medianame.top/ke/nl/ke/env2/safaricom/
188.166.13.239 0 B URL medianame.top/ke/nl/ke/env2/safaricom/
IP 188.166.13.239:0
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ke/nl/ke/env2/safaricom/ HTTP/1.1
Host: medianame.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
location: https://ak.hetaruvg.com/4/5710373?var=ag_error
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 11 Dec 2023 08:52:07 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ak.hetaruvg.com/4/5710373?var=ag_error
95.101.11.42 12 kB URL ak.hetaruvg.com/4/5710373?var=ag_error
IP 95.101.11.42:0
ASN #20940 Akamai International B.V.
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, ASCII text, with very long lines (18377)
Hash e8809bd453b2e1972d5c1fe236cce5dc
fcf094240d17a84722b60dde288abd3b419f2608
317ffd53d470483e5a5f395238723941ebbc95b64b20a728f5a1d0d1816f934e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /4/5710373?var=ag_error HTTP/1.1
Host: ak.hetaruvg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 25b76f79ecb544dc48cbe2de7db075d7
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-credentials: true
access-control-max-age: 86400
timing-allow-origin: *
access-control-allow-origin: *, *
access-control-allow-methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, Accept, Content-Type, Content-Length, Accept-Encoding, favicon
content-encoding: gzip
expires: Mon, 11 Dec 2023 08:52:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 11 Dec 2023 08:52:07 GMT
content-length: 12368
vary: Accept-Encoding
set-cookie: OAID=6fcad102c5e64eb8b4d346cd47db903e; expires=Tue, 10 Dec 2024 08:52:07 GMT; path=/; secure; SameSite=None
oaidts=1702284727; expires=Tue, 10 Dec 2024 08:52:07 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2
ak.hetaruvg.com/sftouch?userId=6fcad102c5e64eb8b4d346cd47db903e&z=5710373&p_rid=b5de4a83-fa4d-443f-abb6-d5654c88a493&p_src=sf
95.101.11.42 2 B URL ak.hetaruvg.com/sftouch?userId=6fcad102c5e64eb8b4d346cd47db903e&z=5710373&p_rid=b5de4a83-fa4d-443f-abb6-d5654c88a493&p_src=sf
IP 95.101.11.42:0
ASN #20940 Akamai International B.V.
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /sftouch?userId=6fcad102c5e64eb8b4d346cd47db903e&z=5710373&p_rid=b5de4a83-fa4d-443f-abb6-d5654c88a493&p_src=sf HTTP/1.1
Host: ak.hetaruvg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ak.hetaruvg.com
DNT: 1
Connection: keep-alive
Referer: https://ak.hetaruvg.com/4/5710373?var=ag_error
Cookie: OAID=6fcad102c5e64eb8b4d346cd47db903e; oaidts=1702284727
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 2
x-trace-id: db19d277142745af59effb975560f128
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://ak.hetaruvg.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Mon, 11 Dec 2023 08:52:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 11 Dec 2023 08:52:08 GMT
X-Firefox-Spdy: h2
ak.hetaruvg.com/favicon.ico
95.101.11.42 0 B URL ak.hetaruvg.com/favicon.ico
IP 95.101.11.42:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: ak.hetaruvg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.hetaruvg.com/4/5710373?var=ag_error
Cookie: OAID=6fcad102c5e64eb8b4d346cd47db903e; oaidts=1702284727
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
expires: Mon, 11 Dec 2023 08:52:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 11 Dec 2023 08:52:08 GMT
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=merge&userId=6fcad102c5e64eb8b4d346cd47db903e&z=5710373&p_rid=b5de4a83-fa4d-443f-abb6-d5654c88a493&p_src=sf
139.45.195.8 43 B URL my.rtmark.net/img.gif?f=merge&userId=6fcad102c5e64eb8b4d346cd47db903e&z=5710373&p_rid=b5de4a83-fa4d-443f-abb6-d5654c88a493&p_src=sf
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1
- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=6fcad102c5e64eb8b4d346cd47db903e&z=5710373&p_rid=b5de4a83-fa4d-443f-abb6-d5654c88a493&p_src=sf HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.hetaruvg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:52:08 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=6fcad102c5e64eb8b4d346cd47db903e; expires=Tue, 10 Dec 2024 08:52:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ak.hetaruvg.com/?z=5710373&syncedCookie=true&rhd=false
95.101.11.42302 Found 0 B URL User Request POST HTTP/2 ak.hetaruvg.com/?z=5710373&syncedCookie=true&rhd=false
IP 95.101.11.42:443
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectak.hetaruwg.com
FingerprintBC:80:7A:C5:8C:23:5F:88:2F:49:04:FC:A6:7E:C5:13:C7:97:E2:CC
ValidityThu, 07 Dec 2023 09:36:41 GMT - Wed, 06 Mar 2024 09:36:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /?z=5710373&syncedCookie=true&rhd=false HTTP/1.1
Host: ak.hetaruvg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 474
Origin: https://ak.hetaruvg.com
DNT: 1
Connection: keep-alive
Referer: https://ak.hetaruvg.com/afu.php?zoneid=5710373&var=5710373&rid=uZkGuFtJfk-T2gq_XdzZSg%3D%3D&rhd=false
Cookie: OAID=6fcad102c5e64eb8b4d346cd47db903e; oaidts=1702284727
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-length: 0
x-trace-id: 16109f6406fdbe9f2561ef1a24412761
link: <https://www.mysexymatches.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
location: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://ak.hetaruvg.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Mon, 11 Dec 2023 08:52:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 11 Dec 2023 08:52:08 GMT
set-cookie: OAID=6fcad102c5e64eb8b4d346cd47db903e; expires=Tue, 10 Dec 2024 08:52:08 GMT; path=/; secure; SameSite=None
oaidts=1702284727; expires=Tue, 10 Dec 2024 08:52:08 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Mon, 18 Dec 2023 08:52:08 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/277417/1669995928/css/stylesheet.css?1669995929
95.101.10.34200 OK 1.3 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277417/1669995928/css/stylesheet.css?1669995929
IP 95.101.10.34:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash d075234b3158febf4af0d548b3eafed8
32ae6dbc4610c51908292061a5af930b5780fc65
31570741bf00eace61aeb265deb3e66a32a82f4721acd5a778a52d4d02337050
GET /landings/277417/1669995928/css/stylesheet.css?1669995929 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: l7XVM3xs9CbezlDRN7C28y9EimYnHRrzUXydIGQ5kz4gSYULoHZto2CtEn5tW+FNKpB/XD80n8I=
x-amz-request-id: JJATKV0NRGQE2F0F
Last-Modified: Fri, 02 Dec 2022 15:45:31 GMT
ETag: "d075234b3158febf4af0d548b3eafed8"
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Length: 1266
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277417/1669995928/js/backoffer.js?1669995929
95.101.10.34200 OK 430 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277417/1669995928/js/backoffer.js?1669995929
IP 95.101.10.34:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (430), with no line terminators
Hash 6d5aa83d23ce0b9f72d3b87d000d8fae
034fb8768eb58ffc0b5849e2c162989741a6cbec
89266112a6c823b9c03dd5a32d8f1c5e9f4cbf4cf876b56c825781ea389d0800
GET /landings/277417/1669995928/js/backoffer.js?1669995929 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: /hP8vY5LMFVtlsP2nsLGgoWMrjqtmcHFEUhGcmf37pFSF+bMqA8/58AIZVTCD1How4FPsGD2kxE=
x-amz-request-id: JJAWWEX5PXNK551W
Last-Modified: Fri, 02 Dec 2022 15:45:31 GMT
ETag: "6d5aa83d23ce0b9f72d3b87d000d8fae"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 430
Date: Mon, 11 Dec 2023 08:52:09 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277417/1669995928/js/secondofferv2.js?1669995929
95.101.10.67200 OK 454 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277417/1669995928/js/secondofferv2.js?1669995929
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash 9bbe216b8e526fd98d219f2b91ccaa57
3f5d1be91ba58b6501c022155fe6778ce82b1663
1c83d2863f746a234e46c5578826ceeb8cbe126bc4c274ca679295441c44b948
GET /landings/277417/1669995928/js/secondofferv2.js?1669995929 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: vCMJdggLt8J41dM832vPmiyx2+W0m/RLWsBGKSVRVhYR41BhortdK2R/Y4exdt991k9D91pixT8=
x-amz-request-id: JJAZQJFJS1C1SQN9
Last-Modified: Fri, 02 Dec 2022 15:45:32 GMT
ETag: "9bbe216b8e526fd98d219f2b91ccaa57"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Length: 454
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277417/1669995928/js/main.js?1669995929
95.101.10.34200 OK 40 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277417/1669995928/js/main.js?1669995929
IP 95.101.10.34:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (568), with CRLF line terminators
Hash a0f4da40bd81c65d824afc106743d47f
55b2d4c57fdb017314f62ac2fe8a3e287dcadf7f
e40e7cc368c897d6a3a5095fae6ccd6d9a3f88af5ef9c590f79b9fd22293ad10
GET /landings/277417/1669995928/js/main.js?1669995929 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 1UYMFAnrKY6OazjYZWogDRydwstPwWbCMjHfgn6jv/w13pUi1nY2SvKLxB5/G3ZKqAgF7RvaCEU=
x-amz-request-id: JJAGF76SHYCZEQJ6
Last-Modified: Fri, 02 Dec 2022 15:45:31 GMT
ETag: "a0f4da40bd81c65d824afc106743d47f"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Length: 40511
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277417/1669995928/js/jquery.min.js?1669995929
95.101.10.67200 OK 30 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277417/1669995928/js/jquery.min.js?1669995929
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /landings/277417/1669995928/js/jquery.min.js?1669995929 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: XlRf8r3ptX81b3d8yFqOfhJUnep81ApmnK05JpXf68E3kh6nMHTdWdGYt/NuN9wd2JIHv1E3NO4=
x-amz-request-id: JJAG73SSHQ42K81B
Last-Modified: Fri, 02 Dec 2022 15:45:31 GMT
ETag: "2f6b11a7e914718e0290410e85366fe9"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Length: 29855
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277417/1669995928/js/MB_push_NEW.js?1669995929
95.101.10.67200 OK 671 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277417/1669995928/js/MB_push_NEW.js?1669995929
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 533a9cb9c41907529c3d603edb25d5d9
222bee472465971cf71bfa210d04136eb765ccc0
45d257677164ebc2c1fd4ff44b4ee5a1ce9c87682f165836a3e38113d1e09eaf
GET /landings/277417/1669995928/js/MB_push_NEW.js?1669995929 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: hmEplyXxHLoYNmOnnClJJPeup+DYffXn78iei0b4d7TgV11CmbeA5SGakruijNTfg7rfRktzdg8=
x-amz-request-id: JJAGTR1TGCHPMYTE
Last-Modified: Fri, 02 Dec 2022 15:45:32 GMT
ETag: "533a9cb9c41907529c3d603edb25d5d9"
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 671
Date: Mon, 11 Dec 2023 08:52:09 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/277417/1669995928/images/bg.gif
95.101.10.34200 OK 4.1 MB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/277417/1669995928/images/bg.gif
IP 95.101.10.34:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type GIF image data, version 89a, 465 x 1000
- data
Size 4.1 MB (4133213 bytes)
Hash 785972337ae3a30044ccfd4d1a266678
bd5ec489152b47ead4d15802156ac9a959fcdb07
43ffc7002f50bd47d097bf88ec379ef44e816a2b4c531ea8540479fa68775a45
GET /landings/277417/1669995928/images/bg.gif HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/277417/1669995928/css/stylesheet.css?1669995929
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 9vKocYvVQzNFlDISYtRX2Gqg3+yJmtbp0uuY+j18S4OBLUWfmX3LEWKfH/dZtSIDfoSAuFP1ftk=
x-amz-request-id: 16CCK4BP6ZCK28K9
Last-Modified: Fri, 02 Dec 2022 15:45:30 GMT
ETag: "785972337ae3a30044ccfd4d1a266678"
Accept-Ranges: bytes
Content-Type: image/gif
Server: AmazonS3
Content-Length: 4133213
Date: Mon, 11 Dec 2023 08:52:09 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
142.250.74.136200 OK 61 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
IP 142.250.74.136:443
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (5261)
Hash df3c4b21816364619a1cfcb852a06942
4feddf84e292893205059d1fb53a31ab12677465
d44c7ae8172602ec1ae2ec31149c319dfe9f25a9dba5925d3fbd7abc66fa931f
GET /gtm.js?id=GTM-MLVPDTJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 08:52:09 GMT
expires: Mon, 11 Dec 2023 08:52:09 GMT
cache-control: private, max-age=900
last-modified: Mon, 11 Dec 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 61005
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/images/favicon.ico
95.101.10.34200 OK 4.1 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/images/favicon.ico
IP 95.101.10.34:443
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
- data
Hash 4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: IjvSRVcJlrA8KRtuHCIvySb7T9M4setamspkp4J4t5oLIH6qyzaHxu8PdVPZHXMCPnB1SRcSZOs=
x-amz-request-id: 9B7689322D7626CA
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
X-Akamai-EW-Subworker: 8096267
Date: Mon, 11 Dec 2023 08:52:09 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
52.17.88.125200 OK 13 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
IP 52.17.88.125:443
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type C source, ASCII text, with very long lines (44942)
Hash 1af44b73d9eb32d4145b57ade2636853
9ce05cc34b5ff2d9e9f891446c9ad018cd1ca7d6
e4abdcb8e34459d4260f63f69fc58c4f512a2d47fddf61c97a422b9e4046f753
GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Cookie: unique_id=6576cdb800054246; unique_id2=6576cdb8000548ef; 6576cdb8000548ef_sl=[277417]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:52:09 GMT
content-type: application/javascript
expires: Mon, 18 Dec 2023 08:52:09 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.0.2/firebase-app.js
142.250.74.35200 OK 8.6 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-app.js
IP 142.250.74.35:443
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (25088)
Hash 9164d0e8a317eceb870cca88c9683127
4617c910005f7100b4ff26a458a8b4463e33cdc6
15c9bd66992ef54979c981763cae280f28b6845520020ed38b5ab5f3f70f7931
GET /firebasejs/5.0.2/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 8604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 23:22:10 GMT
expires: Fri, 06 Dec 2024 23:22:10 GMT
cache-control: public, max-age=31536000
age: 293399
last-modified: Thu, 10 May 2018 20:35:51 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.mysexymatches.com/js/pushjs/1.0.0/utils.js
52.17.88.125200 OK 3.4 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/utils.js
IP 52.17.88.125:443
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type C source, ASCII text, with very long lines (7071), with no line terminators
Hash 711c7ecda710a342d24faef1dec76ede
d1b38489603a2aecc2be5edb4fa4cd8d442fe727
41a5e34d6777a471d63211252ce51555815b728949dc81cec01414f4ffdb98eb
GET /js/pushjs/1.0.0/utils.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Cookie: unique_id=6576cdb800054246; unique_id2=6576cdb8000548ef; 6576cdb8000548ef_sl=[277417]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:52:09 GMT
content-type: application/javascript
expires: Mon, 18 Dec 2023 08:52:09 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=110247753
95.211.229.247200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=110247753
IP 95.211.229.247:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=110247753 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 08:52:09 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.pemsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1790907485
95.211.229.247200 OK 20 B URL GET HTTP/1.1 s.pemsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1790907485
IP 95.211.229.247:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint40:E8:94:FF:56:F9:C8:1A:71:42:46:90:F1:80:43:D0:63:BB:7B:54
ValidityThu, 05 Oct 2023 15:33:19 GMT - Wed, 03 Jan 2024 15:33:18 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1790907485 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 08:52:09 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.zlinkd.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=546230605
95.211.229.247200 OK 20 B URL GET HTTP/1.1 s.zlinkd.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=546230605
IP 95.211.229.247:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subjectzlinkd.com
FingerprintC8:FB:68:B1:33:12:3C:36:71:BF:84:18:E9:3D:AD:E1:D3:69:AC:13
ValidityThu, 05 Oct 2023 15:39:08 GMT - Wed, 03 Jan 2024 15:39:07 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=546230605 HTTP/1.1
Host: s.zlinkd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 08:52:09 GMT; path=/; domain=.zlinkd.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.orbsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=971121512
95.211.229.247200 OK 20 B URL GET HTTP/1.1 s.orbsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=971121512
IP 95.211.229.247:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subjectorbsrv.com
FingerprintC1:06:45:A2:28:F1:95:0E:76:B9:25:AE:56:75:E5:60:63:2E:D3:34
ValidityThu, 05 Oct 2023 15:32:45 GMT - Wed, 03 Jan 2024 15:32:44 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=971121512 HTTP/1.1
Host: s.orbsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 08:52:09 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
94.130.141.49200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP 94.130.141.49:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:52:09 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 36cce40da6137f13
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Tue, 10 Dec 2024 08:52:09 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
94.130.141.49200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP 94.130.141.49:443
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:52:09 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 2
x-request-id: 2099068fdc069634
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Tue, 10 Dec 2024 08:52:09 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
52.17.88.125200 OK 4.4 kB URL User Request GET HTTP/2 www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
IP 52.17.88.125:443
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 text, with very long lines (4514), with no line terminators
Hash 9986c261cda38e9297010c6c39fb6945
68c664a98ba75c5c3a69db2f5030adb4ebac0430
c20e60ad52397d8a4de932fb4963a88664870bcfff7dc4e2b766f131ae8a9b8c
GET /c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677 HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:52:08 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6576cdb800054246; Path=/; Expires=Fri, 09 Feb 2024 08:52:08 GMT; Secure; SameSite=None
unique_id2=6576cdb8000548ef; Path=/; Expires=Sun, 10 Mar 2024 08:52:08 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Mon, 11 Dec 2023 08:52:08 GMT; Secure; SameSite=None
6576cdb8000548ef_sl=[277417]; Path=/; Expires=Mon, 25 Dec 2023 08:52:08 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
142.250.74.35200 OK 36 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
IP 142.250.74.35:443
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (35547)
Hash 0cb7a0eb328ea70ab360f861314c8820
e3e20eb50dae36f4cbcef1890b1cc7878acb537a
4569845f7c550a55311814032e88541bd3b4a055ec3894e9cf58c4fff1be91d9
GET /firebasejs/5.0.2/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:59:55 GMT
expires: Fri, 06 Dec 2024 15:59:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 10 May 2018 20:35:52 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 319934
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=496066322
95.211.229.247200 OK 0 B URL GET HTTP/1.1 syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=496066322
IP 95.211.229.247:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=5710373&s4=112677
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint8D:40:F0:75:CC:6E:55:85:E3:CD:04:C6:BF:F5:9F:81:74:ED:C3:24
ValidityThu, 05 Oct 2023 15:23:51 GMT - Wed, 03 Jan 2024 15:23:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=496066322 HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 08:52:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 08:52:09 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip