imia.in/
104.21.22.133301 Moved Permanently 0 B IP 104.21.22.133:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: imia.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 24 Sep 2022 11:58:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 24 Sep 2022 12:58:55 GMT
Location: https://imia.in/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ylbmXqQMHE3sv%2BslrQavtrhjNZ7U%2BqIAmdxmrk1w3zLGkiPzqLRIMM%2FsMxeZgGsmZF0LND0DjM5vZYmmRKLetcA5oJ%2FRobpFitWnFGXAV%2Bxb10bdobMIz7zH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74fb59dcaee0b515-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
18.164.68.21200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 18.164.68.21:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 24 Sep 2022 11:05:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dec2a929e38abcba29053b59369dd9c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: _Lju63lJOyFybgCvXht0r7VQ9boh9JGGkdTYPOX-Yphch7wGtAANmQ==
Age: 3196
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8087
Expires: Sat, 24 Sep 2022 14:13:42 GMT
Date: Sat, 24 Sep 2022 11:58:55 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
108.156.28.95200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 108.156.28.95:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 24 Sep 2022 04:13:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 ee8862e43d7837ef5478becfe2eb7116.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: ebYR3RGNpf7YIQlj_F0EBrR2Eoi6bfZU4d3-kBAb3NejzoXFguwhvQ==
age: 27952
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 11:58:55 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 431a241dc835b3aabdd77b785997826c
bcb1baafbdb4fd9fa6a9413ee2c2244e6f7ce436
c4b323d2bd47db73c5911d84c024cad7cc69282c973dc5d42b12772607181dcd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:55 GMT
Server: ECS (amb/6B91)
Content-Length: 280
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
18.164.68.21200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 18.164.68.21:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sat, 24 Sep 2022 11:20:46 GMT
Expires: Sat, 24 Sep 2022 11:42:22 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 98b94706e2cced402e41a3fd1d296b74.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: xwawnXX3Q-HaM5vRrY8M32oRV5DPDY2ucT8c9iTHGOtIevOmorFeYQ==
Age: 2290
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a7809de115ea73f8b61f3d20a9978493
01fc65a2b694d7aadd5204d21801e87b2b55b73e
72692486033feeb149424c59576c6c75b17228dfc89b4c369d2e17cc4bff3d52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3649
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:56 GMT
Last-Modified: Sat, 24 Sep 2022 10:58:07 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
35.80.131.74101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.80.131.74:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wBLMjzgrK9+pKp1BWI5rOw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oDrUmwBom81XQrJvSVRx2xdXbu8=
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 431a241dc835b3aabdd77b785997826c
bcb1baafbdb4fd9fa6a9413ee2c2244e6f7ce436
c4b323d2bd47db73c5911d84c024cad7cc69282c973dc5d42b12772607181dcd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:57 GMT
Last-Modified: Sat, 24 Sep 2022 11:58:56 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4fb51016b82f43bc6ee9f5ace001690c
5390a86aa0a7b82f5d09605b10812567b309d27a
73283fa4b416ee80d2ac87c30d2183afa1ae487a8650563b79adc1f001030f73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
142.250.74.170200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
IP 142.250.74.170:0
File type ASCII text, with very long lines (32058)
Hash fc3fc31e5e7c0933dc18e562c1c071bf
a44c31323f6bd29e583cc585036e6eb39f7014a6
ddad766fb94b23efeb5574cdedc5e8446d496fb91bd0b08cd80be212e001055d
GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imia.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30306
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 10:28:11 GMT
expires: Wed, 20 Sep 2023 10:28:11 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 351046
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4fb51016b82f43bc6ee9f5ace001690c
5390a86aa0a7b82f5d09605b10812567b309d27a
73283fa4b416ee80d2ac87c30d2183afa1ae487a8650563b79adc1f001030f73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 824 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e3a5d17b7de2e1b483beaf54ed8fbe20
3509a704ea97a68844112c1ff01c2ba1daa562c4
03dd0059ba0baa8d9e5489ccd6e973f6ce143c04c21c98a7ee2c70635ad9055d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6644
Expires: Sat, 24 Sep 2022 13:49:41 GMT
Date: Sat, 24 Sep 2022 11:58:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6644
Expires: Sat, 24 Sep 2022 13:49:41 GMT
Date: Sat, 24 Sep 2022 11:58:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 24 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 844x360, components 3\012- data
Hash 2c021f74f82b841d64193f68e66a97d9
7424586b4809ed61631377f144dcbd4d755bbdc9
4c6a3cf17567d60f5f94d5126efd891dfcc883716056478f4f4e4177079caf22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6644
Expires: Sat, 24 Sep 2022 13:49:41 GMT
Date: Sat, 24 Sep 2022 11:58:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96ebb238-493f-4ccc-a8d9-7a7c6f8ab469.jpeg
34.120.237.76200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96ebb238-493f-4ccc-a8d9-7a7c6f8ab469.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 286x217, components 3\012- data
Hash 057ee90d0537a2c67326e7aa34befab9
5b5dee4a494d672f216f019078020d2c7077a561
e5952d081431995cb35fa5e5cb1431984ea747a321b7d58f2ab32a58850a1999
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96ebb238-493f-4ccc-a8d9-7a7c6f8ab469.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7963
x-amzn-requestid: cadfa4ff-473d-4927-bdf6-3aad64cddf18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQbHTCIAMFfZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2735-41d711e5210099aa6273dd86;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: g0NS7XamCzSMKmm1-mLnWLwUuBoJczvwSmTb0c_7klsY78wbrg4bRw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:57:25 GMT
age: 50492
etag: "d2180d40ceb16924a87a41aad90dedb0bb912085"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b6b51846ec2b7d856b7dc12e4d720f4
5a69190a9a778a6979e11fafedd43e1031caf8e2
a497c04d1c9d0be88aa9c288423346e83c6a7b296295387b3b7b855c550492a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9444e811-e2d5-4901-a86d-9e9269a6f846.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10927
x-amzn-requestid: ae562f19-3dd9-42b1-bb98-ab026140506e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsqHOHguIAMFS7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632823c7-6d4bcabf6879463427e68a50;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 08:09:43 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: u4DgvdhOG7agsl8-aoovMcR029kbfcAk9eoiUiHb-PZuq3RbbFg9Mw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:57:44 GMT
age: 50473
etag: "5a69190a9a778a6979e11fafedd43e1031caf8e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg
34.120.237.76200 OK 27 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 286x217, components 3\012- data
Hash 532394a842b97d8aadefbf804037310c
aafffcfe9a9619c1a7bfded665fde798519243cc
3f4f33be9ffd645637b2a597eaa092b3efea4513fa5d2c0a4aa53b29a06c249c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6386
x-amzn-requestid: 4380489e-d0ba-4f67-ac4f-67619ba34422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7shGHryIAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e27a0-005f9c783c7722f16c178026;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:39:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: RuUOjTDRTkcaGFf_hTWrHZ89edOajgGUdl5PjbaUV7CUppat6IYsRg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:27 GMT
age: 51030
etag: "f6f926be6e265a597aaede424f05fcd7c76fcc20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d78fe23-176d-4858-a42b-1f7944845b79.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d78fe23-176d-4858-a42b-1f7944845b79.jpeg
IP 34.120.237.76:0
Hash 065a62e6dc6bc3c609269347ca171c91
a8ffe38125062d74d9e4d79c58045ea89165e7a5
5dfd2a7ae52b03b1541445cd0f3f235e5453e4420a872c2dc5383e316f81199f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d78fe23-176d-4858-a42b-1f7944845b79.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4866
x-amzn-requestid: d96de29c-d64e-415e-9cf7-85a0fad34967
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7tCNGjuoAMFpeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2874-548fc71f4a4a9ad74298ee7a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:43:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: SBMDqLaDDc-YOHE3gTp-QZSOxwzpsjHi8tLMpoQUmm8XqNdr3HFYmg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:51:18 GMT
etag: "7d480011939a32baf53926a144eac807ac397bcb"
content-type: image/jpeg
age: 50859
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa150280eb113504d61a25935c0f0127
ed04f74fbb4c77b21e2babc51a82857f5e23d169
07df17fffb391aa82efb09e30d97e88fa4dbe6df00e37bb90304f69179f4848e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10032
x-amzn-requestid: 521c4012-9834-4100-a7ed-30093502f1a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPBHGYoAMFh-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-77b03c321240d76a572d603a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: N7TwxCLUL8qnvm3YuZ6CGyJquVerc266VvZ1g8j5RxGpQXoUJwhULg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:51:16 GMT
age: 50861
etag: "ed04f74fbb4c77b21e2babc51a82857f5e23d169"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02a682b4703bb9d6381c762726c05531
1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54
fb672de67420a239fe5d7e2588f640150ed29883fe2a46ded160385e3265004c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8029
x-amzn-requestid: 2fc5c63d-5cef-42f4-a6d2-b55f51c57af6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0tHjGoAMFcFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-73f2f78a2d1ca8fc666d2571;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7DX67a-HmEh76IorINvRU61AKtSiimdPnHFnYeR2OJezZJ1_mJq0MA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:48:26 GMT
age: 51031
etag: "1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 13 kB IP 93.184.220.29:0
Hash a735326a92147826bf360a09860fb745
850551bc286397ad2b709bbcc6557d5d18e19a88
7d1081dc371601d833dd534bd32c4cc188acbb22849adb143f8073661c077e36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:58 GMT
Server: ECS (amb/6B92)
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 4e128c5272b21439a342a77f10268ac2
d7019fb16526c721f0a842a4de0a9dae4f95628d
13dc12cbb64d7e44a11f23087df5075529ca4cd509fbbec1e57e0d0e221c1bee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:58 GMT
Last-Modified: Sat, 24 Sep 2022 11:58:58 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash e937a148a8627b28664c732ba4e2a7c4
bea86c6d0a0f026a01ae8963890c430d76c202a9
95ede08cccd80f157c28e365c4792b04c6a101788977348dcf19340b47b57d15
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:58 GMT
Server: ECS (amb/6B9F)
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash e937a148a8627b28664c732ba4e2a7c4
bea86c6d0a0f026a01ae8963890c430d76c202a9
95ede08cccd80f157c28e365c4792b04c6a101788977348dcf19340b47b57d15
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:58 GMT
Last-Modified: Sat, 24 Sep 2022 11:58:58 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
cakeglobaloffers.com/landingpages/vegas4en/index.php?ref=ca_w65193c80259l5842gnop486_
172.67.153.72302 Found 433 B URL HTTP/2 cakeglobaloffers.com/landingpages/vegas4en/index.php?ref=ca_w65193c80259l5842gnop486_
IP 172.67.153.72:0
Hash 5a46ee19361d3bd7c429275408acf0e8
50a12125e184d3e57f1405c2e9076d920a30d8be
0c0e887c8ad3998f6dc3811aeb4ffc509435f9fd58c290cd7c3bf12ce925f6a8
Analyzer Verdict Alert fortinet Phishing
GET /landingpages/vegas4en/index.php?ref=ca_w65193c80259l5842gnop486_ HTTP/1.1
Host: cakeglobaloffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imia.in/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: text/html
location: https://cakeglobaloffers.com/vegas4en/index.php?ref=ca_w65193c80259l5842gnop486_
x-xss-protection: 1; mode=block
strict-transport-security: max-age=300; includeSubDomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U9ZAtvVjSeL0aypVbYu1%2FmWQ%2Bl6HH85JovY5DkraXiNm8qIrO2QEjMJo3J%2F7OTzUIJ7VC%2BPV3h0mjuQgQH0yChDKYZbe%2Fljld06zAt9IGbjrHfVlYUCMQ2fiLp82Y0jDaWtzZp0A6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fb59f298ce1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 21799cfbd3cb1f1a27a3914f47f8a3a2
27e97c5285a85cd1edc42b095439b3add280f02f
8b204fbcf1466d68bb8ed85062adfba11bd5dd068dfc1e1d66320e6e6f9e3d0d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:59 GMT
Last-Modified: Sat, 24 Sep 2022 11:58:59 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
cakeglobal-offers.com/static/template/54/img/001.gif
172.67.139.150200 OK 116 kB URL HTTP/2 cakeglobal-offers.com/static/template/54/img/001.gif
IP 172.67.139.150:0
File type GIF image data, version 89a, 660 x 290\012- data
Size 116 kB (115935 bytes)
Hash a8eddd46886225678a56119e8905a422
a31ef5f7de30168dd0d899245b39e0b10b3c8d3d
ac31df8208986eea662647d3ed3da7813c7338c78a07cbb949141117bc75cda5
GET /static/template/54/img/001.gif HTTP/1.1
Host: cakeglobal-offers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/?s=54&ref=ca_w65193c80259l5842gnop486_&from=aHR0cHM6Ly9pbWlhLmluLw%3D%3D&encoded_url=cmVnaXN0ZXI%3D
Cookie: http_referer=https%3A%2F%2Fimia.in%2F; visit5b8c229b8a63492ed15739b27a39a68e=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: image/gif
content-length: 115935
last-modified: Thu, 11 Aug 2022 07:22:23 GMT
etag: "62f4ae2f-1c4df"
x-xss-protection: 1; mode=block
strict-transport-security: max-age=300; includeSubDomains;
cf-cache-status: HIT
age: 5849
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Th6v7Ug6aJ1q2RR0JBewnS%2Fj4jWIYpLYjwqx%2BcZlqJmN8VgDiGVnNnvUBRNoqlSKmcLiFA0oaQ88Ows8j%2BwvkUcYJbxG0eM0J8rCvx%2BTW5BExk7Q0%2B0y%2Bq9R4nktOfXsv6qjUyv%2FmKY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb59f5f879b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5c410d4a8feab2bb1f6fcbe014abec07
0264426c9f4ab7f35f04bdb69aff19280aaccdbc
5bb8e239a4b5067b674aa0b7dd51abeb6bd9cf1ae19ca3e81dbb8c86f5feb80e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2556
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:59 GMT
Last-Modified: Sat, 24 Sep 2022 11:16:23 GMT
Server: ECS (amb/6B92)
X-Cache: HIT
Content-Length: 279
vulkanvegas.com/blank.gif?1664020738465
203.24.108.228200 OK 43 B URL HTTP/2 vulkanvegas.com/blank.gif?1664020738465
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /blank.gif?1664020738465 HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-envoy-upstream-service-time: 1
x-frame-options: DENY
cf-cache-status: MISS
expires: Sat, 24 Sep 2022 15:58:59 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb59f6af960b3d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 0da181b3700b6705ac37fa48e5e937d3
8d33787ca952e43dfb9a5cfb5683546b8481ef54
fcf7b135aa50f771cd598e2b22d727cd5d60f4da4e965879a9b7f23582cebdfb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:59 GMT
Server: ECS (amb/6B8B)
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 64b5beccb6088dd860bb8d8b80dd89ea
aae3ee4ee2d26ffca629a02e7e1c78bdd982862c
6054bbc702452fb0c2823a7f4dd95d81937ced3ef94517bfbda3b80f7335a237
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:59 GMT
Server: ECS (amb/6B8B)
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 656de6532b25c759ddf8e830f4f5c996
f69dd3848aad64635a41f119b04304665719815b
822af1fcbab97538b9ee13b11b4ce271340377098797381c90e83a95eba03a15
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:59 GMT
Server: ECS (amb/6B92)
Content-Length: 280
vulkavegas239.com/blank.gif?1664020738466
203.30.190.149200 OK 43 B URL HTTP/2 vulkavegas239.com/blank.gif?1664020738466
IP 203.30.190.149:0
ASN #209242 Cloudflare London, LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /blank.gif?1664020738466 HTTP/1.1
Host: vulkavegas239.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
x-envoy-upstream-service-time: 0
x-frame-options: DENY
cf-cache-status: MISS
expires: Sat, 24 Sep 2022 15:58:59 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb59f828731c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cakeglobal-offers.com/js/redirector.js?1660202543
172.67.139.150200 OK 1.0 kB URL HTTP/2 cakeglobal-offers.com/js/redirector.js?1660202543
IP 172.67.139.150:0
Hash fb6194a0d5cb8dd22e756d33498ec3b6
370f65fd805105beafac6dbd7f15708d03f99da3
ace2a1530c1a5c9f32373e4b92708e3604e5b025f09df32580850a1947913f91
GET /js/redirector.js?1660202543 HTTP/1.1
Host: cakeglobal-offers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/?s=54&ref=ca_w65193c80259l5842gnop486_&from=aHR0cHM6Ly9pbWlhLmluLw%3D%3D&encoded_url=cmVnaXN0ZXI%3D
Cookie: http_referer=https%3A%2F%2Fimia.in%2F; visit5b8c229b8a63492ed15739b27a39a68e=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: application/javascript
last-modified: Thu, 11 Aug 2022 07:22:23 GMT
etag: W/"62f4ae2f-cba"
expires: Sun, 25 Sep 2022 11:58:59 GMT
cache-control: max-age=86400
x-xss-protection: 1; mode=block
strict-transport-security: max-age=300; includeSubDomains;
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MX%2BsNFFNawPslT0TFanAc%2FdL5XAKQCKiqika%2BKUFgDlWw58UQF2%2FoosC1%2BDpbXvx2rN8WY2SyfaUpg4azyRYd6AQ4YEi%2F8LrarMLgiXmA645fb%2BKfA2HPXGVS8NzPuw0ErANdbxdqxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb59f5f875b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5c410d4a8feab2bb1f6fcbe014abec07
0264426c9f4ab7f35f04bdb69aff19280aaccdbc
5bb8e239a4b5067b674aa0b7dd51abeb6bd9cf1ae19ca3e81dbb8c86f5feb80e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:58:59 GMT
Server: ECS (amb/6BA3)
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 0da181b3700b6705ac37fa48e5e937d3
8d33787ca952e43dfb9a5cfb5683546b8481ef54
fcf7b135aa50f771cd598e2b22d727cd5d60f4da4e965879a9b7f23582cebdfb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:00 GMT
Server: ECS (amb/6B92)
Content-Length: 280
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 64b5beccb6088dd860bb8d8b80dd89ea
aae3ee4ee2d26ffca629a02e7e1c78bdd982862c
6054bbc702452fb0c2823a7f4dd95d81937ced3ef94517bfbda3b80f7335a237
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:00 GMT
Server: ECS (amb/6B95)
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 282 B IP 93.184.220.29:0
File type Targa image data - Mono 3073 x 33328 x 1 +1 +33440 - 8-bit alpha "\006\011+\006\001\005\005\0070\001\001\004\201\3720\201\3670\201\236\242\026\004\024\245\3167\352\353\260u\016\224g\210\264E\372\331$\020\207\226\037\030\01720220923121240Z0s0q0I0\011\006\005+\016\003\002\032\005"\012- data
Hash defd6f021d53e200156d28b9a97a4309
c4d9e46d32af8e54f63e7eb775c1723b89f4d69b
fd9a8a7a4f97669dc2993bd1e6ba52475edb6fdb3f228f405759c7de4ed6a60e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2559
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:02 GMT
Last-Modified: Sat, 24 Sep 2022 11:16:23 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 1.1 kB IP 142.250.74.3:0
Hash 64c109a63e747999768a98a4f59b0c9b
dc3aa06d7decf4e4bb0b40064d57e3b3dfe4c752
da458de2999ee5290d403f76f664ba0d22b9af579254cdefed0f77711940d190
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sat.crwds.net/p/gnt908wk0bl6xyll5bj94zafs74gwo53/4f1203a22168e7242d98f0e2231a554c.jpg
203.30.191.209200 OK 279 B URL HTTP/2 sat.crwds.net/p/gnt908wk0bl6xyll5bj94zafs74gwo53/4f1203a22168e7242d98f0e2231a554c.jpg
IP 203.30.191.209:0
ASN #209242 Cloudflare London, LLC
Hash 9a53cacde450cbb62ced6415b36ce73a
d5a2741b21d8a17eb2696b4ed0eb33d60fb833ad
f6b8b60fd578436044f885637bf955d22451130da1720c38653058617b4a4f89
GET /p/gnt908wk0bl6xyll5bj94zafs74gwo53/4f1203a22168e7242d98f0e2231a554c.jpg HTTP/1.1
Host: sat.crwds.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:00 GMT
content-type: image/jpeg
cache-control: no-cache, private
set-cookie: _7jt1oxhp4z=eyJpdiI6InpmSmxkeGFqWXFTZVBYalpIVFoyMkE9PSIsInZhbHVlIjoiZWVtYkYzZ1pyTjdKOTVKakNFa2piYVI1ckdxdlRoNk9vLzEvMGJSQnppTUtBc2lVUFJSTy9MSVNPejhhd2VTemxSM28yaUNOWjBHUUdFMHRSNzNWOFBDTGhORHNzNFBLaEFPdlp3RlJHdlk9IiwibWFjIjoiNmM2NTc4YjFhODVjYjI4MDJjYTI2ZmRhYjY0NWNjZTY3MDM4MTNmMTRmNmM0NDg3Zjg4ZDRlNTljMmQ2ZGNjOSIsInRhZyI6IiJ9; expires=Sun, 24-Sep-2023 11:59:00 GMT; Max-Age=31536000; path=/; domain=.crwds.net; secure; httponly; samesite=none
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb59f8dc32b509-OSL
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?onload=onloadCallback&render=explicit
142.250.74.164200 OK 580 B URL HTTP/2 www.google.com/recaptcha/api.js?onload=onloadCallback&render=explicit
IP 142.250.74.164:0
File type ASCII text, with very long lines (909), with no line terminators
Hash 5d2de14fb80ac18c7d7767b194d067a2
9d7b816f273da54e38e6624bd7f7e9befe43ac9d
d3102d68a2ed7780c31cddf8f29c06d2642899e9e924a55a2fe768c6e79eaed6
GET /recaptcha/api.js?onload=onloadCallback&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 24 Sep 2022 11:59:02 GMT
date: Sat, 24 Sep 2022 11:59:02 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 580
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sat.tureblechu.net/gnt908wk0bl6xyll5bj94zafs74gwo53/script.min.js?sub_1=ca_w65193c80259l5842gnop486_&visitorId=632ef1033a810123c31cc696
203.23.103.119200 OK 43 kB URL HTTP/2 sat.tureblechu.net/gnt908wk0bl6xyll5bj94zafs74gwo53/script.min.js?sub_1=ca_w65193c80259l5842gnop486_&visitorId=632ef1033a810123c31cc696
IP 203.23.103.119:0
ASN #209242 Cloudflare London, LLC
Hash aaa9230bab6918eda25b955bebc5966e
fe7be85c50423c3f70258a332a07678c55f15eb5
39b809e5b7121143dd7753fb4d8d9274b6a151235f21c3b224f0c0c9b2f066d0
GET /gnt908wk0bl6xyll5bj94zafs74gwo53/script.min.js?sub_1=ca_w65193c80259l5842gnop486_&visitorId=632ef1033a810123c31cc696 HTTP/1.1
Host: sat.tureblechu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: application/javascript
cache-control: must-revalidate, no-cache, no-store, post-check=0, pre-check=0, private
last-modified: Sat, 24 Sep 2022 11:58:59 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb59f63f48b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4fb51016b82f43bc6ee9f5ace001690c
5390a86aa0a7b82f5d09605b10812567b309d27a
73283fa4b416ee80d2ac87c30d2183afa1ae487a8650563b79adc1f001030f73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 4fb51016b82f43bc6ee9f5ace001690c
5390a86aa0a7b82f5d09605b10812567b309d27a
73283fa4b416ee80d2ac87c30d2183afa1ae487a8650563b79adc1f001030f73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 423331d8bae78ba045bea86f1e4c6e7f
8ed72a508ba25a95e6899569180a02728d5edb5c
fb27ab0f1591889639eff81fa012d5c185ecb1b04be5060af2e89e378fc264a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sat.tureblechu.net/ie/js/4f1203a22168e7242d98f0e2231a554c
203.23.103.119200 OK 79 kB URL HTTP/2 sat.tureblechu.net/ie/js/4f1203a22168e7242d98f0e2231a554c
IP 203.23.103.119:0
ASN #209242 Cloudflare London, LLC
Hash 46ace2648927d602cf2525440365d3fa
f3cdc96c620bab313b19ecd4a25925fe6b578257
73ce8fb16d660691c55e53e5e12d259cd4d76bfc134445a341964b0120041bc2
POST /ie/js/4f1203a22168e7242d98f0e2231a554c HTTP/1.1
Host: sat.tureblechu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 4124
Origin: https://cakeglobal-offers.com
Connection: keep-alive
Referer: https://cakeglobal-offers.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:01 GMT
content-type: application/json
cache-control: no-cache, private
access-control-allow-origin: https://cakeglobal-offers.com
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb5a012cbab518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
stat.vulkanvegas.com/font.png?project=vulkanvegas&uniqueId=fc1a405a-75fd-4762-bd86-5c0f5cd85986&is_auth=0&action=visit&refCode=ca_w65193c80259l5842gnop486_
203.24.108.228200 OK 95 B URL HTTP/2 stat.vulkanvegas.com/font.png?project=vulkanvegas&uniqueId=fc1a405a-75fd-4762-bd86-5c0f5cd85986&is_auth=0&action=visit&refCode=ca_w65193c80259l5842gnop486_
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 71a50dbba44c78128b221b7df7bb51f1
0ec63b140374ba704a58fa0c743cb357683313dd
3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
GET /font.png?project=vulkanvegas&uniqueId=fc1a405a-75fd-4762-bd86-5c0f5cd85986&is_auth=0&action=visit&refCode=ca_w65193c80259l5842gnop486_ HTTP/1.1
Host: stat.vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:02 GMT
content-type: image/png
content-length: 95
expires: Sat, 24 Sep 2022 11:59:01 GMT
cache-control: no-cache, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
last-modified: Sat, 24 Sep 2022 11:59:02 GMT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb5a0a3be9b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widget.yhelper.net/widget.js
203.30.189.107200 OK 15 kB URL HTTP/2 widget.yhelper.net/widget.js
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
Hash 99412b560c994723f72d5b930a99fa63
c733b65ac4be73d5f9ed44302f16b24c92067088
903127ec3e38b82b61c3aec368fe6492f0940f2bb9999a90505350d66c4c792a
GET /widget.js HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:02 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Saturday, 24-Sep-2022 11:59:02 UTC
cache-control: no-store, no-cache
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 74fb5a09dc0f0b65-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 9a53cacde450cbb62ced6415b36ce73a
d5a2741b21d8a17eb2696b4ed0eb33d60fb833ad
f6b8b60fd578436044f885637bf955d22451130da1720c38653058617b4a4f89
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 992
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:02 GMT
Last-Modified: Sat, 24 Sep 2022 11:42:30 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fa5a7fd1c3d5eed2a8816ac62ad73e51
6536f3880457c6ced9534d5cf10615b6daf42aea
3c3a74be5d72d9e2b5ecdaeafbbf3d0029cd5848d2483cfa10da14859deff436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 08:31:01 GMT
expires: Wed, 20 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 358081
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fa5a7fd1c3d5eed2a8816ac62ad73e51
6536f3880457c6ced9534d5cf10615b6daf42aea
3c3a74be5d72d9e2b5ecdaeafbbf3d0029cd5848d2483cfa10da14859deff436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
142.250.74.163200 OK 198 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
IP 142.250.74.163:0
Size 198 kB (197988 bytes)
Hash 2a5419434cf05d36d7550ed63e812883
84ca0e676974284291cfd0f083dad35cbb0cdbda
f2a49a4a2f91e5399a6dcf32560dcb30332fdbadef1ec3ea8f49f33cc50958a9
GET /recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 07:11:34 GMT
expires: Fri, 22 Sep 2023 07:11:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 04:01:43 GMT
content-type: text/javascript
age: 190049
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 84 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
Hash 8726810b9f798cc7b9cc32d4c2a82f90
72f98a67ef38998fe3c3ef19352511c182d0de53
d106474747bcc6d060a4af4193dc1d64d7d4ae622a261eb2dd2b1416e05f6e2d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Sat, 24 Sep 2022 10:41:09 GMT
expires: Sat, 24 Sep 2022 12:41:09 GMT
cache-control: public, max-age=7200
age: 4674
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 8e1ac5e5fc05be7f0113670ad02f3ef9
2061d26094c24893ca931f12d593ea0a2040b5ec
54a50e2e673a6008a37dcc81db0fdf5809f40b270844cf99cdfae9e2f3a0fd10
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 11:59:03 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Wed, 28 Sep 2022 09:17:42 GMT
ETag: "2061d26094c24893ca931f12d593ea0a2040b5ec"
Last-Modified: Sat, 24 Sep 2022 09:17:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 201
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74fb5a0d8a520b51-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash d31bfd0e59207c57dace4f77a5012d95
2dd1d1e635c734e8e0b14ae38e06299562edb36c
f23c5d45e8b0ee79f32aef0a6ba1c25ef09915e1811cee90347c0def3c1a0d87
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 11:59:03 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 21 Sep 2022 21:46:10 GMT
Expires: Wed, 28 Sep 2022 21:46:09 GMT
Etag: "2dd1d1e635c734e8e0b14ae38e06299562edb36c"
Cache-Control: max-age=380225,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74fb5a0d4b95b4f9-OSL
sat.tureblechu.net/ie/e?m=NGYxMjAzYTIyMTY4ZTcyNDJkOThmMGUyMjMxYTU1NGMgPSBDYW52YXMgZWxlbWVudCBkb2Vzbid0IGhhdmUgYW55IG9mIHRoaXMgY29udGV4dCAtIHdlYmdsMixleHBlcmltZW50YWwtd2ViZ2wyLCB3ZWJnbCwgZXhwZXJpbWVudGFsLXdlYmdsLCBtb3otd2ViZ2wuIFdlYkdsIHN1cHBvcnQgaXMgZGlzYWJsZWQ%3D&h=aHR0cHM6Ly9jYWtlZ2xvYmFsLW9mZmVycy5jb20vP3M9NTQmcmVmPWNhX3c2NTE5M2M4MDI1OWw1ODQyZ25vcDQ4Nl8mZnJvbT1hSFIwY0hNNkx5OXBiV2xoTG1sdUx3JTNEJTNEJmVuY29kZWRfdXJsPWNtVm5hWE4wWlhJJTNE&ua=TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjA%3D
203.23.103.119200 OK 117 kB URL HTTP/2 sat.tureblechu.net/ie/e?m=NGYxMjAzYTIyMTY4ZTcyNDJkOThmMGUyMjMxYTU1NGMgPSBDYW52YXMgZWxlbWVudCBkb2Vzbid0IGhhdmUgYW55IG9mIHRoaXMgY29udGV4dCAtIHdlYmdsMixleHBlcmltZW50YWwtd2ViZ2wyLCB3ZWJnbCwgZXhwZXJpbWVudGFsLXdlYmdsLCBtb3otd2ViZ2wuIFdlYkdsIHN1cHBvcnQgaXMgZGlzYWJsZWQ%3D&h=aHR0cHM6Ly9jYWtlZ2xvYmFsLW9mZmVycy5jb20vP3M9NTQmcmVmPWNhX3c2NTE5M2M4MDI1OWw1ODQyZ25vcDQ4Nl8mZnJvbT1hSFIwY0hNNkx5OXBiV2xoTG1sdUx3JTNEJTNEJmVuY29kZWRfdXJsPWNtVm5hWE4wWlhJJTNE&ua=TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjA%3D
IP 203.23.103.119:0
ASN #209242 Cloudflare London, LLC
Size 117 kB (117301 bytes)
Hash 3c210a6c7ced59438a2094de1d50c4aa
0324a3ca7b7555861fcd53c1b7885c9187b4e08f
3f4342ce1fca4252a40e8f9afd3e643351b265b52a71aab98f1591fd2ac8e750
GET /ie/e?m=NGYxMjAzYTIyMTY4ZTcyNDJkOThmMGUyMjMxYTU1NGMgPSBDYW52YXMgZWxlbWVudCBkb2Vzbid0IGhhdmUgYW55IG9mIHRoaXMgY29udGV4dCAtIHdlYmdsMixleHBlcmltZW50YWwtd2ViZ2wyLCB3ZWJnbCwgZXhwZXJpbWVudGFsLXdlYmdsLCBtb3otd2ViZ2wuIFdlYkdsIHN1cHBvcnQgaXMgZGlzYWJsZWQ%3D&h=aHR0cHM6Ly9jYWtlZ2xvYmFsLW9mZmVycy5jb20vP3M9NTQmcmVmPWNhX3c2NTE5M2M4MDI1OWw1ODQyZ25vcDQ4Nl8mZnJvbT1hSFIwY0hNNkx5OXBiV2xoTG1sdUx3JTNEJTNEJmVuY29kZWRfdXJsPWNtVm5hWE4wWlhJJTNE&ua=TW96aWxsYS81LjAgKFgxMTsgTGludXggeDg2XzY0OyBydjo5Ni4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94Lzk2LjA%3D HTTP/1.1
Host: sat.tureblechu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb59f778b5b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
api.ipify.org/?format=jsonp&callback=getIP
3.220.57.224200 OK 29 B URL HTTP/1.1 api.ipify.org/?format=jsonp&callback=getIP
IP 3.220.57.224:0
File type ASCII text, with no line terminators
Hash 90a39389063c7c5716745c3b3bb4fba1
a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f
eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69
GET /?format=jsonp&callback=getIP HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
Content-Type: application/javascript
Vary: Origin
Date: Sat, 24 Sep 2022 11:59:03 GMT
Content-Length: 29
Via: 1.1 vegur
static.hotjar.com/c/hotjar-1620307.js?sv=7
143.204.68.87200 OK 58 kB URL HTTP/2 static.hotjar.com/c/hotjar-1620307.js?sv=7
IP 143.204.68.87:0
File type ASCII text, with very long lines (2476)
Hash b8282e241cff1d73a0f6816a208decf9
11b796b3d0c917476a8edc433a06ed24b4c6691f
d46dc27a9f8058bc687ed355520c8d3e583294307be3af592194e4c5261b8382
GET /c/hotjar-1620307.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 11:59:03 GMT
cache-control: max-age=60
etag: W/b76e33962de12e5e0bf73f8e07fff173
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 073930fa982e49355f5b7af46de37fc6.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: lSwmLvN5NuWAWnD0aWDnC14RMQtU1JIDHjxUwYQREcr9syh0yS0lww==
age: 20
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/img/frontend/social-networks/tiktok.svg
203.24.108.228200 OK 1.1 kB URL HTTP/2 vulkanvegas.com/static/123530/assets/img/frontend/social-networks/tiktok.svg
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
Hash 1bfa7b0bedd72318189793f0a0bf7d38
b407800b340b225cd3a58ea02b17eeacd56f2b88
e7f5309a017558373d05f2e5e7f4cf10ed993c05e6047565f0c53d82d3d89df1
GET /static/123530/assets/img/frontend/social-networks/tiktok.svg HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1; _ga=GA1.2.448081030.1664020742; _gid=GA1.2.1204205456.1664020742; _gat=1; _gat_UA-79293610-7=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"c6e108a061869cb1dade7b318758fa74"
last-modified: Mon, 19 Sep 2022 14:11:38 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486DA2934AAF
x-cache: MISS
x-cache-lookup: MISS
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580504#0/gid:0/gname:root/mode:33188/mtime:1663580504#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 38
x-frame-options: DENY
cf-cache-status: HIT
age: 423912
server: cloudflare
cf-ray: 74fb5a0eac100b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/img/frontend/social-networks/facebook.svg
203.24.108.228200 OK 415 B URL HTTP/2 vulkanvegas.com/static/123530/assets/img/frontend/social-networks/facebook.svg
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
Hash 7d358a641da8e18468990edafcf6e362
a348ed7b29c7c81b1ebacfe19e30ae9de6daca8e
04626922009bffd9a2d414858e13feed8b6c56b15f7f7c66ac07e62c2cffc290
GET /static/123530/assets/img/frontend/social-networks/facebook.svg HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1; _ga=GA1.2.448081030.1664020742; _gid=GA1.2.1204205456.1664020742; _gat=1; _gat_UA-79293610-7=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"6fa18fedec395d9f8a81599f4f3bcad7"
last-modified: Mon, 19 Sep 2022 14:12:23 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486D883C26CD
x-cache: HIT
x-cache-lookup: HIT
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580504#0/gid:0/gname:root/mode:33188/mtime:1663580504#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 82
x-frame-options: DENY
cf-cache-status: HIT
age: 423912
server: cloudflare
cf-ray: 74fb5a0e9c0b0b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zz.connextra.com/dcs/tagController/tag/363d7ed38585/regstart
104.85.191.64200 OK 17 kB URL HTTP/2 zz.connextra.com/dcs/tagController/tag/363d7ed38585/regstart
IP 104.85.191.64:0
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (2631)
Hash f7b0b7ed98e5f4d9e800314062f3a6f8
c0cd10ec20c04639a71113ae27748878a98a4f4d
eca478f3b606bd1926d211cd8f0fc7248e7b4a54e58dcd89dc4ef965987e1c8c
GET /dcs/tagController/tag/363d7ed38585/regstart HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
content-type: text/javascript;charset=utf-8
content-length: 16594
cache-control: must-revalidate, max-age=248
expires: Sat, 24 Sep 2022 12:03:11 GMT
date: Sat, 24 Sep 2022 11:59:03 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
script.hotjar.com/modules.01a02f6e8b126e8c8358.js
18.164.68.15200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.01a02f6e8b126e8c8358.js
IP 18.164.68.15:0
File type Unicode text, UTF-8 text, with very long lines (48714)
Hash 88b47d3464ed75957aaec1d6b297a6e8
760b0f75cc7a47bfd293e211fc950218675cdf41
84812290eadd6391e8c8083c3016bbb7de5a43346f873080b74052eda996392b
GET /modules.01a02f6e8b126e8c8358.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65760
date: Fri, 23 Sep 2022 10:32:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "88b47d3464ed75957aaec1d6b297a6e8"
last-modified: Fri, 23 Sep 2022 10:32:03 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 3fc96eac90753d96374d6038f01cfe76.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P4
x-amz-cf-id: 1XNeS6c46jQX0czAKwzkSkbOKInlNAkKDz5J7yUlKrVdlLRJcK_hWA==
age: 91617
X-Firefox-Spdy: h2
zz.connextra.com/VulkanVegas/dcs/tagController/tagData/363d7ed38585
104.85.191.64200 OK 0 B URL HTTP/2 zz.connextra.com/VulkanVegas/dcs/tagController/tagData/363d7ed38585
IP 104.85.191.64:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /VulkanVegas/dcs/tagController/tagData/363d7ed38585 HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 41
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://vulkanvegas.com
vary: Origin
p3p: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR SAMa BUS IND UNI PUR COM NAV
content-type: text/plain
content-length: 0
date: Sat, 24 Sep 2022 11:59:03 GMT
set-cookie: CxtId=25c1ed91-dffa-4e71-b68f-87033fdcd12d; Domain=.connextra.com; Expires=Mon, 23-Sep-2024 11:59:03 GMT; Path=/; Secure; SameSite=None
VulkanVegas=P%7Cregstart%7C1%7C202209241259; Domain=.connextra.com; Expires=Sun, 24-Sep-2023 11:59:03 GMT; Path=/; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 6ac3fdf63fcd2a1e1b64db822dc1223e
5ecb3085569e043359935ce4ae7a886acc72d79c
5bb265194471caa57f7f6366750881f94d90860e285f462f92af74d23f46a57c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2106
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:03 GMT
Last-Modified: Sat, 24 Sep 2022 11:23:58 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 24 Sep 2022 11:59:03 GMT
access-control-allow-origin: *
etag: "632d6d03-2b"
expires: Sat, 24 Sep 2022 12:59:03 GMT
accept-ranges: bytes
last-modified: Fri, 23 Sep 2022 11:23:31 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
143.204.68.5200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-69edcc3187336f9b0a3fbb4c73be9fe6.html
IP 143.204.68.5:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash f6a9ca04b0687ea3c0d98e8430c8c77b
35503b2deb23091a9a9c6c68d4020dbdf879588e
8e4328ecb6b395499567369e3c227231dbdaf361f43ce315934d7a2a3abbed41
GET /box-69edcc3187336f9b0a3fbb4c73be9fe6.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 07 Sep 2022 09:17:07 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "f6a9ca04b0687ea3c0d98e8430c8c77b"
last-modified: Wed, 07 Sep 2022 09:16:57 GMT
strict-transport-security: max-age=604800; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0bd4d5448b19873aafd864e434b36f0e.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P1
x-amz-cf-id: wG4cTxGHMWRka7T6h6b3vMcUJa3SWGvA2HJGVs7Oo0e_Ge33wjbfXA==
age: 1478516
X-Firefox-Spdy: h2
sync.mathtag.com/sync/img?redir=https%3A%2F%2Fzz.connextra.com%2Fsync%2Fdata%2Fuid%2F6c883bd680%2F%5BMM_UUID%5D
185.29.134.244302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?redir=https%3A%2F%2Fzz.connextra.com%2Fsync%2Fdata%2Fuid%2F6c883bd680%2F%5BMM_UUID%5D
IP 185.29.134.244:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?redir=https%3A%2F%2Fzz.connextra.com%2Fsync%2Fdata%2Fuid%2F6c883bd680%2F%5BMM_UUID%5D HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Sat, 24 Sep 2022 11:59:04 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master cdg-pixel-x29 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=67bb632e-f108-4700-b969-57de4e468a4b; domain=.mathtag.com; path=/; expires=Sun, 22-Oct-2023 11:59:04 GMT; SameSite=None; Secure
location: https://zz.connextra.com/sync/data/uid/6c883bd680/67bb632e-f108-4700-b969-57de4e468a4b
Expires: Sat, 24 Sep 2022 11:59:03 GMT
secure.adnxs.com/seg?add=17917235&t=2
185.89.210.82307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=17917235&t=2
IP 185.89.210.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=17917235&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 11:59:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D17917235%26t%3D2
AN-X-Request-Uuid: 830728bf-0d22-4741-873c-dfc71d6ca1d7
Set-Cookie: uuid2=1676622972717440661; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 23-Dec-2022 11:59:04 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID
185.89.210.82200 OK 43 B URL HTTP/1.1 secure.adnxs.com/getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID
IP 185.89.210.82:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 11:59:04 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 98ad4479-84cd-4f36-8f93-b1373864a6cb
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 74699b8a18081d931bc11ce2d1d0764d
92133bf4512718a118b4bab6957092a1e8856abf
5b19e1304b7bec5dc60c9c1877e812cb27fd9b9aa66f94f92afbeb3702ed030d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 74699b8a18081d931bc11ce2d1d0764d
92133bf4512718a118b4bab6957092a1e8856abf
5b19e1304b7bec5dc60c9c1877e812cb27fd9b9aa66f94f92afbeb3702ed030d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-79293610-7&cid=448081030.1664020742&jid=683606402&gjid=440912032&_gid=1204205456.1664020742&_u=YEDAAEABAAAAAC~&z=873355291
142.251.1.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-79293610-7&cid=448081030.1664020742&jid=683606402&gjid=440912032&_gid=1204205456.1664020742&_u=YEDAAEABAAAAAC~&z=873355291
IP 142.251.1.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-79293610-7&cid=448081030.1664020742&jid=683606402&gjid=440912032&_gid=1204205456.1664020742&_u=YEDAAEABAAAAAC~&z=873355291 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://vulkanvegas.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 24 Sep 2022 11:59:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
widget.yhelper.net/iframe/
203.30.189.107200 OK 783 B URL HTTP/2 widget.yhelper.net/iframe/
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
Hash a24555cb5139285d4669ac775ec8493f
d52745cf697c97a4ce118c99d3f6e27b3a0d1205
0fd02537227172366349dc17d381d8fdafb8410e8bdba1afa843a118bb3a5c5f
GET /iframe/ HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Saturday, 24-Sep-2022 11:59:03 UTC
cache-control: no-store, no-cache
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb5a116a240b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D17917235%26t%3D2
185.89.210.82200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D17917235%26t%3D2
IP 185.89.210.82:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D17917235%26t%3D2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vulkanvegas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 24 Sep 2022 11:59:04 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 8825348a-0ac2-4756-b2b2-65fc8e952585
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C%sfW2Gp!]tbP6j2F-XstGt!@D]d$k9UE; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 23-Dec-2022 11:59:04 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.sca1b.amazontrust.com/
18.165.196.143200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 18.165.196.143:0
Hash 2cdc327a879f81c62de19bbb3ab38c1e
7c511b94690a43928f2c847177cd036ac15f4a64
2b1547915f1bcd72d74bd05fda692afe88d16d84c21f3326c48e4b3f7422d48b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 11:59:04 GMT
Last-Modified: Sat, 24 Sep 2022 11:20:58 GMT
Server: ECS (nyb/1D19)
X-Cache: Miss from cloudfront
Via: 1.1 133321d9ca8be95a19f574700824c0e0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: 0BAkaxbJ3Nk27KfRTFnysXboQynk1YwgnDzYHLyoFL94jJEv1-w7Xg==
Age: 2286
ocsp.sca1b.amazontrust.com/
18.165.196.143200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 18.165.196.143:0
Hash cba02a2c5e72da112ff44ef4765a7c11
c442df593dca58adf16c6f82e32dc2af9f1310c5
a354b7ef28b81d2410c831899c3b3a5dcede428c0c06850f392adfa9514fafc8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 11:59:04 GMT
Last-Modified: Sat, 24 Sep 2022 10:41:28 GMT
Server: ECS (nyb/1D2D)
X-Cache: Miss from cloudfront
Via: 1.1 f25262ad6146af3450ccd86dcbcc3780.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: 8ZG6erolyzuhVoksaXRe-VmiKuMzuByurlC4QkhrVwMAtHxKEdOp_w==
Age: 4656
zz.connextra.com/sync/data/uid/6c883bd680/67bb632e-f108-4700-b969-57de4e468a4b
104.85.191.64200 OK 64 B URL HTTP/2 zz.connextra.com/sync/data/uid/6c883bd680/67bb632e-f108-4700-b969-57de4e468a4b
IP 104.85.191.64:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28eef568735b80a8332521d787dd86bb
28f5f77711609381a229447f8560d374d0eadc62
09cf0142653a98e763b6a79dae28efd223810b8fb099beb9f573306fd626fc02
GET /sync/data/uid/6c883bd680/67bb632e-f108-4700-b969-57de4e468a4b HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vulkanvegas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
p3p: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR SAMa BUS IND UNI PUR COM NAV
vary: accept-encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
expires: Sat, 24 Sep 2022 11:59:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 24 Sep 2022 11:59:04 GMT
content-length: 64
set-cookie: CxtId=f48847e3-3676-4c2e-b525-b9b22b8c09fd; Domain=.connextra.com; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Path=/; Secure
ex_uuid=6c883bd680%2C67bb632e-f108-4700-b969-57de4e468a4b; Domain=.connextra.com; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Path=/; Secure
X-Firefox-Spdy: h2
vc.hotjar.io/sessions/1620307?s=0.25&r=0.01078478785117254
108.156.28.22204 No Content 0 B URL HTTP/2 vc.hotjar.io/sessions/1620307?s=0.25&r=0.01078478785117254
IP 108.156.28.22:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sessions/1620307?s=0.25&r=0.01078478785117254 HTTP/1.1
Host: vc.hotjar.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-store
date: Sat, 24 Sep 2022 11:59:04 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 ce738519b722f3350531751d4205f8f4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 8zhHnvPyzD_BMdtWk3IAmMIpziVTBKFv_uvE8qlCI2_lM3bagmr81A==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 74699b8a18081d931bc11ce2d1d0764d
92133bf4512718a118b4bab6957092a1e8856abf
5b19e1304b7bec5dc60c9c1877e812cb27fd9b9aa66f94f92afbeb3702ed030d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
segment.prod.bidr.io/associate-segment?buzz_key=geniussportsmedia&segment_key=geniussportsmedia-559&value=
54.229.152.130303 See Other 0 B URL HTTP/1.1 segment.prod.bidr.io/associate-segment?buzz_key=geniussportsmedia&segment_key=geniussportsmedia-559&value=
IP 54.229.152.130:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /associate-segment?buzz_key=geniussportsmedia&segment_key=geniussportsmedia-559&value= HTTP/1.1
Host: segment.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Sat, 24 Sep 2022 11:59:04 GMT
location: https://segment.prod.bidr.io/associate-segment?buzz_key=geniussportsmedia&segment_key=geniussportsmedia-559&value=&_bee_ppp=1
Server: gunicorn
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Sat, 24 Sep 2022 12:09:04 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
match.prod.bidr.io/cookie-sync/geniussports
54.217.231.82303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/geniussports
IP 54.217.231.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/geniussports HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Sat, 24 Sep 2022 11:59:04 GMT
location: https://match.prod.bidr.io/cookie-sync/geniussports?_bee_ppp=1
Server: gunicorn
set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Sat, 24 Sep 2022 12:09:04 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 443b0617be50ed9c9a81efccc9e01157
d1298731f176c8e13a878be5d37c40bf45da7ec2
a63e8b9e4e05dd3bfefb01b74196c89c6ac9c8d1809f66d750b533ca81991e24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mc.yandex.ru/watch/71281573?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115902%3Aet%3A1664020743%3Ac%3A1%3Arn%3A614437994%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C%2C%2C%2C593%3Ans%3A1664020741201%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020743%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 471 B URL HTTP/2 mc.yandex.ru/watch/71281573?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115902%3Aet%3A1664020743%3Ac%3A1%3Arn%3A614437994%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C%2C%2C%2C593%3Ans%3A1664020741201%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020743%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
Hash 443b0617be50ed9c9a81efccc9e01157
d1298731f176c8e13a878be5d37c40bf45da7ec2
a63e8b9e4e05dd3bfefb01b74196c89c6ac9c8d1809f66d750b533ca81991e24
GET /watch/71281573?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115902%3Aet%3A1664020743%3Ac%3A1%3Arn%3A614437994%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C%2C%2C%2C593%3Ans%3A1664020741201%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020743%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/71281573/1?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115902%3Aet%3A1664020743%3Ac%3A1%3Arn%3A614437994%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C%2C%2C%2C593%3Ans%3A1664020741201%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020743%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Sat, 24 Sep 2022 11:59:03 GMT
access-control-allow-origin: https://vulkanvegas.com
set-cookie: yandexuid=266449691664020743; Expires=Sun, 24-Sep-2023 11:59:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=266449691664020743; Expires=Sun, 24-Sep-2023 11:59:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2354431231664020743; Path=/; SameSite=None; Secure
i=agB5Pfi2mAPdD6wG1F9acHPP6NZgfCQQh9ASp0hNmeRmzcgQEsaX/yVQ2qAkIbYHtykesc1Dp5MSBs2zIOmavnyzJso=; Expires=Tue, 21-Sep-2032 11:59:03 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1695556743.yrts.1664020743#1695556743.yrtsi.1664020743; Expires=Sun, 24-Sep-2023 11:59:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 24-Sep-2022 11:59:03 GMT
last-modified: Sat, 24-Sep-2022 11:59:03 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pixel.mathtag.com/event/js?mt_id=1417722&mt_adid=224899&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=
23.38.200.207200 OK 1.5 kB URL HTTP/1.1 pixel.mathtag.com/event/js?mt_id=1417722&mt_adid=224899&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=
IP 23.38.200.207:0
Hash 52c40795e0acfd77caa3cc8642e670b3
9e2604094718402f9f628060fdfaa0d50b30d3a8
55839f2854d8bd01da80464cfb111767101bbdba92fae4877723500f0b95c6f4
GET /event/js?mt_id=1417722&mt_adid=224899&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3= HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1493
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x25 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sat, 24 Sep 2022 11:59:03 GMT
Date: Sat, 24 Sep 2022 11:59:04 GMT
Connection: keep-alive
Set-Cookie: uuid=6544632e-f108-4600-9fd0-ca996839adb3; domain=.mathtag.com; path=/; expires=Sun, 22-Oct-2023 11:59:04 GMT; SameSite=None; Secure
segment.prod.bidr.io/associate-segment?buzz_key=geniussportsmedia&segment_key=geniussportsmedia-559&value=&_bee_ppp=1
54.229.152.130200 OK 43 B URL HTTP/1.1 segment.prod.bidr.io/associate-segment?buzz_key=geniussportsmedia&segment_key=geniussportsmedia-559&value=&_bee_ppp=1
IP 54.229.152.130:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /associate-segment?buzz_key=geniussportsmedia&segment_key=geniussportsmedia-559&value=&_bee_ppp=1 HTTP/1.1
Host: segment.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vulkanvegas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
cache-control: no-cache, must-revalidate
content-type: image/gif
Date: Sat, 24 Sep 2022 11:59:04 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info."
pragma: no-cache
Server: gunicorn
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 43
Connection: keep-alive
match.prod.bidr.io/cookie-sync/geniussports?_bee_ppp=1
54.217.231.82303 See Other 0 B URL HTTP/1.1 match.prod.bidr.io/cookie-sync/geniussports?_bee_ppp=1
IP 54.217.231.82:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync/geniussports?_bee_ppp=1 HTTP/1.1
Host: match.prod.bidr.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vulkanvegas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 303 See Other
Date: Sat, 24 Sep 2022 11:59:04 GMT
location: https://zz.connextra.com/sync/data/uid/508a5e2dd5/
Server: gunicorn
strict-transport-security: max-age=2592000; includeSubDomains
Content-Length: 0
Connection: keep-alive
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-79293610-7&cid=448081030.1664020742&jid=683606402&_u=YEDAAEABAAAAAC~&z=1785896188
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-79293610-7&cid=448081030.1664020742&jid=683606402&_u=YEDAAEABAAAAAC~&z=1785896188
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-79293610-7&cid=448081030.1664020742&jid=683606402&_u=YEDAAEABAAAAAC~&z=1785896188 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Sep 2022 11:59:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-98516105-1&cid=448081030.1664020742&jid=1488755343&_u=IEBAAEAAAAAAAC~&z=1214017386
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-98516105-1&cid=448081030.1664020742&jid=1488755343&_u=IEBAAEAAAAAAAC~&z=1214017386
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j97&tid=UA-98516105-1&cid=448081030.1664020742&jid=1488755343&_u=IEBAAEAAAAAAAC~&z=1214017386 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 24 Sep 2022 11:59:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281573/1?page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&charset=utf-8&hittoken=1664020744_261e4dea0fd8a2b60ef458f723986916bdd432612a02affb4f49e2fb9f33c119&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020743%3Ac%3A1%3Arn%3A176152068%3Arqn%3A2%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1537%2C1537%2C21%2C%3Ans%3A1664020741201%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1664020743&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(2)ecs(0)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/71281573/1?page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&charset=utf-8&hittoken=1664020744_261e4dea0fd8a2b60ef458f723986916bdd432612a02affb4f49e2fb9f33c119&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020743%3Ac%3A1%3Arn%3A176152068%3Arqn%3A2%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1537%2C1537%2C21%2C%3Ans%3A1664020741201%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1664020743&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(2)ecs(0)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/71281573/1?page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&charset=utf-8&hittoken=1664020744_261e4dea0fd8a2b60ef458f723986916bdd432612a02affb4f49e2fb9f33c119&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020743%3Ac%3A1%3Arn%3A176152068%3Arqn%3A2%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1537%2C1537%2C21%2C%3Ans%3A1664020741201%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1664020743&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(2)ecs(0)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 194
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 24 Sep 2022 11:59:04 GMT
access-control-allow-origin: https://vulkanvegas.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 24-Sep-2022 11:59:04 GMT
last-modified: Sat, 24-Sep-2022 11:59:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/71281573/1?page-url=goal%3A%2F%2Fvulkanvegas.com%2FuuID&page-ref=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&charset=utf-8&hittoken=1664020744_261e4dea0fd8a2b60ef458f723986916bdd432612a02affb4f49e2fb9f33c119&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020743%3Ac%3A1%3Arn%3A883683346%3Arqn%3A3%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020743%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(3)ecs(0)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/71281573/1?page-url=goal%3A%2F%2Fvulkanvegas.com%2FuuID&page-ref=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&charset=utf-8&hittoken=1664020744_261e4dea0fd8a2b60ef458f723986916bdd432612a02affb4f49e2fb9f33c119&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020743%3Ac%3A1%3Arn%3A883683346%3Arqn%3A3%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020743%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(3)ecs(0)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/71281573/1?page-url=goal%3A%2F%2Fvulkanvegas.com%2FuuID&page-ref=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&charset=utf-8&hittoken=1664020744_261e4dea0fd8a2b60ef458f723986916bdd432612a02affb4f49e2fb9f33c119&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A427165704738%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020743%3Ac%3A1%3Arn%3A883683346%3Arqn%3A3%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020743%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(3)ecs(0)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 42
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 24 Sep 2022 11:59:04 GMT
access-control-allow-origin: https://vulkanvegas.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 24-Sep-2022 11:59:04 GMT
last-modified: Sat, 24-Sep-2022 11:59:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 443b0617be50ed9c9a81efccc9e01157
d1298731f176c8e13a878be5d37c40bf45da7ec2
a63e8b9e4e05dd3bfefb01b74196c89c6ac9c8d1809f66d750b533ca81991e24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 11:59:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pixel.mathtag.com/sync/iframe?mt_uuid=6544632e-f108-4600-9fd0-ca996839adb3&no_iframe=1&mt_adid=224899&source=mathtag
23.38.200.207200 OK 1.7 kB URL HTTP/1.1 pixel.mathtag.com/sync/iframe?mt_uuid=6544632e-f108-4600-9fd0-ca996839adb3&no_iframe=1&mt_adid=224899&source=mathtag
IP 23.38.200.207:0
File type gzip compressed data, max compression\012- data
Hash 5fee6018dfefdc0773cbb36f9448141a
5b02151b25567b8dc57b081f95dcf71c33546589
24e2f2bb7223a72fe3d2f8339bc9828652b875d52be4efcc5214661977a97053
GET /sync/iframe?mt_uuid=6544632e-f108-4600-9fd0-ca996839adb3&no_iframe=1&mt_adid=224899&source=mathtag HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 713
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x14 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sat, 24 Sep 2022 11:59:03 GMT
Date: Sat, 24 Sep 2022 11:59:04 GMT
Connection: keep-alive
pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv=0
23.38.200.207200 OK 0 B URL HTTP/1.1 pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv=0
IP 23.38.200.207:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comp/img?mt_id=99&ns=xx&bcdv=0 HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 0
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x24 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sat, 24 Sep 2022 11:59:03 GMT
Date: Sat, 24 Sep 2022 11:59:04 GMT
Connection: keep-alive
Set-Cookie: uuid=d252632e-f108-4000-ac75-c71859fcf4d6; domain=.mathtag.com; path=/; expires=Sun, 22-Oct-2023 11:59:04 GMT; SameSite=None; Secure
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 80c0a9794a94ec7a4cd9628854361b1f
b743e1b7c3e1af06333988a5c65da21532e8c85b
dd7e91eed60de0d13b494603015788aaa25f3540562150f488dc8945d602dcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD7E91EED60DE0D13B494603015788AAA25F3540562150F488DC8945D602DCEF"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6215
Expires: Sat, 24 Sep 2022 13:42:39 GMT
Date: Sat, 24 Sep 2022 11:59:04 GMT
Connection: keep-alive
zz.connextra.com/sync/data/uid/508a5e2dd5/
104.85.191.64200 OK 64 B URL HTTP/2 zz.connextra.com/sync/data/uid/508a5e2dd5/
IP 104.85.191.64:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28eef568735b80a8332521d787dd86bb
28f5f77711609381a229447f8560d374d0eadc62
09cf0142653a98e763b6a79dae28efd223810b8fb099beb9f573306fd626fc02
GET /sync/data/uid/508a5e2dd5/ HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vulkanvegas.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
p3p: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR SAMa BUS IND UNI PUR COM NAV
vary: accept-encoding
content-encoding: gzip
x-envoy-upstream-service-time: 0
server: istio-envoy
expires: Sat, 24 Sep 2022 11:59:04 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 24 Sep 2022 11:59:04 GMT
content-length: 64
set-cookie: CxtId=bcb37a17-1cd5-4a4a-b7a9-b5b7235a987d; Domain=.connextra.com; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Path=/; Secure
X-Firefox-Spdy: h2
widget.yhelper.net/iframe/src/assets/sounds/ChatIncomingInitial.wav
203.30.189.107206 Partial Content 28 kB URL HTTP/2 widget.yhelper.net/iframe/src/assets/sounds/ChatIncomingInitial.wav
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
File type RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 16000 Hz\012- data
Hash 1df95570b7377118f5e3aaf17713aae9
79f36413ac726b7e9fe372bb7150910d0b5d91a8
70f61fc75704bbe219317ebe36e8dc5f1c66bebe36b1debd903ae62a5913f35c
GET /iframe/src/assets/sounds/ChatIncomingInitial.wav HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://widget.yhelper.net/iframe/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sat, 24 Sep 2022 11:59:04 GMT
content-type: application/octet-stream
content-length: 27564
last-modified: Saturday, 24-Sep-2022 11:59:04 UTC
cache-control: no-store, no-cache
content-range: bytes 0-27563/27564
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb5a14fcfb0b65-OSL
X-Firefox-Spdy: h2
chat.prod.yhelper.net/socket.io/?EIO=4&transport=websocket
35.204.181.185101 Switching Protocols 0 B URL HTTP/1.1 chat.prod.yhelper.net/socket.io/?EIO=4&transport=websocket
IP 35.204.181.185:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?EIO=4&transport=websocket HTTP/1.1
Host: chat.prod.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://widget.yhelper.net
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: F6uCkIASEJONTqE51rnHhg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 24 Sep 2022 11:59:04 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ufemfMOQPIgWYMxtvpGnChDDhPw=
Strict-Transport-Security: max-age=15724800; includeSubDomains
pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv=0
23.38.200.207200 OK 0 B URL HTTP/1.1 pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv=0
IP 23.38.200.207:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comp/img?mt_id=99&ns=xx&bcdv=0 HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pixel.mathtag.com/sync/iframe?mt_uuid=6544632e-f108-4600-9fd0-ca996839adb3&no_iframe=1&mt_adid=224899&source=mathtag
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 0
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x8 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sat, 24 Sep 2022 11:59:03 GMT
Date: Sat, 24 Sep 2022 11:59:04 GMT
Connection: keep-alive
Set-Cookie: uuid=f1df632e-f108-4600-a774-a97d99b84f92; domain=.mathtag.com; path=/; expires=Sun, 22-Oct-2023 11:59:04 GMT; SameSite=None; Secure
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 55d224ac83a417772c98bc5080fb6689
a30f9044330824e70dde0dcc785890d981e6fdf5
b2ea4dea200109019a65834b98e31e8fac718a199513810a2819858be2b4470a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5039669-74cb-4d54-9208-94257c765b35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9935
x-amzn-requestid: 9eb8463d-172a-40a2-8eed-3c97b1260afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQ5FARoAMFXQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2738-3709a2f22ecc033532223b26;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:38:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e5eETCL5yFnoG4HPx0Qv8hjGnlXx5vOL4syMx9uato8nuIHkSvMezg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:58:23 GMT
age: 50441
etag: "a30f9044330824e70dde0dcc785890d981e6fdf5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
widget.yhelper.net/iframe/src/assets/icons/chat/24/close.svg
203.30.189.107200 OK 43 kB URL HTTP/2 widget.yhelper.net/iframe/src/assets/icons/chat/24/close.svg
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
Hash 794e72a403d12e1ce13ad0b2354939a6
30ab9a0622edac5441120d01b57a22620df2ce40
e121a2db5f3a9379dc8d805ff9f35efe007d633aea70e9cfdf5928fd3d277d56
GET /iframe/src/assets/icons/chat/24/close.svg HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.yhelper.net/iframe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:04 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Saturday, 24-Sep-2022 11:59:04 UTC
cache-control: no-store, no-cache
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 74fb5a14ecea0b65-OSL
X-Firefox-Spdy: h2
widget.yhelper.net/iframe/src/assets/icons/chat/24/history.svg
203.30.189.107200 OK 0 B URL HTTP/2 widget.yhelper.net/iframe/src/assets/icons/chat/24/history.svg
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
GET /iframe/src/assets/icons/chat/24/history.svg HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.yhelper.net/iframe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:04 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Saturday, 24-Sep-2022 11:59:04 UTC
cache-control: no-store, no-cache
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 74fb5a14ecf30b65-OSL
X-Firefox-Spdy: h2
vulkanvegas.com/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
203.24.108.228302 Found 0 B URL HTTP/2 vulkanvegas.com/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cakeglobal-offers.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 24 Sep 2022 11:59:02 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
location: /en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
set-cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; expires=Mon, 24 Oct 2022 11:59:02 GMT; Max-Age=2592000; path=/; secure; samesite=none
x-upstream: fpm
x-envoy-upstream-service-time: 48
x-frame-options: DENY
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb5a07dc5db509-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,600,700,800&subset=latin-ext
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,600,700,800&subset=latin-ext
IP 142.250.74.10:0
GET /css?family=Roboto:400,600,700,800&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Sep 2022 11:59:02 GMT
date: Sat, 24 Sep 2022 11:59:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytical-system.com/xpZZqZ?se_referrer=&default_keyword=imia.in&&frm604f98d56b92b=script604f98d56b92d&_cid=f020bb55-35d3-e76d-9faa-c8fe2a7ae613
172.67.193.45200 OK 0 B URL HTTP/2 analytical-system.com/xpZZqZ?se_referrer=&default_keyword=imia.in&&frm604f98d56b92b=script604f98d56b92d&_cid=f020bb55-35d3-e76d-9faa-c8fe2a7ae613
IP 172.67.193.45:0
GET /xpZZqZ?se_referrer=&default_keyword=imia.in&&frm604f98d56b92b=script604f98d56b92d&_cid=f020bb55-35d3-e76d-9faa-c8fe2a7ae613 HTTP/1.1
Host: analytical-system.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imia.in/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:58 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate,post-check=0,pre-check=0
expires: 0
last-modified: Sat, 24 Sep 2022 11:58:58 GMT
pragma: no-cache
set-cookie: _subid=376l60j9gr93;Expires=Tuesday, 25-Oct-2022 11:58:58 GMT;Max-Age=2678400;Path=/
c4ab7=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjU5MlwiOjE2NjQwMjA3Mzh9LFwiY2FtcGFpZ25zXCI6e1wiMzlcIjoxNjY0MDIwNzM4fSxcInRpbWVcIjoxNjY0MDIwNzM4fSJ9.Ze6MWBrd2gyltrtI5lVHVUIfSZYgpwASJHnBUKJkC3c;Expires=Tuesday, 18-Jun-2075 23:57:56 GMT;Max-Age=1664107138;Path=/
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9oNSuYDJ%2Bg%2BncHUrv8BMm0GJkO5bSBZ26EflsefOR2jj5cafbXqeIx9x8HtO1e%2FROwP92uARN%2B8nJTVIIpWrq36LnzhcMoUWE%2BVOJ7zLSaGk8T3WcqbBReHaie%2FLjS5u4V5fz5fvAZY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fb59ef5fd40b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cakeglobal-offers.com/js/base64.js
172.67.139.150200 OK 0 B URL HTTP/2 cakeglobal-offers.com/js/base64.js
IP 172.67.139.150:0
GET /js/base64.js HTTP/1.1
Host: cakeglobal-offers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/?s=54&ref=ca_w65193c80259l5842gnop486_&from=aHR0cHM6Ly9pbWlhLmluLw%3D%3D&encoded_url=cmVnaXN0ZXI%3D
Cookie: http_referer=https%3A%2F%2Fimia.in%2F; visit5b8c229b8a63492ed15739b27a39a68e=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: application/javascript
last-modified: Thu, 11 Aug 2022 07:22:23 GMT
etag: W/"62f4ae2f-eca"
expires: Sat, 24 Sep 2022 16:17:39 GMT
cache-control: max-age=86400
x-xss-protection: 1; mode=block
strict-transport-security: max-age=300; includeSubDomains;
cf-cache-status: HIT
age: 70880
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zwpAarv%2FBEHV8Fj%2Bwnl16iKL7QuvsfMPSNG015maRKOlKbfc9vDxRZ2eiTK1KakJIyb9uT6f1UwkO7%2BfQfsjuqhKelEmYkPH7wP9zYgUSnU%2FM6P6d3JbRy8ebngEtIlVERZ5lm6ljyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb59f5f871b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cakeglobal-offers.com/
Connection: keep-alive
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:02 GMT
content-type: text/html; charset=UTF-8
cache-control: private
link: </static/123530/assets/css/popups.css>; rel="preload"; as="style",</static/123530/assets/css/main.css>; rel="preload"; as="style",</static/123530/assets/js/main.js>; rel="preload"; as="script",</static/123530/assets/js/svg-icon-polyfill.min.js>; rel="preload"; as="script"
set-cookie: actionPay=deleted; expires=Fri, 24 Sep 2021 11:59:01 GMT; Max-Age=0; path=/; secure; httponly; samesite=none
refCode=ca_w65193c80259l5842gnop486_; expires=Mon, 24 Oct 2022 11:59:02 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none
affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; expires=Mon, 24 Oct 2022 11:59:02 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none
landingId=5842; expires=Mon, 24 Oct 2022 11:59:02 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=none
first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; expires=Sat, 08 Oct 2022 11:59:02 GMT; Max-Age=1209600; path=/; secure; samesite=none
x-upstream: fpm
x-envoy-upstream-service-time: 73
x-frame-options: DENY
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb5a089d67b509-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-h2-pushed: </static/123530/assets/css/popups.css>,</static/123530/assets/css/main.css>,</static/123530/assets/js/main.js>,</static/123530/assets/js/svg-icon-polyfill.min.js>
X-Firefox-Spdy: h2
mc.yandex.ru/watch/54336874?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A185109160280%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A875319310%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(1)ecs(0)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/54336874?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A185109160280%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A875319310%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(1)ecs(0)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
GET /watch/54336874?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A185109160280%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A875319310%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(1)ecs(0)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/54336874/1?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A3%3Adp%3A0%3Als%3A185109160280%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A875319310%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr%2814%29mc%28p-1-up-1-g-1%29clc%280-0-0%29aw%281%29rqnt%281%29ecs%280%29fip%281%29rqnl%281%29ti%282%29
date: Sat, 24 Sep 2022 11:59:04 GMT
access-control-allow-origin: https://vulkanvegas.com
set-cookie: yandexuid=2572494321664020744; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=2572494321664020744; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1327002921664020744; Path=/; SameSite=None; Secure
i=+9EwDQt82+QyM8TLVVecbUIbc8WTNGyvychjtp7e/z0xYb9dDseLqHDKMMPg9qTxPpTNT9rdxUDwWOlg3MchuTU0akQ=; Expires=Tue, 21-Sep-2032 11:59:01 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1695556744.yrts.1664020744#1695556744.yrtsi.1664020744; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 24-Sep-2022 11:59:04 GMT
last-modified: Sat, 24-Sep-2022 11:59:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
04bd958e-cee1-47a0-b01a-8d49faefc005.snippet.antillephone.com/apg-seal.js
18.164.68.34200 OK 0 B URL HTTP/2 04bd958e-cee1-47a0-b01a-8d49faefc005.snippet.antillephone.com/apg-seal.js
IP 18.164.68.34:0
GET /apg-seal.js HTTP/1.1
Host: 04bd958e-cee1-47a0-b01a-8d49faefc005.snippet.antillephone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Sat, 24 Sep 2022 11:59:02 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"c82-9G6FhZo95AMeKiFKdhvw2NPTAtQ"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb5a0aee9d71f8-LHR
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 35f1076ba1ff613e428e9cf6a2f57580.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P4
x-amz-cf-id: Il5BpiQ9Sk1XVBQmvAWLn6DHT6IokTSI_Af7uKciPI6ItFk4wgfh_w==
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/js/chunks/23.a28cd798fcef7036c0cc.js
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/static/123530/assets/js/chunks/23.a28cd798fcef7036c0cc.js
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /static/123530/assets/js/chunks/23.a28cd798fcef7036c0cc.js HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: application/javascript
content-security-policy: block-all-mixed-content
etag: W/"9fb97c91a3987be13fee269a3299d427"
last-modified: Mon, 19 Sep 2022 14:12:20 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486D0B12EB8E
x-cache: HIT
x-cache-lookup: HIT
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580503#0/gid:0/gname:root/mode:33188/mtime:1663580503#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 33
x-frame-options: DENY
cf-cache-status: HIT
age: 423972
server: cloudflare
cf-ray: 74fb5a0d7b360b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/js/chunks/clipboard.3cbddadcf14065a9866e.js
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/static/123530/assets/js/chunks/clipboard.3cbddadcf14065a9866e.js
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /static/123530/assets/js/chunks/clipboard.3cbddadcf14065a9866e.js HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: application/javascript
content-security-policy: block-all-mixed-content
etag: W/"1b68be35d39f07099f9b4b67a60d7374"
last-modified: Mon, 19 Sep 2022 14:11:40 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486A5325E138
x-cache: MISS
x-cache-lookup: MISS
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580503#0/gid:0/gname:root/mode:33188/mtime:1663580503#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 0
x-frame-options: DENY
cf-cache-status: HIT
age: 423972
server: cloudflare
cf-ray: 74fb5a0d7b380b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
imia.in/
172.67.205.22200 OK 0 B IP 172.67.205.22:0
GET / HTTP/1.1
Host: imia.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:57 GMT
content-type: text/html;charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fpzUTJtOP12kAhtTiSiGwZ%2BU36fE2xw0TwBPiFPzpJbmPft1TkEzhWj7y71dk4a0cMHTIhlY2xmmvMkn3uljVeXKav26SIdcIh5%2FcJ%2FtdCe4ut3bJGWyZRvJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fb59e03d8d1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cakeglobaloffers.com/l/6065722c13c7e2425a4345e4
172.67.153.72302 Found 0 B URL HTTP/2 cakeglobaloffers.com/l/6065722c13c7e2425a4345e4
IP 172.67.153.72:0
Analyzer Verdict Alert fortinet Phishing
GET /l/6065722c13c7e2425a4345e4 HTTP/1.1
Host: cakeglobaloffers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://imia.in/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 24 Sep 2022 11:58:58 GMT
content-type: text/html; charset=UTF-8
location: https://cakeglobaloffers.com/landingpages/vegas4en/index.php?ref=ca_w65193c80259l5842gnop486_
x-xss-protection: 1; mode=block
strict-transport-security: max-age=300; includeSubDomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZGFMlhsiMOvzhaQY6oZsyqHtzp7rWqkYfOoogUQYh5tTCl0lWVR6fqOY7iWwL%2B5HGsMvo1gPezxrKnRyIHlgVdE5K1eHO34IACFfL2ZNbYQoVDDRyVGYB7hWP3Upnp9qudoBmv4msA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fb59f218681c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cakeglobal-offers.com/?s=54&ref=ca_w65193c80259l5842gnop486_&from=aHR0cHM6Ly9pbWlhLmluLw%3D%3D&encoded_url=cmVnaXN0ZXI%3D
172.67.139.150200 OK 0 B URL HTTP/2 cakeglobal-offers.com/?s=54&ref=ca_w65193c80259l5842gnop486_&from=aHR0cHM6Ly9pbWlhLmluLw%3D%3D&encoded_url=cmVnaXN0ZXI%3D
IP 172.67.139.150:0
GET /?s=54&ref=ca_w65193c80259l5842gnop486_&from=aHR0cHM6Ly9pbWlhLmluLw%3D%3D&encoded_url=cmVnaXN0ZXI%3D HTTP/1.1
Host: cakeglobal-offers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://imia.in/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: text/html; charset=UTF-8
set-cookie: http_referer=https%3A%2F%2Fimia.in%2F
visit5b8c229b8a63492ed15739b27a39a68e=1; expires=Mon, 24-Oct-2022 11:58:59 GMT; Max-Age=2592000
x-xss-protection: 1; mode=block
strict-transport-security: max-age=300; includeSubDomains;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vjAPRlpJH3P1t3ekZvH%2FXA8nalp1TAF13RCg%2BvMKCtRUG%2Fn%2FUD58XV4cWQG0nfhmc0HJZk1EVuVM0u1QFjzOI%2FRlwL%2BG1vfskV0M9X2xUbBqbB83OIcpXeq0kUeR8NGli7G2U8eiRIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74fb59f51f81b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans+Condensed:300,700|Open+Sans:400,600,700&subset=cyrillic
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans+Condensed:300,700|Open+Sans:400,600,700&subset=cyrillic
IP 142.250.74.10:0
GET /css?family=Open+Sans+Condensed:300,700|Open+Sans:400,600,700&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Sep 2022 11:59:02 GMT
date: Sat, 24 Sep 2022 11:59:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/js/chunks/503.263c1426ff007b228315.js
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/static/123530/assets/js/chunks/503.263c1426ff007b228315.js
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /static/123530/assets/js/chunks/503.263c1426ff007b228315.js HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: application/javascript
content-security-policy: block-all-mixed-content
etag: W/"c15521a47e600e85cdd114e217016e5c"
last-modified: Mon, 19 Sep 2022 14:11:40 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486B213B1D21
x-cache: MISS
x-cache-lookup: MISS
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580503#0/gid:0/gname:root/mode:33188/mtime:1663580503#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 2
x-frame-options: DENY
cf-cache-status: HIT
age: 423972
server: cloudflare
cf-ray: 74fb5a0d8b3a0b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/js/chunks/455.740bd186697aff883db0.js
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/static/123530/assets/js/chunks/455.740bd186697aff883db0.js
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /static/123530/assets/js/chunks/455.740bd186697aff883db0.js HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: application/javascript
content-security-policy: block-all-mixed-content
etag: W/"fe0e390bb9136d6d82d8319db037d593"
last-modified: Mon, 19 Sep 2022 14:11:40 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486D0A8A9769
x-cache: MISS
x-cache-lookup: MISS
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580503#0/gid:0/gname:root/mode:33188/mtime:1663580503#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 1091
x-frame-options: DENY
cf-cache-status: HIT
age: 423972
server: cloudflare
cf-ray: 74fb5a0d7b390b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/img/frontend/social-networks/twitter.svg
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/static/123530/assets/img/frontend/social-networks/twitter.svg
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /static/123530/assets/img/frontend/social-networks/twitter.svg HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1; _ga=GA1.2.448081030.1664020742; _gid=GA1.2.1204205456.1664020742; _gat=1; _gat_UA-79293610-7=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: image/svg+xml
content-security-policy: block-all-mixed-content
etag: W/"6443f6e48d52e50c4e5ab23977573200"
last-modified: Mon, 19 Sep 2022 14:12:21 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486D8BA55226
x-cache: HIT
x-cache-lookup: HIT
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580504#0/gid:0/gname:root/mode:33188/mtime:1663580504#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 23
x-frame-options: DENY
cf-cache-status: HIT
age: 423912
server: cloudflare
cf-ray: 74fb5a0e9c040b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widget.yhelper.net/iframe/src/assets/icons/chat/24/hide.svg
203.30.189.107200 OK 0 B URL HTTP/2 widget.yhelper.net/iframe/src/assets/icons/chat/24/hide.svg
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
GET /iframe/src/assets/icons/chat/24/hide.svg HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.yhelper.net/iframe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:04 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Saturday, 24-Sep-2022 11:59:04 UTC
cache-control: no-store, no-cache
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 74fb5a14ece80b65-OSL
X-Firefox-Spdy: h2
vulkanvegas.com/graphql
203.24.108.228200 OK 0 B IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
POST /graphql HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
content-type: application/json
X-Requested-With: XMLHttpRequest
X-Gc-Locale: en
Origin: https://vulkanvegas.com
Content-Length: 248
Connection: keep-alive
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1; _ga=GA1.2.448081030.1664020742; _gid=GA1.2.1204205456.1664020742; _gat=1; _gat_UA-79293610-7=1; _ym_uid=16640207431002811156; _ym_d=1664020743
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:04 GMT
content-type: application/json
cache-control: private
set-cookie: actionPay=deleted; expires=Fri, 24 Sep 2021 11:59:02 GMT; Max-Age=0; path=/; secure; httponly; samesite=none
first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; expires=Sat, 08 Oct 2022 11:59:03 GMT; Max-Age=1209600; path=/; secure; samesite=none
x-upstream: fpm
x-envoy-upstream-service-time: 59
x-frame-options: DENY
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74fb5a117e420b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widget.yhelper.net/iframe/main.407b6571.js?771471fe4f6ecdc2e68c
203.30.189.107200 OK 0 B URL HTTP/2 widget.yhelper.net/iframe/main.407b6571.js?771471fe4f6ecdc2e68c
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
GET /iframe/main.407b6571.js?771471fe4f6ecdc2e68c HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.yhelper.net/iframe/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:04 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Saturday, 24-Sep-2022 11:59:04 UTC
cache-control: no-store, no-cache
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 74fb5a120abd0b65-OSL
X-Firefox-Spdy: h2
mc.yandex.ru/watch/37735675?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1448067590604%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A533171011%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(1)ecs(0)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/37735675?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1448067590604%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A533171011%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(1)ecs(0)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
GET /watch/37735675?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1448067590604%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A533171011%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr(14)mc(p-1-up-1-g-1)clc(0-0-0)aw(1)rqnt(1)ecs(0)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vulkanvegas.com
Connection: keep-alive
Referer: https://vulkanvegas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/37735675/1?wmode=7&page-url=https%3A%2F%2Fvulkanvegas.com%2Fen%2Fregister%3Fref%3Dca_w65193c80259l5842gnop486_%26affdata%255Bsubdata%255D%3D4f1203a22168e7242d98f0e2231a554c%26affdata%255Bgeo%255D%3Dno%26affdata%255Brotator%255D%3D80259%26affdata%255Blanding%255D%3D5842%26affdata%255Bsrc%255D%3DaW1pYS5pbg%253D%253D&page-ref=https%3A%2F%2Fcakeglobal-offers.com%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A675%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A2%3Adp%3A0%3Als%3A1448067590604%3Ahid%3A946243165%3Az%3A0%3Ai%3A20220924115903%3Aet%3A1664020744%3Ac%3A1%3Arn%3A533171011%3Arqn%3A1%3Au%3A16640207431002811156%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C110%2C0%2C196%2C0%2C%2C240%2C1%2C1537%2C1537%2C21%2C593%3Aeu%3A1%3Ans%3A1664020741201%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664020744%3At%3AVulkan%20Vegas%20Register%3A%20Fast%20Way%20to%20Create%20Your%20Account&t=gdpr%2814%29mc%28p-1-up-1-g-1%29clc%280-0-0%29aw%281%29rqnt%281%29ecs%280%29fip%281%29rqnl%281%29ti%282%29
date: Sat, 24 Sep 2022 11:59:04 GMT
access-control-allow-origin: https://vulkanvegas.com
set-cookie: yandexuid=6701378081664020744; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6701378081664020744; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2257601381664020744; Path=/; SameSite=None; Secure
i=mZ1GNrbBKASOpTYLbPsHc8Kdky8jvnBNmyWKD85eg09Ay19IVcGPRI+AXLe+tAoo1u12qFtFzAWXOymM2slQM6t1AlI=; Expires=Tue, 21-Sep-2032 11:59:00 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1695556744.yrts.1664020744#1695556744.yrtsi.1664020744; Expires=Sun, 24-Sep-2023 11:59:04 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 24-Sep-2022 11:59:04 GMT
last-modified: Sat, 24-Sep-2022 11:59:04 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cakeglobal-offers.com/js/utils.js
172.67.139.150200 OK 0 B URL HTTP/2 cakeglobal-offers.com/js/utils.js
IP 172.67.139.150:0
GET /js/utils.js HTTP/1.1
Host: cakeglobal-offers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cakeglobal-offers.com/?s=54&ref=ca_w65193c80259l5842gnop486_&from=aHR0cHM6Ly9pbWlhLmluLw%3D%3D&encoded_url=cmVnaXN0ZXI%3D
Cookie: http_referer=https%3A%2F%2Fimia.in%2F; visit5b8c229b8a63492ed15739b27a39a68e=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:58:59 GMT
content-type: application/javascript
last-modified: Thu, 11 Aug 2022 07:22:23 GMT
etag: W/"62f4ae2f-ced"
expires: Sat, 24 Sep 2022 16:17:39 GMT
cache-control: max-age=86400
x-xss-protection: 1; mode=block
strict-transport-security: max-age=300; includeSubDomains;
cf-cache-status: HIT
age: 70880
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IrLJ%2F8j%2FWO0My5ZzUmfj2E4Iu2oTejgfYI7g%2FWT61vvdudlD4CghXhCIoZa66mxUoLvZRQr6BLvYwSGRc3zdNM9cIYTk%2BAALIWprbVbzCNBN29PcLV2cIrVAdeiiI3oY4eRmJD4lxlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fb59f5f873b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/css/popup.css?v=75e3421f52a6443671e4
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/static/123530/assets/css/popup.css?v=75e3421f52a6443671e4
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /static/123530/assets/css/popup.css?v=75e3421f52a6443671e4 HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: text/css
content-security-policy: block-all-mixed-content
etag: W/"7cd3f76eeef64e57d36a067343fbba11"
last-modified: Mon, 19 Sep 2022 14:12:21 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486D0B995FED
x-cache: HIT
x-cache-lookup: HIT
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580503#0/gid:0/gname:root/mode:33188/mtime:1663580503#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 598
x-frame-options: DENY
cf-cache-status: HIT
age: 423972
server: cloudflare
cf-ray: 74fb5a0d8b3c0b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
vulkanvegas.com/static/123530/assets/js/chunks/popup.160dbd0564bcc2f2d4d0.js
203.24.108.228200 OK 0 B URL HTTP/2 vulkanvegas.com/static/123530/assets/js/chunks/popup.160dbd0564bcc2f2d4d0.js
IP 203.24.108.228:0
ASN #209242 Cloudflare London, LLC
GET /static/123530/assets/js/chunks/popup.160dbd0564bcc2f2d4d0.js HTTP/1.1
Host: vulkanvegas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vulkanvegas.com/en/register?ref=ca_w65193c80259l5842gnop486_&affdata%5Bsubdata%5D=4f1203a22168e7242d98f0e2231a554c&affdata%5Bgeo%5D=no&affdata%5Brotator%5D=80259&affdata%5Blanding%5D=5842&affdata%5Bsrc%5D=aW1pYS5pbg%3D%3D
Cookie: uuid=fc1a405a-75fd-4762-bd86-5c0f5cd85986; refCode=ca_w65193c80259l5842gnop486_; affdata=subdata%3D4f1203a22168e7242d98f0e2231a554c%26geo%3Dno%26rotator%3D80259%26landing%3D5842%26src%3DaW1pYS5pbg%253D%253D; landingId=5842; first_entrypoint=L2VuL3JlZ2lzdGVyP3JlZj1jYV93NjUxOTNjODAyNTlsNTg0Mmdub3A0ODZfJmFmZmRhdGElNUJzdWJkYXRhJTVEPTRmMTIwM2EyMjE2OGU3MjQyZDk4ZjBlMjIzMWE1NTRjJmFmZmRhdGElNUJnZW8lNUQ9bm8mYWZmZGF0YSU1QnJvdGF0b3IlNUQ9ODAyNTkmYWZmZGF0YSU1QmxhbmRpbmclNUQ9NTg0MiZhZmZkYXRhJTVCc3JjJTVEPWFXMXBZUzVwYmclM0QlM0Q%3D; _ym_debug=1; PageNumber=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:03 GMT
content-type: application/javascript
content-security-policy: block-all-mixed-content
etag: W/"eb924139afe00f1d728625b2c5c37a2f"
last-modified: Mon, 19 Sep 2022 14:11:40 GMT
vary: Origin, Accept-Encoding
x-amz-request-id: 1716486CFAC8989F
x-cache: MISS
x-cache-lookup: MISS
x-xss-protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1663580503#0/gid:0/gname:root/mode:33188/mtime:1663580503#0/uid:0/uname:root
expires: Tue, 21 Sep 2032 11:59:03 GMT
cache-control: public, max-age=315360000
x-envoy-upstream-service-time: 2
x-frame-options: DENY
cf-cache-status: HIT
age: 423972
server: cloudflare
cf-ray: 74fb5a0d8b3e0b49-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widget.yhelper.net/iframe/src/assets/icons/chat/24/chat.svg
203.30.189.107200 OK 0 B URL HTTP/2 widget.yhelper.net/iframe/src/assets/icons/chat/24/chat.svg
IP 203.30.189.107:0
ASN #209242 Cloudflare London, LLC
GET /iframe/src/assets/icons/chat/24/chat.svg HTTP/1.1
Host: widget.yhelper.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.yhelper.net/iframe/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 11:59:04 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Saturday, 24-Sep-2022 11:59:04 UTC
cache-control: no-store, no-cache
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 74fb5a14eceb0b65-OSL
X-Firefox-Spdy: h2