forwoobatan.com/zone?&pub=0&zone_id=4470214&is_mobile=false&domain=forwoobatan.com&var=3744083-887628016-0&ymid=%24170228043310000TUSTV418068771934Vd3&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
0 B URL forwoobatan.com/zone?&pub=0&zone_id=4470214&is_mobile=false&domain=forwoobatan.com&var=3744083-887628016-0&ymid=%24170228043310000TUSTV418068771934Vd3&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=4470214&is_mobile=false&domain=forwoobatan.com&var=3744083-887628016-0&ymid=%24170228043310000TUSTV418068771934Vd3&var_3=&var_4=&dsig=&tg=1&sw=3.1.471&action=prerequest HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://forwoobatan.com
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228043310000TUSTV418068771934Vd3&z=3744083-887628016-0
Cookie: reverse=A4jz46A_t_pICJfR7V9UPjGbBIZ__SYqmAogdNxYpxw; OAID=3c9cafb818c3ad5935c1a666f92abdc6; oaidts=1702280452
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:53 GMT
content-length: 0
x-trace-id: fb6bfa374feb524b9bdd89b032ee7a2a
access-control-allow-origin: https://forwoobatan.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=3c9cafb818c3ad5935c1a666f92abdc6
65 B URL my.rtmark.net/gid.js?userId=3c9cafb818c3ad5935c1a666f92abdc6
IP
Hash d159a75088168a131eac4fa77fbc973f
0fdf5f8655d3e13fbb3fae9111c7e0718b47c9e3
444184720798ddaef5ac1ffcf5716d38d7dbc1d4c0218e32ae8240dcab4f82eb
GET /gid.js?userId=3c9cafb818c3ad5935c1a666f92abdc6 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forwoobatan.com/
Origin: https://forwoobatan.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:53 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://forwoobatan.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=3c9cafb818c3ad5935c1a666f92abdc6; expires=Tue, 10 Dec 2024 07:40:53 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
forwoobatan.com/rhd?rb=wWgP5y1kvbey3Usvd_jeCshWTcDMLO98OnuX-YzoKkHIMq-b0K5IDZY85onlqzibt3NPnZWXrf6hnl-hYqBPW7Z0Bax7j8Sm_WimgPk0RcRbP__6GAYrrv9phzdWGvvdfR1n5aAANSCPs8_BQQhKKpMEg5gRtDA1XbnmXwb4dEIa7SGs6foE1F7xfUy4pBa2I1YuzxqTtmGA1NX2PVPV5T3r_OcOHJBlJBdsftwahIfJeI4vzU9WoIumUdTTb0W6O1wC5Du53QmkBJHFEr8UFrnZ8X4qMHML2eeTCZMl77ksxSgde84CyxI3UvYyOhU4k16UIgvYEit2wsY8Drwo3v1efJH9nbJnHj8CncCMrP97SjDQy3sVI7cOZLyEeTqAd0xBF-uxmPevZav8qFJE36MtVwm73g6b&request_ab2=0&zoneid=4470223&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fforwoobatan.com%2F%3Fl%3D02GYUEFO3sEAauR%26s%3D%24170228043310000TUSTV418068771934Vd3%26z%3D3744083-887628016-0&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=3744083-887628016-0&var3=%24170228043310000TUSTV418068771934Vd3&ymid=&rhd=1&m=link
1.6 kB URL forwoobatan.com/rhd?rb=wWgP5y1kvbey3Usvd_jeCshWTcDMLO98OnuX-YzoKkHIMq-b0K5IDZY85onlqzibt3NPnZWXrf6hnl-hYqBPW7Z0Bax7j8Sm_WimgPk0RcRbP__6GAYrrv9phzdWGvvdfR1n5aAANSCPs8_BQQhKKpMEg5gRtDA1XbnmXwb4dEIa7SGs6foE1F7xfUy4pBa2I1YuzxqTtmGA1NX2PVPV5T3r_OcOHJBlJBdsftwahIfJeI4vzU9WoIumUdTTb0W6O1wC5Du53QmkBJHFEr8UFrnZ8X4qMHML2eeTCZMl77ksxSgde84CyxI3UvYyOhU4k16UIgvYEit2wsY8Drwo3v1efJH9nbJnHj8CncCMrP97SjDQy3sVI7cOZLyEeTqAd0xBF-uxmPevZav8qFJE36MtVwm73g6b&request_ab2=0&zoneid=4470223&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fforwoobatan.com%2F%3Fl%3D02GYUEFO3sEAauR%26s%3D%24170228043310000TUSTV418068771934Vd3%26z%3D3744083-887628016-0&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=3744083-887628016-0&var3=%24170228043310000TUSTV418068771934Vd3&ymid=&rhd=1&m=link
IP
File type JSON data
- , ASCII text, with very long lines (2114), with no line terminators
Hash 30c54daaa16a4f491b5e8fcf61656fef
ed66d170e513c38679ad08550cb7adacc2b8c20c
4e6745882736f0047cc8a0285433821c6ca96a89c40e400baff3080732d850d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rhd?rb=wWgP5y1kvbey3Usvd_jeCshWTcDMLO98OnuX-YzoKkHIMq-b0K5IDZY85onlqzibt3NPnZWXrf6hnl-hYqBPW7Z0Bax7j8Sm_WimgPk0RcRbP__6GAYrrv9phzdWGvvdfR1n5aAANSCPs8_BQQhKKpMEg5gRtDA1XbnmXwb4dEIa7SGs6foE1F7xfUy4pBa2I1YuzxqTtmGA1NX2PVPV5T3r_OcOHJBlJBdsftwahIfJeI4vzU9WoIumUdTTb0W6O1wC5Du53QmkBJHFEr8UFrnZ8X4qMHML2eeTCZMl77ksxSgde84CyxI3UvYyOhU4k16UIgvYEit2wsY8Drwo3v1efJH9nbJnHj8CncCMrP97SjDQy3sVI7cOZLyEeTqAd0xBF-uxmPevZav8qFJE36MtVwm73g6b&request_ab2=0&zoneid=4470223&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fforwoobatan.com%2F%3Fl%3D02GYUEFO3sEAauR%26s%3D%24170228043310000TUSTV418068771934Vd3%26z%3D3744083-887628016-0&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&var=3744083-887628016-0&var3=%24170228043310000TUSTV418068771934Vd3&ymid=&rhd=1&m=link HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228043310000TUSTV418068771934Vd3&z=3744083-887628016-0
DNT: 1
Connection: keep-alive
Cookie: reverse=A4jz46A_t_pICJfR7V9UPjGbBIZ__SYqmAogdNxYpxw; OAID=3c9cafb818c3ad5935c1a666f92abdc6; oaidts=1702280452; prefetchAd_4470223=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:53 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 4571fb797c33b0518782566e5d866a12
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=3c9cafb818c3ad5935c1a666f92abdc6; expires=Tue, 10 Dec 2024 07:40:53 GMT; path=/; secure; SameSite=None
oaidts=1702280452; expires=Tue, 10 Dec 2024 07:40:53 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
forwoobatan.com/cat.php?userId=3c9cafb818c3ad5935c1a666f92abdc6&zoneid=4470223&rb=wWgP5y1kvbey3Usvd_jeCshWTcDMLO98OnuX-YzoKkHIMq-b0K5IDZY85onlqzibt3NPnZWXrf6hnl-hYqBPW7Z0Bax7j8Sm_WimgPk0RcRbP__6GAYrrv9phzdWGvvdfR1n5aAANSCPs8_BQQhKKpMEg5gRtDA1XbnmXwb4dEIa7SGs6foE1F7xfUy4pBa2I1YuzxqTtmGA1NX2PVPV5T3r_OcOHJBlJBdsftwahIfJeI4vzU9WoIumUdTTb0W6O1wC5Du53QmkBJHFEr8UFrnZ8X4qMHML2eeTCZMl77ksxSgde84CyxI3UvYyOhU4k16UIgvYEit2wsY8Drwo3v1efJH9nbJnHj8CncCMrP97SjDQy3sVI7cOZLyEeTqAd0xBF-uxmPevZav8qFJE36MtVwm73g6b&var=3744083-887628016-0&var3=%24170228043310000TUSTV418068771934Vd3&ymid=&rhd=1
0 B URL forwoobatan.com/cat.php?userId=3c9cafb818c3ad5935c1a666f92abdc6&zoneid=4470223&rb=wWgP5y1kvbey3Usvd_jeCshWTcDMLO98OnuX-YzoKkHIMq-b0K5IDZY85onlqzibt3NPnZWXrf6hnl-hYqBPW7Z0Bax7j8Sm_WimgPk0RcRbP__6GAYrrv9phzdWGvvdfR1n5aAANSCPs8_BQQhKKpMEg5gRtDA1XbnmXwb4dEIa7SGs6foE1F7xfUy4pBa2I1YuzxqTtmGA1NX2PVPV5T3r_OcOHJBlJBdsftwahIfJeI4vzU9WoIumUdTTb0W6O1wC5Du53QmkBJHFEr8UFrnZ8X4qMHML2eeTCZMl77ksxSgde84CyxI3UvYyOhU4k16UIgvYEit2wsY8Drwo3v1efJH9nbJnHj8CncCMrP97SjDQy3sVI7cOZLyEeTqAd0xBF-uxmPevZav8qFJE36MtVwm73g6b&var=3744083-887628016-0&var3=%24170228043310000TUSTV418068771934Vd3&ymid=&rhd=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /cat.php?userId=3c9cafb818c3ad5935c1a666f92abdc6&zoneid=4470223&rb=wWgP5y1kvbey3Usvd_jeCshWTcDMLO98OnuX-YzoKkHIMq-b0K5IDZY85onlqzibt3NPnZWXrf6hnl-hYqBPW7Z0Bax7j8Sm_WimgPk0RcRbP__6GAYrrv9phzdWGvvdfR1n5aAANSCPs8_BQQhKKpMEg5gRtDA1XbnmXwb4dEIa7SGs6foE1F7xfUy4pBa2I1YuzxqTtmGA1NX2PVPV5T3r_OcOHJBlJBdsftwahIfJeI4vzU9WoIumUdTTb0W6O1wC5Du53QmkBJHFEr8UFrnZ8X4qMHML2eeTCZMl77ksxSgde84CyxI3UvYyOhU4k16UIgvYEit2wsY8Drwo3v1efJH9nbJnHj8CncCMrP97SjDQy3sVI7cOZLyEeTqAd0xBF-uxmPevZav8qFJE36MtVwm73g6b&var=3744083-887628016-0&var3=%24170228043310000TUSTV418068771934Vd3&ymid=&rhd=1 HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1453
Origin: https://forwoobatan.com
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228043310000TUSTV418068771934Vd3&z=3744083-887628016-0
Cookie: reverse=A4jz46A_t_pICJfR7V9UPjGbBIZ__SYqmAogdNxYpxw; OAID=3c9cafb818c3ad5935c1a666f92abdc6; oaidts=1702280452; prefetchAd_4470223=true; syncedCookie=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:53 GMT
content-length: 0
x-trace-id: 136523dadca0e1de71c0f3f5ef39dbe1
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://forwoobatan.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/284223/1699540044/css/stylesheet.css?1699540044
200 OK 1.3 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/284223/1699540044/css/stylesheet.css?1699540044
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash 260257a046faeb456df116f6965f8f66
0e1c4319fafc127d339891a9342a992c08b1a504
88f54d9050f708aa221477873af7f071219e68995ee69ec6f47e8b1170f5752a
GET /landings/284223/1699540044/css/stylesheet.css?1699540044 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 5rpDhlt7UIkrVJzo9N73zjSOGMGo5B+1xiYw1yQ3ne3Ay4bZNjEOZVQ+x3hQlQ/QTJm447CTu5Q=
x-amz-request-id: JGXJQKXZ32YCJHJP
Last-Modified: Thu, 09 Nov 2023 14:27:26 GMT
ETag: "260257a046faeb456df116f6965f8f66"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Length: 1266
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/284223/1699540044/js/backoffer.js?1699540044
200 OK 430 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/284223/1699540044/js/backoffer.js?1699540044
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (430), with no line terminators
Hash 6d5aa83d23ce0b9f72d3b87d000d8fae
034fb8768eb58ffc0b5849e2c162989741a6cbec
89266112a6c823b9c03dd5a32d8f1c5e9f4cbf4cf876b56c825781ea389d0800
GET /landings/284223/1699540044/js/backoffer.js?1699540044 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 01U56i5129SJiNldTjsEmb0EwzBZb2X5UCv4Y41/GEYctWeoSmbVCwlcuFd+mnjHrvI9lOpNsxU=
x-amz-request-id: JGXQNZH5GFYYNBGY
Last-Modified: Thu, 09 Nov 2023 14:27:26 GMT
ETag: "6d5aa83d23ce0b9f72d3b87d000d8fae"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 430
Date: Mon, 11 Dec 2023 07:40:54 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/284223/1699540044/js/secondofferv2.js?1699540044
200 OK 454 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/284223/1699540044/js/secondofferv2.js?1699540044
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash 9bbe216b8e526fd98d219f2b91ccaa57
3f5d1be91ba58b6501c022155fe6778ce82b1663
1c83d2863f746a234e46c5578826ceeb8cbe126bc4c274ca679295441c44b948
GET /landings/284223/1699540044/js/secondofferv2.js?1699540044 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: rQlTXWmGUdU7l+xRIbZIqo8U7uYmOUl1lvQqNPHCr66IpD/aCFiJro7oVrKY/PBq5hClZJ/2wKM=
x-amz-request-id: JGXPC8Q4JKJZ2Z2B
Last-Modified: Thu, 09 Nov 2023 14:27:27 GMT
ETag: "9bbe216b8e526fd98d219f2b91ccaa57"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Length: 454
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/284223/1699540044/js/jquery.min.js?1699540044
200 OK 30 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/284223/1699540044/js/jquery.min.js?1699540044
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
GET /landings/284223/1699540044/js/jquery.min.js?1699540044 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 5G7x/NlU3wn4/DeC0gzYa3fD78dx9U61VA5Kd+JGgeRygjYtoGby1Oi9ozzA/pjlqGTplyK4sjw=
x-amz-request-id: PDSZNHJ8VJ3BN4MD
Last-Modified: Thu, 09 Nov 2023 14:27:27 GMT
ETag: "2f6b11a7e914718e0290410e85366fe9"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Length: 29855
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/284223/1699540044/js/MB_push_NEW.js?1699540044
200 OK 671 B URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/284223/1699540044/js/MB_push_NEW.js?1699540044
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 533a9cb9c41907529c3d603edb25d5d9
222bee472465971cf71bfa210d04136eb765ccc0
45d257677164ebc2c1fd4ff44b4ee5a1ce9c87682f165836a3e38113d1e09eaf
GET /landings/284223/1699540044/js/MB_push_NEW.js?1699540044 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: L7J1v/UcmxBsma76Y2CSBNJKTD/3l6kKpjMUbPLkCyEWLE0dYS9OttF9gUxIdtITSJzWGaMBUSg=
x-amz-request-id: JGXY2X0JGTVNREGH
Last-Modified: Thu, 09 Nov 2023 14:27:27 GMT
ETag: "533a9cb9c41907529c3d603edb25d5d9"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Content-Length: 671
Date: Mon, 11 Dec 2023 07:40:54 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/284223/1699540044/js/main.js?1699540044
200 OK 40 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/284223/1699540044/js/main.js?1699540044
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (568), with CRLF line terminators
Hash a0f4da40bd81c65d824afc106743d47f
55b2d4c57fdb017314f62ac2fe8a3e287dcadf7f
e40e7cc368c897d6a3a5095fae6ccd6d9a3f88af5ef9c590f79b9fd22293ad10
GET /landings/284223/1699540044/js/main.js?1699540044 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: FDnyJu4L1Lh/Nf/YkMr5AIQo0Qb9AYLsW2Qq+3EG3TWAZYKMEgB5c39nI9TBDBGHZlQwSj57ODY=
x-amz-request-id: JGXXKV9XZS923GG9
Last-Modified: Thu, 09 Nov 2023 14:27:27 GMT
ETag: "a0f4da40bd81c65d824afc106743d47f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Length: 40511
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/284223/1699540044/images/bg.webp
200 OK 1.2 MB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/284223/1699540044/images/bg.webp
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
- data
Size 1.2 MB (1178070 bytes)
Hash 2db91aaf8c7a603fcf2b770794a70efb
6fede62168030689b2e41ee4322547cbbe877215
9a017e2aebf3d10dc9188a3fcfe36b191b1b87ffdecf62608e3c3f43de41edce
GET /landings/284223/1699540044/images/bg.webp HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/284223/1699540044/css/stylesheet.css?1699540044
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 3Cci0aH7dZ2gOyAK8Q+UIo4ngQ3vXz9gpB0uGOaJtj9ld4SntGAxbOFaDs5D3/r/UJ9g3rYArSg=
x-amz-request-id: DCVX3G84SCBYAZ6Z
Last-Modified: Thu, 09 Nov 2023 14:27:26 GMT
ETag: "2db91aaf8c7a603fcf2b770794a70efb"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/webp
Server: AmazonS3
Content-Length: 1178070
Date: Mon, 11 Dec 2023 07:40:54 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
200 OK 61 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (5261)
Hash 039dcbd4509808d0f2ddf95f11376b35
387eeee0b2db8ba722631b168798f92883a6e642
86c5c140fb735bdce54b8efdfb882eadfbd594b37d896326d7e58a9c0f85ae67
GET /gtm.js?id=GTM-MLVPDTJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 11 Dec 2023 07:40:54 GMT
expires: Mon, 11 Dec 2023 07:40:54 GMT
cache-control: private, max-age=900
last-modified: Mon, 11 Dec 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 60993
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/images/favicon.ico
200 OK 4.1 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/images/favicon.ico
IP
ASN #20940 Akamai International B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
- data
Hash 4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI=
x-amz-request-id: 78F19547EBC3B810
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
Date: Mon, 11 Dec 2023 07:40:54 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
www.mysexymatches.com/js/pushjs/1.0.0/utils.js
200 OK 12 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/utils.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type C source, ASCII text, with very long lines (32159)
Hash 00738e907fd1a670838eb135e7a166b3
16d0d4c418cb7c569a0475cd6f945f5dbe972472
0bb28ad2467d16e13ce1dbb8d7303537a987dc4de1a3cfe6ad3ed2d5e494b109
GET /js/pushjs/1.0.0/utils.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Cookie: unique_id=6576bd05000ad993; unique_id2=6576bd05000ae26f; 6576bd05000ae26f_sl=[284223]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:54 GMT
content-type: application/javascript
expires: Mon, 18 Dec 2023 07:40:54 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
200 OK 10 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (35547)
Hash 0cb7a0eb328ea70ab360f861314c8820
e3e20eb50dae36f4cbcef1890b1cc7878acb537a
4569845f7c550a55311814032e88541bd3b4a055ec3894e9cf58c4fff1be91d9
GET /firebasejs/5.0.2/firebase-messaging.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 10017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 15:59:55 GMT
expires: Fri, 06 Dec 2024 15:59:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 10 May 2018 20:35:52 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 315659
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=90565748
200 OK 20 B URL GET HTTP/1.1 syndication.exdynsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=90565748
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subjectexdynsrv.com
Fingerprint8D:40:F0:75:CC:6E:55:85:E3:CD:04:C6:BF:F5:9F:81:74:ED:C3:24
ValidityThu, 05 Oct 2023 15:23:51 GMT - Wed, 03 Jan 2024 15:23:50 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=90565748 HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:40:54 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.orbsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1105993168
200 OK 20 B URL GET HTTP/1.1 s.orbsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1105993168
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subjectorbsrv.com
FingerprintC1:06:45:A2:28:F1:95:0E:76:B9:25:AE:56:75:E5:60:63:2E:D3:34
ValidityThu, 05 Oct 2023 15:32:45 GMT - Wed, 03 Jan 2024 15:32:44 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1105993168 HTTP/1.1
Host: s.orbsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:40:54 GMT; path=/; domain=.orbsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=414143227
200 OK 20 B URL GET HTTP/1.1 syndication.realsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=414143227
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subjectrealsrv.com
Fingerprint33:54:4D:F8:0E:E4:00:D3:20:90:CA:61:C8:CC:4D:D5:CB:BB:83:57
ValidityThu, 05 Oct 2023 15:34:07 GMT - Wed, 03 Jan 2024 15:34:06 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=414143227 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:40:54 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.pemsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1816019447
200 OK 20 B URL GET HTTP/1.1 s.pemsrv.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1816019447
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subjectpemsrv.com
Fingerprint40:E8:94:FF:56:F9:C8:1A:71:42:46:90:F1:80:43:D0:63:BB:7B:54
ValidityThu, 05 Oct 2023 15:33:19 GMT - Wed, 03 Jan 2024 15:33:18 GMT
File type gzip compressed data, max speed, from Unix
- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1816019447 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:40:54 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
200 OK 3.3 kB URL GET HTTP/2 www.mysexymatches.com/js/pushjs/1.0.0/subscriber.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type C source, ASCII text, with very long lines (9395), with no line terminators
Hash afa2727c308f061a0ff67c0c417abfe6
4276fe63351f1fabf9a8d5419dc3c68ea7e7ed44
e23549391406d4d731c64b32d8fe516ec9d6a65e45041d7e4d0b7d6e6a200610
GET /js/pushjs/1.0.0/subscriber.js HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Cookie: unique_id=6576bd05000ad993; unique_id2=6576bd05000ae26f; 6576bd05000ae26f_sl=[284223]
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:54 GMT
content-type: application/javascript
expires: Mon, 18 Dec 2023 07:40:54 GMT
cache-control: max-age=604800
content-encoding: gzip
X-Firefox-Spdy: h2
tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v2/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:54 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 2
x-request-id: d4b41613fba03adc
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Tue, 10 Dec 2024 07:40:54 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
200 OK 43 B URL GET HTTP/2 tsyndicate.com/api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
FingerprintF2:3C:80:FB:F4:C8:BF:02:DD:BF:23:DD:27:74:AB:0B:89:F6:13:5E
ValiditySun, 12 Nov 2023 09:06:58 GMT - Sat, 10 Feb 2024 09:06:57 GMT
File type GIF image data, version 89a, 1 x 1
- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/57bd9f77-0f27-4a59-a866-cfcb44429b1d HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:54 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 21a15948fbfb705f
set-cookie: ts_rt_57bd9f77-0f27-4a59-a866-cfcb44429b1d=AAMC; expires=Tue, 10 Dec 2024 07:40:54 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
s.zlinkd.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1494607429
200 OK 0 B URL GET HTTP/1.1 s.zlinkd.com/tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1494607429
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerLet's Encrypt
Subjectzlinkd.com
FingerprintC8:FB:68:B1:33:12:3C:36:71:BF:84:18:E9:3D:AD:E1:D3:69:AC:13
ValidityThu, 05 Oct 2023 15:39:08 GMT - Wed, 03 Jan 2024 15:39:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag.php?goal=bffb3c5e28d21c389b381a46bb5cd6e6>mcb=1494607429 HTTP/1.1
Host: s.zlinkd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 11 Dec 2023 07:40:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A71748%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-11%22%3B%7D%7D; expires=Tue, 10 Dec 2024 07:40:54 GMT; path=/; domain=.zlinkd.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
forwoobatan.com/submenu/4470223/?rhd=1&var=3744083-887628016-0&var3=$170228043310000TUSTV418068771934Vd3&oaid=3c9cafb818c3ad5935c1a666f92abdc6&os_version=10.0
0 B URL User Request GET forwoobatan.com/submenu/4470223/?rhd=1&var=3744083-887628016-0&var3=$170228043310000TUSTV418068771934Vd3&oaid=3c9cafb818c3ad5935c1a666f92abdc6&os_version=10.0
IP
Certificate IssuerLet's Encrypt
Subjectforwoobatan.com
FingerprintAA:D9:D3:74:95:D2:AC:29:79:D4:C2:8B:8A:19:73:6C:AA:6F:74:1F
ValidityMon, 13 Nov 2023 09:43:15 GMT - Sun, 11 Feb 2024 09:43:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /submenu/4470223/?rhd=1&var=3744083-887628016-0&var3=$170228043310000TUSTV418068771934Vd3&oaid=3c9cafb818c3ad5935c1a666f92abdc6&os_version=10.0 HTTP/1.1
Host: forwoobatan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forwoobatan.com/?l=02GYUEFO3sEAauR&s=$170228043310000TUSTV418068771934Vd3&z=3744083-887628016-0
Cookie: reverse=A4jz46A_t_pICJfR7V9UPjGbBIZ__SYqmAogdNxYpxw; OAID=3c9cafb818c3ad5935c1a666f92abdc6; oaidts=1702280452; prefetchAd_4470223=true; syncedCookie=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
200 OK 4.6 kB URL User Request GET HTTP/2 www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
IP
Certificate IssuerLet's Encrypt
Subject*.mysexymatches.com
Fingerprint67:52:3B:F3:25:97:2B:AA:95:60:38:17:DF:9B:38:1F:C4:EE:83:C2
ValidityMon, 16 Oct 2023 23:48:14 GMT - Sun, 14 Jan 2024 23:48:13 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 text, with very long lines (4691), with no line terminators
Hash 91911431c0c627b45501806ccd824ced
5a9fe3a82263e5d5f5d40fc53904824f91be0fb6
d59a356483617d31b11f4af161d73275e7213f788abf1d8b837a971491a40357
GET /c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6 HTTP/1.1
Host: www.mysexymatches.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 07:40:53 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6576bd05000ad993; Path=/; Expires=Fri, 09 Feb 2024 07:40:53 GMT; Secure; SameSite=None
unique_id2=6576bd05000ae26f; Path=/; Expires=Sun, 10 Mar 2024 07:40:53 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Mon, 11 Dec 2023 07:40:53 GMT; Secure; SameSite=None
6576bd05000ae26f_sl=[284223]; Path=/; Expires=Mon, 25 Dec 2023 07:40:53 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/5.0.2/firebase-app.js
200 OK 25 kB URL GET HTTP/2 www.gstatic.com/firebasejs/5.0.2/firebase-app.js
IP
Requested by https://www.mysexymatches.com/c/9fa1e2ea536c4871?s1=181_6420036_cfa_web_NO_pop&s2=16086902&s3=4470223&s4=0&os_version=10.0&oaid=3c9cafb818c3ad5935c1a666f92abdc6
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT
File type ASCII text, with very long lines (25088)
Hash 9164d0e8a317eceb870cca88c9683127
4617c910005f7100b4ff26a458a8b4463e33cdc6
15c9bd66992ef54979c981763cae280f28b6845520020ed38b5ab5f3f70f7931
GET /firebasejs/5.0.2/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mysexymatches.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 8604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 07 Dec 2023 23:22:10 GMT
expires: Fri, 06 Dec 2024 23:22:10 GMT
cache-control: public, max-age=31536000
age: 289124
last-modified: Thu, 10 May 2018 20:35:51 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
139.45.197.163
95.211.229.246
116.202.244.171
23.36.76.194
52.17.88.125
142.250.74.35
0.0.0.0
0.0.0.0