vidozon.com/
81.171.28.46200 OK 467 B IP 81.171.28.46:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (467), with no line terminators
Hash c39325161367d3ddb118f053f7f2f625
c65f8a92f604f6268db6981de256fe5aaf13a2fc
c0b1cd201cdd9f868e1992bc5766b9b84f46fbba9538ce12237b8442e7371203
GET / HTTP/1.1
Host: vidozon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 467
content-type: text/html; charset=utf-8
date: Thu, 08 Sep 2022 03:20:11 GMT
server: nginx
set-cookie: sid=2639bdfe-2f25-11ed-ac8a-67346a64cb41; path=/; domain=.vidozon.com; expires=Tue, 26 Sep 2090 06:34:19 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11125
Expires: Thu, 08 Sep 2022 06:25:37 GMT
Date: Thu, 08 Sep 2022 03:20:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 03:05:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EvYDf4J2tfpY-4Y_VpCH5qWPx9xMMf9TFeUaZT_agFwx697B3_0HLQ==
Age: 902
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.35200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.35:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 07 Sep 2022 05:03:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pONsoe7rIvs0MhcuoQjv4c24fbF1VYGoU_PRn6ZTIdtjdWMtiSmiFA==
age: 84818
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
vidozon.com/favicon.ico
81.171.28.46404 Not Found 9 B IP 81.171.28.46:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: vidozon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vidozon.com/
Cookie: sid=2639bdfe-2f25-11ed-ac8a-67346a64cb41
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Thu, 08 Sep 2022 03:20:11 GMT
server: nginx
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 08 Sep 2022 02:38:18 GMT
Expires: Thu, 08 Sep 2022 03:03:02 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: F5Bpy0lAqZpTJwptNNX66m8RQsZs3eK-QpkvsnLKuYYfu2iP4cfjYQ==
Age: 2514
vidozon.com/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2MjYxNDQxMiwiaWF0IjoxNjYyNjA3MjEyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyczljOHNxZ2ZraWc5OWUxNTQyZzFxMDQiLCJuYmYiOjE2NjI2MDcyMTIsInRzIjoxNjYyNjA3MjEyMDAzNzA5fQ.Uy-tYQYcKyf7D4nWavnOmmY4tNNrU9cdLPD0DTj8DXg&sid=2639bdfe-2f25-11ed-ac8a-67346a64cb41
81.171.28.46302 Found 11 B URL HTTP/1.1 vidozon.com/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2MjYxNDQxMiwiaWF0IjoxNjYyNjA3MjEyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyczljOHNxZ2ZraWc5OWUxNTQyZzFxMDQiLCJuYmYiOjE2NjI2MDcyMTIsInRzIjoxNjYyNjA3MjEyMDAzNzA5fQ.Uy-tYQYcKyf7D4nWavnOmmY4tNNrU9cdLPD0DTj8DXg&sid=2639bdfe-2f25-11ed-ac8a-67346a64cb41
IP 81.171.28.46:0
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2MjYxNDQxMiwiaWF0IjoxNjYyNjA3MjEyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyczljOHNxZ2ZraWc5OWUxNTQyZzFxMDQiLCJuYmYiOjE2NjI2MDcyMTIsInRzIjoxNjYyNjA3MjEyMDAzNzA5fQ.Uy-tYQYcKyf7D4nWavnOmmY4tNNrU9cdLPD0DTj8DXg&sid=2639bdfe-2f25-11ed-ac8a-67346a64cb41 HTTP/1.1
Host: vidozon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vidozon.com/
Cookie: sid=2639bdfe-2f25-11ed-ac8a-67346a64cb41
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 08 Sep 2022 03:20:12 GMT
location: http://artax-evn.com/zcvisitor/268c7cb2-2f25-11ed-b08a-0a14d2dbf03f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
server: nginx
set-cookie: sid=2639bdfe-2f25-11ed-ac8a-67346a64cb41; path=/; domain=.vidozon.com; expires=Tue, 26 Sep 2090 06:34:20 GMT; max-age=2147483647; HttpOnly
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a81b0f5b5d11bf95fc176833b2f6e808
5b194aa5a8bf3a6b0d117ccfd0f487f6db0587b5
8f6ae83f2b85db7174bbbc6553e2921617b5c8a401315e76082682949a0bd9cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2635
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 03:20:13 GMT
Last-Modified: Thu, 08 Sep 2022 02:36:18 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471
artax-evn.com/zcvisitor/268c7cb2-2f25-11ed-b08a-0a14d2dbf03f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
34.194.66.161200 996 B URL HTTP/1.1 artax-evn.com/zcvisitor/268c7cb2-2f25-11ed-b08a-0a14d2dbf03f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
IP 34.194.66.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5830eaec848c7208608f86a66083cb2d
b093baad7730ea20d234f7567dd5f9110eec4cef
355a84c2e1a718c01fbd7b78937c589fdf847c67e125f938e46d426115738957
Analyzer Verdict Alert fortinet Phishing
GET /zcvisitor/268c7cb2-2f25-11ed-b08a-0a14d2dbf03f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97 HTTP/1.1
Host: artax-evn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://vidozon.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 08 Sep 2022 03:20:13 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: IZBHniFO
artax-evn.com/zcredirect?visitid=268c7cb2-2f25-11ed-b08a-0a14d2dbf03f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
34.194.66.161200 428 B URL HTTP/1.1 artax-evn.com/zcredirect?visitid=268c7cb2-2f25-11ed-b08a-0a14d2dbf03f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP 34.194.66.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 915f848aff99ce062210bd8e96c371b6
c7b461fce73f83db284ffca5c48064f0b309a24c
0e1d33e57ac9886c87234a353e1b882e00f03ca1a7b8ec8adc5faac74667e4d9
GET /zcredirect?visitid=268c7cb2-2f25-11ed-b08a-0a14d2dbf03f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: artax-evn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://artax-evn.com/zcvisitor/268c7cb2-2f25-11ed-b08a-0a14d2dbf03f/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 08 Sep 2022 03:20:13 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: ZZIxTDIb
push.services.mozilla.com/
35.163.147.190101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.163.147.190:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0Z3faoAmzRO17m1xO7oNeQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: s4znSO7gZShHs50ttL60SzKbItc=
artax-evn.com/favicon.ico
34.194.66.161404 653 B URL HTTP/1.1 artax-evn.com/favicon.ico
IP 34.194.66.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: artax-evn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://artax-evn.com/zcredirect?visitid=268c7cb2-2f25-11ed-b08a-0a14d2dbf03f&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Thu, 08 Sep 2022 03:20:13 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: ZZIxTDIb
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 237bff13842c51f832a7a8c602322a7d
c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3
c9bfb609f993f2d9316e54ee1c3151a80b654b4c0d9f51d1839ffde60490f5a2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:20:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 14:26:19 GMT
Expires: Mon, 12 Sep 2022 14:26:18 GMT
Etag: "c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3"
Cache-Control: max-age=384964,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74748c0d2baeb523-OSL
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 237bff13842c51f832a7a8c602322a7d
c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3
c9bfb609f993f2d9316e54ee1c3151a80b654b4c0d9f51d1839ffde60490f5a2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:20:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 14:26:19 GMT
Expires: Mon, 12 Sep 2022 14:26:18 GMT
Etag: "c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3"
Cache-Control: max-age=384963,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74748c0f9cf5b523-OSL
f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=uniform-tel-fj62w8y3h
35.186.250.143200 OK 3.5 kB URL HTTP/2 f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=uniform-tel-fj62w8y3h
IP 35.186.250.143:0
Hash 796e9e07330aaf137dec24334aebf9fc
de6eb08f59dcaecd98a10c059d98e0a7f962b902
ab5a584e680bfbb46faf7600da61bb6c860ae27a334d1ad9a2ccfddf1de34db9
GET /trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=uniform-tel-fj62w8y3h HTTP/1.1
Host: f5ac6e7aac.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://artax-evn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 03:20:13 GMT
content-type: text/html; charset=UTF-8
clickid: 65de7ffa-54e4-4ae2-9869-e2b12df9e5d0:36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2
set-cookie: cx_ntsl_i=99e42644-5c9f-4d97-aee1-a45590865b46; expires=Fri, 04 Sep 2037 03:20:13 GMT; Path=/
instal-cookie="2|1:0|10:1662607213|13:instal-cookie|124:eyIzMjQ0Njc1IjogIjY1ZGU3ZmZhLTU0ZTQtNGFlMi05ODY5LWUyYjEyZGY5ZTVkMDozNjExOWRiZTdlMzI1ZDViNGJhMGZmZjg0ZDZiNGU1YjdmYjBkOGMyIn0=|bc18550ddc3f84eacc6e6a7165a086a555b3c83d6db7ab973f53b646d716b909"; expires=Sat, 08 Oct 2022 03:20:13 GMT; Path=/; SameSite=None; secure
server: TornadoServer/4.3
etag: W/"d85c122209c3f242972c7f086b2c7073c300982f"
x-frame-options: SAMEORIGIN
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f5ac6e7aac.smapp.work/api/v1/click/confirm.js?data=gAAAAABjGV9tKQYVQJCSbChg1nZOndgbFZpi_sNSfw-uvVEl_thEnPZjkCOm3bLpI3lkSgFnF07lKJpfYFgZTTKGjcvar3grlL5P24Aryqo8U2w4KZUXceHvA50oJakIEO9z71j3dBqKY_yL03hP3Qvpi6dRLf_GuPf14h1EtnV71ax5nO5KUtAVO0V84QswoQJmU2w700mO16HvRkCme-va4pr25u6ESqspTK-Rnhf6hkoUyaVuaiej--5mc6wqAXv3rpNQJSTj1PKCO32yB6Mrdpilp5Oz058-4DsuIFl6kaS_-jE4j4obMNwZTZazEYDsCoHTM5Zgu2b7uIqC7V36mEz2M1niOOlu6mWVEkL8EjApOtqEwWCZ-YvF-jvl_kfifplEB0-V4_h8StdTy-iPSsr0E2NO-sdQUHv9_3mBK_oCzHrdnEMERkeILwcihKMM29tx_pn5z1GJj2Q5H0AoDxKfWAX8_tsd5eBxDs_BXKt8efuQ9DaV8r8CFGVmQiyWqw15Xss14n8MM-ctMKdFqG949yHvjx9kgjjgk_rNXUtUqpos78BY8S011q2nufwFanIJsyGTzK6rtUD5_03rehGfj5SDsNjF0lKUY2U8UdettPKbqzxFMm9eVa6FwqB3ujNSuwWGsNqgb6YPMrpdJxUh89vWJW2tk-OSidEhPutAKvO-IiD5TWmePEMgBcEu3O6gvH7mZsz91RR8yh7K735a2f3x8khCKIn6SL6TKEWW5cCgu_gqKVrXcqzAUh2Hhg0TBxRD2ykgn7lOIRG6Bx1Yn7yDaL94ScMyAmNy6YcCh8K1x0AlsxS_KzxqTtrOgy9jfTgKBa8vaQCbY3YPOLqLEB0JampM7Fuld4Jf_CHDuDl6SIFyfFl4Ro7ldpgmpOWKQ4mhcThoB7hUhW5FT0XmCYfltCJllWKSH-r63NFJ5y98STPQFDoPXN43nleNaV-ZEmXTFE2OEzoRtNZzcKFh_1HrYy4AAfUmOqkr5osMLf-Xq9PCyqoy2gJowHoObY88vZeV7ZRgk0-hISbQ_LUPnH5znQjn0dbbHnUwEjqCDcU7E3gCQK1ls0yscR7brVjtf0ZwghB30GOfuwqoPQcX1AE2EEpxmO4K4O8KIkkptmvTErLCB3maEXaqDJY32Z9_GwO7Qt21IJ0WrvavtS-JV7KvBKi2Yp3_wq6jdOgre0FzjFbe8BYm4sDfHi8LiWcD5OX8uAdeGwfZHPLoAVwQr97u6ULBJ_LWqufv6WWEpjwuOD0zo8BpaiCi0AZFJ4QRg6o3giL24vDOkB07GiodAvi9VIauOomYznObfEj3eO5C6pzpgAQWDNbdMXQbj2riPoonEoTjQ7Iv0mf3fqurSv0_mfI1EP-QCtfvZ74QgKqGZgkN5_fEegKqOwK_i3aQhux2Ru0m4L8qulqWxnJ8bXJ7I8fp-Jm9IyzouCvEkIBh7LzyUf3dMOpLFr6ub_wXr4OEW24jHnwvxQ4zGLcJa_bhB6OjfLMtVMmslKHZ2ijvPagHBpXXI_1bkFydQdD7jORdrEB15_RWpjdHmSFAd4AerS4u-LnmqMwI8M-HbiQoG3f0bnIexLvj36ex29MlcUwLzvvN9cMgAykMySFqSSI15aubFfHo-q7HmF-a__6hhNhZ5hAG-cBU3-vTl7D_0gw_yCW3VGWM6K03mw60wzRB_2imuapcqwZJmDVFo0VPmvH1W7m9fccBgJEMB7htfXLK93Z3nJD0fHPEO-3fOjzlDnyCfTCOnq5FtktCkB51Ew8pIAgDhDwzUny2_TXzduvsUJgqDRLpYbb9zh3zKLSnq9pNqT4j4zuztM8P4RysEV5d6M3rPhHXSooKUga9ZGcvDONoCmx_2M-VaTjiPowMQ7stV-i7hYp12jPyv1n_rvt9m0e1VMOSzfdCMpZnMh0scKR3Wt35OfgI8qW7BvEOpEBZJ8QUKuornIhJKb95f8VF27oekX2yIT9aA5R9nyS2zlm0Ov3HJZNoSL2t8UPbEs-G5usjReJCbrvef3WFuY1-j6V1TwVGHq8Z1SPq_nkeCTwuATOfrHbIecYV6_wBR7eJ9W2MS8IeupdpzoEZn4y8c-M_u9i6OV6Xt6DEVyLd-PhlOcJ6FwYrcEHtepBMIperr3PkrN-XkJEmG3KJu6L6dTaxfU_wk-izHPVSbInXVoCrY8C9WLsmIKu78mE-yNh499mY2lANXVqu42cn3zzBNMiHbMvtUYPPbre2uwzujNq2PSoPOimDgvsLhLKkkmkOMhJ1BpRZ-ev0rbn95faMZMQCsgeI1Qi573F7XGub24OhftYvaL1J0bzrf6QSeAsC_HMv4Eh2kGmzJZO8nhg6UaoqyO2DmkXeOUYJteoQOsDkS3-7k4MDCXCRQTN0b35NHZSWO3F1GNwyRUFPvBKEGcnvmhkf0Bf8E8T43tMl7L8CJENr2LKTHJ-51kOofSrs6budvTVfLNK5hVeU_39NAKbRWsYxtTmyxSDvB-MH
35.186.250.143200 OK 0 B URL HTTP/2 f5ac6e7aac.smapp.work/api/v1/click/confirm.js?data=gAAAAABjGV9tKQYVQJCSbChg1nZOndgbFZpi_sNSfw-uvVEl_thEnPZjkCOm3bLpI3lkSgFnF07lKJpfYFgZTTKGjcvar3grlL5P24Aryqo8U2w4KZUXceHvA50oJakIEO9z71j3dBqKY_yL03hP3Qvpi6dRLf_GuPf14h1EtnV71ax5nO5KUtAVO0V84QswoQJmU2w700mO16HvRkCme-va4pr25u6ESqspTK-Rnhf6hkoUyaVuaiej--5mc6wqAXv3rpNQJSTj1PKCO32yB6Mrdpilp5Oz058-4DsuIFl6kaS_-jE4j4obMNwZTZazEYDsCoHTM5Zgu2b7uIqC7V36mEz2M1niOOlu6mWVEkL8EjApOtqEwWCZ-YvF-jvl_kfifplEB0-V4_h8StdTy-iPSsr0E2NO-sdQUHv9_3mBK_oCzHrdnEMERkeILwcihKMM29tx_pn5z1GJj2Q5H0AoDxKfWAX8_tsd5eBxDs_BXKt8efuQ9DaV8r8CFGVmQiyWqw15Xss14n8MM-ctMKdFqG949yHvjx9kgjjgk_rNXUtUqpos78BY8S011q2nufwFanIJsyGTzK6rtUD5_03rehGfj5SDsNjF0lKUY2U8UdettPKbqzxFMm9eVa6FwqB3ujNSuwWGsNqgb6YPMrpdJxUh89vWJW2tk-OSidEhPutAKvO-IiD5TWmePEMgBcEu3O6gvH7mZsz91RR8yh7K735a2f3x8khCKIn6SL6TKEWW5cCgu_gqKVrXcqzAUh2Hhg0TBxRD2ykgn7lOIRG6Bx1Yn7yDaL94ScMyAmNy6YcCh8K1x0AlsxS_KzxqTtrOgy9jfTgKBa8vaQCbY3YPOLqLEB0JampM7Fuld4Jf_CHDuDl6SIFyfFl4Ro7ldpgmpOWKQ4mhcThoB7hUhW5FT0XmCYfltCJllWKSH-r63NFJ5y98STPQFDoPXN43nleNaV-ZEmXTFE2OEzoRtNZzcKFh_1HrYy4AAfUmOqkr5osMLf-Xq9PCyqoy2gJowHoObY88vZeV7ZRgk0-hISbQ_LUPnH5znQjn0dbbHnUwEjqCDcU7E3gCQK1ls0yscR7brVjtf0ZwghB30GOfuwqoPQcX1AE2EEpxmO4K4O8KIkkptmvTErLCB3maEXaqDJY32Z9_GwO7Qt21IJ0WrvavtS-JV7KvBKi2Yp3_wq6jdOgre0FzjFbe8BYm4sDfHi8LiWcD5OX8uAdeGwfZHPLoAVwQr97u6ULBJ_LWqufv6WWEpjwuOD0zo8BpaiCi0AZFJ4QRg6o3giL24vDOkB07GiodAvi9VIauOomYznObfEj3eO5C6pzpgAQWDNbdMXQbj2riPoonEoTjQ7Iv0mf3fqurSv0_mfI1EP-QCtfvZ74QgKqGZgkN5_fEegKqOwK_i3aQhux2Ru0m4L8qulqWxnJ8bXJ7I8fp-Jm9IyzouCvEkIBh7LzyUf3dMOpLFr6ub_wXr4OEW24jHnwvxQ4zGLcJa_bhB6OjfLMtVMmslKHZ2ijvPagHBpXXI_1bkFydQdD7jORdrEB15_RWpjdHmSFAd4AerS4u-LnmqMwI8M-HbiQoG3f0bnIexLvj36ex29MlcUwLzvvN9cMgAykMySFqSSI15aubFfHo-q7HmF-a__6hhNhZ5hAG-cBU3-vTl7D_0gw_yCW3VGWM6K03mw60wzRB_2imuapcqwZJmDVFo0VPmvH1W7m9fccBgJEMB7htfXLK93Z3nJD0fHPEO-3fOjzlDnyCfTCOnq5FtktCkB51Ew8pIAgDhDwzUny2_TXzduvsUJgqDRLpYbb9zh3zKLSnq9pNqT4j4zuztM8P4RysEV5d6M3rPhHXSooKUga9ZGcvDONoCmx_2M-VaTjiPowMQ7stV-i7hYp12jPyv1n_rvt9m0e1VMOSzfdCMpZnMh0scKR3Wt35OfgI8qW7BvEOpEBZJ8QUKuornIhJKb95f8VF27oekX2yIT9aA5R9nyS2zlm0Ov3HJZNoSL2t8UPbEs-G5usjReJCbrvef3WFuY1-j6V1TwVGHq8Z1SPq_nkeCTwuATOfrHbIecYV6_wBR7eJ9W2MS8IeupdpzoEZn4y8c-M_u9i6OV6Xt6DEVyLd-PhlOcJ6FwYrcEHtepBMIperr3PkrN-XkJEmG3KJu6L6dTaxfU_wk-izHPVSbInXVoCrY8C9WLsmIKu78mE-yNh499mY2lANXVqu42cn3zzBNMiHbMvtUYPPbre2uwzujNq2PSoPOimDgvsLhLKkkmkOMhJ1BpRZ-ev0rbn95faMZMQCsgeI1Qi573F7XGub24OhftYvaL1J0bzrf6QSeAsC_HMv4Eh2kGmzJZO8nhg6UaoqyO2DmkXeOUYJteoQOsDkS3-7k4MDCXCRQTN0b35NHZSWO3F1GNwyRUFPvBKEGcnvmhkf0Bf8E8T43tMl7L8CJENr2LKTHJ-51kOofSrs6budvTVfLNK5hVeU_39NAKbRWsYxtTmyxSDvB-MH
IP 35.186.250.143:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/click/confirm.js?data=gAAAAABjGV9tKQYVQJCSbChg1nZOndgbFZpi_sNSfw-uvVEl_thEnPZjkCOm3bLpI3lkSgFnF07lKJpfYFgZTTKGjcvar3grlL5P24Aryqo8U2w4KZUXceHvA50oJakIEO9z71j3dBqKY_yL03hP3Qvpi6dRLf_GuPf14h1EtnV71ax5nO5KUtAVO0V84QswoQJmU2w700mO16HvRkCme-va4pr25u6ESqspTK-Rnhf6hkoUyaVuaiej--5mc6wqAXv3rpNQJSTj1PKCO32yB6Mrdpilp5Oz058-4DsuIFl6kaS_-jE4j4obMNwZTZazEYDsCoHTM5Zgu2b7uIqC7V36mEz2M1niOOlu6mWVEkL8EjApOtqEwWCZ-YvF-jvl_kfifplEB0-V4_h8StdTy-iPSsr0E2NO-sdQUHv9_3mBK_oCzHrdnEMERkeILwcihKMM29tx_pn5z1GJj2Q5H0AoDxKfWAX8_tsd5eBxDs_BXKt8efuQ9DaV8r8CFGVmQiyWqw15Xss14n8MM-ctMKdFqG949yHvjx9kgjjgk_rNXUtUqpos78BY8S011q2nufwFanIJsyGTzK6rtUD5_03rehGfj5SDsNjF0lKUY2U8UdettPKbqzxFMm9eVa6FwqB3ujNSuwWGsNqgb6YPMrpdJxUh89vWJW2tk-OSidEhPutAKvO-IiD5TWmePEMgBcEu3O6gvH7mZsz91RR8yh7K735a2f3x8khCKIn6SL6TKEWW5cCgu_gqKVrXcqzAUh2Hhg0TBxRD2ykgn7lOIRG6Bx1Yn7yDaL94ScMyAmNy6YcCh8K1x0AlsxS_KzxqTtrOgy9jfTgKBa8vaQCbY3YPOLqLEB0JampM7Fuld4Jf_CHDuDl6SIFyfFl4Ro7ldpgmpOWKQ4mhcThoB7hUhW5FT0XmCYfltCJllWKSH-r63NFJ5y98STPQFDoPXN43nleNaV-ZEmXTFE2OEzoRtNZzcKFh_1HrYy4AAfUmOqkr5osMLf-Xq9PCyqoy2gJowHoObY88vZeV7ZRgk0-hISbQ_LUPnH5znQjn0dbbHnUwEjqCDcU7E3gCQK1ls0yscR7brVjtf0ZwghB30GOfuwqoPQcX1AE2EEpxmO4K4O8KIkkptmvTErLCB3maEXaqDJY32Z9_GwO7Qt21IJ0WrvavtS-JV7KvBKi2Yp3_wq6jdOgre0FzjFbe8BYm4sDfHi8LiWcD5OX8uAdeGwfZHPLoAVwQr97u6ULBJ_LWqufv6WWEpjwuOD0zo8BpaiCi0AZFJ4QRg6o3giL24vDOkB07GiodAvi9VIauOomYznObfEj3eO5C6pzpgAQWDNbdMXQbj2riPoonEoTjQ7Iv0mf3fqurSv0_mfI1EP-QCtfvZ74QgKqGZgkN5_fEegKqOwK_i3aQhux2Ru0m4L8qulqWxnJ8bXJ7I8fp-Jm9IyzouCvEkIBh7LzyUf3dMOpLFr6ub_wXr4OEW24jHnwvxQ4zGLcJa_bhB6OjfLMtVMmslKHZ2ijvPagHBpXXI_1bkFydQdD7jORdrEB15_RWpjdHmSFAd4AerS4u-LnmqMwI8M-HbiQoG3f0bnIexLvj36ex29MlcUwLzvvN9cMgAykMySFqSSI15aubFfHo-q7HmF-a__6hhNhZ5hAG-cBU3-vTl7D_0gw_yCW3VGWM6K03mw60wzRB_2imuapcqwZJmDVFo0VPmvH1W7m9fccBgJEMB7htfXLK93Z3nJD0fHPEO-3fOjzlDnyCfTCOnq5FtktCkB51Ew8pIAgDhDwzUny2_TXzduvsUJgqDRLpYbb9zh3zKLSnq9pNqT4j4zuztM8P4RysEV5d6M3rPhHXSooKUga9ZGcvDONoCmx_2M-VaTjiPowMQ7stV-i7hYp12jPyv1n_rvt9m0e1VMOSzfdCMpZnMh0scKR3Wt35OfgI8qW7BvEOpEBZJ8QUKuornIhJKb95f8VF27oekX2yIT9aA5R9nyS2zlm0Ov3HJZNoSL2t8UPbEs-G5usjReJCbrvef3WFuY1-j6V1TwVGHq8Z1SPq_nkeCTwuATOfrHbIecYV6_wBR7eJ9W2MS8IeupdpzoEZn4y8c-M_u9i6OV6Xt6DEVyLd-PhlOcJ6FwYrcEHtepBMIperr3PkrN-XkJEmG3KJu6L6dTaxfU_wk-izHPVSbInXVoCrY8C9WLsmIKu78mE-yNh499mY2lANXVqu42cn3zzBNMiHbMvtUYPPbre2uwzujNq2PSoPOimDgvsLhLKkkmkOMhJ1BpRZ-ev0rbn95faMZMQCsgeI1Qi573F7XGub24OhftYvaL1J0bzrf6QSeAsC_HMv4Eh2kGmzJZO8nhg6UaoqyO2DmkXeOUYJteoQOsDkS3-7k4MDCXCRQTN0b35NHZSWO3F1GNwyRUFPvBKEGcnvmhkf0Bf8E8T43tMl7L8CJENr2LKTHJ-51kOofSrs6budvTVfLNK5hVeU_39NAKbRWsYxtTmyxSDvB-MH HTTP/1.1
Host: f5ac6e7aac.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=uniform-tel-fj62w8y3h
Cookie: cx_ntsl_i=99e42644-5c9f-4d97-aee1-a45590865b46; instal-cookie="2|1:0|10:1662607213|13:instal-cookie|124:eyIzMjQ0Njc1IjogIjY1ZGU3ZmZhLTU0ZTQtNGFlMi05ODY5LWUyYjEyZGY5ZTVkMDozNjExOWRiZTdlMzI1ZDViNGJhMGZmZjg0ZDZiNGU1YjdmYjBkOGMyIn0=|bc18550ddc3f84eacc6e6a7165a086a555b3c83d6db7ab973f53b646d716b909"
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 03:20:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: TornadoServer/4.3
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
championtest.top/betting-survey.html?var=6100_3331&ymid=65de7ffa-54e4-4ae2-9869-e2b12df9e5d0:36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2&offer_id=2058&z=4654991
104.21.10.131200 OK 62 kB URL HTTP/2 championtest.top/betting-survey.html?var=6100_3331&ymid=65de7ffa-54e4-4ae2-9869-e2b12df9e5d0:36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2&offer_id=2058&z=4654991
IP 104.21.10.131:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1477)
Hash e89e9f08f0c740a720ab5987cd81685e
b33bbcc5eab9b029b6957ca06e1cb30fb71a929b
d46c411d6156e6d8e71fd7338404ec19219e5533d14be8c653beb7b2a5e33863
GET /betting-survey.html?var=6100_3331&ymid=65de7ffa-54e4-4ae2-9869-e2b12df9e5d0:36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2&offer_id=2058&z=4654991 HTTP/1.1
Host: championtest.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 03:20:14 GMT
content-type: text/html
last-modified: Mon, 05 Sep 2022 10:42:48 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lvms6hQRRwC4kHVgLI%2BpMz0BAFflVRhnR%2ByPtVVV6gTYPFSeWdOsHnHSL3R623WdKpZiILKnKwXCj5RXZr14lDE76HTKw2CM8E8%2BIgXIzTBdxKCqo0LgaUjMfJCCKdP%2F1v%2BT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74748c1139bdb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14660
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:20:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14660
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:20:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 977 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7e968bc2816d452716c667641f86b301
be8529dea99cfee3c312084da73a3689c93fbc58
0d8bfb8b058bb542910176362c190758d445c83355837b1e769f9ee129709c49
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14660
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:20:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14660
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:20:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 6.4 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash e0580aa5d5cb848a608973b775edf1af
810416bbd345dba8c13982aee26296ef2339580e
75237cc475c845dc446efa5f3c3af0d00b7557e11056e3b112a672430efc7249
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14660
Expires: Thu, 08 Sep 2022 07:24:34 GMT
Date: Thu, 08 Sep 2022 03:20:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f73ee4e91b38eaa36cadd4c437785f8
6ceea057f5ae50b9cef505da0a358e3d3b7d6a38
778d28e14b28c154843403470136d0efdcdd5e93e4b5aab784c12d4344e7af6f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11365
x-amzn-requestid: d50039cd-381c-4221-997e-9231d40ecfbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9V0EHEoAMFeag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f58-11cab61904bd14462cd13d0d;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Qhobt81rs5gqg8hcr1Su3J3MNFt4_gR2hLHkIl5xDDS1HF9g_3ecCg==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:40:35 GMT
age: 16779
etag: "6ceea057f5ae50b9cef505da0a358e3d3b7d6a38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cd778a615e9a4ca3a25119790398434
d6daca74fc85d39274b3c7536f34528bef93ae97
e6b5a7a525e314e09c30985b22da7c34806df09cbe98ad52b00dcbf93a0dc054
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7251
x-amzn-requestid: 26b2021a-4440-47ce-8dba-d971cae60cc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9bmHcmoAMF3Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f7d-5471edce7de2374c3b8af888;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: d3MrDEyDFDylQKyfxONQ12_7IBvRAg8o0rSZ64WNRGNvDHqQyDmqJA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:17:17 GMT
age: 18177
etag: "d6daca74fc85d39274b3c7536f34528bef93ae97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f922505178de0cea92eedcfda85a9f67
50f1459de01174e594e03e7df4dfaa8eb1798672
981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 05:10:03 GMT
age: 79811
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac432740-f715-4631-8d9b-61fac4b087e7.webp
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac432740-f715-4631-8d9b-61fac4b087e7.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01e14c4126a4b0a30490d585d3c19d03
9a94d18cc5e38e8a5bc7b0a3fa14bee324cd3ea5
01b50790fd29aae4ceeb07187d5580bdc9458dff27a352ec805bc271dd3f059e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac432740-f715-4631-8d9b-61fac4b087e7.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8118
x-amzn-requestid: 43bfa43f-d442-4cde-b048-04fa07c07f6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG_JDGGYIAMFo5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63191239-39a30db3780699665f535c87;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:50:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4fnY7VIIJOrZTPuAsITmOEpJY8IOsM--UIG6Mj8Q16aZbjRz260Igw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:12:47 GMT
age: 18447
etag: "9a94d18cc5e38e8a5bc7b0a3fa14bee324cd3ea5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c16db0-fc0c-4dde-ae07-9586e9adb562.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c16db0-fc0c-4dde-ae07-9586e9adb562.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f691eddbd9502201c90f81568f4f63fc
6ed123d7a797b7eb52a34e87c79aa8562bede4e1
6d2b6ff8acdc63829050d68084997737ac8cbbe52aba6189ab8908f7dcb800b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08c16db0-fc0c-4dde-ae07-9586e9adb562.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9255
x-amzn-requestid: f4092ba2-d141-44cf-8e0e-a4ee46b397ad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThFAeoAMFUPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-4ee1ceb30135f4e1763e98b9;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: tu-GbziQ9EiVPYqgRQACTqz4AziuY6YICQwMD6Rnk1dnvDKSRYCdIQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:52:01 GMT
age: 19693
etag: "6ed123d7a797b7eb52a34e87c79aa8562bede4e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F703333f6-0141-4f21-97c4-c72f35090252.webp
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F703333f6-0141-4f21-97c4-c72f35090252.webp
IP 34.120.237.76:0
Hash cd25b78320c9d13fc0557e1d161e1d9e
d66b2f4992d0039bae9e19939cc4a1d498a3c529
146a89bedb3d6fe86e94fe058aa35d46eb673badf4aeedea0a8a8814448dfa49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F703333f6-0141-4f21-97c4-c72f35090252.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4570
x-amzn-requestid: c8acc548-6455-4951-9ca0-245a1c3bdf8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9VYGwEoAMFaQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f55-58f59c61714ed9761d39c8b4;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UiG7UKRQy_MGckOpAsfoV4PUZZ2o8ko7Q6hqeYlzo5XS0874Cf2gxQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:02:08 GMT
age: 19086
etag: "b469f24dbfe01ee68650ef1b0abd6badb83e3325"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2a0e9741d62cddc906aa6774bd07b574
c87b4d25a0235e5bf2851f3c70183f5581c2eec0
1db37c3975e15a04ef5f784d8fedf873981de09b0008deb077c64d66e6ca3763
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DB37C3975E15A04EF5F784D8FEDF873981DE09B0008DEB077C64D66E6CA3763"
Last-Modified: Wed, 07 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18007
Expires: Thu, 08 Sep 2022 08:20:21 GMT
Date: Thu, 08 Sep 2022 03:20:14 GMT
Connection: keep-alive
itcleffaom.com/track?offer_id=2058&z=4654991&request_var=6100_3331&variable2=65de7ffa-54e4-4ae2-9869-e2b12df9e5d0:36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2
139.45.197.237200 OK 172 B URL HTTP/2 itcleffaom.com/track?offer_id=2058&z=4654991&request_var=6100_3331&variable2=65de7ffa-54e4-4ae2-9869-e2b12df9e5d0:36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2
IP 139.45.197.237:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 50314323500d9ee0272c5050a614d81d
985bc5748fcced09b6ef3ebe77ca0a2e48bade9c
7bd4dc5adbd0ec3174b56cfae707590360164d0e898809b4db1e19b4e219349b
GET /track?offer_id=2058&z=4654991&request_var=6100_3331&variable2=65de7ffa-54e4-4ae2-9869-e2b12df9e5d0:36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:14 GMT
content-type: application/json
content-length: 172
x-trace-id: 154461e7012048e47e3408cc4bdb025c
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 912f9a32166cf6d4e458969545df501d
6cecdd7246361b80f2464910ba31ee1f4381ee7d
58d632863a6aab3b308ad380f47595e74120f4495f48e83e89647e4f42533fa3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:20:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 06:25:21 GMT
Expires: Mon, 12 Sep 2022 06:25:20 GMT
Etag: "6cecdd7246361b80f2464910ba31ee1f4381ee7d"
Cache-Control: max-age=356105,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74748c14afa1b523-OSL
my.rtmark.net/gid.js
139.45.195.8200 OK 65 B IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 3fddb84dde17ef747382e893f82af606
8a9f3aadfe2ddb9196b2a1c3fd6df495c01dcd77
671138bf1e062dee142bf5b36f8279d7a6de55a8310baf0416c71db4c5551600
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:15 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://championtest.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a97dfb1dc6b242548e5b6a0802f24f1d; expires=Fri, 08 Sep 2023 03:20:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 839e6dd30ce415388e8a7885c02b25bf
02f60af655353872690a5ef9a108930a15a10e8c
e960d1423612eff7e2ec54faa58ce069c124086ce133494390bbe8c42d80d840
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E960D1423612EFF7E2EC54FAA58CE069C124086CE133494390BBE8C42D80D840"
Last-Modified: Wed, 07 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19066
Expires: Thu, 08 Sep 2022 08:38:01 GMT
Date: Thu, 08 Sep 2022 03:20:15 GMT
Connection: keep-alive
my.rtmark.net/gid.js?pub=0&userId=&zoneId=4843164&checkDuplicate=true&ymid=6100_3331&var=4654991
139.45.195.8200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=&zoneId=4843164&checkDuplicate=true&ymid=6100_3331&var=4654991
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 3fddb84dde17ef747382e893f82af606
8a9f3aadfe2ddb9196b2a1c3fd6df495c01dcd77
671138bf1e062dee142bf5b36f8279d7a6de55a8310baf0416c71db4c5551600
GET /gid.js?pub=0&userId=&zoneId=4843164&checkDuplicate=true&ymid=6100_3331&var=4654991 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Cookie: ID=a97dfb1dc6b242548e5b6a0802f24f1d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:15 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://championtest.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a97dfb1dc6b242548e5b6a0802f24f1d; expires=Fri, 08 Sep 2023 03:20:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ugyplysh.com/zone?&pub=0&zone_id=4843164&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_3331&var_3=null&dsig=&action=prerequest
139.45.197.253200 OK 0 B URL HTTP/2 ugyplysh.com/zone?&pub=0&zone_id=4843164&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_3331&var_3=null&dsig=&action=prerequest
IP 139.45.197.253:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4843164&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_3331&var_3=null&dsig=&action=prerequest HTTP/1.1
Host: ugyplysh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:09 GMT
content-length: 0
x-trace-id: 65d007f00d92d865ec496a0015be7fba
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 46e0ef2c7a7fb5459e18cfb5591e6991
017bd07fc9ec1fca306b36bb50ffb29759a4cfa1
c3a3cf93bfc7f216b67639a98e6b70df150e1e36acf6002d289d270b3275fe3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C3A3CF93BFC7F216B67639A98E6B70DF150E1E36ACF6002D289D270B3275FE3E"
Last-Modified: Tue, 06 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3026
Expires: Thu, 08 Sep 2022 04:10:41 GMT
Date: Thu, 08 Sep 2022 03:20:15 GMT
Connection: keep-alive
itcleffaom.com/rotate?zz=4326382&var=4654991&ymid=6100_3331&uid=a97dfb1dc6b242548e5b6a0802f24f1d
139.45.197.237200 OK 673 B URL HTTP/2 itcleffaom.com/rotate?zz=4326382&var=4654991&ymid=6100_3331&uid=a97dfb1dc6b242548e5b6a0802f24f1d
IP 139.45.197.237:0
File type JSON data\012- , ASCII text, with very long lines (673), with no line terminators
Hash 1a603990d54f5024405e006976f012c3
9763cfb03304d4c59a09c4f9b2a40cccc282d8a0
0e8b3e859ba8100de6c101deff53e1a5702988d21c9dc8cd8c3b817ddf153f49
GET /rotate?zz=4326382&var=4654991&ymid=6100_3331&uid=a97dfb1dc6b242548e5b6a0802f24f1d HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:15 GMT
content-type: application/javascript
content-length: 673
x-trace-id: 0337560d116973cc2254cfeaa35b064a
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://championtest.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=a97dfb1dc6b242548e5b6a0802f24f1d; expires=Fri, 08 Sep 2023 03:20:15 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 38f9bd6a96fb952ef59d81d542f47b43
ac1a74005a6a21ab196099ea67a345e58471789a
e664827b025fd61d8cdf3cbd1593fc79c5b089e64a84385a95cef09e1cb35e61
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 03:20:15 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 11 Sep 2022 23:52:34 GMT
ETag: "ac1a74005a6a21ab196099ea67a345e58471789a"
Last-Modified: Wed, 07 Sep 2022 23:52:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1372
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74748c17097eb524-OSL
ugyplysh.com/zone?&pub=0&zone_id=4843164&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_3331&var_3=null&dsig=&action=settings
139.45.197.253200 OK 735 B URL HTTP/2 ugyplysh.com/zone?&pub=0&zone_id=4843164&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_3331&var_3=null&dsig=&action=settings
IP 139.45.197.253:0
File type JSON data\012- , ASCII text, with very long lines (734)
Hash bed12c30167e51769501cf255ab5378c
4fbb1fb62d5426329487c50085b7fb7e352f819a
189800a7543d0c5ae5b0d63a530be373e4eda7ae488414b6194d9ed24001db58
GET /zone?&pub=0&zone_id=4843164&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_3331&var_3=null&dsig=&action=settings HTTP/1.1
Host: ugyplysh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:15 GMT
content-type: application/json; charset=utf-8
content-length: 735
x-trace-id: cf4b12ad0a584d67079081219a51766c
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
139.45.197.152200 OK 11 kB URL HTTP/2 pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
IP 139.45.197.152:0
File type PNG image data, 140 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash 0fb5a0eccfe6fe27747ca4a84abb1c9b
f83ae7f2c746872a9ba9da626928946e3b6de28d
70eba3a4b499c4ffe4a8e62461c1b8581a9dd904f14b5742b48632dbebdd30a6
GET /contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png HTTP/1.1
Host: pulsersurvey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 03:20:15 GMT
content-type: image/png
content-length: 10580
last-modified: Thu, 21 Jan 2021 09:10:34 GMT
etag: "6009450a-2954"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
93.158.134.119200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 93.158.134.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (674)
Hash f948ad97d8bcc64c1eee91e4e703f3f5
b5c35b5c139ddec32fe96bf89863fcf0845262bf
0d2dc3bdec9010c5375ac3fab62d3f33c2a3f961c6c974f2c0da8d584ed441e1
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 72380
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: *
etag: "63186565-11abc"
expires: Thu, 08 Sep 2022 04:20:15 GMT
last-modified: Wed, 07 Sep 2022 12:33:25 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: *
etag: "63186565-2b"
expires: Thu, 08 Sep 2022 04:20:15 GMT
accept-ranges: bytes
last-modified: Wed, 07 Sep 2022 12:33:25 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A291%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607208%3Ac%3A1%3Arn%3A674286626%3Arqn%3A1%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Ads%3A0%2C0%2C62%2C0%2C%2C0%2C%2C89%2C3%2C%2C%2C%2C296%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607208%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A291%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607208%3Ac%3A1%3Arn%3A674286626%3Arqn%3A1%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Ads%3A0%2C0%2C62%2C0%2C%2C0%2C%2C89%2C3%2C%2C%2C%2C296%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607208%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 16fc1898239815bc064e90cd30e9d186
58769cf0d624014e79001c2dd62e64134d8e5838
d5c6be0301dc1ced79883d33caa71d605c947015be04f66162eaabba05ba2d9b
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A291%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607208%3Ac%3A1%3Arn%3A674286626%3Arqn%3A1%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Ads%3A0%2C0%2C62%2C0%2C%2C0%2C%2C89%2C3%2C%2C%2C%2C296%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607208%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afp%3A291%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607208%3Ac%3A1%3Arn%3A674286626%3Arqn%3A1%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Ads%3A0%2C0%2C62%2C0%2C%2C0%2C%2C89%2C3%2C%2C%2C%2C296%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607208%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
set-cookie: yandexuid=5538147171662607215; Expires=Fri, 08-Sep-2023 03:20:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5538147171662607215; Expires=Fri, 08-Sep-2023 03:20:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2030787671662607215; Path=/; SameSite=None; Secure
i=Ji4SDPqp52Ho4XjkD6x6031E6pDf5XbJTty94OJUkylIpKARWRsjvmqDXhvHXXGbHFt3x38lG7GZ2V1TEGlDhLoQq74=; Expires=Sun, 05-Sep-2032 03:20:15 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1694143215.yrts.1662607215#1694143215.yrtsi.1662607215; Expires=Fri, 08-Sep-2023 03:20:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A940838782%3Arqn%3A2%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1139%2C1139%2C0%2C%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A940838782%3Arqn%3A2%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1139%2C1139%2C0%2C%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A940838782%3Arqn%3A2%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1139%2C1139%2C0%2C%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A803164727%3Arqn%3A3%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A803164727%3Arqn%3A3%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A803164727%3Arqn%3A3%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 77
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A852020957%3Arqn%3A4%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A852020957%3Arqn%3A4%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A852020957%3Arqn%3A4%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A254840592%3Arqn%3A6%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A254840592%3Arqn%3A6%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A254840592%3Arqn%3A6%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A677597657%3Arqn%3A5%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A677597657%3Arqn%3A5%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A677597657%3Arqn%3A5%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A718147432%3Arqn%3A7%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A718147432%3Arqn%3A7%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A718147432%3Arqn%3A7%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 190
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A315409928%3Arqn%3A8%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A315409928%3Arqn%3A8%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A315409928%3Arqn%3A8%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A590159404%3Arqn%3A9%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 kB URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A590159404%3Arqn%3A9%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
Hash 1d882d0357d3df09356b90d214eb2296
7e42a97545cf80108ebf710ee95d7a3d0c87d4b3
bd87654c55b4594d31cc01705e4dae98388b49e392483c5ae1f709d0d7c00a81
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_3331%26ymid%3D65de7ffa-54e4-4ae2-9869-e2b12df9e5d0%253A36119dbe7e325d5b4ba0fff84d6b4e5b7fb0d8c2%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_3331%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662607215_320f892dd6df7a00763be927a1f66aeeb050c5b5192fde1066fe819026394802&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A62hjjpdks93ktul5nsnaw%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A893%3Acn%3A1%3Adp%3A0%3Als%3A785496222185%3Ahid%3A74415627%3Az%3A0%3Ai%3A20220908032008%3Aet%3A1662607209%3Ac%3A1%3Arn%3A590159404%3Arqn%3A9%3Au%3A1662607208243520668%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662607207274%3Aco%3A0%3Awv%3A2%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662607209%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 08 Sep 2022 03:20:15 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 08-Sep-2022 03:20:15 GMT
last-modified: Thu, 08-Sep-2022 03:20:15 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjbGlja19pZCI6ICI2NWRlN2ZmYS01NGU0LTRhZTItOTg2OS1lMmIxMmRmOWU1ZDA6MzYxMTlkYmU3ZTMyNWQ1YjRiYTBmZmY4NGQ2YjRlNWI3ZmIwZDhjMiIsICJjb3VudHJ5IjogIk5PIn0=
142.250.74.80200 OK 0 B URL HTTP/2 storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjbGlja19pZCI6ICI2NWRlN2ZmYS01NGU0LTRhZTItOTg2OS1lMmIxMmRmOWU1ZDA6MzYxMTlkYmU3ZTMyNWQ1YjRiYTBmZmY4NGQ2YjRlNWI3ZmIwZDhjMiIsICJjb3VudHJ5IjogIk5PIn0=
IP 142.250.74.80:0
GET /tmp-static/instal-impressions/impressions.html?data=eyJjbGlja19pZCI6ICI2NWRlN2ZmYS01NGU0LTRhZTItOTg2OS1lMmIxMmRmOWU1ZDA6MzYxMTlkYmU3ZTMyNWQ1YjRiYTBmZmY4NGQ2YjRlNWI3ZmIwZDhjMiIsICJjb3VudHJ5IjogIk5PIn0= HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdteIBuSTyk0dI0B28e7MNsuJeL_pnmODF2VaFFOmbozMfcrsZ1Zxq0qdBe9YdljqkqBbCICiANKbN70eJ23-uCl-w
expires: Thu, 08 Sep 2022 04:20:14 GMT
date: Thu, 08 Sep 2022 03:20:14 GMT
cache-control: public, max-age=3600
last-modified: Mon, 10 Jun 2019 16:09:51 GMT
etag: "54f99c9e98a5b4f17b219e94417e6d2f"
x-goog-generation: 1560182991115409
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1357
content-type: text/html
x-goog-hash: crc32c=+7k9hA==, md5=VPmcnpiltPF7IZ6UQX5tLw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1357
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
172.67.160.61200 OK 0 B URL HTTP/2 cdntechone.com/stattag.js
IP 172.67.160.61:0
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 03:20:14 GMT
content-type: application/javascript
last-modified: Wed, 07 Sep 2022 19:38:54 GMT
etag: W/"6318f34e-a863"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5909
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2FMtEFlFitYlxxzdhZ2gAKcw0CVCYKmZ9EfJL7W%2FhfxIjPOMOjm7%2BM8UDnBy0unhXktz3pivTJ9IsH3Dh87qjrZdwMt5ru9K2NFI44dHDnbpQTLNkC1lnfxUsBTONF8%2BlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74748c14ce5bfab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2