FingerprintAA:D9:D3:74:95:D2:AC:29:79:D4:C2:8B:8A:19:73:6C:AA:6F:74:1F
ValidityMon, 13 Nov 2023 09:43:15 GMT - Sun, 11 Feb 2024 09:43:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /submenu/4470223/?rhd=1&var=3744083-887628016-0&var3=$170228054610000TUSTV418068771884Vb4&oaid=76b142321b33c45121589d33e8015511&os_version=10.0 HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228054610000TUSTV418068771884Vb4&z=3744083-887628016-0
Cookie: reverse=eYWkNY_fM4ho5j-QyblpGIrXI-lW-OMC31AeGTnw17c; OAID=76b142321b33c45121589d33e8015511; oaidts=1702280564; prefetchAd_4470223=true; syncedCookie=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
200 OK 9.4 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type C source text
- troff or preprocessor input, ASCII text, with very long lines (9661), with no line terminators
Hash 698668c880e3133ee2cffc2eee6aad4d
cadcabaeb8a3da90317682ead381b76c11319464
1963c90f965a52259d5b8fd47cb33ef3df24733a994ad99ce7f0cfa525d9b163
GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Cookie: unique_id=6576bd7500073602; unique_id2=6576bd7500073dd8; 6576bd7500073dd8_sl=[277423]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:42:46 GMT
content-type: application/javascript
expires: Mon, 18 Dec 2023 07:42:46 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277423/1669996037/js/backoffer.js?1669996037
200 OK 430 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277423/1669996037/js/backoffer.js?1669996037
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=76b142321b33c45121589d33e8015511
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (430), with no line terminators
Hash 6d5aa83d23ce0b9f72d3b87d000d8fae
034fb8768eb58ffc0b5849e2c162989741a6cbec
89266112a6c823b9c03dd5a32d8f1c5e9f4cbf4cf876b56c825781ea389d0800
GET /landings/277423/1669996037/js/backoffer.js?1669996037 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: wQjQ4KLZfZPl4C4F+cDGnMVIpeWXFGoN5EU5RZivmlsy4B9dTxNAY7kNXlx9wjGfAnd6nZY5JPk=
x-amz-request-id: 9HZH1FTBM5DXQVE7
Last-Modified: Fri, 02 Dec 2022 15:47:19 GMT
ETag: "6d5aa83d23ce0b9f72d3b87d000d8fae"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 430
Date: Mon, 11 Dec 2023 07:42:45 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
139.45.197.163
95.211.229.248
116.202.244.171
52.17.88.125
23.36.76.194
142.250.74.99
0.0.0.0
0.0.0.0