tracking.findingthehelpneeded.com/tracking/click?d=t8_lD-Zu82hlm-a7syJzIAfujJf2WFuIeFc2ElVqRpRswxtSTQXFiHaevy4ghpK5KyLyVKpVWjhNyAnKUfUrlK2PHdMagOhEVZhEP9o5ffxDb1TiyA4mBiJ520fduoCiL5At0lGJLV7Wyb9Bp8VIf6w1
302 Found 150 B URL HTTP/1.1 tracking.findingthehelpneeded.com/tracking/click?d=t8_lD-Zu82hlm-a7syJzIAfujJf2WFuIeFc2ElVqRpRswxtSTQXFiHaevy4ghpK5KyLyVKpVWjhNyAnKUfUrlK2PHdMagOhEVZhEP9o5ffxDb1TiyA4mBiJ520fduoCiL5At0lGJLV7Wyb9Bp8VIf6w1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash ce0077275c2831c97d694a542aa148d2
f451f5d9fb1f5b8aa62286d8dd63997c40a2070a
73cf76a144a3928c0c90a5f7f3c7e64e37f970dc67ae0e436d33132805a0bb0a
GET /tracking/click?d=t8_lD-Zu82hlm-a7syJzIAfujJf2WFuIeFc2ElVqRpRswxtSTQXFiHaevy4ghpK5KyLyVKpVWjhNyAnKUfUrlK2PHdMagOhEVZhEP9o5ffxDb1TiyA4mBiJ520fduoCiL5At0lGJLV7Wyb9Bp8VIf6w1 HTTP/1.1
Host: tracking.findingthehelpneeded.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://willingtohelpyou.com/o7tl
Server: Microsoft-IIS/10.0
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-ElasticEmail-ApiKey, X-ElasticEmail-BrowserToken, X-ElasticEmail-ImpersonateAs
Access-Control-Expose-Headers: X-ElasticEmail-BrowserToken, X-Total-Count, X-ElasticEmail-AccessToken
X-Robots-Tag: noindex, nofollow
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Mon, 06 Feb 2023 16:54:23 GMT
Content-Length: 150
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3877
Expires: Mon, 06 Feb 2023 17:59:00 GMT
Date: Mon, 06 Feb 2023 16:54:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14991
Expires: Mon, 06 Feb 2023 21:04:14 GMT
Date: Mon, 06 Feb 2023 16:54:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 06 Feb 2023 16:34:05 GMT
content-type: application/json
age: 1218
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11572
Expires: Mon, 06 Feb 2023 20:07:15 GMT
Date: Mon, 06 Feb 2023 16:54:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: oKdgqyyTjxNLuv1JVYNG8LLrFRsWQksQDqzoZK9tUZqf1RvNJzxzZcEvqOe5geWjMlHOSCiCc30=
x-amz-request-id: KMA7MXD80H6Q7XY3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 06 Feb 2023 16:53:46 GMT
age: 37
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 83e665cc2909fee25dc9fdddef5951e5
c3640b30e4239972d8e95de505ec90645ecf5be8
409cfa85a26e43fad90cdba1851cdb7545366fcf5e5db4ff00983a31df47f30d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:23 GMT
Server: ECS (amb/6BC2)
Content-Length: 280
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:54:23 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 06 Feb 2023 16:07:20 GMT
age: 2824
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10718
Expires: Mon, 06 Feb 2023 19:53:02 GMT
Date: Mon, 06 Feb 2023 16:54:24 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 83e665cc2909fee25dc9fdddef5951e5
c3640b30e4239972d8e95de505ec90645ecf5be8
409cfa85a26e43fad90cdba1851cdb7545366fcf5e5db4ff00983a31df47f30d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:24 GMT
Last-Modified: Mon, 06 Feb 2023 16:54:23 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 280
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WpIKAzQEOhX2LVaZiQVZwA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6P7wr/dziBFCrj8DV3Hp0RvysnM=
neptunebest.com/a90c7600896d9eb5baf8f4983b80aacb6/?sid1=&sid2=&sid3=&sid4=
200 OK 6.6 kB URL HTTP/1.1 neptunebest.com/a90c7600896d9eb5baf8f4983b80aacb6/?sid1=&sid2=&sid3=&sid4=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (329)
Hash 676477555736c114b4e8fd5e1684d68d
b781b583d0fbd964a2a33c02ded913536dd027fa
9062a8faaff232e438ef383bbffb3b1e62a37a048b317c744e88bce339dbaaf8
GET /a90c7600896d9eb5baf8f4983b80aacb6/?sid1=&sid2=&sid3=&sid4= HTTP/1.1
Host: neptunebest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 17:06:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.33
Set-Cookie: clkcheck28106=f203b1d73acb5d6038b0f1e7ab88e89e_201245; expires=Wed, 08-Mar-2023 17:06:40 GMT; Max-Age=2592000; path=/; SameSite=Lax
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MB79N3N
200 OK 41 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MB79N3N
IP
File type ASCII text, with very long lines (2031)
Hash caf33c0388b410fad248c40073755cb3
71c5d4ecb8db40a497150fe8fcf5c0b2f01e4654
728133520c0b5403fb6b550c7def638be68e22928c73c400011af6ec0f0b4eff
GET /gtm.js?id=GTM-MB79N3N HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neptunebest.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 16:54:25 GMT
expires: Mon, 06 Feb 2023 16:54:25 GMT
cache-control: private, max-age=900
last-modified: Mon, 06 Feb 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 40806
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
neptunebest.com/fp.php
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /fp.php HTTP/1.1
Host: neptunebest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain;charset=UTF-8
Content-Length: 897
Origin: http://neptunebest.com
Connection: keep-alive
Referer: http://neptunebest.com/a90c7600896d9eb5baf8f4983b80aacb6/?sid1=&sid2=&sid3=&sid4=
Cookie: clkcheck28106=f203b1d73acb5d6038b0f1e7ab88e89e_201245
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 06 Feb 2023 17:06:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.33
ocsp.digicert.com/
200 OK 278 B IP
Hash 721411afb4969add2716f991522337d8
a535be6b21b8a209ede33f432a1239782b7f0b3d
5a4832cdcf8d11ee8e10225721a9d5eafdc37c222ca17b793a1542f8deb4d99b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5324
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:25 GMT
Last-Modified: Mon, 06 Feb 2023 15:25:41 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 278
signals.aimtell.com/matches?token=f5d7c95ea0af0ed4512d414529c2dffa
200 OK 43 B URL HTTP/2 signals.aimtell.com/matches?token=f5d7c95ea0af0ed4512d414529c2dffa
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /matches?token=f5d7c95ea0af0ed4512d414529c2dffa HTTP/1.1
Host: signals.aimtell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neptunebest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:25 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, *
access-control-allow-methods: GET,HEAD,OPTIONS
vary: Accept-Encoding
server: cloudflare
cf-ray: 7955685a0aa90b31-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 79a7ad23c08af8e47376b1360976ebef
e7f607cb99fcd10140df1826a31e78940891004d
dfa6c721f459e5b1666ded015ff52761b45a1911b767b2e68baa666e7132ef32
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121015
Date: Mon, 06 Feb 2023 16:54:25 GMT
Etag: "63e0540b-1d7"
Expires: Wed, 08 Feb 2023 02:31:20 GMT
Last-Modified: Mon, 06 Feb 2023 01:12:43 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NE-jNP1nZo82NDGl-SQuUTk0-uyxloqPwoOUyZoa2juJzEBzl2KCpw==
Age: 4717
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6856
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:54:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6856
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:54:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6856
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:54:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b4ea902c3e097daaa31810cb66d585a
97dfbd81d31b43196d8a4bd2fa3ff8a5cc115049
0291ed72c3115d6b6cf8c001b13bbc4ad517d76242b6cbed9db5ee1162572d3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0291ED72C3115D6B6CF8C001B13BBC4AD517D76242B6CBED9DB5EE1162572D3F"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6856
Expires: Mon, 06 Feb 2023 18:48:41 GMT
Date: Mon, 06 Feb 2023 16:54:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7dbe304b5138a360ff07a9842bcf6a7f
00572f7667e322c9ef34bc35b7998c1c172dd34c
d63c58d6c96e23c61b92272de8c2aab01f4cf85f3420cc434c05447d355b1c77
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F085f1306-f595-4e1a-8162-7d3d1f959ac3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9108
x-amzn-requestid: a3bffa19-86ce-4a59-b826-551deddb3e9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fostZG2xIAMF0wQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9c188-18acd7311c6190c9486e86ac;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 01:34:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oTDUyAr6LGDkH6Q8QCyx0Rc-wCE-fh5sEfjFm5jheeApNuv7VLh4Ow==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:45:42 GMT
age: 68923
etag: "00572f7667e322c9ef34bc35b7998c1c172dd34c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ccc8078cc937b7de0b299bcee1496f1b
395f04af71767acc9516387c8b07bde08968fdfe
cf959fc4a72d80dcab20c235bec6d21eadaab87efa7a8969744cd228628ba050
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9808
x-amzn-requestid: 75cc8041-19f5-4994-96b6-b14d3c90ec6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiSFZAIAMF65g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-355d272c345c8c37595b4bb2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T7YlRZ936VEDkBvo2YKrS3GbyEh1xzC8W-50KiODzFjTnQb-hvkKpw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 22:10:54 GMT
age: 67411
etag: "395f04af71767acc9516387c8b07bde08968fdfe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d8c3ebd17a435401c7f9fe3b8f842be
f2106be148fea23bf961fcdb69ea4cb127aa5f3e
ee708e68414539c75ddc077e0be7b75a86fd4fc9b6c1ddd1da86d0b9aca35558
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4442
x-amzn-requestid: 1bb3d1b3-ff58-4b0d-9a2b-c25797530c5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiQG1JoAMFRtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-1bb478453ececa9613e7e4a2;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9U-7wtL1xaLoE87hXcnrcTp-LCseI5ne10812N_9F_arqyi703w7Ng==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:10 GMT
age: 68655
etag: "f2106be148fea23bf961fcdb69ea4cb127aa5f3e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9046d887fd45a0940e31a74173d17798
1ff698b9cf660165e846dfc4770f29852aedce45
0c7b0e1250aa7718b7b35b80a1442f62e94ace1fb578fb781ec8204ee96386d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10514
x-amzn-requestid: ac2a383b-833d-4dae-9bd9-43dc3d9e373d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiPEIyoAMFqUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-436bb6816b269ce45b9f8600;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RYNzle5-l5dOMPWb2Bmu_T5aIJw9NX2FKuJsej8hzpYZcgD6coH9SA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:50:09 GMT
age: 68656
etag: "1ff698b9cf660165e846dfc4770f29852aedce45"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 352e4166a431e781e56cc7f169c7f8ca
866b76c34076cf2e18c6a071336fcf4f581f3c4d
75ba13b601f4b00c5b091eb29e7f6739ffee3e127bd6d3c4b35cc967bb6d354a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9779
x-amzn-requestid: 101b984b-9c04-4d07-b1fe-3d888f4bcd49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ftcNRFV_oAMF2_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dba721-72679ba0378015034e17b8ca;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 12:05:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FRZf4nkQyttwihy5BBbuHzT9lYQvBPqcOTdT5esu46vqMTvXAi5aQw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:57:24 GMT
age: 68221
etag: "866b76c34076cf2e18c6a071336fcf4f581f3c4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad2298793399bf73c51c7d60952065c1
816bd4c36ceea2c46489ae72fde0b4a94c7c4bef
dc540d64e5e0835c7007e89ca3b5dd620b43a87e13309f323f3843a5f908a199
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8649
x-amzn-requestid: f85f3c9d-95c1-4db6-af5f-595070fe46c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f4oiRHzboAMFQCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e02141-6eed72bf20887cac6dc1a56a;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z7HTSLYJmhfIGlCjeG2EeN3q2Cd9vKlq71nqo3iIuhwkgwlEAlRPmQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 21:51:02 GMT
age: 68603
etag: "816bd4c36ceea2c46489ae72fde0b4a94c7c4bef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3c2426cdaf2e901e98a399205f2ef359
f7c172f08df6a020cef9b857498e6538975dbc4a
a3eaf78c7429076fb350256f893a5a89ab2a5449b845e0e974887fa4f2283a09
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=118525
Date: Mon, 06 Feb 2023 16:54:25 GMT
Etag: "63e045fc-1d7"
Expires: Wed, 08 Feb 2023 01:49:50 GMT
Last-Modified: Mon, 06 Feb 2023 00:12:44 GMT
Server: ECS (dcb/7F13)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KwNWt9baqbCldPOkxdtKkKE10C9twTgWpkp9LFEkWvqL1P5klOW_Iw==
Age: 5826
willingtohelpyou.com/o7tl
307 Temporary Redirect 3.4 kB URL HTTP/2 willingtohelpyou.com/o7tl
IP
ASN #21501 Host Europe GmbH
File type gzip compressed data, from Unix\012- data
Hash 8f769313af8c6fdf396284868184f5b7
9807763f61e207b70e3104c84b20875694d04109
d782a9bd3461bd88f4401b00543a52e629a31d8554568ad44eef883c0692f663
GET /o7tl HTTP/1.1
Host: willingtohelpyou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 307 Temporary Redirect
date: Mon, 06 Feb 2023 16:54:24 GMT
content-type: text/html; charset=UTF-8
location: http://neptunebest.com/a90c7600896d9eb5baf8f4983b80aacb6/?sid1=&sid2=&sid3=&sid4=
cache-control: public, max-age=2678400
content-security-policy: upgrade-insecure-requests
expires: Thu, 09 Mar 2023 16:54:24 GMT
pragma: no-cache
strict-transport-security: max-age=300
vary: User-Agent, Accept-Encoding
x-backend: local
x-cache: uncached
x-cache-hit: MISS
x-cacheable: YES:Forced
x-cacheproxy-retries: 0/2
x-content-type-options: nosniff
x-fawn-proc-count: 1,2,24
x-php-version: 8.0
x-redirect-by: WordPress
x-redirect-powered-by: Pretty Link Pro 3.3.1 http://prettylink.com
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
cf-cache-status: MISS
server: cloudflare
cf-ray: 7955684e38bbb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
script.anura.io/response.json
200 OK 566 B URL HTTP/2 script.anura.io/response.json
IP
Hash 8a80237a2d79ad3a193569eaf70e4b47
a451590ea66c21d324cfa63bd2d6e65b09eec278
bfbbfb1adfe1899be82b4f69242f324d29fd4ccebd8139ee91d42c996742a7a2
POST /response.json HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 3281
Origin: http://neptunebest.com
Connection: keep-alive
Referer: http://neptunebest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:26 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: POST
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5805
Cache-Control: max-age=104844
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Etag: "63e010a2-117"
Expires: Tue, 07 Feb 2023 22:01:51 GMT
Last-Modified: Sun, 05 Feb 2023 20:25:06 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.2.0/css/bootstrap.min.css
200 OK 15 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.2.0/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65371)
Hash 333fc6d5bdca9253c6a10757921b9b73
16fd339ac3ca613b21faf5b64de234d6b89ecec0
e12b8adeb89a0ab65a9ee65273aaf5a95df6719ab7e54175435b01f0da045925
GET /ajax/libs/twitter-bootstrap/3.2.0/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: text/css; charset=utf-8
content-length: 14913
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04010-1abce"
last-modified: Mon, 04 May 2020 16:17:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 21142874
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FHhWAipgcetGwwfnutD1r%2FeWEQLDSF3lKjn1bV0Uq2WGdl%2Fo7u%2BdWuygDZYxCbSI%2FN6j5icHiozlMzxBdFfYxP01jQ%2Bko5tsGP2liwK%2B4YZpJt%2F4Xr%2FsZ8wvxo8EiwP%2BWYgTtoVC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568671e630b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5805
Cache-Control: max-age=104844
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Etag: "63e010a2-117"
Expires: Tue, 07 Feb 2023 22:01:51 GMT
Last-Modified: Sun, 05 Feb 2023 20:25:06 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/ion-rangeslider/2.2.0/js/ion.rangeSlider.min.js
200 OK 7.9 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/ion-rangeslider/2.2.0/js/ion.rangeSlider.min.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (632)
Hash 96b7e00dd7436fb456670b66598de666
ad34371581aeb67d9fdba5a8eb425b0c6738abbc
8011ee7cf8b51f9da20e722ddbf9508e8a9c045b7b33112842c1d027acae7155
GET /ajax/libs/ion-rangeslider/2.2.0/js/ion.rangeSlider.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 7871
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ea7-9fc1"
last-modified: Mon, 04 May 2020 16:11:19 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1598563
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xja6Jn%2BhDC%2B6JZuWTp8uPFbpwrK7v5fpinduU7eudGsU4X%2FyaNfh96LqiEUUi6F4IZJQUyMhKLxjFt0pMBI8vd%2BGzMVyfZmuab0tVkfyFKs%2F7Pi12TrQKec%2B3ejIOlCZrgWqCyr8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e650b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/granim/1.0.6/granim.min.js
200 OK 2.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/granim/1.0.6/granim.min.js
IP
File type ASCII text, with very long lines (11054)
Hash c776206080fe3a88ec31049d60f1cf96
82c9864245219de6c56128de995a772d3f48306f
dc3be31b9c97a4c4e6c8a8bc16fb6e913f347dff216f86fa48994a89b812f4ee
GET /ajax/libs/granim/1.0.6/granim.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 2683
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e6f-2b6b"
last-modified: Mon, 04 May 2020 16:10:23 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 881119
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H9PKQzgP1GIEx4gA01Jbq4vTLY4crGRp57jsXP9iG5S98XZD%2F2u%2FIQyE8fwugWRKfaYAKVzLgFunP4vHqATapI2t3c23iml9pwgbJAdluRoeEXdjbv7hBe41lQUchBOnMVnnMY9t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e670b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/flickity/2.0.10/flickity.pkgd.min.js
200 OK 12 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/flickity/2.0.10/flickity.pkgd.min.js
IP
File type ASCII text, with very long lines (32104)
Hash 328ea5bffddba35c16d2ea94e487f48b
312f0a0d4f583103eda4be70bfe35a1a29098cf1
f8b1884c47d26f61accd5945e2bfc92554bcd07b67a61cbda476f52a19e16d92
GET /ajax/libs/flickity/2.0.10/flickity.pkgd.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 12071
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5e-d350"
last-modified: Mon, 04 May 2020 16:10:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2763442
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lmS5PIkhB54P6fjHWojjK%2By0P%2BekOuz4PH3Dq148gI%2Fdc%2B1Y8N3o2ohF%2BsMgfm74yvvgDQthc3jhzxfzW2yJm6sQBNM5xyZY8eEX6UculmcfXAZdjeJ8ewq0mqL8%2FZWvUdXc%2Bg0d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e660b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js
200 OK 57 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js
IP
File type ASCII text, with very long lines (32074)
Hash 8486da289409cd85cf8b6fd169c721c4
72d46568b1412639c71f218761c4e637773c4bfc
552f8314a7e6f840ab958f4a71ee38b747deb74634ea9797806f38c95b48c3ef
GET /ajax/libs/jqueryui/1.12.1/jquery-ui.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 57137
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-3dee5"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2664740
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ldUJGB%2Bo%2FhozExzxKhN6%2BVvAVhIqcsUpBaNRuG0nNzwSUCQ9GJhOTdeq1x0KVHj9OcAtjNQ1M0VkqP9k%2BdiKJGJ%2BL8H6ocN8JuDawIuDUSK7%2BXk2qDZn6%2BI9rdu75d6uIV2OLTSn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e640b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
carshieldprotection.com/css/iconsmind.css
200 OK 14 kB URL HTTP/2 carshieldprotection.com/css/iconsmind.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 70ce86325d7d0bafa5da3d772b6467a2
6d160d5ed06f625fc55e6348c076bbf15af7e0c7
1eb923a54264734dde71b48ce7154cd089283dcfb781eed0405e6b4f9412d392
GET /css/iconsmind.css HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:30:16 GMT
accept-ranges: none
cache-control: max-age=2592000, public
expires: Mon, 20 Feb 2023 16:54:27 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 14189
content-type: text/css
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/additional-methods.min.js
200 OK 4.9 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.17.0/additional-methods.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (18318)
Hash 33e9fddb61e17233162a79a9a814e3c2
d78cf4550b140d493acea04ffa5dfb4d978568ae
99192dcac50dc7d352296b29be86607dc3f955c6eb1716802ff74fecf451bec4
GET /ajax/libs/jquery-validate/1.17.0/additional-methods.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 4857
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-4820"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 11323518
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aulQx%2BpGQgHewgvVFOrSlHayntzPRHMPZEFHqm0%2F6r3sBM1%2BQbs6DpbwL%2Ff8n5LWQzAmALO96gBDpLy8oqZv6BF9yCKPR1sRPsZdyVQIImNKYpErCOKVWbyntIapya08vZTm6R6%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e6d0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery.mb.YTPlayer/3.1.5/jquery.mb.YTPlayer.min.js
200 OK 12 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.mb.YTPlayer/3.1.5/jquery.mb.YTPlayer.min.js
IP
File type ASCII text, with very long lines (31997)
Hash dfece931b3805b3c8afe22ed3cbda51f
b939caf36f3c2d227a902fecba2e8d339b142517
293cd57433d6e64710f4105a697dc39c0fb270f67f70853395aa61ba575a7f82
GET /ajax/libs/jquery.mb.YTPlayer/3.1.5/jquery.mb.YTPlayer.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 11844
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-e652"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 21099709
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qp16YD3yEbOOuR%2FGqMbqeWxvQ3o0Kkvda7s%2FINo9c38EflrKB7s1A%2B0J5Tlczn2DlxNmXbfWSum5M4%2B%2BZ9qupoeppGM2m96KkUzBMRDPJtFhlBpTi4RBav3QTJbFEqMV%2BY23pKdx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e6e0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.15.1/jquery.validate.min.js
200 OK 6.6 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-validate/1.15.1/jquery.validate.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (22886)
Hash 9e6fb92a6c6ed704eda193903b45f918
8bc4a2cb33114dc3c7da9ef2aeb7ffb7ee3852d6
22e22e45d4a5988281c2e872e417c20bf10b75b5c432efc657e81ca82edda1be
GET /ajax/libs/jquery-validate/1.15.1/jquery.validate.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 6628
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-59f0"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1524626
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YsaZWKI31Vo39R3GNpoFFeF8Gc%2BRVAVTHAutWXOLhfXhj6Foo6%2BLMAa4zh8X2hdQhNogrddAPO7bO7qHRtjoJ%2Bs4dyhg27sV5UnRRiDxSlbNOkX4Rmor0YtINBQpOzSi1DNbYAo8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e6c0b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/smooth-scroll/10.0.0/js/smooth-scroll.min.js
200 OK 1.7 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/smooth-scroll/10.0.0/js/smooth-scroll.min.js
IP
File type ASCII text, with very long lines (4552)
Hash 5fda2399d33c695ee317b3c94a610e9f
99555f9f95662d7f036cac0244a6986baf71f483
714ac78822fbb47fa7710154ab0edb6bcc8a1be62c1c9ee2a1e7faa392d0badf
GET /ajax/libs/smooth-scroll/10.0.0/js/smooth-scroll.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 1747
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-123c"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: MISS
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVKYuTOMUwlIPaYoY4lUo%2FO47SPDFy8wflzN3JU7VFhJ9NnRR9VxaQqrL5ySspbYqYzpzT9duv7iVs5NRYT7lBH4aAvFm3L%2Bx6Wuxm%2B2Syiojwdymc87XRZdpYHy2m25985JV4vJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568672e680b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5805
Cache-Control: max-age=104844
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Etag: "63e010a2-117"
Expires: Tue, 07 Feb 2023 22:01:51 GMT
Last-Modified: Sun, 05 Feb 2023 20:25:06 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
cdnjs.cloudflare.com/ajax/libs/ion-rangeslider/2.2.0/css/ion.rangeSlider.skinModern.min.css
200 OK 452 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/ion-rangeslider/2.2.0/css/ion.rangeSlider.skinModern.min.css
IP
File type ASCII text, with very long lines (1341)
Hash a408d7345b95ec47924b1c80ac94daf0
eaac088ab5aa955840d2192f4e0fad4ff2b9a842
e0cc1756e3d7f314ef2e2d35bece1333a43b91c7fe8366fa3ba0171d09433495
GET /ajax/libs/ion-rangeslider/2.2.0/css/ion.rangeSlider.skinModern.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: text/css; charset=utf-8
content-length: 452
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ea7-57c"
last-modified: Mon, 04 May 2020 16:11:19 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1582768
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZPMo%2BWvZ6nCYDBxr8nS0D6FbVJ2hmmYb5QmU%2FPu1bXLvlMMQXJo%2FkQv9vsRZTQhEQ23kMginlKt9AEOMLI3b175Z5NXDbX2W2CEy1uprgEyJ7Wv0f621l8otTXAFuT78UVTSe%2F7o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79556867af460b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5805
Cache-Control: max-age=104844
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Etag: "63e010a2-117"
Expires: Tue, 07 Feb 2023 22:01:51 GMT
Last-Modified: Sun, 05 Feb 2023 20:25:06 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
js.adsrvr.org/up_loader.1.1.0.js
200 OK 1.9 kB URL HTTP/1.1 js.adsrvr.org/up_loader.1.1.0.js
IP
File type ASCII text, with very long lines (4593), with no line terminators
Hash 8dc722d27824e60548fd25752623cd07
33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
GET /up_loader.1.1.0.js HTTP/1.1
Host: js.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 06 Feb 2023 09:30:23 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ciXjcrw3IYVdT_P2wRBffW34KYWXDMqrmPPu9c_Uo_vWM377Xte6xw==
Age: 33770
cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js
200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js
IP
File type ASCII text, with very long lines (32014)
Hash b0a538eca8603c37c15e4ccd04500c57
f89f4099777ae63be4e09fee2b1227bc6874fd73
917decede324477626db7f615c8ee595556bafb7a875bdc9d3c3b1b94b345307
GET /ajax/libs/jquery/3.1.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 27198
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1514f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 8289935
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GuT0Lc3dUURct9j4X8me8kfPvGMKPFS97JxfIJZnA9SDEkUkZ3l30SbBOLT6VL4lpw%2B4QOi5jDblC1%2BPHa2KKF7vW5SvVsA6ILrCdBf0iQ%2Fb9xGiOuZp2Ho2aoewQQ22pj6AfZA0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79556867ffa20b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/ion-rangeslider/2.2.0/css/ion.rangeSlider.min.css
200 OK 506 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/ion-rangeslider/2.2.0/css/ion.rangeSlider.min.css
IP
File type ASCII text, with very long lines (1913)
Hash bd3856ce5921bab24e7316a8bf98b965
94127b23eb8554c8818afb384b5c0d5432a22055
ffee27035c6cc94e15fef5e5bc2be63fb53dd817e2218aa9d88ab4fce77a1468
GET /ajax/libs/ion-rangeslider/2.2.0/css/ion.rangeSlider.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: text/css; charset=utf-8
content-length: 506
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ea7-7ad"
last-modified: Mon, 04 May 2020 16:11:19 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 21151232
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4f%2FA7ESsoZLr32UBMTMMyulDkZ6iENWHw5qOjJ2DBgAkxFwsAD5in8GUCv1mW2MxjCux0NI9%2BppXC6NTUj1UiqCV9YYhsDymWhN82ZI1zaxA1WnVJpPzhsAvu%2Fb1%2FsXFjZi%2Ftbeo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79556867ffa40b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 578c4423e94bae9d4193c2af2a989b6d
f679f9298a787cde1b50e1933193689ecd66d151
407c2b4320633a13744f870607ad4b00ffef704cf5f408f8fe1d3ca18d36bb05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3177
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Last-Modified: Mon, 06 Feb 2023 16:01:30 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/flickity/2.0.10/flickity.min.css
200 OK 503 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/flickity/2.0.10/flickity.min.css
IP
File type ASCII text, with very long lines (1758)
Hash 34261b15e5f2f9489e758c19b5e83d80
70c426f5d0af13d2d9d438e559245fcee6e973a8
dbfbb43d4683a134d88ad72d559afd2f756abff84741740aaa3731da858e03af
GET /ajax/libs/flickity/2.0.10/flickity.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: text/css; charset=utf-8
content-length: 503
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5e-742"
last-modified: Mon, 04 May 2020 16:10:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 16761147
expires: Sat, 27 Jan 2024 16:54:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mkDeLlleZyNJCOrHNT523dqT0PdFFAMWU7jK5DLEXpGViq6%2BG5IYU9YF6Me%2B0RmBui3zHwwzGqQwPN%2FHBYMJlDeilfWDgwTZq0XFHL7FZ%2Bf7Q9IGjY37dPPnzzJfzEGdTE5fm5ve"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 795568680fb60b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 370e74ead61664d84985db7a9087c0e4
7c55daf6c9231e1586a0c9d48375766e7f02405f
ddc18509904868cb8e31ad5cbbd27245fc163eaac44d40a7e95fb795c6e248db
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5805
Cache-Control: max-age=104844
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Etag: "63e010a2-117"
Expires: Tue, 07 Feb 2023 22:01:51 GMT
Last-Modified: Sun, 05 Feb 2023 20:25:06 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 70d7e4cd91d9f630c160410d22c1cede
82f5d0fbb11bcde09c107b6c1cbc6e014bb08b85
b8679be6c92167c51793ca4a8774caf0a50949737a99652243208fcfda917faf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
j4f6f5q7.stackpathcdn.com/js/scripts.js
200 OK 22 kB URL HTTP/2 j4f6f5q7.stackpathcdn.com/js/scripts.js
IP
File type ASCII text, with very long lines (914)
Hash b82e139f46c1c19c961369b656fc9c7e
d7298969cb38b5807e869814a52fac73d8d268f9
99c7ba202c628e61478ff73ac4b5dd9181b4eeccf7101024d4dfaaf7f321bf92
GET /js/scripts.js HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
etag: "1515516093"
content-encoding: br
content-length: 21573
content-type: application/javascript
last-modified: Tue, 09 Jan 2018 16:41:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: Accept-Encoding,User-Agent
x-hw: 1675702467.cds015.sk1.hn,1675702467.cds243.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 578c4423e94bae9d4193c2af2a989b6d
f679f9298a787cde1b50e1933193689ecd66d151
407c2b4320633a13744f870607ad4b00ffef704cf5f408f8fe1d3ca18d36bb05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3177
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:27 GMT
Last-Modified: Mon, 06 Feb 2023 16:01:30 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 279
j4f6f5q7.stackpathcdn.com/img/playstore.png
200 OK 63 kB URL HTTP/2 j4f6f5q7.stackpathcdn.com/img/playstore.png
IP
File type PNG image data, 152 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash 25a55e02f2ad0de9de160e60cd16bd09
f0d88a49f1ec337bd70dfb43dac3edf75d9e6ae0
5c0bc60f5fff9366808f34ad820746d51d084b0ba0058ee51e653de656c7f9a0
GET /img/playstore.png HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
etag: "1507604372"
content-length: 62630
content-type: image/png
last-modified: Tue, 10 Oct 2017 02:59:32 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: User-Agent
x-hw: 1675702467.cds015.sk1.hn,1675702467.cds250.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
j4f6f5q7.stackpathcdn.com/img/poweredby.png
200 OK 52 kB URL HTTP/2 j4f6f5q7.stackpathcdn.com/img/poweredby.png
IP
File type PNG image data, 154 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash 4db77aa1d3aba3671239de5c353aef5d
1656ef0ec6288639a7973a13d179b4c3a91aaf0f
b69c084a5434b51383e748fdc6f9400d6cfb9303df1f3dcb0c7c1baac0328ad2
GET /img/poweredby.png HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
etag: "1507604373"
content-length: 52213
content-type: image/png
last-modified: Tue, 10 Oct 2017 02:59:33 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: User-Agent
x-hw: 1675702467.cds015.sk1.hn,1675702467.cds214.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
j4f6f5q7.stackpathcdn.com/img/appstore.png
200 OK 57 kB URL HTTP/2 j4f6f5q7.stackpathcdn.com/img/appstore.png
IP
File type PNG image data, 152 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 9b428f1279c89642f8f9db79f76af5c8
bb51c022307b47cc3d30ccd0df3ca7cb28593378
cf8126261aded043cabe758fab703fb0b477d1cc4f1324a9b91dd25261ffb602
GET /img/appstore.png HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
etag: "1507604290"
content-length: 56655
content-type: image/png
last-modified: Tue, 10 Oct 2017 02:58:10 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: User-Agent
x-hw: 1675702467.cds015.sk1.hn,1675702467.cds236.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
j4f6f5q7.stackpathcdn.com/img/logo-light.png
200 OK 14 kB URL HTTP/2 j4f6f5q7.stackpathcdn.com/img/logo-light.png
IP
File type PNG image data, 659 x 156, 8-bit/color RGBA, non-interlaced\012- data
Hash 039af2897f893b6ac92dde496701f458
856e66bfe03a525ce74e01d8ed607ae52d822110
b4da345ee095920c3c473a25d749729fe0203ed7f6f079d557d2b72849b58287
GET /img/logo-light.png HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
etag: "1507604359"
content-length: 13457
content-type: image/png
last-modified: Tue, 10 Oct 2017 02:59:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: User-Agent
x-hw: 1675702467.cds015.sk1.hn,1675702467.cds203.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
j4f6f5q7.stackpathcdn.com/img/logo-dark.png
200 OK 61 kB URL HTTP/2 j4f6f5q7.stackpathcdn.com/img/logo-dark.png
IP
File type PNG image data, 253 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 51c548e0b1ca3620cf76785f9918ca37
b89dba6ee272b74a8316ec9b75d09f63f4922c5c
8bd1aef162e2347624c10a41eefa22f113498d042a2ce68f9e545d661175d6a6
GET /img/logo-dark.png HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
etag: "1507604359"
content-length: 60843
content-type: image/png
last-modified: Tue, 10 Oct 2017 02:59:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: User-Agent
x-hw: 1675702467.cds015.sk1.hn,1675702467.cds225.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=DC-9616099
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=DC-9616099
IP
File type ASCII text, with very long lines (1759)
Hash becf87e6f633c8612ef9165e5b5cf75c
ef1ec9f7abbb54c4ccd7e47f751227d347ca9de8
63a08fdf6f8f40f303babaeae067625998fad4028cab751335e06bc6806555bf
GET /gtag/js?id=DC-9616099 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 16:54:27 GMT
expires: Mon, 06 Feb 2023 16:54:27 GMT
cache-control: private, max-age=900
last-modified: Mon, 06 Feb 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44179
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-2G8YJ167L4
200 OK 80 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-2G8YJ167L4
IP
File type ASCII text, with very long lines (25667)
Hash 7270eefb9353ad8eab468d871f69ff63
0115dd7c14b6de7a783ed109788bf5af14f71356
bcfa85ab733287e5ac59316fcb6688636b9ab60142f334292ca8c5db134751e3
GET /gtag/js?id=G-2G8YJ167L4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 06 Feb 2023 16:54:27 GMT
expires: Mon, 06 Feb 2023 16:54:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79796
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3c2426cdaf2e901e98a399205f2ef359
f7c172f08df6a020cef9b857498e6538975dbc4a
a3eaf78c7429076fb350256f893a5a89ab2a5449b845e0e974887fa4f2283a09
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=112697
Date: Mon, 06 Feb 2023 16:54:27 GMT
Etag: "63e045fc-1d7"
Expires: Wed, 08 Feb 2023 00:12:44 GMT
Last-Modified: Mon, 06 Feb 2023 00:12:44 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: C6fyN6eSMF1ZQ_rViQ6O203VkvfoTyOsWvxcYrTLIWCuMkcc9WbMBg==
static.traversedlp.com/v1/retargeting.js
200 OK 3.4 kB URL HTTP/1.1 static.traversedlp.com/v1/retargeting.js
IP
File type ASCII text, with very long lines (11560), with no line terminators
Hash 8f769313af8c6fdf396284868184f5b7
9807763f61e207b70e3104c84b20875694d04109
d782a9bd3461bd88f4401b00543a52e629a31d8554568ad44eef883c0692f663
GET /v1/retargeting.js HTTP/1.1
Host: static.traversedlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 01 Jun 2022 20:20:14 GMT
x-amz-version-id: KLbodh6xIMdiUWAxenjc1ByBclqfTj74
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 06 Feb 2023 16:41:39 GMT
ETag: W/"c31ba40743566f87f00f822e3cefb390"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: J3RMfTRcsPwWRr3kyx8rFX1BK2l3smnJkdKVrJjoy4FUuCBtHzhCRQ==
Age: 1042
carshieldprotection.com/img/m2m-pricing.png
200 OK 14 kB URL HTTP/2 carshieldprotection.com/img/m2m-pricing.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 276 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash a44f1718128b2ad62ad71aa43d9c07c9
fcb9c5a2e28d5054c376f14e97f840ed8a035e45
0f0c86dce68442ecd004af844f374dea9c06860cadb56c90f21e59521f0e1fa6
GET /img/m2m-pricing.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:36:10 GMT
accept-ranges: bytes
content-length: 13577
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:27 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash fe198445528d7bb97724bad5b16ac8b2
05237cf7a9dfbc27ba9789bab72059ac4764adf9
360a12992b016bff8ef8abd8afeb0c11a4889737fa39f3b77387a8ae48fa321c
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 06 Feb 2023 16:54:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 06 Feb 2023 08:57:38 GMT
Expires: Tue, 07 Feb 2023 08:57:38 GMT
ETag: "05237cf7a9dfbc27ba9789bab72059ac4764adf9"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dot.dm-io.com/dot/6723
200 OK 43 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /dot/6723 HTTP/1.1
Host: dot.dm-io.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: no-cache
pragma: no-cache
content-length: 43
content-type: image/gif
expires: -1
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Mon, 06 Feb 2023 16:54:27 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.7 kB IP
Hash 2fc77fa5a59b67731effd6d084714f3d
ad84700ebe647954e0844d1c7af032ae77c702fa
6a7a94bb8de1618d69d6977adca4404d5dfc839413ec8aa5356dcc87cb2cca8b
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 68
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 06 Feb 2023 16:54:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1731
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 05 Feb 2023 20:27:19 GMT
Expires: Mon, 06 Feb 2023 20:27:19 GMT
ETag: "ad84700ebe647954e0844d1c7af032ae77c702fa"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
carshieldprotection.com/emails/images/flexible-pricing.png
200 OK 76 kB URL HTTP/2 carshieldprotection.com/emails/images/flexible-pricing.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash 702280ffe420e0f4b0b89bdd853277bc
56ca47d18a90783231fb63889341e8a682de8404
2e91c1f81d8a9f56f47dc35ca55ef246dfcce7ffc42c0ab5c502af4f79d50f22
GET /emails/images/flexible-pricing.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:42:25 GMT
accept-ranges: bytes
content-length: 76325
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:27 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
udxsva.com/tag?id=10150
200 OK 43 B IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /tag?id=10150 HTTP/1.1
Host: udxsva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 06 Feb 2023 16:54:28 GMT
Content-Type: image/gif
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Transfer-Encoding: chunked
Server: Jetty(9.4.31.v20200723)
smart-pixl.com/12534/00023_carshield.com_SMART.GIF
200 OK 533 B URL HTTP/2 smart-pixl.com/12534/00023_carshield.com_SMART.GIF
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 8ce087416f5cce5b7d3016748975efa0
39d47320ccdc2711ccdd45cd7033753b01691929
00485f393d57251a359655eda6018ec9b34c9ed7ac9b8b43520a231b497d60e3
GET /12534/00023_carshield.com_SMART.GIF HTTP/1.1
Host: smart-pixl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Mon, 06 Feb 2023 16:54:27 GMT
content-length: 533
X-Firefox-Spdy: h2
j4f6f5q7.stackpathcdn.com/img/call-us.png
200 OK 1.3 kB URL HTTP/2 j4f6f5q7.stackpathcdn.com/img/call-us.png
IP
File type PNG image data, 77 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash a601b8c97aa9f24c349cd458ba614e9a
af6700e94b2e987f1299d78d22c80d96e39fabf2
e5ba4138048044f9273d234da495c146360b97464566c96400a719b45aa64861
GET /img/call-us.png HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:28 GMT
accept-ranges: bytes
etag: "1507663415"
content-length: 1310
content-type: image/png
x-hw: 1675702467.cds015.sk1.hn,1675702467.cds218.sk1.sc,1675702468.cds218.sk1.p
access-control-allow-origin: *
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: User-Agent
last-modified: Tue, 10 Oct 2017 19:23:35 GMT
X-Firefox-Spdy: h2
carshieldprotection.com/emails/images/extras.png
200 OK 6.8 kB URL HTTP/2 carshieldprotection.com/emails/images/extras.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash aa53bfc45adba69463989e24288d5b05
594fd0d46d460ada89b81626e8e38e63d2387c4c
9ab0b96eeb96e6715e81cac5cb2d476353a148f04b802ffbef64dd23d088a85a
GET /emails/images/extras.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:42:24 GMT
accept-ranges: bytes
content-length: 6777
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:27 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/emails/images/reliable.png
200 OK 66 kB URL HTTP/2 carshieldprotection.com/emails/images/reliable.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c525dabca3026b822155eb48fcaf294
46ec0c8a75a60859d3f62fc7a00c7bb8947bcc56
8a0f1c96da0eb377b2192d05d4f0b3fc74fb1ef1b48e698ddca2d7c0d5bc78f5
GET /emails/images/reliable.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:42:36 GMT
accept-ranges: bytes
content-length: 66263
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:27 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/emails/images/startup.png
200 OK 72 kB URL HTTP/2 carshieldprotection.com/emails/images/startup.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash eed21a273a4427fdcb9cd97550f49eb0
61b366d01a2d8c4de2736f4222dea0353b099fbb
66cb892444b8e9f6193d79380d0dea57c15c4d92102e57f4b68abd249f2b05de
GET /emails/images/startup.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:42:38 GMT
accept-ranges: bytes
content-length: 72117
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:27 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
IP
Hash 6b2ccd1af1ab4978111c848a6bdfb42b
353368e7e90bba7fbb5eec3523d25fd93bf7b112
0f327942d3c09cd2cbe3f23248970519d840a06e2436ca263666aaac17bf7eda
POST /s/gts1d4/Patgn0hRfbE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.pdst.fm/ping.min.js
200 OK 5.8 kB IP
File type ASCII text, with very long lines (26948), with no line terminators
Hash d001d1c9f5a942fa5524eeacb047e819
6ebc303d4e3fe71192400673808f37ce1c6a1d25
63882c75983a011c7ae5041061a95babb9e67fa508b0628e1c00f455ccd40b0a
GET /ping.min.js HTTP/1.1
Host: cdn.pdst.fm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdupY9F8AqeWUlH52FG_Q-Pv0AzRtajycSxN_YbbeXoVGaZ_r0GlKerNov6Qj_2KDithqxH1ayfSb5bQF1G3HUBI1h-KUucw
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1622234043862937
x-goog-metageneration: 3
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 5774
content-encoding: gzip
x-goog-hash: crc32c=oKoi/w==, md5=0AHRyfWpQvpVJO6ssEfoGQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 5774
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
date: Mon, 06 Feb 2023 16:38:25 GMT
expires: Mon, 06 Feb 2023 17:38:25 GMT
cache-control: public, max-age=3600
age: 963
last-modified: Fri, 28 May 2021 20:34:03 GMT
etag: "d001d1c9f5a942fa5524eeacb047e819"
content-type: application/javascript;
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
carshieldprotection.com/emails/images/dependable.png
200 OK 6.9 kB URL HTTP/2 carshieldprotection.com/emails/images/dependable.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash c33ebf122030814008a2bfabdfe2a0d5
62c75fd03c480ebf0b61e9c5e90636c25e60592a
f602dc7e24c7cbe74b4bfbce1d8b74f8fae9abe78582cae0b3fc533c5545d011
GET /emails/images/dependable.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:42:23 GMT
accept-ranges: bytes
content-length: 6926
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/emails/images/claims-paid.png
200 OK 6.3 kB URL HTTP/2 carshieldprotection.com/emails/images/claims-paid.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash 08bd10a9f538d2fbbb34a66db5ec4f31
da8b2769bbd24aaf14ee2d4ebc70d123abe1dc7f
a3370e37639caecc41a9d5ef5d082719e73dc800e5bbb67a0f2ab454c1e67ab3
GET /emails/images/claims-paid.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:42:19 GMT
accept-ranges: bytes
content-length: 6259
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/car-repair.png
200 OK 577 kB URL HTTP/2 carshieldprotection.com/img/car-repair.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 1710 x 968, 8-bit/color RGBA, non-interlaced\012- data
Size 577 kB (577133 bytes)
Hash 9ea25f91a46e6ad25d83de15fe580bfc
850a080fcab86da8ec117455f1effb007e8e2f1c
6b0f35b98a99e2e9d17fce36c8e2369c9d0474d5786c0d556fb47455f3faa201
GET /img/car-repair.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:34:42 GMT
accept-ranges: bytes
content-length: 577133
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:27 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/reviewvid-header.jpg
200 OK 143 kB URL HTTP/2 carshieldprotection.com/img/reviewvid-header.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1999x640, components 3\012- data
Size 143 kB (142926 bytes)
Hash 165acc62cb88298bd69606116b3e880d
1a2bdc28993001a01754988fe353111d61446171
280825c7ff88df72a6c8c149618b7f9bb427da276cc4a400590ae912a4746072
GET /img/reviewvid-header.jpg HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:36:54 GMT
accept-ranges: bytes
content-length: 142926
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/jpeg
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/assets/js/scripts.js
200 OK 2.2 kB URL HTTP/2 carshieldprotection.com/assets/js/scripts.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash bac7c0503f2c124a9168af6a77b530d7
c21d91624f65ae984db64d4f747ba78237b31d83
fc932648591493f3ee951af262f7ff896828af122078a84260901c06786c1057
GET /assets/js/scripts.js HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 02 Feb 2022 21:54:45 GMT
accept-ranges: none
cache-control: max-age=2592000, public
expires: Wed, 08 Mar 2023 16:54:28 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 2226
content-type: application/javascript
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
smart-pixl.com/12534/00023_carshield.com_SMART.GIF
200 OK 529 B URL HTTP/2 smart-pixl.com/12534/00023_carshield.com_SMART.GIF
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6689fd46e160323a4c0e4701c969bed6
97ea3d838b78001edbaaaa6e6bfd4786d06fb172
285380dcac96b83185ac1a5c47786ca965c33169124adbf9997843bd116914c6
GET /12534/00023_carshield.com_SMART.GIF HTTP/1.1
Host: smart-pixl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Mon, 06 Feb 2023 16:54:27 GMT
content-length: 529
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Patgn0hRfbE
IP
Hash 6b2ccd1af1ab4978111c848a6bdfb42b
353368e7e90bba7fbb5eec3523d25fd93bf7b112
0f327942d3c09cd2cbe3f23248970519d840a06e2436ca263666aaac17bf7eda
POST /s/gts1d4/Patgn0hRfbE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0a8ea253ef61b5c330b3285f9a94e6ae
0cf9a1c66c83f505c7195774996b107c145f5884
8b6bca0cd9c9adcb16bba03349e8fcbfcd645719c82c95f0111095b731842402
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://carshieldprotection.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:52:41 GMT
expires: Tue, 30 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 597707
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
carshieldprotection.com/css/theme.css?d=1675702467
200 OK 77 kB URL HTTP/2 carshieldprotection.com/css/theme.css?d=1675702467
IP
ASN #46606 UNIFIEDLAYER-AS-1
Hash 5f829d2629f34034999e70741bb03270
c3f489e3493bcb76f4da5271f8ebb7092742e29b
5ba87a660751e224e6776c8c90f5d38ca75c60de9c231389e366ff2ec0c5963b
GET /css/theme.css?d=1675702467 HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 20:06:45 GMT
accept-ranges: none
cache-control: max-age=2592000, public
expires: Mon, 20 Feb 2023 16:54:27 GMT
vary: Accept-Encoding
content-encoding: gzip
content-type: text/css
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/check-mark.png
200 OK 50 kB URL HTTP/2 carshieldprotection.com/img/check-mark.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 19 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 2344d690a505de091d4d790edd5adc4e
9b57d489843a55f227d4844606119254414da52d
63510524c8d16082d8b8c79ebd34d38d2307923af6edacf5bd356e744f7571af
GET /img/check-mark.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:34:48 GMT
accept-ranges: bytes
content-length: 50106
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/engine.png
200 OK 1.9 kB URL HTTP/2 carshieldprotection.com/img/engine.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 9faa692d58d7ea09d3ea57aef42a2209
05ab68022057c2a758397b880c46e563075408ab
d0e7db452e4573ebd2297c15b3f615ae0566f0cbccb1006d54be188a436f4b51
GET /img/engine.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:35:32 GMT
accept-ranges: bytes
content-length: 1856
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/axle.png
200 OK 62 kB URL HTTP/2 carshieldprotection.com/img/axle.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 8e61d0e4f0a3200b10c3c0d538d0ec86
aa946f847eb5e84d5e55968a6b81efb3871d9e9d
9e27ccca560b6651cf58cd42fb9afb226516f180a18b9ae453ee8771c57987e5
GET /img/axle.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:33:58 GMT
accept-ranges: bytes
content-length: 62002
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/fuel-injector.png
200 OK 2.9 kB URL HTTP/2 carshieldprotection.com/img/fuel-injector.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash bc6df2fe9c2bd2e6fea115735ea56089
03004d9d12b93e6dbc98185fef1e73fb6d9a31cf
d63094dc536edb4f0cf72924befb517eeb5e89c68398effe917094978e4de4c1
GET /img/fuel-injector.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:35:43 GMT
accept-ranges: bytes
content-length: 2922
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/air-conditioner.png
200 OK 2.6 kB URL HTTP/2 carshieldprotection.com/img/air-conditioner.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 0c1d27458a773a0a05b38f655e42d85d
d0de5b575df109e02a5bd609c736c823fec069d0
28a9c89980eab06cc460e7f394574ba5dbd003f3268e010fd7a5d0a5d1b48918
GET /img/air-conditioner.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:33:41 GMT
accept-ranges: bytes
content-length: 2638
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/dash.png
200 OK 182 B URL HTTP/2 carshieldprotection.com/img/dash.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 36 x 6, 8-bit/color RGBA, non-interlaced\012- data
Hash 09774ae0fdfcc9df79e6fd583ffb56a9
aaf4e8fdf5a47f1ca015f3eb41f928692a3b69b9
0b867dfcce47846fcd2c3ff3d93fe0641a2428d5cde6accf5a200635048fd57c
GET /img/dash.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:34:58 GMT
accept-ranges: bytes
content-length: 182
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/fuel-delivery.png
200 OK 2.2 kB URL HTTP/2 carshieldprotection.com/img/fuel-delivery.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash d80a9e663cadf983241fa5054c5c4db5
6a5cc303303d6d9e733809a69831fe5c3766e56f
2e052f5e8f9eec783178b3f6671895389c695ccfea988956ed8c90b5dd0a5350
GET /img/fuel-delivery.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:35:43 GMT
accept-ranges: bytes
content-length: 2223
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/transmission.png
200 OK 1.8 kB URL HTTP/2 carshieldprotection.com/img/transmission.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash d9d2d995783e955baf39b4d035a7a414
68545f784e5107ae72b3cb167b6b5611c645e42a
a7fa07e6d0735e7393baa5cd1c0afa96930325aac9ec5872d7e6f5ee7d970e3a
GET /img/transmission.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:37:08 GMT
accept-ranges: bytes
content-length: 1844
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/transfer-case.png
200 OK 63 kB URL HTTP/2 carshieldprotection.com/img/transfer-case.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ee47478f004f5b7d44340a1ff8d7c36
2c208c34ddf058a3ef208a92cf7c4cc67b2b00b4
1b2d98ef59c482ec614c410362cf8fe33de3050d4ec1970fa4fc0165f79f0223
GET /img/transfer-case.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:37:08 GMT
accept-ranges: bytes
content-length: 63218
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/fuel-pump.png
200 OK 68 kB URL HTTP/2 carshieldprotection.com/img/fuel-pump.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 84c8e8d84e8556046fbc0002cc3a6231
dcf32bbe9c41edb9e0828a8c071a630e00471857
6c56ce1c5b35208f804f59c487b2052e30f33ba4d35d48eed3dc39cf7a5fe6a9
GET /img/fuel-pump.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:35:43 GMT
accept-ranges: bytes
content-length: 68106
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 836bc62dbb011b6180fc7209d0061736
74e6f18561a7006a3afb6ab03559eec239ce4b36
90b197384670fdb210d364f91b423fd383d25838e38a494158a8185bef0061f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.rtbiq.com/opq3.html?tagId=383da2e5bf86a2baa18920277e2f4e5b&partners=true&key=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&origin=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&pings=1&interval=10&amount=1
200 OK 3.2 kB URL HTTP/1.1 analytics.rtbiq.com/opq3.html?tagId=383da2e5bf86a2baa18920277e2f4e5b&partners=true&key=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&origin=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&pings=1&interval=10&amount=1
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (3203)
Hash b591816c96f5f537650f407c6a432bf1
75668176b0f66c0dcd095edd478e0ebb71a8e121
2a9bc1c50e6e2ecb17eb14b303209fe9f8d5891054bd80a94dbd76ff77fb768b
GET /opq3.html?tagId=383da2e5bf86a2baa18920277e2f4e5b&partners=true&key=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&origin=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&pings=1&interval=10&amount=1 HTTP/1.1
Host: analytics.rtbiq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 3204
Connection: keep-alive
Last-Modified: Tue, 10 Aug 2021 16:04:39 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 06 Feb 2023 14:21:09 GMT
ETag: "b591816c96f5f537650f407c6a432bf1"
X-Cache: Hit from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XK6dxZdDlfJAKjejnZTYXGLmLr4UKa4Lh1XwLpqjCFRPwqcKuk7Xtw==
Age: 9200
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3b0fff98fefed46a9d312033087640b4
f4aa9c47c387b0d0013a8909249a6bbe3221f832
c7373d863e0831be542edaa6820327494615cd7d9b5fab52267b301c00b58a5f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165929
Date: Mon, 06 Feb 2023 16:54:28 GMT
Etag: "63e103ef-1d7"
Expires: Wed, 08 Feb 2023 14:59:57 GMT
Last-Modified: Mon, 06 Feb 2023 13:43:11 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qK7PMJKiL5JapqaNXEJ8DBgN9XJi3I4K6lo9M-z0gzAh0Ia6cTgiKw==
Age: 4606
fonts.googleapis.com/icon?family=Material+Icons
200 OK 1.9 kB URL HTTP/2 fonts.googleapis.com/icon?family=Material+Icons
IP
Hash bcbdd7175b712b4716604be0c501eb6f
7292af0f1b38703d5ee4fb0bdac60c9e796f0d0c
9a5fe1914b7466e19e703d6812a1fc8fbaa24f40693db0b3922f292ee4efee9a
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 16:54:27 GMT
date: Mon, 06 Feb 2023 16:54:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
carshieldprotection.com/img/starter.png
200 OK 2.1 kB URL HTTP/2 carshieldprotection.com/img/starter.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 38afe063b52d05a260a71c57ea3ecbd4
c904d6547c63c1e5dde13fe3864e484738e7b438
45ce5b9c953639fc0faabe681a3496f8b312c9e2591827e43ca031a2adce315d
GET /img/starter.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:37:02 GMT
accept-ranges: bytes
content-length: 2094
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/radiator.png
200 OK 3.6 kB URL HTTP/2 carshieldprotection.com/img/radiator.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 6db765b4f211503a6003b01036f4a1d3
142aa7625d95d52e556e23508e7587a8428f4414
c4e380441e7963f7963f13c98249d1a198e17fe1ce58bf54ee3add40326c87f7
GET /img/radiator.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:36:41 GMT
accept-ranges: bytes
content-length: 3645
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/cluster.png
200 OK 1.6 kB URL HTTP/2 carshieldprotection.com/img/cluster.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b277be526e56ce723bed9c34b207cb0
797563d37382a6300837a2e98b86ebe2a37680d1
7c1dccceeeb5d3173233d29817869bca079aafd2a65601c186744aa3c927c526
GET /img/cluster.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:34:52 GMT
accept-ranges: bytes
content-length: 1582
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/power-windows.png
200 OK 1.7 kB URL HTTP/2 carshieldprotection.com/img/power-windows.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 6c0af64f832657e04dc295ef50af9690
dd92fcf466a2628b649995a44e4e6a84da7e65ed
75b97a427c2819c934000ee9237deae4e233acebd277a9079e74a41b247e959b
GET /img/power-windows.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:36:35 GMT
accept-ranges: bytes
content-length: 1744
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/audio.png
200 OK 2.5 kB URL HTTP/2 carshieldprotection.com/img/audio.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash c600e2aa469867e4ed1047267fde1df8
db874f10e5a153f8ae02641d418ebc28936d4281
dd59f6b08e1e33d959d40cab658b445cf06e130a32aff6af792ffb007e3bfec7
GET /img/audio.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:33:52 GMT
accept-ranges: bytes
content-length: 2452
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/brakes.png
200 OK 72 kB URL HTTP/2 carshieldprotection.com/img/brakes.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f937e13e330029fedb5834b8062a683
176968c71a2cfafcc27139869927313414cf34c3
4a9e9a957c0c9e582bf694465b636cfafd34fc0814b03a74a179e7abc2151bd0
GET /img/brakes.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:34:37 GMT
accept-ranges: bytes
content-length: 71615
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/gps.png
200 OK 2.4 kB URL HTTP/2 carshieldprotection.com/img/gps.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 973fec3d248fb2d66d6c4d9fda83d041
d71f3daef024528860ceff4fb203c4e08f2f2f94
eb58b973cdf4e88bc6678165b95590f72dd6ed83dfbcc178c11af8b2559b9a31
GET /img/gps.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:35:46 GMT
accept-ranges: bytes
content-length: 2399
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/water-pump.png
200 OK 2.2 kB URL HTTP/2 carshieldprotection.com/img/water-pump.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c318bf7edb4fa57b7bcc5ef1b74adac
eee1edc2d08e644eaa45b741b39f16aef0d27c2a
1d415ca37da99da40fab569b4d8b9f912ea1aeb3ab6dd4c1eb878b7d2a9a4c98
GET /img/water-pump.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:37:12 GMT
accept-ranges: bytes
content-length: 2175
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/electrical.png
200 OK 2.1 kB URL HTTP/2 carshieldprotection.com/img/electrical.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 29bdef179766ed0d3f904718800f7999
eab7cf6d26d5973d98a8190630a55cbf240189ca
5a847d8fa0fdb92aeddeee595ee9a1867cb22afc3a264609568df4ef95625012
GET /img/electrical.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:35:13 GMT
accept-ranges: bytes
content-length: 2103
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/alternator.png
200 OK 1.9 kB URL HTTP/2 carshieldprotection.com/img/alternator.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash c5672881120e6cfcaae424d923b7f2e5
9ba707c9fc7517601e9a148113676ce513f68154
e862d98e1614f669bdf5ad7548700b0e733aad1c5b5d84e0639a8a30d2136638
GET /img/alternator.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:33:41 GMT
accept-ranges: bytes
content-length: 1859
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
200 OK 74 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i
IP
Hash ec888bef2a0ab5d62f65ec00b56ffbf5
96afd63625fa68abe5351dadff05992c20d08a33
4875efda3038fe9de3de08ee04ad17395e705e84d216d4924fcf3b9d4b070f53
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 06 Feb 2023 16:54:27 GMT
date: Mon, 06 Feb 2023 16:54:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aa.trkn.us/1/e/cs.js?cid=c013&evid=56871574-70d6-40d7-a93a-3e3b92b38c0e&suu=1&dmn=carshieldprotection.com
204 No Content 0 B URL HTTP/1.1 aa.trkn.us/1/e/cs.js?cid=c013&evid=56871574-70d6-40d7-a93a-3e3b92b38c0e&suu=1&dmn=carshieldprotection.com
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/e/cs.js?cid=c013&evid=56871574-70d6-40d7-a93a-3e3b92b38c0e&suu=1&dmn=carshieldprotection.com HTTP/1.1
Host: aa.trkn.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Cache-Control: private, max-age=3600
Expires: Mon, 06 Feb 2023 17:54:28 GMT
Date: Mon, 06 Feb 2023 16:54:28 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ef0e91cb2992a38ada7e5ff51f809c5d
baae714f42b3a4f5d304d54965bb7dac75381c17
32966a42274107e0277845376e30f7c035d25874904d8e067cc3306fbca65162
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 36363a5a058b9cae8a8a6705bdc0602b
45a99476a49cb3e0b273f03db250421a991299f9
4b26a8d36ddef0145641e003ff9d0bb3eff1903ba683ac8319a727f8d51f36e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mczbf.com/tags/438060465745/tag.js
200 OK 17 kB URL HTTP/1.1 www.mczbf.com/tags/438060465745/tag.js
IP
File type ASCII text, with very long lines (53672)
Hash 7b83fa21da68a3cc166409e06f56ca53
1f49b67eb799df5d024f2b2ff12ea8e8b4f65648
89a7c77bc13bb4e1a235adcddfb613bb0446a12fdf1513604c72ff1492f8ee28
GET /tags/438060465745/tag.js HTTP/1.1
Host: www.mczbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 06 Feb 2023 16:50:35 GMT
X-Request-ID: 60613635-a63e-11ed-b88b-0b758d953ba5
Server: nginx
Cache-Control: max-age=1800
Content-Encoding: gzip
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PGVe0pd-7w9d1_lNIbOa4m81Z_Qzjhxi9qcWKUkoDhI56LJny4UF0A==
Age: 234
carshieldprotection.com/img/steering.png
200 OK 3.9 kB URL HTTP/2 carshieldprotection.com/img/steering.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 15a9ed471f43f9738b9243fefd11a4f2
f5b97328708378c577a90e85df8e1d24a2395834
0256bf9698998a8f568db020222ae27902bfffb3abf3f23bb91eb866b271ef22
GET /img/steering.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Apr 2021 17:37:02 GMT
accept-ranges: bytes
content-length: 3885
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/fonts/stack-interface.woff2?33839631
200 OK 4.3 kB URL HTTP/2 carshieldprotection.com/fonts/stack-interface.woff2?33839631
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format (Version 2), TrueType, length 4292, version 1.0\012- data
Hash ae072782b361d2afdbf43db08d3cfb73
f3db2e65b53d97491672f8631e21d6d05905cc88
31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Apr 2021 13:23:05 GMT
accept-ranges: bytes
content-length: 4292
cache-control: max-age=172800
expires: Wed, 08 Feb 2023 16:54:28 GMT
content-type: font/woff2
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/img/emissions.png
200 OK 2.7 kB URL HTTP/2 carshieldprotection.com/img/emissions.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 76a2204cada3cd9ee0b49ae92c4dc902
e0cf92b9d3fb88613c4bcc07d58b3490730715f1
7e8054f4ea3c171bf136712ba4f985e6d744e7b1453c224ad29d0dd463863b8b
GET /img/emissions.png HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/css/theme.css?d=1675702467
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 18 Aug 2022 20:07:48 GMT
accept-ranges: bytes
content-length: 2730
cache-control: max-age=2592000, public
expires: Fri, 07 Apr 2023 16:54:28 GMT
content-type: image/png
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
carshieldprotection.com/fonts/iconsmind.woff
200 OK 1.2 MB URL HTTP/2 carshieldprotection.com/fonts/iconsmind.woff
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type Web Open Font Format, TrueType, length 1177484, version 0.0\012- data
Size 1.2 MB (1177484 bytes)
Hash 2864469c0e8a84417f318ee2cac54b04
0d48469cec6b87fc8665f2dc05c53a7e7c5f3826
55167ff2dba40b2eb3734d4653b6a3b25a33094cfce64ffb09a23205f33777f7
GET /fonts/iconsmind.woff HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://carshieldprotection.com/css/iconsmind.css
Cookie: utm_source=201245; utm_campaign=28106; dt=dcs; endid=ernieh; utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; _ga_2G8YJ167L4=GS1.1.1675702514.1.0.1675702514.0.0.0; _ga=GA1.1.1934196381.1675702514
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Apr 2021 13:23:04 GMT
accept-ranges: bytes
content-length: 1177484
cache-control: max-age=31536000
expires: Tue, 06 Feb 2024 16:54:28 GMT
content-type: application/x-font-woff
date: Mon, 06 Feb 2023 16:54:28 GMT
server: Apache
X-Firefox-Spdy: h2
us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
200 OK 22 B URL HTTP/2 us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
IP
File type ASCII text, with no line terminators
Hash 8e7120c76040a47f820e8c87b95dddce
0ae6d0d5578537f5011e44f97e812069362ac7b2
e64c6bbbdbf2cc009eeb259cfb5f877274d073ea0ef1770008344cdf7d640c3c
OPTIONS /pdst-events-prod-sink HTTP/1.1
Host: us-central1-adaptive-growth.cloudfunctions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://carshieldprotection.com/
Origin: https://carshieldprotection.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: Content-Type, Accept
access-control-allow-methods: GET, POST
access-control-allow-origin: *
content-type: text/html; charset=utf-8
etag: W/"2-ROqGvmcGDXooyAXFZHZ+i4au1yQ"
function-execution-id: webjcf48xeop
x-powered-by: Express
x-cloud-trace-context: 1c33c540b89dad8ad81f66ac0336b286
content-encoding: gzip
date: Mon, 06 Feb 2023 16:54:29 GMT
server: Google Frontend
cache-control: private
content-length: 22
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-2G8YJ167L4>m=45je3210&_p=772371046&cid=1934196381.1675702514&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675702514&sct=1&seg=0&dl=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&dr=http%3A%2F%2Fneptunebest.com%2F&dt=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-2G8YJ167L4>m=45je3210&_p=772371046&cid=1934196381.1675702514&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675702514&sct=1&seg=0&dl=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&dr=http%3A%2F%2Fneptunebest.com%2F&dt=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-2G8YJ167L4>m=45je3210&_p=772371046&cid=1934196381.1675702514&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675702514&sct=1&seg=0&dl=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&dr=http%3A%2F%2Fneptunebest.com%2F&dt=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://carshieldprotection.com
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://carshieldprotection.com
date: Mon, 06 Feb 2023 16:54:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 727 B IP
Hash 4022594113b70acdea06f790e2b7fa2d
e42023baa5aa3757f4ebd1d617599a2225051807
ce3c0c82d6e043ac3a6107cdc9adf427791376f876150744da8535b22529ec5b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4196
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:29 GMT
Last-Modified: Mon, 06 Feb 2023 15:44:34 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 727
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 36363a5a058b9cae8a8a6705bdc0602b
45a99476a49cb3e0b273f03db250421a991299f9
4b26a8d36ddef0145641e003ff9d0bb3eff1903ba683ac8319a727f8d51f36e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
track.securedvisit.com/js/sv.js
200 OK 25 kB URL HTTP/2 track.securedvisit.com/js/sv.js
IP
Hash a917a33a81835b91748f3d241ff9fe10
5a6d540a0410fa460d5c46f933de6b44cc90f04a
1f04c3a4deb527f6d366ced8404580728f616c0d361c8d4d6f8f313539d9aa06
GET /js/sv.js HTTP/1.1
Host: track.securedvisit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:28 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.22.0
vary: Accept-Encoding
etag: W/"273cf9801333aefc61a4f311b0692f6a"
last-modified: Mon, 06 Feb 2023 16:54:28 GMT
expires: Mon, 06 Feb 2023 16:54:28 GMT
pragma: no-cache
cache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, private
content-encoding: gzip
X-Firefox-Spdy: h2
us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
204 No Content 0 B URL HTTP/2 us-central1-adaptive-growth.cloudfunctions.net/pdst-events-prod-sink
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /pdst-events-prod-sink HTTP/1.1
Host: us-central1-adaptive-growth.cloudfunctions.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://carshieldprotection.com/
Content-Type: application/json
Origin: https://carshieldprotection.com
Content-Length: 608
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-headers: Content-Type, Accept
access-control-allow-methods: GET, POST
access-control-allow-origin: *
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
function-execution-id: 4qt1038fmn19
x-powered-by: Express
x-cloud-trace-context: bb52c7a32ec9b0a2761116819c0f9cfc
date: Mon, 06 Feb 2023 16:54:29 GMT
content-type: text/html
server: Google Frontend
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform.rtbiq.com/events/?tagId=383da2e5bf86a2baa18920277e2f4e5b&partners=true&key=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&origin=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&pings=1&interval=10&amount=1&iq_s=cc28463d975aa672ff9b&c=cc28463d975aa672ff9b&ev=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F
200 OK 0 B URL HTTP/1.1 platform.rtbiq.com/events/?tagId=383da2e5bf86a2baa18920277e2f4e5b&partners=true&key=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&origin=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&pings=1&interval=10&amount=1&iq_s=cc28463d975aa672ff9b&c=cc28463d975aa672ff9b&ev=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /events/?tagId=383da2e5bf86a2baa18920277e2f4e5b&partners=true&key=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&origin=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F&pings=1&interval=10&amount=1&iq_s=cc28463d975aa672ff9b&c=cc28463d975aa672ff9b&ev=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F HTTP/1.1
Host: platform.rtbiq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://carshieldprotection.com
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
access-control-allow-origin: *
content-length: 0
www.mczbf.com/438060465745/pageInfo
200 OK 68 B URL HTTP/1.1 www.mczbf.com/438060465745/pageInfo
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 91e42db1c66c0b276abf6234dc50b2eb
c1986af3c26609b8b7d8933f99c51c1a89e9ea6b
63ef318d96b5d0d0ceba6e04a4e622b1158335cdc67c49e27839132c6f655058
POST /438060465745/pageInfo HTTP/1.1
Host: www.mczbf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://carshieldprotection.com/
Content-Type: application/x-www-form-urlencoded
Origin: https://carshieldprotection.com
Content-Length: 544
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 68
Connection: keep-alive
Date: Mon, 06 Feb 2023 16:54:29 GMT
X-Request-ID: ebe06cba-a63e-11ed-9a5a-d1b6817eae52
Server: nginx
Access-Control-Allow-Origin: *
Cache-Control: no-store
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Idy84pwCU02Fiq3mxBHOPqZqy1pe0QbQzNwx1vndZDQ9QWNC1Kcssw==
j4f6f5q7.stackpathcdn.com/img/favicon.png
200 OK 870 B URL HTTP/2 j4f6f5q7.stackpathcdn.com/img/favicon.png
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 46442e75ba86528d334b89063045c49b
eb3d32938beb4e3df4cd8118bcaf444b0208dd08
63963f512ef7b1c295697cf76a6875176b9876e4b9dffe50e6ec9bca4a346ff6
GET /img/favicon.png HTTP/1.1
Host: j4f6f5q7.stackpathcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:29 GMT
etag: "1593433589"
content-length: 870
content-type: image/png
last-modified: Mon, 29 Jun 2020 12:26:29 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
server: LiteSpeed
access-control-allow-methods: *
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
alt-svc: quic=":443"; ma=2592000; v="35,39,43,44"
vary: User-Agent
x-hw: 1675702469.cds015.sk1.hn,1675702469.cds237.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7afb8eb5dcbd727fb69c14bfabe20e72
d4b1cc1973e4200a371f0aa8c5ec8232d780a77b
ca0a46edfe267973b60ff163d696fe7c0e862e56ee3f90f098bf309f276c987f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: ABEEAF2691FB41C5BB401CDE0B8F2FB9 Ref B: OSL30EDGE0517 Ref C: 2023-02-06T16:54:29Z
date: Mon, 06 Feb 2023 16:54:28 GMT
X-Firefox-Spdy: h2
pubads.g.doubleclick.net/activity;xsp=4537484;ord=7259417544271.874?
200 OK 42 B URL HTTP/2 pubads.g.doubleclick.net/activity;xsp=4537484;ord=7259417544271.874?
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /activity;xsp=4537484;ord=7259417544271.874? HTTP/1.1
Host: pubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 06 Feb 2023 16:54:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 06-Feb-2023 17:09:29 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=25035848&Ver=2&mid=b54ffeb5-0dd0-4762-96ca-510f3331463e&sid=073abfd0a63f11eda691f5db2db4bac9&vid=073ae9d0a63f11edaa85539e4f4bedf1&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&kw=auto%20warranty,%20extneded%20auto%20warranty,%20car%20warranty,%20extended%20vhicle%20protection,%20vehicle%20service%20contracts&p=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&r=http%3A%2F%2Fneptunebest.com%2F<=2756&evt=pageLoad&sv=1&rn=434990
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=25035848&Ver=2&mid=b54ffeb5-0dd0-4762-96ca-510f3331463e&sid=073abfd0a63f11eda691f5db2db4bac9&vid=073ae9d0a63f11edaa85539e4f4bedf1&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&kw=auto%20warranty,%20extneded%20auto%20warranty,%20car%20warranty,%20extended%20vhicle%20protection,%20vehicle%20service%20contracts&p=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&r=http%3A%2F%2Fneptunebest.com%2F<=2756&evt=pageLoad&sv=1&rn=434990
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=25035848&Ver=2&mid=b54ffeb5-0dd0-4762-96ca-510f3331463e&sid=073abfd0a63f11eda691f5db2db4bac9&vid=073ae9d0a63f11edaa85539e4f4bedf1&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&kw=auto%20warranty,%20extneded%20auto%20warranty,%20car%20warranty,%20extended%20vhicle%20protection,%20vehicle%20service%20contracts&p=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&r=http%3A%2F%2Fneptunebest.com%2F<=2756&evt=pageLoad&sv=1&rn=434990 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=2FF376B73B5C60033D5364073AA961B7; domain=.bing.com; expires=Sat, 02-Mar-2024 16:54:29 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4DA58B1CD43E4F68A4595402C4678207 Ref B: OSL30EDGE0517 Ref C: 2023-02-06T16:54:29Z
date: Mon, 06 Feb 2023 16:54:29 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 262283a921f231669fd41486228a6e9a
4b96dcb2cd03f53280d2ecf5ccb249b0b32e6e97
13b8cc87c28e0113401d88f89971eb966afde870a3e4be2602ff34942e81862d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Feb 2023 16:54:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/p/action/25035848.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/25035848.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/25035848.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: EF30D6F2B2FE4F9FBFDA7A1B15708845 Ref B: OSL30EDGE0517 Ref C: 2023-02-06T16:54:29Z
date: Mon, 06 Feb 2023 16:54:29 GMT
X-Firefox-Spdy: h2
d11tldh9zr4z08.cloudfront.net/accutrak_match.js
200 OK 5.1 kB URL HTTP/2 d11tldh9zr4z08.cloudfront.net/accutrak_match.js
IP
Hash 2dde2f6182f44f61e0a422c9b3eb6733
1b6023607862686b44fa9921f906024d3305eff6
a9c051354fc46d659c76e74e73cd207eed07cdc4d56d0c3d9164ef292542c7ef
GET /accutrak_match.js HTTP/1.1
Host: d11tldh9zr4z08.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
server: Apache/2.4
last-modified: Wed, 16 Dec 2020 18:00:52 GMT
x-cache-info: caching
content-encoding: gzip
date: Mon, 06 Feb 2023 16:46:06 GMT
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FFq4kGsZlWdK7u2GHzQ4uRqS6kGTy93E5L5FM_H3k4jaHY0bC-ucxA==
age: 503
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash ca7cab486b437f78634940649be2e98a
54ef5c4d5b4e69998ed2b9f39d6c6a90c7a05430
7316c5aa24f24f1a06407d251d5d345d51bd3c32fd92dad0398c569108a28578
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 06 Feb 2023 16:54:29 GMT
Last-Modified: Mon, 06 Feb 2023 16:31:13 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ObLAfe-DkJz2bH2FobRU85VszcE-tGeRdivTSi21dDdU9uGErnX3mg==
Age: 1396
api.traversedlp.com/retargeting/v1/cookie
200 OK 18 B URL HTTP/2 api.traversedlp.com/retargeting/v1/cookie
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash f3a77cd4563e583b4fe2c7624caec32b
d312c4dcc29d96166d54cd858c60b9d3ed5ec233
306094011fa17d1eb215263299126f9f95f50a1c2235c991846ccfd1911a6dce
GET /retargeting/v1/cookie HTTP/1.1
Host: api.traversedlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://carshieldprotection.com
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:29 GMT
content-type: application/json; charset=utf-8
content-length: 18
server: nginx/1.20.0
p3p: CP="CAO PSAo CONo OUR OTRo BUS PHY ONL UNI COM NAV DEM STA"
access-control-allow-origin: https://carshieldprotection.com
access-control-allow-credentials: true
access-control-expose-headers:
etag: W/"12-86d81FY+WDtP4sdiTK7DKw"
vary: Accept-Encoding
set-cookie: sessionId=s%3AkPZfhAu6zTaqK4kMzVJMOggF-BZNFtIF.e9aWRKdMkE4zGFZedpav4xX5eTqIvwBcAOYr9LUK%2B2o; Path=/; HttpOnly
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=do4b8wz&ref=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&upid=z6h290l&upv=1.1.0
200 OK 228 B URL HTTP/2 insight.adsrvr.org/track/up?adv=do4b8wz&ref=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&upid=z6h290l&upv=1.1.0
IP
File type ASCII text, with no line terminators
Hash ea5157920259d7938066e067bef8ccb6
7fcf7bfa823b96f2b244303b7dfd4419b477ee54
608cec48b295e6011371ea54bdf37187b8429adc95183116c837de5fd3c0086a
GET /track/up?adv=do4b8wz&ref=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&upid=z6h290l&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
200 OK 0 B URL HTTP/2 carshieldprotection.com/free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs
IP
ASN #46606 UNIFIEDLAYER-AS-1
GET /free-quote/?&utm_source=201245&utm_campaign=28106&utm_content=&utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e&dt=dcs HTTP/1.1
Host: carshieldprotection.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neptunebest.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
set-cookie: utm_source=201245; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
utm_medium=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_campaign=28106; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
vt_k=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
dt=dcs; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
sp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
endid=ernieh; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
utm_campaign=28106; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
utm_source=201245; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_sID=f203b1d73acb5d6038b0f1e7ab88e89e; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
dt=dcs; expires=Wed, 08-Mar-2023 16:54:27 GMT; Max-Age=2592000; path=/
cache-control: max-age=3600
expires: Mon, 06 Feb 2023 17:54:27 GMT
vary: Accept-Encoding
content-encoding: gzip
accept-ranges: none
content-type: text/html; charset=UTF-8
date: Mon, 06 Feb 2023 16:54:27 GMT
server: Apache
X-Firefox-Spdy: h2
script.anura.io/request.js?instance=56309078&source=201245&campaign=28106&exid=f203b1d73acb5d6038b0f1e7ab88e89e&978560048668
200 OK 0 B URL HTTP/2 script.anura.io/request.js?instance=56309078&source=201245&campaign=28106&exid=f203b1d73acb5d6038b0f1e7ab88e89e&978560048668
IP
GET /request.js?instance=56309078&source=201245&campaign=28106&exid=f203b1d73acb5d6038b0f1e7ab88e89e&978560048668 HTTP/1.1
Host: script.anura.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neptunebest.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:25 GMT
content-type: application/javascript; charset=utf-8
server: nginx
vary: Accept-Encoding
expires: Sun, 28 Dec 1980 18:57:00 EST
cache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
insight.adsrvr.org/track/up?adv=8it98wr&ref=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&upid=k847uni&upv=1.1.0
200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/up?adv=8it98wr&ref=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&upid=k847uni&upv=1.1.0
IP
GET /track/up?adv=8it98wr&ref=https%3A%2F%2Fcarshieldprotection.com%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&upid=k847uni&upv=1.1.0 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:29 GMT
content-type: text/html
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
win.staticstuff.net/in.php?site_id=101178346&type=ping&jsuid=2051974907&mime=js&x=0.42205826142904335
200 OK 0 B URL HTTP/2 win.staticstuff.net/in.php?site_id=101178346&type=ping&jsuid=2051974907&mime=js&x=0.42205826142904335
IP
POST /in.php?site_id=101178346&type=ping&jsuid=2051974907&mime=js&x=0.42205826142904335 HTTP/1.1
Host: win.staticstuff.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://carshieldprotection.com
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:54:30 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
cache-control: no-cache, must-revalidate, post-check=0, pre-check=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/socicon@3.0.5/css/socicon.min.css
200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/npm/socicon@3.0.5/css/socicon.min.css
IP
GET /npm/socicon@3.0.5/css/socicon.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:27 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 3.0.5
x-jsd-version-type: version
etag: W/"1f1d-v+XqndcC+WaAG695pqljrYCkK1g"
x-served-by: cache-fra19149-FRA, cache-jnb7020-JNB
x-cache: HIT, MISS
vary: Accept-Encoding
cf-cache-status: HIT
age: 1976578
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C94dEf%2BOWzoBl7YRovgskha5JamIBCOwabyzCOPwPg9JEUi5fTYwC0%2FzoHLzhEZIJ6DjzoTfVp2VMy9OjztEzlwvLs9qPg6yvaP3h%2B5OQARwygYzvFKNyXePgwAU4nSHgvo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 795568681ff8b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
api.traversedlp.com/retargetinginclusion/enqueue
200 OK 0 B URL HTTP/2 api.traversedlp.com/retargetinginclusion/enqueue
IP
POST /retargetinginclusion/enqueue HTTP/1.1
Host: api.traversedlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 197
Origin: https://carshieldprotection.com
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 06 Feb 2023 16:54:30 GMT
server: nginx/1.20.0
p3p: CP="CAO PSAo CONo OUR OTRo BUS PHY ONL UNI COM NAV DEM STA"
vary: X-HTTP-Method-Override
access-control-allow-origin: https://carshieldprotection.com
access-control-allow-credentials: true
access-control-expose-headers:
set-cookie: sessionId=s%3AjE-zNzqWgvIyj5OOKKl_6lYqc4louXjq.J%2Bzv6zS8kaurr68ZQC3yaeUmJT%2FxYdbOPCg7ZdLVVSg; Path=/; HttpOnly
X-Firefox-Spdy: h2
win.staticstuff.net/in.php?site_id=101178346&type=pageview&href=%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&title=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&res=1280x1024&lang=en&ref=http%3A%2F%2Fneptunebest.com%2F&jsuid=2051974907&mime=js&x=0.3060964814358522
200 OK 0 B URL HTTP/2 win.staticstuff.net/in.php?site_id=101178346&type=pageview&href=%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&title=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&res=1280x1024&lang=en&ref=http%3A%2F%2Fneptunebest.com%2F&jsuid=2051974907&mime=js&x=0.3060964814358522
IP
GET /in.php?site_id=101178346&type=pageview&href=%2Ffree-quote%2F%3F%26utm_source%3D201245%26utm_campaign%3D28106%26utm_content%3D%26utm_sID%3Df203b1d73acb5d6038b0f1e7ab88e89e%26dt%3Ddcs&title=CarShield%20Monthly%20Coverage%20-%20Extended%20Vehicle%20Repair%20Coverage&res=1280x1024&lang=en&ref=http%3A%2F%2Fneptunebest.com%2F&jsuid=2051974907&mime=js&x=0.3060964814358522 HTTP/1.1
Host: win.staticstuff.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://carshieldprotection.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 06 Feb 2023 16:54:30 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding, Accept-Encoding
cache-control: no-cache, must-revalidate, post-check=0, pre-check=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
164.132.95.123
54.230.245.23
104.16.88.20
3.11.150.0
160.153.0.24
23.36.76.226
23.13.40.232
18.158.229.59