www.upload.ee/download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar
0 B URL www.upload.ee/download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 05 May 2023 17:13:41 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
Location: https://www.upload.ee/download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar
www.upload.ee/download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar
485 B URL www.upload.ee/download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (485), with no line terminators
Hash ef8dc7cceca6bb0128eb0b3692136b85
2fdeb4a536a208e93f20caa7347e9fbf1cbd38a5
c9cb1b535e302d23d471c826805a4a966c7a9a0fedab72dad4f82fddecb9065a
GET /download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Fri, 05 May 2023 17:13:41 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 485
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
200 OK 9.0 kB URL User Request GET HTTP/1.1 www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
IP
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4526)
Hash 5e4ad4f94ee8010e5fe880fae743670b
f77dcac911647f8a9675434ce4a039e5cd83bdab
a04c69d655561f7c2d64e985f72ebf12e2ab2c11c27c2b9efa7b2b9417a6be37
GET /files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/download/13462391/efdea210667f1cd9d6ae/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 17:13:42 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 8961
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 05 May 2023 20:13:42 +0300
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
Set-Cookie: lng=eng; expires=Fri, 02-Jun-2023 17:13:42 GMT; path=/; domain=www.upload.ee; secure; httponly; SameSite=None
Content-Encoding: gzip
s7.addthis.com/js/250/addthis_widget.js?pub=uploadee
200 OK 116 kB URL GET HTTP/2 s7.addthis.com/js/250/addthis_widget.js?pub=uploadee
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert Inc
Subjectodc-addthis-prod-01.oracle.com
Fingerprint19:61:99:E9:2B:6A:F3:0B:0D:3E:EC:7F:34:87:11:4D:6A:F6:0A:DB
ValidityTue, 07 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (54602)
Size 116 kB (116325 bytes)
Hash ff4671f71c958029bbf6d9694284da70
7535744f2dbaf99902a54fc529e760b08a73f265
123f781673b2e45e18df36b64984674f489a5f3541c69e295f01f554b8d3c738
GET /js/250/addthis_widget.js?pub=uploadee HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116325
date: Fri, 05 May 2023 17:13:42 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.upload.ee/static/ubr__style.css
200 OK 2.9 kB URL GET HTTP/1.1 www.upload.ee/static/ubr__style.css
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (591), with CRLF line terminators
Hash 7b736ade714db0c4ee6dbd432b2b1367
98b85ea1586315cba25380eca3c9785820a23042
e3d11bbf89fb8f84070b6616e4f422eef0182dbf937f0398d0d2c779509b07a1
GET /static/ubr__style.css HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 17:13:42 GMT
Content-Type: text/css
Last-Modified: Fri, 04 Oct 2013 10:02:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
ETag: W/"524e9233-25a0"
Expires: Fri, 12 May 2023 17:13:42 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
www.upload.ee/js/js__file_upload.js
200 OK 27 kB URL GET HTTP/1.1 www.upload.ee/js/js__file_upload.js
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (1853)
Hash 617f6d5a2744bc8c02e3d2c67544bd68
f57c068257c8bc85644d3be1e845c36506cd4625
62a3bb4d9d2b5a55b6d821a75d7b155fac47def3c241e4f1215d17e022f02658
GET /js/js__file_upload.js HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 17:13:42 GMT
Content-Type: application/javascript
Content-Length: 27351
Last-Modified: Thu, 07 May 2020 19:13:28 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "5eb45dd8-6ad7"
Expires: Fri, 12 May 2023 17:13:42 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Accept-Ranges: bytes
www.upload.ee/images/arrow.gif
200 OK 59 B URL GET HTTP/1.1 www.upload.ee/images/arrow.gif
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 6 x 9\012- data
Hash 6675f814b94f13f91f1383707b250e36
31452650e8fce2095613a2010799bdb7548bdd51
061d01a0b85f948c6ec464870ecec4654c4bd2ff15cacda941bbbf16225ec411
GET /images/arrow.gif HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 17:13:42 GMT
Content-Type: image/gif
Content-Length: 59
Last-Modified: Sun, 14 Apr 2013 07:15:01 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "516a5775-3b"
Expires: Fri, 12 May 2023 17:13:42 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
www.upload.ee/images/dl_.png
200 OK 1.9 kB URL GET HTTP/1.1 www.upload.ee/images/dl_.png
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type PNG image data, 154 x 32, 8-bit colormap, non-interlaced\012- data
Hash f3e8f284a4e98cdb91b6abfc142d94a4
fa9e618c2f56bea752ddd7e45a372c5539dadda9
2f13919383f54ca21e5b87f5644df8a875b99815c821dcbbabea352d854c6882
GET /images/dl_.png HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 17:13:42 GMT
Content-Type: image/png
Content-Length: 1900
Last-Modified: Thu, 01 Dec 2016 09:37:27 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "583fef57-76c"
Expires: Fri, 12 May 2023 17:13:42 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash d0be3edc78458c6ea9a70b43dc284516
230c9dde6c0a3780f87e78ea73910fb63114c6a9
a9ffef661af505d408d8bb3bf7f81058d50fb99842470e13fde17cc5a24940b7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-6703115-1
200 OK 47 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-6703115-1
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint07:22:19:79:30:9E:4C:35:4E:21:BD:55:7D:44:2F:A9:71:9E:4C:AA
ValidityMon, 03 Apr 2023 08:16:11 GMT - Mon, 26 Jun 2023 08:16:10 GMT
File type ASCII text, with very long lines (2271)
Hash 54260d73b12a8aa4714092d68de36ff4
17799567d7bae203039981ed0b8b74e72024dd12
a935d7bec4413dc032402e623f0de2eb3e186a52731292d06034771f97a802d6
GET /gtag/js?id=UA-6703115-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 05 May 2023 17:13:42 GMT
expires: Fri, 05 May 2023 17:13:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46845
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 6a81c81d71df2ef804ec03072866332a
2b10628c1483396b5ce076cdac2faf9cd3d58688
39ee24c17a105a3bfd9dcc19654305cb1f0eb3073b38a40600ae6cc7b0360a43
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/static/btn/lg-share-en.gif
200 OK 596 B URL GET HTTP/2 s7.addthis.com/static/btn/lg-share-en.gif
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert Inc
Subjectodc-addthis-prod-01.oracle.com
Fingerprint19:61:99:E9:2B:6A:F3:0B:0D:3E:EC:7F:34:87:11:4D:6A:F6:0A:DB
ValidityTue, 07 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 125 x 16\012- data
Hash 212668d558dfda57c80995d818ad9d39
f5c7e2ed67eeba644dc220e8ba32956bcf413eb9
8d261abb1cdf02888b9a1f12cf9694e7ec7e93d7da3e8f20e2907af422327489
GET /static/btn/lg-share-en.gif HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: image/gif
content-length: 596
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-254"
timing-allow-origin: *
cache-control: public, max-age=86313600
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
date: Fri, 05 May 2023 17:13:42 GMT
x-host: s7.addthis.com
X-Firefox-Spdy: h2
www.upload.ee/favicon.ico
200 OK 1.2 kB URL GET HTTP/1.1 www.upload.ee/favicon.ico
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f299cf2e651c19e48d27900ced493ccb
c2d1086d517d7a26292e0d7b32da7c55b166c23b
115c8eb4840245f7aed0cb2a17fa7e91b86f79bb2f223a25af8cc533e1dedff1
GET /favicon.ico HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 05 May 2023 17:13:42 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Tue, 16 Dec 2008 17:17:25 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "4947e2a5-47e"
Expires: Fri, 12 May 2023 17:13:42 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
26 kB URL s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
Certificate IssuerDigiCert Inc
Subjectodc-addthis-prod-01.oracle.com
Fingerprint19:61:99:E9:2B:6A:F3:0B:0D:3E:EC:7F:34:87:11:4D:6A:F6:0A:DB
ValidityTue, 07 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Fri, 05 May 2023 17:13:42 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL GET HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert Inc
Subjectmoatads.com
Fingerprint85:67:EE:0A:71:3F:9F:25:93:ED:AC:9D:91:95:93:73:B0:D4:74:91
ValidityWed, 16 Nov 2022 00:00:00 GMT - Sat, 18 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: TYrAmp44ddThNKrHeBmfOrJOox8ItZdAJeP4Uj7Uut6T7Jvp1PpX/XFzXT0gU1oJH/SwK8Irisw=
x-amz-request-id: 598E0BAF9E725A50
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=6761
date: Fri, 05 May 2023 17:13:42 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 3d176666b6169736760093053960b2ea
7bfca7bcaef81628b8c59c815c87644aa6088fa5
c9d7196beb72a3eb5d01f5b7e66c5c51c1d309cd750740c56423f5406c9b09d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c
200 OK 80 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint07:22:19:79:30:9E:4C:35:4E:21:BD:55:7D:44:2F:A9:71:9E:4C:AA
ValidityMon, 03 Apr 2023 08:16:11 GMT - Mon, 26 Jun 2023 08:16:10 GMT
File type ASCII text, with very long lines (3288)
Hash d56e98d0b4ac7ddb183f9fd86d2dc213
e493598bee47999ce42a0a8f728cc57f3ba46361
91bb8c18fd55781ecfb273bb96399a95536c7d853957c1f8161ad37af21e8b5b
GET /gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.googletagmanager.com
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 05 May 2023 17:13:42 GMT
expires: Fri, 05 May 2023 17:13:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79581
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
v1.addthisedge.com/live/boost/uploadee/_ate.track.config_resp
200 OK 47 B URL GET HTTP/2 v1.addthisedge.com/live/boost/uploadee/_ate.track.config_resp
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert Inc
Subjectodc-addthis-prod-01.oracle.com
Fingerprint19:61:99:E9:2B:6A:F3:0B:0D:3E:EC:7F:34:87:11:4D:6A:F6:0A:DB
ValidityTue, 07 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 24c668b115f75423506f2ea21d1b49c2
14f956ddb2d9e8b072cd5f605c3f39526490b391
b542daef470a9730029174f975ce3ce236b3e58bf9183b11956acce994b13a16
GET /live/boost/uploadee/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 47
cache-control: public, max-age=34, s-maxage=86400
date: Fri, 05 May 2023 17:13:42 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 47 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint09:1D:A9:AE:08:E0:55:47:86:0B:F7:70:DB:E9:AC:C4:2F:DE:19:E7
ValidityMon, 03 Apr 2023 08:16:10 GMT - Mon, 26 Jun 2023 08:16:09 GMT
File type ASCII text, with very long lines (3605)
Hash 184100f8ad4a5544ec6d71bb343dc855
56b9e8a5f3ef50470ae1ed333437e8bd06d5dea2
0cad23817137783c28492654e5fd3400daa261487ed1747147056a033a94b308
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 05 May 2023 17:13:42 GMT
expires: Fri, 05 May 2023 17:13:42 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15899296152948011918
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 47208
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 3d176666b6169736760093053960b2ea
7bfca7bcaef81628b8c59c815c87644aa6088fa5
c9d7196beb72a3eb5d01f5b7e66c5c51c1d309cd750740c56423f5406c9b09d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
m.addthis.com/live/red_lojson/300lo.json?si=64553954fd4d9398&bkl=0&bl=1&pdt=75&sid=64553954fd4d9398&pub=uploadee&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.upload.ee&fp=files%2F13462391%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html%3Fmsg%3Dsess_error&fr=download%2F13462391%2Fefdea210667f1cd9d6ae%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=2&gen=100&chr=UTF-8&mk=upload%2Cfiles%2Cdownload%2Cfailid%2Chosting%2Cgaleriid%2Cgalleries%2Cvideo%2Cpilt%2Cimage%2Ctasuta%20upload%2Cupload%20clipboard%2Ceestimaine%20upload%2Cpiltide%20upload&colc=1683306836545&jsl=0&uvs=64553954a0b65263000&skipb=1&callback=addthis.cbs.jsonp__54143598385387590
200 OK 89 B URL GET HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=64553954fd4d9398&bkl=0&bl=1&pdt=75&sid=64553954fd4d9398&pub=uploadee&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.upload.ee&fp=files%2F13462391%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html%3Fmsg%3Dsess_error&fr=download%2F13462391%2Fefdea210667f1cd9d6ae%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=2&gen=100&chr=UTF-8&mk=upload%2Cfiles%2Cdownload%2Cfailid%2Chosting%2Cgaleriid%2Cgalleries%2Cvideo%2Cpilt%2Cimage%2Ctasuta%20upload%2Cupload%20clipboard%2Ceestimaine%20upload%2Cpiltide%20upload&colc=1683306836545&jsl=0&uvs=64553954a0b65263000&skipb=1&callback=addthis.cbs.jsonp__54143598385387590
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert Inc
Subjectodc-addthis-prod-01.oracle.com
Fingerprint19:61:99:E9:2B:6A:F3:0B:0D:3E:EC:7F:34:87:11:4D:6A:F6:0A:DB
ValidityTue, 07 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3513dfefbf2e0a18937892636769fa77
d419a289218324ba3cead8d77b23495ea8441fc3
ddd34ac434fd36dad7f81476b008f787f157df54d4207c162e26d498c4f7a608
GET /live/red_lojson/300lo.json?si=64553954fd4d9398&bkl=0&bl=1&pdt=75&sid=64553954fd4d9398&pub=uploadee&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=www.upload.ee&fp=files%2F13462391%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html%3Fmsg%3Dsess_error&fr=download%2F13462391%2Fefdea210667f1cd9d6ae%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=2&gen=100&chr=UTF-8&mk=upload%2Cfiles%2Cdownload%2Cfailid%2Chosting%2Cgaleriid%2Cgalleries%2Cvideo%2Cpilt%2Cimage%2Ctasuta%20upload%2Cupload%20clipboard%2Ceestimaine%20upload%2Cpiltide%20upload&colc=1683306836545&jsl=0&uvs=64553954a0b65263000&skipb=1&callback=addthis.cbs.jsonp__54143598385387590 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Fri, 05 May 2023 17:13:42 GMT
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202305020101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5364884771898146&plah=www.upload.ee
200 OK 122 kB URL GET HTTP/3 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202305020101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5364884771898146&plah=www.upload.ee
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint09:1D:A9:AE:08:E0:55:47:86:0B:F7:70:DB:E9:AC:C4:2F:DE:19:E7
ValidityMon, 03 Apr 2023 08:16:10 GMT - Mon, 26 Jun 2023 08:16:09 GMT
File type ASCII text, with very long lines (4452)
Size 122 kB (122150 bytes)
Hash 64dc0a1465a836684ffb15a1af3d15fc
d3ee732c04982573f1ed4b7dc9345c7d59063ef6
81a717aae887eccb8c73f2ff22feb02378356b6f3b406854a9b23dfce53c7305
GET /pagead/managed/js/adsense/m202305020101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-5364884771898146&plah=www.upload.ee HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: pagead2.googlesyndication.com
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 05 May 2023 17:13:42 GMT
expires: Fri, 05 May 2023 17:13:42 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 13930225341436840347
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 122150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 2299a57e78f486603696973d3057b5b2
7f86905e7f6ceab3f72dbc1eb0dfb8ba76bf982b
4ae8a931f038a41fd3ea47508d1380a8b536454fae3d0a2809ae4761b4572c45
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 848a36af403aafa13121cc6df2380042
dbc255bc3b7578cf528ccdf4719362a62d719d7c
8eaa469b9c975904205a27cef199b7d67f3c848cadd3f785cd964df1905d7c4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=www.upload.ee&callback=_gfp_s_&client=ca-pub-5364884771898146
200 OK 249 B URL GET HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.upload.ee&callback=_gfp_s_&client=ca-pub-5364884771898146
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.googleadservices.com
Fingerprint64:FB:54:D3:87:13:FF:E1:0B:82:AB:82:7D:DD:06:E3:5E:CB:77:C2
ValidityMon, 03 Apr 2023 08:21:53 GMT - Mon, 26 Jun 2023 08:21:52 GMT
File type ASCII text, with very long lines (385), with no line terminators
Hash 6a84cd3a9b1dd53016e75337ebe336a9
ade1455a6c65082b7258652d58fca46aeef71acc
ab448e700e736022fb95edbd208e64334f701da1384e3d05670dc1f3252854af
GET /gampad/cookie.js?domain=www.upload.ee&callback=_gfp_s_&client=ca-pub-5364884771898146 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 05 May 2023 17:13:42 GMT
server: cafe
cache-control: private
content-length: 249
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 68b77ec63fe91f583f015841dfa819a9
869b03bc9f14cec589147932c4823cc981cb95b3
9d580561bf9df39b22791848dd7309d5bd339ec13bc6b2f5222f1865e4249c84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=www.upload.ee
200 OK 100 B URL GET HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.upload.ee
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintA5:D0:38:67:8E:62:86:24:29:BC:82:07:2E:29:1E:0B:C8:29:09:29
ValidityMon, 03 Apr 2023 08:27:03 GMT - Mon, 26 Jun 2023 08:27:02 GMT
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.upload.ee HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 05 May 2023 17:13:42 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.upload.ee
200 OK 100 B URL GET HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.upload.ee
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintD5:3A:80:A6:03:B0:E4:36:0E:46:7B:36:45:CB:50:4C:D6:98:CE:59
ValidityMon, 03 Apr 2023 08:17:58 GMT - Mon, 26 Jun 2023 08:17:57 GMT
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.upload.ee HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 05 May 2023 17:13:42 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2299a57e78f486603696973d3057b5b2
7f86905e7f6ceab3f72dbc1eb0dfb8ba76bf982b
4ae8a931f038a41fd3ea47508d1380a8b536454fae3d0a2809ae4761b4572c45
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 68b77ec63fe91f583f015841dfa819a9
869b03bc9f14cec589147932c4823cc981cb95b3
9d580561bf9df39b22791848dd7309d5bd339ec13bc6b2f5222f1865e4249c84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 848a36af403aafa13121cc6df2380042
dbc255bc3b7578cf528ccdf4719362a62d719d7c
8eaa469b9c975904205a27cef199b7d67f3c848cadd3f785cd964df1905d7c4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230502&st=env
200 OK 11 kB URL GET HTTP/3 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230502&st=env
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint09:1D:A9:AE:08:E0:55:47:86:0B:F7:70:DB:E9:AC:C4:2F:DE:19:E7
ValidityMon, 03 Apr 2023 08:16:10 GMT - Mon, 26 Jun 2023 08:16:09 GMT
File type JSON data\012- , ASCII text, with very long lines (14601), with no line terminators
Hash 56b74de8ff173373fdfe5f2e53083e65
b594035a40119b113f895728a00a4d7bf9adb278
96421dca8340761f7219dfc8ceb8cf64e6352827c8a2b4e1afb3801632db45a8
GET /getconfig/sodar?sv=200&tid=gda&tv=r20230502&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.upload.ee
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Fri, 05 May 2023 17:13:43 GMT
server: cafe
content-length: 11019
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
serving.bepolite.eu/script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c&type=direct&page_id=3211501&screen_width=1280&screen_height=1024&os=Linux%20x86_64&refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F13462391%2Fefdea210667f1cd9d6ae%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar&pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F13462391%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html%3Fmsg%3Dsess_error&rnd=1683306836523
2.1 kB URL GET serving.bepolite.eu/script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c&type=direct&page_id=3211501&screen_width=1280&screen_height=1024&os=Linux%20x86_64&refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F13462391%2Fefdea210667f1cd9d6ae%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar&pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F13462391%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html%3Fmsg%3Dsess_error&rnd=1683306836523
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type ASCII text, with very long lines (394)
Hash 0025916cb617f3eb3fe3a4a98e223405
2b16921a6adcef56cbc39adda8742acc2ddc916c
40c574ad97cbc9dc8981cd3ec52db47c115bf7442b1debf28f90393c53fdbf60
GET /script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c&type=direct&page_id=3211501&screen_width=1280&screen_height=1024&os=Linux%20x86_64&refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F13462391%2Fefdea210667f1cd9d6ae%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar&pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F13462391%2FNeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html%3Fmsg%3Dsess_error&rnd=1683306836523 HTTP/1.1
Host: serving.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, must-revalidate, max-age=0
vary: accept-encoding
content-encoding: gzip
content-type: text/plain;charset=ISO-8859-1
date: Fri, 05 May 2023 17:11:33 GMT
set-cookie: bepolite_id=4bc13a02b912805b0573fc8a5c13108e; Max-Age=7776000; Expires=Thu, 03-Aug-2023 17:11:34 GMT; SameSite=None; Secure
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 1062852895
age: 0
via: 1.1 varnish (Varnish/6.2)
accept-ranges: bytes
content-length: 2142
server: lighttpd/1.4.64
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 01430c645e8c71dd4f04fb96dc760b61
8352202d8bb767f555b4c53c3c35113c7d9a1bc4
ee56f5e74ac30f22c9ec3f6bae12e221bee1ce3a73b9e6fe631d30e4bec45403
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL GET HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
FingerprintFA:BE:2D:1E:F9:2F:85:0D:1C:53:23:E1:8F:CB:37:95:4E:97:B5:6F
ValidityMon, 03 Apr 2023 08:24:19 GMT - Mon, 26 Jun 2023 08:24:18 GMT
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Fri, 05 May 2023 17:13:43 GMT
expires: Fri, 05 May 2023 17:13:43 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL GET HTTP/3 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint09:1D:A9:AE:08:E0:55:47:86:0B:F7:70:DB:E9:AC:C4:2F:DE:19:E7
ValidityMon, 03 Apr 2023 08:16:10 GMT - Mon, 26 Jun 2023 08:16:09 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 05 May 2023 16:55:32 GMT
expires: Sat, 04 May 2024 16:55:32 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
age: 1091
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.bepolite.eu/scripts/saresponsive.js
200 OK 175 kB URL GET HTTP/2 static.bepolite.eu/scripts/saresponsive.js
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type ASCII text, with very long lines (32077), with CRLF line terminators
Size 175 kB (174581 bytes)
Hash 5460c08214d99449b925ba6cba9044d4
61da313f0047e4ce6c97ad8b484f976ad51003ea
4ed2ec56f430465894d4a1f95c76f298d052084bffb775b3cb7685ad66c94c24
GET /scripts/saresponsive.js HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
etag: "1269848699"
last-modified: Mon, 30 Jan 2023 22:16:03 GMT
content-length: 174581
date: Fri, 05 May 2023 17:11:34 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88065538
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2932a8f375c99d1fc34763aa65bea618
bf6f728531407c127e5a20070b9f152298c27d96
48091cc281edd036605f387621b9caace37766c82bd9b0263c4113112f8dbf97
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 05 May 2023 17:13:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 511 B URL GET HTTP/2 www.google.com/recaptcha/api2/aframe
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintC3:7C:54:CD:86:09:A4:3E:2C:6D:EC:7C:FA:65:7B:3E:64:CB:10:E0
ValidityMon, 03 Apr 2023 08:25:07 GMT - Mon, 26 Jun 2023 08:25:06 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 47bab235ffb9d77590ba3fd75d1ddbc9
e0b1dd4eec4b5c4cb2b49dc76c87c930fab17a19
3f6ac0d35178d01fe428dcf1dfda82a206a7e40e7e74af78f85e80f9947f05dd
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 05 May 2023 17:13:43 GMT
date: Fri, 05 May 2023 17:13:43 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-eMX_JOJwQ_v_EheJfvSrqw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 511
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
200 OK 1.6 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f29ac48e8322b36fd0e26754455249ed
db0103d2b6cf2ccb11e153c832f6c6b60e161305
7efdf6df467ff7cf521663aac8826121c87f79a315d8c765257a87af4b532a09
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
accept-ranges: bytes
etag: "2197311789"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 1553
date: Fri, 05 May 2023 17:09:05 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88350772
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/bg/bm1_94Kb-kItKk9BUfYvqSgel0djyAicUnZvZLzBumQ.js
15 kB URL pagead2.googlesyndication.com/bg/bm1_94Kb-kItKk9BUfYvqSgel0djyAicUnZvZLzBumQ.js
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint09:1D:A9:AE:08:E0:55:47:86:0B:F7:70:DB:E9:AC:C4:2F:DE:19:E7
ValidityMon, 03 Apr 2023 08:16:10 GMT - Mon, 26 Jun 2023 08:16:09 GMT
File type ASCII text, with very long lines (37152)
Hash b7647d8ca5877da44ee283e2ddf267cc
008be2dbc94aa6315dc64b8d723bf5dfeee1eb80
cfb39d0fd4c9ada6d1cabadb87eed5496abaf2f6ca437f4a95947d3e2be4d15e
GET /bg/bm1_94Kb-kItKk9BUfYvqSgel0djyAicUnZvZLzBumQ.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: pagead2.googlesyndication.com
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14581
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 04 May 2023 03:34:42 GMT
expires: Fri, 03 May 2024 03:34:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 01 May 2023 14:28:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 135541
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.bepolite.eu/banners/d96bba7c-f16a-43fb-8617-85fc7fd893a0/EL2_1000x200px.jpg
200 OK 214 kB URL GET HTTP/2 static.bepolite.eu/banners/d96bba7c-f16a-43fb-8617-85fc7fd893a0/EL2_1000x200px.jpg
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x200, components 3\012- data
Size 214 kB (213512 bytes)
Hash 22aa7503802bccc1e8cb6a4e5eb1f1ae
672a4263aaf23058fa7003df00ff0f673db4e853
3c9c3a4922e5a3fc99ebe51f4dcedfeb05c2723b2cb9638899bfc3b57d50f563
GET /banners/d96bba7c-f16a-43fb-8617-85fc7fd893a0/EL2_1000x200px.jpg HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
accept-ranges: bytes
etag: "1596196724"
last-modified: Wed, 03 May 2023 07:31:59 GMT
content-length: 213512
date: Fri, 05 May 2023 17:08:37 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 89130640
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20230502&jk=1098989627336711&rc=
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20230502&jk=1098989627336711&rc=
IP
Requested by https://www.google.com/recaptcha/api2/aframe
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint09:1D:A9:AE:08:E0:55:47:86:0B:F7:70:DB:E9:AC:C4:2F:DE:19:E7
ValidityMon, 03 Apr 2023 08:16:10 GMT - Mon, 26 Jun 2023 08:16:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gda_r20230502&jk=1098989627336711&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: pagead2.googlesyndication.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 05 May 2023 17:13:43 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.bepolite.eu/files/close-gray.png
200 OK 1.5 kB URL GET HTTP/2 static.bepolite.eu/files/close-gray.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 41d9676ab94bece3f7a549b4769ddbe2
521f14490fc57fea51e2e5bf00e2299dce51561b
c2f89787bda82263fceb9ec11d398fa83a5f22abf248956df29bdee2987d2f34
GET /files/close-gray.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "801691811"
last-modified: Fri, 08 Apr 2022 18:07:56 GMT
content-length: 1497
date: Fri, 05 May 2023 17:11:34 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 62145565
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-0LibgrFSYpWVYNIhVuEZSNaH0VES_d6dcbnq_M3UdcAgtxGG1-Qn3GiZgDkt7598ba5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
200 OK 0 B URL GET HTTP/2 serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-0LibgrFSYpWVYNIhVuEZSNaH0VES_d6dcbnq_M3UdcAgtxGG1-Qn3GiZgDkt7598ba5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-0LibgrFSYpWVYNIhVuEZSNaH0VES_d6dcbnq_M3UdcAgtxGG1-Qn3GiZgDkt7598ba5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g HTTP/1.1
Host: serving.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Cookie: bepolite_id=4bc13a02b912805b0573fc8a5c13108e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Fri, 05 May 2023 17:09:05 GMT
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88713567
age: 0
via: 1.1 varnish (Varnish/6.2)
accept-ranges: bytes
server: lighttpd/1.4.64
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash b7e72c83c06756f82af4322ad70cd5b8
4e9ab134087610b559f2abebbd7d7e358de9351d
b657e06dc6397d65d002179422374c2198f5c2a1128eee977842b5886a6b17da
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 05 May 2023 17:13:43 GMT
Last-Modified: Fri, 05 May 2023 15:29:37 GMT
Server: ECAcc (dcb/7305)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hpeKjxGGyJhSKt_8WQNUbZRwMXCyZz1u6NsHKwb_N1DjEdKUM-FCYA==
Age: 6246
animate.adobe.com/runtime/6.0.0/edge.6.0.0.min.js
200 OK 34 kB URL GET HTTP/2 animate.adobe.com/runtime/6.0.0/edge.6.0.0.min.js
IP
ASN #20940 Akamai International B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerDigiCert Inc
Subject*.adobe.com
Fingerprint02:34:86:FC:43:9F:4B:35:C3:FC:67:0B:FF:3B:BC:BC:6E:5A:91:6A
ValidityMon, 10 Oct 2022 00:00:00 GMT - Wed, 11 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (561)
Hash 7abd3002a743d28c0c1bd98a64eda18c
cca936df62e2dcfbf790b0ab14ab279ac8e2c353
2d616c4a760ea77e76af1c7fe272a225abeed861b85db2f7f23efe8b7514e559
GET /runtime/6.0.0/edge.6.0.0.min.js HTTP/1.1
Host: animate.adobe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Apache
last-modified: Tue, 05 May 2015 12:17:26 GMT
accept-ranges: bytes
content-type: text/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=900
expires: Fri, 05 May 2023 17:28:43 GMT
date: Fri, 05 May 2023 17:13:43 GMT
content-length: 33737
X-Firefox-Spdy: h2
tpc.googlesyndication.com/generate_204?hZ4wOQ
0 B URL tpc.googlesyndication.com/generate_204?hZ4wOQ
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
FingerprintFA:BE:2D:1E:F9:2F:85:0D:1C:53:23:E1:8F:CB:37:95:4E:97:B5:6F
ValidityMon, 03 Apr 2023 08:24:19 GMT - Mon, 26 Jun 2023 08:24:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?hZ4wOQ HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: tpc.googlesyndication.com
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Fri, 05 May 2023 17:13:43 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px_edge.js
200 OK 9.0 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px_edge.js
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type ASCII text, with very long lines (8540), with CRLF line terminators
Hash 94b3e90bfe185292429cbe15faa8c13e
f2d05475d636e4be5e17c759b83fd469c82c3259
0b027534a60c89f117943c66e8dbae50742b4a86c94aed2c690ab0acb0e4cec4
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px_edge.js HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: object
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
etag: "2686945947"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 9033
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 63462361
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px_edge.js
200 OK 9.0 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px_edge.js
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type ASCII text, with very long lines (8540), with CRLF line terminators
Hash 94b3e90bfe185292429cbe15faa8c13e
f2d05475d636e4be5e17c759b83fd469c82c3259
0b027534a60c89f117943c66e8dbae50742b4a86c94aed2c690ab0acb0e4cec4
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px_edge.js HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
etag: "2686945947"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 9033
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88065565
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
banner.hookusbookus.com/config/config.js?v=1
200 OK 75 B URL GET HTTP/2 banner.hookusbookus.com/config/config.js?v=1
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
Hash ee16e21326dec006274a554647c4d759
8e4389c35e12ea6d1e4d7214c174fda343047865
5ccb649c18765165e7128191ea14ab53d8de87d6ad7eea29328b681d455d7a4f
GET /config/config.js?v=1 HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:43 GMT
content-type: application/javascript
content-length: 75
server: nginx/1.15.12
last-modified: Tue, 24 Jan 2023 14:19:47 GMT
etag: "63cfe903-4b"
accept-ranges: bytes
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/js/jquery.min.js
200 OK 40 kB URL GET HTTP/2 banner.hookusbookus.com/assets/js/jquery.min.js
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
Hash 2ae6c5d5797b7bc0818a93a81f3ed152
b33a635b0962f1a8c2855e85fde39b96296700ab
54fbbb9374893d4c7aaf37a3bb48b545bdc6bbc69c60051b479b191c181f6f0f
GET /assets/js/jquery.min.js HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:43 GMT
content-type: application/javascript
server: nginx/1.15.12
last-modified: Thu, 22 Apr 2021 07:20:15 GMT
vary: Accept-Encoding
etag: W/"608123af-15d84"
content-encoding: gzip
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_pilv.png
200 OK 2.0 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_pilv.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 416 x 193, 8-bit colormap, non-interlaced\012- data
Hash bea0fdc450f388a8b6797e4b8e32b6b8
38ef98568989bfade5b53b06d2377a08aa3cb268
f22fc5161b725645003464dab32c76210e1377f9a3ee103ed5b7e69fd5a3ca9e
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_pilv.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "2175952025"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 1955
date: Fri, 05 May 2023 17:08:38 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 89130646
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/css/index_1000x200.css
200 OK 6.4 kB URL GET HTTP/2 banner.hookusbookus.com/assets/css/index_1000x200.css
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
Hash 0a6bf2b012fe890738b3fefd0a0e17c9
950483d10e4db79a5b517ec530fe520b6f3c7715
58647d90101bdba0715b1c1fd9663878b7a500bfa4a5d0f281483d515e7e01d4
GET /assets/css/index_1000x200.css HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:43 GMT
content-type: text/css
server: nginx/1.15.12
last-modified: Fri, 17 Dec 2021 08:13:58 GMT
vary: Accept-Encoding
etag: W/"61bc46c6-1301"
content-encoding: gzip
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukemuts.png
200 OK 9.6 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukemuts.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 156 x 124, 8-bit colormap, non-interlaced\012- data
Hash 4c224a74d11b754caae384c45827efec
a0e744999978a9c95d758beab91e5a40f4c229cd
ab2ed3c051d656d36a8537cea5e623461854df0acd9851b6585bffd2ab83f830
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukemuts.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "2177348"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 9623
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88548969
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_tekstimull.png
200 OK 7.6 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_tekstimull.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 384 x 201, 8-bit colormap, non-interlaced\012- data
Hash 554ec5fe3b9f7def532e06848195b1db
590ff5d8135612f9189eef7eed45b178f4226cd2
d7c5467cf36c637a44c1c9d32d68663f6079e031b0a91565c7373b45bb8cd957
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_tekstimull.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "2194612034"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 7626
date: Fri, 05 May 2023 17:09:05 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 87900683
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
200 OK 3.7 kB URL GET HTTP/2 banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
Hash ace4e68844c74b99ee296e06724db8b4
c2c085a82bbc7f07cc0fa4531f95ca47f2fbd3e3
82317eb33c4b7012144b39b736ef3af2da5f7c96fa48f4ccb705f4a67d1c8dbf
GET /index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:43 GMT
content-type: text/html
server: nginx/1.15.12
last-modified: Tue, 24 Jan 2023 14:19:47 GMT
vary: Accept-Encoding
etag: W/"63cfe903-1781"
content-encoding: gzip
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_laim.png
200 OK 2.2 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_laim.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 73 x 76, 8-bit colormap, non-interlaced\012- data
Hash 3f94cfd811425b99bfe3de32fae2a553
433cb07d401fd9658d0665e9f9f93f86ab01ab2c
327f722ad2b89f9b635e25afd7f54d2da2d399bafc32a4c41351f50827c501d3
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_laim.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "3248541720"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 2188
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88320720
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kirss.png
200 OK 1.6 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kirss.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 76 x 83, 8-bit colormap, non-interlaced\012- data
Hash c523e6c947c03cd9e7d5ccf1113e3e17
98cb0979f8f04b3494e1028fbe5e043b31ce6bbb
08f82377fe2883b66a04517a8e189700cec45a4254df6b2f39f1e87b6da122b1
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kirss.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "6379332"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 1570
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 89130652
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_ingver.png
200 OK 1.7 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_ingver.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 88 x 81, 8-bit colormap, non-interlaced\012- data
Hash 7f0e71a037e3db03426e740cb0d013b3
b437fb036d1a0bbaacbaa83fc2151644106600e5
8b1bd2855b064c5df045f015532081edd409abdfbeff6e26f24e4500051ef4d5
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_ingver.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "4071854090"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 1671
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88320723
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_lecoq%2Bmarat.png
404 Not Found 341 B URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_lecoq%2Bmarat.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1ec31972ec65a65470d3b5d790c1f401
ff246ff3f34725545777856854cd50034c1eba55
664f2b1654c363a6348b688d5d475ed9ec0e7ef3c72f6f315f37fe97a2fe63eb
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_lecoq%2Bmarat.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
content-length: 341
date: Fri, 05 May 2023 17:09:05 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 63462364
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukes2rk.png
200 OK 16 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukes2rk.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 236 x 291, 8-bit colormap, non-interlaced\012- data
Hash 8bd00d314c612e5b7e7cf77ddf50216b
0fe6c2293dc5afc781c476439d131920031a7fa7
374702d0ffd5bcc12a29042129af7e580fdb931040e5b79e47334e4618eea6ea
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukes2rk.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "1553669869"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 16427
date: Fri, 05 May 2023 17:08:38 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 84797661
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kuketiib_vasak.png
200 OK 490 B URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kuketiib_vasak.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 61 x 76, 8-bit colormap, non-interlaced\012- data
Hash bb1e640de73a222b84e28de8f559d9f9
56f978c5e463afaad99afd84879d1d9e87ce658d
6f3631c57588d9418c807a35acbe5e1d2537014734bbd934b6f90fbb7dd34c58
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kuketiib_vasak.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "458846371"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 490
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 45180497
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kuketiib_parem.png
200 OK 488 B URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kuketiib_parem.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 61 x 76, 8-bit colormap, non-interlaced\012- data
Hash 9af697d2c8290476c649e6efd9a5de8b
d8ced2e431aebcd03fbde9988a80c19e88486195
d0624e3cc7f27c2b2e87b588050412d8f1384ce30e077074f2a52a431561c8cc
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kuketiib_parem.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "4166497192"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 488
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88548972
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/image/prices-bg-3.png
200 OK 2.4 kB URL GET HTTP/2 banner.hookusbookus.com/assets/image/prices-bg-3.png
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
File type PNG image data, 250 x 118, 8-bit/color RGBA, non-interlaced\012- data
Hash ef56eff9c1246b25c0088c156116ae05
21f5a8245443365c960a196d005277a3c5ef4709
be624625b85909d1b549672c0a13b167751f842e035c3156f1d5e4a1b677ce54
GET /assets/image/prices-bg-3.png HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/assets/css/index_1000x200.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:44 GMT
content-type: image/png
content-length: 2442
server: nginx/1.15.12
last-modified: Thu, 22 Apr 2021 07:20:15 GMT
etag: "608123af-98a"
accept-ranges: bytes
X-Firefox-Spdy: h2
banner-server.hookusbookus.com/package-feed?language=et_ee&utmSource=allmedia
200 OK 73 kB URL GET HTTP/2 banner-server.hookusbookus.com/package-feed?language=et_ee&utmSource=allmedia
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
Hash a1e7dd651bfa5bb6ec1e0f9d80b632cc
070d9c01ea3c08abdaf527807594b567d8f2b4c7
1e18b559c8495159cd9ca58382a7bcb4e484078c719c901519aa4523bc8bec56
GET /package-feed?language=et_ee&utmSource=allmedia HTTP/1.1
Host: banner-server.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.hookusbookus.com
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:44 GMT
content-type: application/json
access-control-allow-origin: https://banner.hookusbookus.com
access-control-allow-methods: POST, PUT, GET, PATCH, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: origin, authorization, accept, content-type, x-requested-with, Pragma, Cache-Control, If-Modified-Since, X-Auth-Token, X-Client-Certificate
access-control-allow-credentials: true
access-control-expose-headers: X-Auth-Token, Content-Disposition, Content-Length
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/fonts/greycliff-cf-regular.woff
200 OK 53 kB URL GET HTTP/2 banner.hookusbookus.com/assets/fonts/greycliff-cf-regular.woff
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
File type Web Open Font Format, TrueType, length 53104, version 1.500\012- data
Hash 4f5975fe17a8ca74963be0165ff6a443
4bca2ab6c3da2b6ae09602601adeac22e7a90381
5b8f98e0c93afef19bd64c3dea2a16d60dc1574e5a4a79b788ef03b9eb3c22df
GET /assets/fonts/greycliff-cf-regular.woff HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://banner.hookusbookus.com/assets/css/index_1000x200.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:44 GMT
content-type: font/woff
content-length: 53104
server: nginx/1.15.12
last-modified: Thu, 22 Apr 2021 07:20:15 GMT
etag: "608123af-cf70"
accept-ranges: bytes
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230502&jk=1098989627336711&bg=!7O-l77vNAAYV_mUANf47ADkAdvg8WqI_0TN8ofMD_QJDqGsAKdxPCmYIxLQROr5tBEoP0opr4ycPKLqnmnN24pR5bGulgI8MsBkCAAAA6lIAAAAEaAEHmQKIMJGQanaNfWs_CnDDkz_abDVej3XyL57-sVztdEgfIZpShDwDOafqLItikE4VAnF1b4H7SGZQ5H_e8yMZevwKg40ZJf9RNRVatcwE7jkPG5Kn8wG6qa5vveBkyM3tDeGCS0uO4dgryPGAjBm4AOwLiEMCs2LITzK0ue17Bt90hBO7H_naAUGjtr3w2SY1BolwPXUX_Xclj5eRTcGESIvQS09ERjgCxCe_sbI5xfteZz4ehV8mBloxKfMw_OWGPyK6tyt2IgMC-mE4PX4Pd1qDYg6WfBJOv_kLn3eELE1Q-dpZghdqbteN916yAb5h6pNNa5K9PPhtJr90re2kFyi6oj3kmnIm5yUq5p_bHqk0lgB2rVRCPyqsNpG36dr2Mq9sob2wk61KGRGwE5k1boKic2LsgTrHZSSR6IElLxz_5p1HnyesIrW-ZJSMcLTGFAZfFuhm8Y39mEnTG0qLCwnx4TK39aRPCi91fIKabPBN9YD9XBL09fFN1QvQwl_FkpTiaEO5WYkVzv_LDSz9Ec8MIfgnddy7VaaKEe3IWm0og8G3ZRuKOWwEI6J8tYkc8ll5N4yJt-qF-o48bvhM3kJGd49WAFv309R4ZcWiLM_soT9XQAPFg9_S4VVWCgIVx6CwGCljBeJ23Y5XtsmZTIA0dPGPO75YZN4nckRz2GH6TvnrTXVOJDaN6J9T1WBp5VHyzOsPow4xVkbeUk6vyggxMXQyLYVuXWB4rIBoCRZUzRxJXIdmpE_vCfZHssL3ajcK5BfLiqUma3uKBFWEQzOcjQkhkY7ZMPAaT9sREw5qx-799PhbzaCcMRAY6-ZudzK825mAJkQxrbPIsk4NCxkp5bBrbtqpy68V
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230502&jk=1098989627336711&bg=!7O-l77vNAAYV_mUANf47ADkAdvg8WqI_0TN8ofMD_QJDqGsAKdxPCmYIxLQROr5tBEoP0opr4ycPKLqnmnN24pR5bGulgI8MsBkCAAAA6lIAAAAEaAEHmQKIMJGQanaNfWs_CnDDkz_abDVej3XyL57-sVztdEgfIZpShDwDOafqLItikE4VAnF1b4H7SGZQ5H_e8yMZevwKg40ZJf9RNRVatcwE7jkPG5Kn8wG6qa5vveBkyM3tDeGCS0uO4dgryPGAjBm4AOwLiEMCs2LITzK0ue17Bt90hBO7H_naAUGjtr3w2SY1BolwPXUX_Xclj5eRTcGESIvQS09ERjgCxCe_sbI5xfteZz4ehV8mBloxKfMw_OWGPyK6tyt2IgMC-mE4PX4Pd1qDYg6WfBJOv_kLn3eELE1Q-dpZghdqbteN916yAb5h6pNNa5K9PPhtJr90re2kFyi6oj3kmnIm5yUq5p_bHqk0lgB2rVRCPyqsNpG36dr2Mq9sob2wk61KGRGwE5k1boKic2LsgTrHZSSR6IElLxz_5p1HnyesIrW-ZJSMcLTGFAZfFuhm8Y39mEnTG0qLCwnx4TK39aRPCi91fIKabPBN9YD9XBL09fFN1QvQwl_FkpTiaEO5WYkVzv_LDSz9Ec8MIfgnddy7VaaKEe3IWm0og8G3ZRuKOWwEI6J8tYkc8ll5N4yJt-qF-o48bvhM3kJGd49WAFv309R4ZcWiLM_soT9XQAPFg9_S4VVWCgIVx6CwGCljBeJ23Y5XtsmZTIA0dPGPO75YZN4nckRz2GH6TvnrTXVOJDaN6J9T1WBp5VHyzOsPow4xVkbeUk6vyggxMXQyLYVuXWB4rIBoCRZUzRxJXIdmpE_vCfZHssL3ajcK5BfLiqUma3uKBFWEQzOcjQkhkY7ZMPAaT9sREw5qx-799PhbzaCcMRAY6-ZudzK825mAJkQxrbPIsk4NCxkp5bBrbtqpy68V
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint09:1D:A9:AE:08:E0:55:47:86:0B:F7:70:DB:E9:AC:C4:2F:DE:19:E7
ValidityMon, 03 Apr 2023 08:16:10 GMT - Mon, 26 Jun 2023 08:16:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230502&jk=1098989627336711&bg=!7O-l77vNAAYV_mUANf47ADkAdvg8WqI_0TN8ofMD_QJDqGsAKdxPCmYIxLQROr5tBEoP0opr4ycPKLqnmnN24pR5bGulgI8MsBkCAAAA6lIAAAAEaAEHmQKIMJGQanaNfWs_CnDDkz_abDVej3XyL57-sVztdEgfIZpShDwDOafqLItikE4VAnF1b4H7SGZQ5H_e8yMZevwKg40ZJf9RNRVatcwE7jkPG5Kn8wG6qa5vveBkyM3tDeGCS0uO4dgryPGAjBm4AOwLiEMCs2LITzK0ue17Bt90hBO7H_naAUGjtr3w2SY1BolwPXUX_Xclj5eRTcGESIvQS09ERjgCxCe_sbI5xfteZz4ehV8mBloxKfMw_OWGPyK6tyt2IgMC-mE4PX4Pd1qDYg6WfBJOv_kLn3eELE1Q-dpZghdqbteN916yAb5h6pNNa5K9PPhtJr90re2kFyi6oj3kmnIm5yUq5p_bHqk0lgB2rVRCPyqsNpG36dr2Mq9sob2wk61KGRGwE5k1boKic2LsgTrHZSSR6IElLxz_5p1HnyesIrW-ZJSMcLTGFAZfFuhm8Y39mEnTG0qLCwnx4TK39aRPCi91fIKabPBN9YD9XBL09fFN1QvQwl_FkpTiaEO5WYkVzv_LDSz9Ec8MIfgnddy7VaaKEe3IWm0og8G3ZRuKOWwEI6J8tYkc8ll5N4yJt-qF-o48bvhM3kJGd49WAFv309R4ZcWiLM_soT9XQAPFg9_S4VVWCgIVx6CwGCljBeJ23Y5XtsmZTIA0dPGPO75YZN4nckRz2GH6TvnrTXVOJDaN6J9T1WBp5VHyzOsPow4xVkbeUk6vyggxMXQyLYVuXWB4rIBoCRZUzRxJXIdmpE_vCfZHssL3ajcK5BfLiqUma3uKBFWEQzOcjQkhkY7ZMPAaT9sREw5qx-799PhbzaCcMRAY6-ZudzK825mAJkQxrbPIsk4NCxkp5bBrbtqpy68V HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: pagead2.googlesyndication.com
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 05 May 2023 17:13:44 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
200 OK 0 B URL GET HTTP/2 serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g HTTP/1.1
Host: serving.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Cookie: bepolite_id=4bc13a02b912805b0573fc8a5c13108e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Fri, 05 May 2023 17:11:35 GMT
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88548987
age: 0
via: 1.1 varnish (Varnish/6.2)
accept-ranges: bytes
server: lighttpd/1.4.64
X-Firefox-Spdy: h2
serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
200 OK 0 B URL GET HTTP/2 serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g HTTP/1.1
Host: serving.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Cookie: bepolite_id=4bc13a02b912805b0573fc8a5c13108e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Fri, 05 May 2023 17:11:35 GMT
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 63462376
age: 0
via: 1.1 varnish (Varnish/6.2)
accept-ranges: bytes
server: lighttpd/1.4.64
X-Firefox-Spdy: h2
serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnPQFkqynusZJvi-LzBjp4mA
200 OK 0 B URL GET HTTP/2 serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnPQFkqynusZJvi-LzBjp4mA
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /event?key=FYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnPQFkqynusZJvi-LzBjp4mA HTTP/1.1
Host: serving.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Cookie: bepolite_id=4bc13a02b912805b0573fc8a5c13108e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Fri, 05 May 2023 17:09:07 GMT
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 89066161
age: 0
via: 1.1 varnish (Varnish/6.2)
accept-ranges: bytes
server: lighttpd/1.4.64
X-Firefox-Spdy: h2
dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/9XFTBsexLSaW6Uk3nCoS.jpg
200 OK 59 kB URL GET HTTP/2 dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/9XFTBsexLSaW6Uk3nCoS.jpg
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 346x198, components 3\012- data
Hash 2bc0042405de1b87297ef3b0e699e446
1c6098f9283395ff9ebf1f5710a61243a1998947
4848bddd5f564c6e0bf254cc2dd163d73618504f83a6c35e48a2938901d93a83
GET /hotelliveeb/images/general/1/9XFTBsexLSaW6Uk3nCoS.jpg HTTP/1.1
Host: dskwugy0u6y9l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 59129
date: Fri, 05 May 2023 09:06:22 GMT
last-modified: Mon, 20 Dec 2021 05:01:50 GMT
etag: "2bc0042405de1b87297ef3b0e699e446"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V3R3PxPJUYnekAXyaBQ9yxQtIlKgjgm1qfrlQKwiGVAC5jpeKGwhgQ==
age: 29249
X-Firefox-Spdy: h2
dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/W18S9LN3mNoJ2oi9KleC.jpg
67 kB URL dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/W18S9LN3mNoJ2oi9KleC.jpg
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 346x198, components 3\012- data
Hash 121d3ec4975a073987565cebb7277a42
f41d4e66e96400a7d937dcfe12c5110261340c01
bb9d77dec5caa7ba2319904b8c650e8cdf4cff6c573a9b5bfe15133e0ec54461
GET /hotelliveeb/images/general/1/W18S9LN3mNoJ2oi9KleC.jpg HTTP/1.1
Host: dskwugy0u6y9l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 67309
date: Fri, 05 May 2023 13:01:49 GMT
last-modified: Thu, 13 Apr 2023 06:00:11 GMT
etag: "121d3ec4975a073987565cebb7277a42"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u385WuP3bxeYBeDoes7b6uC6sNkmIo34FU5bKRkL8UXjDb3BM5TbfA==
age: 15128
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 72 kB URL GET HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
Requested by https://www.upload.ee/files/13462391/NeuxPower.NXPowerLite.Desktop.v9.1.0.Keygen-BTCR.rar.html?msg=sess_error
Certificate IssuerDigiCert Inc
Subjectodc-addthis-prod-01.oracle.com
Fingerprint19:61:99:E9:2B:6A:F3:0B:0D:3E:EC:7F:34:87:11:4D:6A:F6:0A:DB
ValidityTue, 07 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash d1e5460011efab67f9d298e62ca41c69
b518bb4fef90af133240c8e6efc08f4b3b74c5ad
7b6bfa13f0778c40bb2a00af9819bea2f07afcb4d071e7e4f436196953a5db4d
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Fri, 05 May 2023 17:13:42 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/siAdbm36aJT4SbFwxrl2.jpg
200 OK 46 kB URL GET HTTP/2 dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/siAdbm36aJT4SbFwxrl2.jpg
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 346x198, components 3\012- data
Hash 91451d1ec57ce1bc7c4c8ca7bddec42f
45745a127deca1d09ce6b76ad6fc61098a40d488
acbf223b98dddada08e0b403986fc5f7bfd8c360d6c63cd50cafc3fc5540979d
GET /hotelliveeb/images/general/1/siAdbm36aJT4SbFwxrl2.jpg HTTP/1.1
Host: dskwugy0u6y9l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 46158
date: Thu, 04 May 2023 19:14:33 GMT
last-modified: Wed, 12 Jan 2022 12:30:51 GMT
etag: "91451d1ec57ce1bc7c4c8ca7bddec42f"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kzB-hf3B_FL3UQEcRD90xBIVwzBy1354Nj9do1FUpI9JmqjDbXhNXQ==
age: 79152
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/image/svg/hb-logo.svg
200 OK 15 kB URL GET HTTP/2 banner.hookusbookus.com/assets/image/svg/hb-logo.svg
IP
Requested by https://banner.hookusbookus.com/index_1000x200.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-3_rPysUfw8x-WHcO05jt5w3L1YXjp5s2TtQMyuqA_CWqb3LDQwHkJFaq7r-9Q-ntra5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_1000x200.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=c10098c5ff934825ae00d324cbe8f78a50dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=200&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
Fingerprint7F:13:59:59:81:B1:85:AD:9D:D2:3B:87:D1:D5:08:9D:34:06:A5:77
ValidityFri, 10 Feb 2023 00:00:00 GMT - Wed, 05 Jul 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (15333), with no line terminators
Hash bf6baf947f924bf8d67e947a025def06
9ac9fccb0351b41c1545714153ed5fa2c4bfef3a
64efdaebd020c39ec366f473c831cb51e8cd5d5b1afde13a9695d1f2dae4e60e
GET /assets/image/svg/hb-logo.svg HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://banner.hookusbookus.com/assets/css/index_1000x200.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 05 May 2023 17:13:44 GMT
content-type: image/svg+xml
server: nginx/1.15.12
last-modified: Mon, 05 Jul 2021 19:56:59 GMT
vary: Accept-Encoding
etag: W/"60e3640b-3be5"
content-encoding: gzip
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_bg_1000x400px.png
200 OK 8.7 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_bg_1000x400px.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 1000 x 400, 8-bit colormap, non-interlaced\012- data
Hash ea4d8dfbaffe43195d020bb5f022641c
7b7990730d739a1ac8ca1931ae1632141ced10ef
9ce096faad25792df72bb7af060c475eab410eee1ea6a8634723329b0c9b8587
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_bg_1000x400px.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "3266785919"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 8680
date: Fri, 05 May 2023 17:09:05 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88548966
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukk_01.png
200 OK 5.3 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukk_01.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 231 x 224, 8-bit colormap, non-interlaced\012- data
Hash a18dca2db04677201adef7c147eaaee1
1d2acfcf1568089bc00379f7bc6fa4baebf86999
50b5069751ef2f345db8e67ca4aca96ccee6ebf2bc196a6d8fd3c0cfe73de3a7
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_kukk_01.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "563648195"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 5269
date: Fri, 05 May 2023 17:11:35 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88775285
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_vaarikas.png
200 OK 1.9 kB URL GET HTTP/2 static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_vaarikas.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
Fingerprint94:A6:1E:22:AF:B9:99:28:F0:8F:3E:00:81:D1:F5:13:22:A7:49:66
ValidityTue, 07 Mar 2023 22:09:49 GMT - Mon, 05 Jun 2023 22:09:48 GMT
File type PNG image data, 73 x 77, 8-bit colormap, non-interlaced\012- data
Hash 679520d8dc604f4f2fd521207da39398
ba0300f8921566f52a146696803fd85fcea31215
0f14ae7a0e4f6629bc1f4ef5bb176095dd14c2bd6f402dd0a78d939d40df22f7
GET /banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_vaarikas.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.bepolite.eu/banners/b2920179-1ed2-46c2-bf3b-743de7bdef2f/kukemood_1000x400px.html?click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttps%253A%252F%252Ftrack.adform.net%252FC%252F%253Fbn%253D63343717&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF_yv--z2Y_jwFIOnZURfz8-JjdUGx2XE9jKgqnySzfeau76KfBGr7wqhJV5kDjyB21Lq7Ms6eyahvASkTQzc_PgQjsEbdo2ySHttqn8Q8DZp91H3KPZIKWOYIoWBckg9Mo1XT2h77LqWHDnPq8u802fzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-1hP2ntw-Dcdl4rOJA9PCNEELyg3Ph5UI1g5tJwkvL5YjSKIYSidhPxpyZUMy9ieH7a5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fstatic.bepolite.eu%2Fbanners%2Fb2920179-1ed2-46c2-bf3b-743de7bdef2f%2Fkukemood_1000x400px.html&clink=https%3A%2F%2Ftrack.adform.net%2FC%2F%3Fbn%3D63343717&banner_id=3f646989018447d280be42b5eb000e8150dd7b0f4105441f8f6018cc3fcb090c&bg=transparent&w=1000&h=400&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "565324096"
last-modified: Tue, 11 Apr 2023 11:07:35 GMT
content-length: 1878
date: Fri, 05 May 2023 17:08:38 GMT
server: lighttpd/1.4.55
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 88421590
age: 0
via: 1.1 varnish (Varnish/6.2)
X-Firefox-Spdy: h2
51.91.30.159
2.18.172.123
212.47.222.20
142.250.74.168
18.185.180.126
2.19.13.122
0.0.0.0