| expressphoneupdate.club/smart-security-0/index.html?clickid={clickid}&utm_source={var1}&utm_medium=restart_push_{offer.name}&publisher={trafficsource.name}&utm_campaign={trafficsource.name} |  104.21.80.251 | 301 Moved Permanently | 0 B |
URL HTTP/1.1expressphoneupdate.club/smart-security-0/index.html?clickid={clickid}&utm_source={var1}&utm_medium=restart_push_{offer.name}&publisher={trafficsource.name}&utm_campaign={trafficsource.name} IP104.21.80.251:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /smart-security-0/index.html?clickid={clickid}&utm_source={var1}&utm_medium=restart_push_{offer.name}&publisher={trafficsource.name}&utm_campaign={trafficsource.name} HTTP/1.1
Host: expressphoneupdate.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 13 Dec 2022 10:54:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 13 Dec 2022 11:54:58 GMT
Location: https://expressphoneupdate.club/smart-security-0/index.html?clickid={clickid}&utm_source={var1}&utm_medium=restart_push_{offer.name}&publisher={trafficsource.name}&utm_campaign={trafficsource.name}
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6PcUtdhMRnpJe4NF3eN0c%2FSMVkgHpaqmZW9rbK1ogeXmbVvqlC87Q0dS1WxtFYmEDQ5BQVkEfvdK86yIryYeQoc3YcO98kPQ96n5wA5BnEqvELFP%2Frj%2FGdRLKLeIzgw5O9dU0hUS%2F8FE0A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778e2a319a880b39-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash358212db02ecc7c1fa088906bd2dba14 091a0688da9de609d97349215ba9e452dfc346a4 7486e512e4de8172ac07f07f47da3a96dd3ac7cb054b335f3e4929261440e672
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7486E512E4DE8172AC07F07F47DA3A96DD3AC7CB054B335F3E4929261440E672"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3852
Expires: Tue, 13 Dec 2022 11:59:11 GMT
Date: Tue, 13 Dec 2022 10:54:59 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashb642ec5702fb818c5d1c67168cc68fdb 015146489a8e7fcb4ba0ba74cfe757a072705f93 4846d047a23903856bd113d02639ce7e08a1e40030151d302295b2d12df98ffc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4846D047A23903856BD113D02639CE7E08A1E40030151D302295B2D12DF98FFC"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9130
Expires: Tue, 13 Dec 2022 13:27:09 GMT
Date: Tue, 13 Dec 2022 10:54:59 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 10:33:45 GMT
content-type: application/json
age: 1274
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdbd022fec0a71226daaf29b7563a8896 c37d14dc7b3849a4bb815fa325fb5e70fae54039 22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13442
Expires: Tue, 13 Dec 2022 14:39:01 GMT
Date: Tue, 13 Dec 2022 10:54:59 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0GZKRLT2VTV7c/Z7nytNj379GkLAC6Q+imNbGO1yrUae9jDggYebtlzUTQ8gzWIWLGV8Eo0zUKBqiCi+oV2KUA==
x-amz-request-id: QKXNDPWC7S9B5KKC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 10:51:52 GMT
age: 187
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:54:59 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 10:07:57 GMT
age: 2822
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashde9e80c3bbe25e8623562110be8b8c9c 013f87db47c4ce3daf3380bc5e0ac3b1b496fe6f 792d587777c03d661a39a0593b71b3ec7611cb6e9d7a834bc79f28e6ace19692
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4946
Cache-Control: max-age=171259
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:54:59 GMT
Etag: "639840ac-1d7"
Expires: Thu, 15 Dec 2022 10:29:18 GMT
Last-Modified: Tue, 13 Dec 2022 09:06:52 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash6deba4cf096adde9dd36b5e22182bcaa ae559ab1fc074de2fd948ee944989bce8df5fba5 ff1a070bda0ec2a69ca7017a8dfeb8a628345753263ecb3994063a676056bf74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF1A070BDA0EC2A69CA7017A8DFEB8A628345753263ECB3994063A676056BF74"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2183
Expires: Tue, 13 Dec 2022 11:31:22 GMT
Date: Tue, 13 Dec 2022 10:54:59 GMT
Connection: keep-alive
|
|
| my.rtmark.net/p.js?f=sync&lr=1&partner=4d524b7a70f9429d3f354097c0083db80c0150ac1699f4b97f6029051cf877c8 | 139.45.195.8 | 200 OK | 697 B |
URL HTTP/2my.rtmark.net/p.js?f=sync&lr=1&partner=4d524b7a70f9429d3f354097c0083db80c0150ac1699f4b97f6029051cf877c8 IP139.45.195.8:0
Hash7e1da03b7d5254f7b1d93874c8f85ce4 c1ff6bec84dd9b2bf2bbcd11bb8791444f04b2d7 ff9366f794284e39381efd6b8ae4b6273469134c741ca7c3d6a1e1248e1a98d4
GET /p.js?f=sync&lr=1&partner=4d524b7a70f9429d3f354097c0083db80c0150ac1699f4b97f6029051cf877c8 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:54:59 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.82.221.194 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.82.221.194:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8X+OtWj5NvHXdF2QCLejKA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OKgKz6ozetUQefOhPgGhXQ4/X/4=
|
|
| analytics.tiktok.com/i18n/pixel/events.js?sdkid=C8SQEGFV9S6N3MLDFVTG&lib=ttq | 95.101.10.113 | 200 OK | 1.2 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/events.js?sdkid=C8SQEGFV9S6N3MLDFVTG&lib=ttq IP95.101.10.113:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (2479) Hash348d6e774cc41f332a48bf35d84c981b 562d906dec6a60774f8a4f6a370aff80a8557274 54bc233353edb04aae905a1d080caf73e04c5c9f521e591c90a84f53d946a796
GET /i18n/pixel/events.js?sdkid=C8SQEGFV9S6N3MLDFVTG&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 2022121310550033D1B7CD1C73451E1FAF
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb61987e92ca6e82fe8f5ce61a0d782a00b48086859bed5cf5aecb9ba43af892eb52a2930533e86c0eaff0ff9979439380170df4bb96520b29f8302a16a4ef9a0fdaf986fa2bb4b55cb408e6d06d1bb9604
content-encoding: gzip
content-length: 1244
x-origin-response-time: 5,23.220.106.155
x-akamai-request-id: 1f4d9591.2ea0471
expires: Tue, 13 Dec 2022 10:55:00 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 13 Dec 2022 10:55:00 GMT
x-cache: TCP_MISS from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
set-cookie: _ttp=2Ir9ailmIS4YZqh5Lf0YaF8LdCC; Path=/; Domain=tiktok.com; Max-Age=33696000; Secure; SameSite=None
x-cache-remote: TCP_MISS from a23-220-106-155.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: cdn-cache; desc=MISS, edge; dur=90, origin; dur=5, inner; dur=3
x-parent-response-time: 95,95.101.10.109
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/static/main.MTRjZDliOGFlMA.js | 95.101.10.113 | 200 OK | 62 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/static/main.MTRjZDliOGFlMA.js IP95.101.10.113:0 ASN#20940 Akamai International B.V.
File typeASCII text, with very long lines (25602) Hashaf6554b3d6a27605762843859f00442d c23e931e699bbecae23d986a6cbf209ba0a28070 4078bb4d3ab56862aa139b46186483f51ae7e6eb798bc61f1f8b090fb61c5d3a
GET /i18n/pixel/static/main.MTRjZDliOGFlMA.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Cookie: _ttp=2Ir9ailmIS4YZqh5Lf0YaF8LdCC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 2022120115071667AA432E549451B37C27
x-tt-trace-host: 0107f623d8b8af93de4758d7753b283d208729b098d8fb865fd61dd8a7f9fc13cc9699bae3f6b9ea9d9e1d15126016e0439dcfe655e327d508bca81f1d447dac526a62a637ad231a8701d2cea60607fde8
content-encoding: gzip
content-length: 62261
date: Tue, 13 Dec 2022 10:55:00 GMT
x-cache: TCP_MEM_HIT from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=12
x-akamai-request-id: 2ea04d9
X-Firefox-Spdy: h2
|
|
| analytics.tiktok.com/i18n/pixel/static/identify_87671.js | 95.101.10.113 | 200 OK | 31 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/static/identify_87671.js IP95.101.10.113:0 ASN#20940 Akamai International B.V.
Hash696267da534795b9ccca091c830385c6 e6e318164803408a3aa47f5ac8150c8120c750e2 589ccefe99cecbf60e010e7d22b75cd8b032284dbcfa61ed4bb3a270cb9dcddc
GET /i18n/pixel/static/identify_87671.js HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Cookie: _ttp=2Ir9ailmIS4YZqh5Lf0YaF8LdCC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
x-tt-logid: 20221025132332E17C791651961F7529DD
x-tt-trace-host: 01fd55814806c56b8ac2f7e1fc489b012cf7fe6389034e9b793ed3f334e223bd41bfd41207f501e0c60912367ce731d86fcc288b51b0e2e83bc1d92d187febaa71b2c172923b15de83698dac715e98e721
content-encoding: gzip
content-length: 30778
date: Tue, 13 Dec 2022 10:55:00 GMT
x-cache: TCP_MEM_HIT from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=hit;type=static
server-timing: cdn-cache; desc=HIT, edge; dur=0, inner; dur=3
x-akamai-request-id: 2ea053f
X-Firefox-Spdy: h2
|
|
| overalltrack.com/api/v3.0/clickapi/img?aid=1&clickId={clickid} | 204.48.29.15 | 200 OK | 43 B |
URL HTTP/1.1overalltrack.com/api/v3.0/clickapi/img?aid=1&clickId={clickid} IP204.48.29.15:0 ASN#14061 DIGITALOCEAN-ASN
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /api/v3.0/clickapi/img?aid=1&clickId={clickid} HTTP/1.1
Host: overalltrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 13 Dec 2022 10:55:00 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Set-Cookie: currentClickid=%7B%221%22%3A%22%7Bclickid%7D%22%7D; Max-Age=31536000; Path=/; Expires=Wed, 13 Dec 2023 10:55:00 GMT; Secure; SameSite=None
|
|
| analytics.tiktok.com/api/v2/pixel | 95.101.10.113 | 200 OK | 0 B |
URL HTTP/2analytics.tiktok.com/api/v2/pixel IP95.101.10.113:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/v2/pixel HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 930
Origin: https://expressphoneupdate.club
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Cookie: _ttp=2Ir9ailmIS4YZqh5Lf0YaF8LdCC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/octet-stream
content-length: 0
access-control-allow-origin: *
x-tt-logid: 2022121310550023FC6FA83F25E01E8185
x-tt-trace-host: 01250e51f4d5abc0e156abb7e367bacbb67140549ad4eaaab92cb7363406bdeb01628d43d5aedc9d7eb8f786eae5be0093f2bdfea7707dbef8a29c05f57cc3254ae8b02e0fac572529f11d807a9d7fd67e
expires: Tue, 13 Dec 2022 10:55:00 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 13 Dec 2022 10:55:00 GMT
x-cache: TCP_MISS from a95-101-10-109.deploy.akamaitechnologies.com (AkamaiGHost/10.10.3-45298580) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=15, cdn-cache; desc=MISS, edge; dur=5, origin; dur=106
x-origin-response-time: 106,95.101.10.109
x-akamai-request-id: 2ea0568
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.165 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.165:0
Hashd15db5554cb2d5541d88adef26e40035 31de263713fc890fd289c9c91e367afbe6d5c820 15a04146b1ba64b7fa9c23b9445f6f5d746fe849df8f66d9ec6e19812c2c1f05
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121251
Date: Tue, 13 Dec 2022 10:55:00 GMT
Etag: "63978729-1d7"
Expires: Wed, 14 Dec 2022 20:35:51 GMT
Last-Modified: Mon, 12 Dec 2022 19:55:21 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: c7wAOzmernZV1x40-TzfgYV7i42P_iIWH4_Q8G9mJZ_5WBqxYoc1ZQ==
Age: 2430
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.165 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.165:0
Hashd15db5554cb2d5541d88adef26e40035 31de263713fc890fd289c9c91e367afbe6d5c820 15a04146b1ba64b7fa9c23b9445f6f5d746fe849df8f66d9ec6e19812c2c1f05
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=121547
Date: Tue, 13 Dec 2022 10:55:00 GMT
Etag: "63978729-1d7"
Expires: Wed, 14 Dec 2022 20:40:47 GMT
Last-Modified: Mon, 12 Dec 2022 19:55:21 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: I9PtjIFwOMtQcbq1mLeqlpYiKMcUiLgzlrc16wtUx24NiUjyiptgOA==
Age: 2726
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash497458a22d5713946f85ac5d9ad8416c 75665710bd845cc1e77deaa5bf1b1f3bceda261b 635b3fd2e492e5464f1dc116540e733faa7df954c1900de77176df98cc26ee71
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "635B3FD2E492E5464F1DC116540E733FAA7DF954C1900DE77176DF98CC26EE71"
Last-Modified: Mon, 12 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11344
Expires: Tue, 13 Dec 2022 14:04:04 GMT
Date: Tue, 13 Dec 2022 10:55:00 GMT
Connection: keep-alive
|
|
| app1-smartsecurity-etl.herokuapp.com/device_by_model?model=x64 | 54.208.186.182 | 200 OK | 299 B |
URL HTTP/1.1app1-smartsecurity-etl.herokuapp.com/device_by_model?model=x64 IP54.208.186.182:0
Hash78313bb0cea2d9970f31fe3e29a8790e 7eb0b4f9bf3d760a24707c583a54a4319a7950bd b25a3c126dcd4ae88f50620b5e6f5d57383f9ec2a56a20b557cfefe0131cbcb8
OPTIONS /device_by_model?model=x64 HTTP/1.1
Host: app1-smartsecurity-etl.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://expressphoneupdate.club/
Origin: https://expressphoneupdate.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Server: gunicorn
Date: Tue, 13 Dec 2022 10:55:00 GMT
Content-Type: text/html; charset=utf-8
Vary: Origin
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, accept-encoding, authorization, content-type, dnt, origin, user-agent, x-csrftoken, x-requested-with
Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
Access-Control-Max-Age: 86400
Content-Length: 0
Via: 1.1 vegur
|
|
| overalltrack.com/api/v3.0/clickapi/otherInstall?clickId={clickid}&aid=1&checkOld=1&medium=restart_push_{offer.name}&source=var1&campaign={trafficsource.name}&publisher={trafficsource.name}&checkUninstall=1 | 204.48.29.15 | 200 OK | 377 B |
URL HTTP/1.1overalltrack.com/api/v3.0/clickapi/otherInstall?clickId={clickid}&aid=1&checkOld=1&medium=restart_push_{offer.name}&source=var1&campaign={trafficsource.name}&publisher={trafficsource.name}&checkUninstall=1 IP204.48.29.15:0 ASN#14061 DIGITALOCEAN-ASN
Hashd4e7af8e6e85e24234504a9634d6048a 201e4222d6f019ffdbb65202e0e07194a77d96d2 adc810860a25e38f5fe704ecb10fa650d87945e790ea41138b2c8228d08db9ec
OPTIONS /api/v3.0/clickapi/otherInstall?clickId={clickid}&aid=1&checkOld=1&medium=restart_push_{offer.name}&source=var1&campaign={trafficsource.name}&publisher={trafficsource.name}&checkUninstall=1 HTTP/1.1
Host: overalltrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://expressphoneupdate.club/
Origin: https://expressphoneupdate.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 13 Dec 2022 10:55:00 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 8
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Allow: GET,HEAD
|
|
| app1-smartsecurity-etl.herokuapp.com/device_by_model?model=x64 | 54.208.186.182 | 301 Moved Permanently | 0 B |
URL HTTP/1.1app1-smartsecurity-etl.herokuapp.com/device_by_model?model=x64 IP54.208.186.182:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /device_by_model?model=x64 HTTP/1.1
Host: app1-smartsecurity-etl.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: Basic bGFuZDptb2RlbGJyYW5k
Origin: https://expressphoneupdate.club
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Server: gunicorn
Date: Tue, 13 Dec 2022 10:55:00 GMT
Content-Type: text/html; charset=utf-8
Location: /device_by_model/?model=x64
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Vary: Origin
Access-Control-Allow-Origin: *
Content-Length: 0
Via: 1.1 vegur
|
|
| my.rtmark.net/img.gif?f=sync&partner=4d524b7a70f9429d3f354097c0083db80c0150ac1699f4b97f6029051cf877c8&ttl=&rurl=https%3A%2F%2Fexpressphoneupdate.club%2Fsmart-security-0%2Findex.html%3Fclickid%3D%7Bclickid%7D%26utm_source%3D%7Bvar1%7D%26utm_medium%3Drestart_push_%7Boffer.name%7D%26publisher%3D%7Btrafficsource.name%7D%26utm_campaign%3D%7Btrafficsource.name%7D%23 | 139.45.195.8 | 200 OK | 43 B |
URL HTTP/2my.rtmark.net/img.gif?f=sync&partner=4d524b7a70f9429d3f354097c0083db80c0150ac1699f4b97f6029051cf877c8&ttl=&rurl=https%3A%2F%2Fexpressphoneupdate.club%2Fsmart-security-0%2Findex.html%3Fclickid%3D%7Bclickid%7D%26utm_source%3D%7Bvar1%7D%26utm_medium%3Drestart_push_%7Boffer.name%7D%26publisher%3D%7Btrafficsource.name%7D%26utm_campaign%3D%7Btrafficsource.name%7D%23 IP139.45.195.8:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=4d524b7a70f9429d3f354097c0083db80c0150ac1699f4b97f6029051cf877c8&ttl=&rurl=https%3A%2F%2Fexpressphoneupdate.club%2Fsmart-security-0%2Findex.html%3Fclickid%3D%7Bclickid%7D%26utm_source%3D%7Bvar1%7D%26utm_medium%3Drestart_push_%7Boffer.name%7D%26publisher%3D%7Btrafficsource.name%7D%26utm_campaign%3D%7Btrafficsource.name%7D%23 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:01 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2f2a4e1d53b840b9bfe361051716ab4e; expires=Wed, 13 Dec 2023 10:55:01 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| overalltrack.com/api/v3.0/clickapi/otherInstall?clickId={clickid}&aid=1&checkOld=1&medium=restart_push_{offer.name}&source=var1&campaign={trafficsource.name}&publisher={trafficsource.name}&checkUninstall=1 | 204.48.29.15 | 200 OK | 126 B |
URL HTTP/1.1overalltrack.com/api/v3.0/clickapi/otherInstall?clickId={clickid}&aid=1&checkOld=1&medium=restart_push_{offer.name}&source=var1&campaign={trafficsource.name}&publisher={trafficsource.name}&checkUninstall=1 IP204.48.29.15:0 ASN#14061 DIGITALOCEAN-ASN
File typeJSON data\012- , ASCII text, with no line terminators Hashc8f85db18fe8f89306f6c0819c67036d 7b5c44e4a9fd70e664aa4fe54fc0bd7bb3963a31 a71ab24977d03d440189548647bee7fdbdf0d6dee44478d1f6b44f17699a75ee
GET /api/v3.0/clickapi/otherInstall?clickId={clickid}&aid=1&checkOld=1&medium=restart_push_{offer.name}&source=var1&campaign={trafficsource.name}&publisher={trafficsource.name}&checkUninstall=1 HTTP/1.1
Host: overalltrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://expressphoneupdate.club
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 13 Dec 2022 10:55:01 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 126
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
|
|
| app1-smartsecurity-etl.herokuapp.com/device_by_model/?model=x64 | 54.208.186.182 | 200 OK | 0 B |
URL HTTP/1.1app1-smartsecurity-etl.herokuapp.com/device_by_model/?model=x64 IP54.208.186.182:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /device_by_model/?model=x64 HTTP/1.1
Host: app1-smartsecurity-etl.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Origin: https://expressphoneupdate.club
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Server: gunicorn
Date: Tue, 13 Dec 2022 10:55:01 GMT
Content-Type: text/html; charset=utf-8
Vary: Origin
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, accept-encoding, authorization, content-type, dnt, origin, user-agent, x-csrftoken, x-requested-with
Access-Control-Allow-Methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
Access-Control-Max-Age: 86400
Content-Length: 0
Via: 1.1 vegur
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 1.9 kB |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashff5c02d82ec302bdeec3593dab437bec 9ca12371efb066e30917ea6a1b893843e70cc272 e0558582931e637e67cd3cb892004e3f06e3beae805966b5bd5ee426d4b4d5fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F294C14E821BB14D97245D44AE36FC39245D37C909E66ACDA3B74C530E3E43A"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12109
Expires: Tue, 13 Dec 2022 14:16:50 GMT
Date: Tue, 13 Dec 2022 10:55:01 GMT
Connection: keep-alive
|
|
| app1-smartsecurity-etl.herokuapp.com/device_by_model/?model=x64 | 54.208.186.182 | 404 Not Found | 937 B |
URL HTTP/1.1app1-smartsecurity-etl.herokuapp.com/device_by_model/?model=x64 IP54.208.186.182:0
Hash3bd2177ad4b4815ad5f02358c4cbf17b f73738e7ce6b78b2463953c2fc08b737b9a37fc0 6dfbecaceb1a5fa1734c5c07c8279019e5091d366791e285ef8437fa5f3081db
GET /device_by_model/?model=x64 HTTP/1.1
Host: app1-smartsecurity-etl.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://expressphoneupdate.club
Authorization: Basic bGFuZDptb2RlbGJyYW5k
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Connection: keep-alive
Server: gunicorn
Date: Tue, 13 Dec 2022 10:55:01 GMT
Content-Type: application/json
Allow: GET, HEAD, OPTIONS
X-Frame-Options: DENY
Content-Length: 86
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Vary: Origin
Access-Control-Allow-Origin: *
Via: 1.1 vegur
|
|
| primaveratrack.com/testb.php |  167.114.103.223 | 200 OK | 126 B |
URL HTTP/1.1primaveratrack.com/testb.php IP167.114.103.223:0
File typeJSON data\012- , ASCII text, with no line terminators Hasha5b3bfed693e840e5d91095409c6af0b 7fbe8433eda44893839708d5ce47d7a7041005fd a04e547854da7a70b03398e9329527420ef9f14486d35d5c3186ee46248f25a4
GET /testb.php HTTP/1.1
Host: primaveratrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://expressphoneupdate.club
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Tue, 13 Dec 2022 10:55:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| track.profitableredirect.com/e69b0e43-f199-496b-87cc-2daa322bb681 |  18.192.108.151 | 200 OK | 811 B |
URL HTTP/2track.profitableredirect.com/e69b0e43-f199-496b-87cc-2daa322bb681 IP18.192.108.151:0
Hashd796421f4c2ed11449318060d069501d a118d1c9fe89d08834b1e6c6d9dc988a22123e41 20e95053c6f17992e06b62ccb119ef89fd11c714ad47299dc14ab47cd4c1b769
GET /e69b0e43-f199-496b-87cc-2daa322bb681 HTTP/1.1
Host: track.profitableredirect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:01 GMT
content-type: text/html;charset=UTF-8
content-length: 724
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
set-cookie: e69b0e43-f199-496b-87cc-2daa322bb681-v4=OBR4dmG2eU7pKx50DeEAaw4nMRzKezGcyycQTerdxYA; Max-Age=86400; Expires=Wed, 14-Dec-2022 10:55:01 GMT; Domain=track.profitableredirect.com; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=JBuP1fvmtap%2FpKPy%2FuvbS%2BCNPRu9AjicMehB9LDZbHvxZh4vZcIMOWPEtPav7xao%2F2w8mhENmogQyJEkz7Jf%2FqGU8RqGxLyXpUte%2Bf0EBI6e9RwjRFuJkxOBR7Eu30ArVxYxIE%2B5ZTyAhDmKZ2a5Ig%3D%3D; Max-Age=31536000; Expires=Wed, 13-Dec-2023 10:55:01 GMT; Domain=track.profitableredirect.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
|
|
| track.profitableredirect.com/redirect?target=BASE64aHR0cHM6Ly9vdWhhc3RheS5uZXQvYWZ1LnBocD96b25laWQ9MzY0NzY3Ng&ts=1670928901486&hash=qNU8MkIzWZzZrnOinan2I6elpAifPnvuhbmTlBaRDIU&rm=DJ | 18.192.108.151 | 200 OK | 424 B |
URL HTTP/2track.profitableredirect.com/redirect?target=BASE64aHR0cHM6Ly9vdWhhc3RheS5uZXQvYWZ1LnBocD96b25laWQ9MzY0NzY3Ng&ts=1670928901486&hash=qNU8MkIzWZzZrnOinan2I6elpAifPnvuhbmTlBaRDIU&rm=DJ IP18.192.108.151:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (424), with no line terminators Hash03ab185b43632ca143ad0a05b5ad7c76 d650a7441bef0d8c04f8aaaa2de6be743d757460 72235612e73b145c28b49ac3d247f41c942f81be00a5de5d6ecfb985787e2a4d
GET /redirect?target=BASE64aHR0cHM6Ly9vdWhhc3RheS5uZXQvYWZ1LnBocD96b25laWQ9MzY0NzY3Ng&ts=1670928901486&hash=qNU8MkIzWZzZrnOinan2I6elpAifPnvuhbmTlBaRDIU&rm=DJ HTTP/1.1
Host: track.profitableredirect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: e69b0e43-f199-496b-87cc-2daa322bb681-v4=OBR4dmG2eU7pKx50DeEAaw4nMRzKezGcyycQTerdxYA; cc-v4=JBuP1fvmtap%2FpKPy%2FuvbS%2BCNPRu9AjicMehB9LDZbHvxZh4vZcIMOWPEtPav7xao%2F2w8mhENmogQyJEkz7Jf%2FqGU8RqGxLyXpUte%2Bf0EBI6e9RwjRFuJkxOBR7Eu30ArVxYxIE%2B5ZTyAhDmKZ2a5Ig%3D%3D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:01 GMT
content-type: text/html;charset=UTF-8
content-length: 424
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash08f7321e01de2d111fc8100424937061 01ea459fe9270ea25e3cec2228d1cf3cd61d80b8 36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20810
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 10:55:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash08f7321e01de2d111fc8100424937061 01ea459fe9270ea25e3cec2228d1cf3cd61d80b8 36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20810
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 10:55:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash08f7321e01de2d111fc8100424937061 01ea459fe9270ea25e3cec2228d1cf3cd61d80b8 36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20810
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 10:55:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash08f7321e01de2d111fc8100424937061 01ea459fe9270ea25e3cec2228d1cf3cd61d80b8 36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20810
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 10:55:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash08f7321e01de2d111fc8100424937061 01ea459fe9270ea25e3cec2228d1cf3cd61d80b8 36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20810
Expires: Tue, 13 Dec 2022 16:41:51 GMT
Date: Tue, 13 Dec 2022 10:55:01 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba22bdf-55a7-4e1e-9034-79415392197a.jpeg | 34.120.237.76 | 200 OK | 9.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba22bdf-55a7-4e1e-9034-79415392197a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe6788236cae1083aaf5a1cf95f1a6c9b 3825506ecfd360bf5352979023f445748373be3b 544d94a4896d3db29f3b6e518503f82776a3feaa55a5e9114b5572da1e667691
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba22bdf-55a7-4e1e-9034-79415392197a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9676
x-amzn-requestid: 6d84c903-9bdb-4255-8324-d87d99cd1979
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWgGHZZoAMFtwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979e00-7964e1ca60e88ca45822b963;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: btTZz7Nxw4axn2z0AGHK8opfEpmDf7ezidoktYn-0AHOvA-DHVUBIQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:47:06 GMT
age: 47275
etag: "3825506ecfd360bf5352979023f445748373be3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49639c2a-f62e-4eec-a346-05935502ced7.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49639c2a-f62e-4eec-a346-05935502ced7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasheedb63d486e856a5162fc007e35650f9 4e680af868de5455a92cbdca385c2354180d2393 9e4884c5253d20517864695b00986c7c0a60d259b753960dbdbb052252d8e71d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49639c2a-f62e-4eec-a346-05935502ced7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5694
x-amzn-requestid: 5599c613-be2c-4238-bec9-ec1d1bc2a14d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dCUBlE-poAMFRFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639733a3-37ffac3d5fc6211e4ab2cae9;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 13:58:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Dv5-2befxc7-pEmJBCRVVY76Z3ohYJYOBzR8jIId82HchyJF85-pWA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 03:44:14 GMT
age: 25847
etag: "4e680af868de5455a92cbdca385c2354180d2393"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefb81a20-e06f-4f47-bfa8-916a4837d754.png | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefb81a20-e06f-4f47-bfa8-916a4837d754.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash703d359edb819eaefc6ccae224bbde15 4b8d7b5ff7cf1333bd0019b2d72cf2aadef6caf8 0452d24052bef979fd13f1a0fefb4c7803ff91c5afa3c871f85b73eb08f15489
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefb81a20-e06f-4f47-bfa8-916a4837d754.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12144
x-amzn-requestid: 0d00ec22-808c-4f60-98b1-87eef4aad829
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6n0yFORIAMFskA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394201e-58f1a5c87fc341bf56fa9d68;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 05:58:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: sW4dQXExyH6JvbdtSgIPJUiifHh-VfbfcG5hKMaJ4tZA3pO-fobF6w==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 20:36:31 GMT
age: 51510
etag: "4b8d7b5ff7cf1333bd0019b2d72cf2aadef6caf8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg | 34.120.237.76 | 200 OK | 7.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9c41a668e81a782c5548ef82bc42df96 6e833f91a12e0beb9014a99c6b49792b81ad8dc2 323a322870127db232648bd70b906f0b62bb24568c7e84a2651141d1ecf7b83f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409bf41a-5f98-441f-a838-34e319b4ffec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7682
x-amzn-requestid: 7f877768-ce73-4ea3-aa53-95ed5886598d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw5VEHzXIAMFqIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903c20-6818fed235383e3c27c355d2;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:09:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9h-nzrNz3zvVEGvlOKHPeHa4zX3zoCYIbMk_G5WzWZAzP6-uZjIPPQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 12:22:55 GMT
age: 81126
etag: "6e833f91a12e0beb9014a99c6b49792b81ad8dc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg | 34.120.237.76 | 200 OK | 7.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash86bce3d677c0dd541440ebf38920020d f11e21b6ad97e07b1d7103ad40a2e158e06fda73 9e23bc16cd1402d9124ebb9e625a5580f677ca9e008d3e04dc95080072fd1df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5d9c5ff-aaa2-4c2a-ab2b-661f84126bf7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7104
x-amzn-requestid: b1117224-be51-4e21-8b3b-01e5485f0af0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAD2yH4loAMFuWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964cf8-1382e1a6710239ec629eedb8;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:34:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eCJ1Y9f8WMsfMlaqxVR4kTx0Eacgeqn2TN-df-DPt9nQI9AIrqHkEg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 00:46:29 GMT
age: 36512
etag: "f11e21b6ad97e07b1d7103ad40a2e158e06fda73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg | 34.120.237.76 | 200 OK | 6.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash690133687ca909986a7ac4e919193bbb 9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4 d4913048b7f2b341c77a345420a855e6385e00c64ef30f6cf136ad16f6bda771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3319031c-7524-4aba-998b-86a7b8a1132f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6711
x-amzn-requestid: ac93518c-b2e1-4995-9152-11c30c05cc9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c9h4oHmiIAMFXQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639549d0-5180e10e467c4c4c5e7fd1f4;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 03:09:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iPEuoDVSO2rNh9Y9VA2sYsfqtiMYPHJx2IQdW2Yevo2eqsch2MesJg==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Dec 2022 03:38:02 GMT
age: 26219
etag: "9f36b8f5cd7f540d18318c0b8ca55d40e85ed1d4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash2451e1be60c07c88237f9d1dfc9a7bc5 23423df13008f0caf5a5330505497dd7f3adbc0a b8aa00d2977a6bf4747b1a229dd05f50b07651305244b6d1168678477e5d3bdd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8AA00D2977A6BF4747B1A229DD05F50B07651305244B6D1168678477E5D3BDD"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21441
Expires: Tue, 13 Dec 2022 16:52:22 GMT
Date: Tue, 13 Dec 2022 10:55:01 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash6deba4cf096adde9dd36b5e22182bcaa ae559ab1fc074de2fd948ee944989bce8df5fba5 ff1a070bda0ec2a69ca7017a8dfeb8a628345753263ecb3994063a676056bf74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF1A070BDA0EC2A69CA7017A8DFEB8A628345753263ECB3994063A676056BF74"
Last-Modified: Mon, 12 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2180
Expires: Tue, 13 Dec 2022 11:31:22 GMT
Date: Tue, 13 Dec 2022 10:55:02 GMT
Connection: keep-alive
|
|
| my.rtmark.net/img.gif?f=merge&userId=a5fae0cfd8624f788eac948ea8897e46 | 139.45.195.8 | 200 OK | 43 B |
URL HTTP/2my.rtmark.net/img.gif?f=merge&userId=a5fae0cfd8624f788eac948ea8897e46 IP139.45.195.8:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=a5fae0cfd8624f788eac948ea8897e46 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ouhastay.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a5fae0cfd8624f788eac948ea8897e46; expires=Wed, 13 Dec 2023 10:55:02 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ouhastay.net/?z=3647676&syncedCookie=true&rhd=false | 139.45.197.239 | 302 Found | 0 B |
URL HTTP/2ouhastay.net/?z=3647676&syncedCookie=true&rhd=false IP139.45.197.239:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /?z=3647676&syncedCookie=true&rhd=false HTTP/1.1
Host: ouhastay.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 455
Origin: https://ouhastay.net
Connection: keep-alive
Referer: https://ouhastay.net/afu.php?zoneid=3647676&var=3647676&rid=ksX-wKK1z8yLZCaWKyzJyw%3D%3D&rhd=false
Cookie: OAID=a5fae0cfd8624f788eac948ea8897e46; oaidts=1670928901
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-length: 0
location: https://rejdfa.com/link?z=5585013&var=3647676&ymid=626483822099440099&rdk=rk3
x-trace-id: 0b7e18f17b6454696768b24436390f89
link: <https://rejdfa.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
access-control-allow-origin: https://ouhastay.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=a5fae0cfd8624f788eac948ea8897e46; expires=Wed, 13 Dec 2023 10:55:02 GMT; path=/; secure; SameSite=None
oaidts=1670928901; expires=Wed, 13 Dec 2023 10:55:02 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 20 Dec 2022 10:55:02 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hash53994fe2af8c1c261390f9618233f56b d95c4ddbea937dc4b9c33ff7a7de640858971fae a6d00565464f4b7918c5945ab2882da6927e8ea7edf13806ad0bf0434b8f3618
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 10:55:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 12 Dec 2022 04:52:38 GMT
Expires: Mon, 19 Dec 2022 04:52:37 GMT
Etag: "d95c4ddbea937dc4b9c33ff7a7de640858971fae"
Cache-Control: max-age=496054,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 778e2a464813b50f-OSL
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash90f587b09dcd5ebd239881c3478ea443 611f6b204a1a5570b5de3a58a3cb76295d387ec6 fc612473ef886b5e186ea4d091a72403554ed5f56781613811e7c3d3457bb75a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC612473EF886B5E186EA4D091A72403554ED5F56781613811E7C3D3457BB75A"
Last-Modified: Mon, 12 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6850
Expires: Tue, 13 Dec 2022 12:49:12 GMT
Date: Tue, 13 Dec 2022 10:55:02 GMT
Connection: keep-alive
|
|
| rejdfa.com/link?z=5585013&var=3647676&ymid=626483822099440099&rdk=rk3 | 139.45.197.249 | 302 Found | 0 B |
URL HTTP/2rejdfa.com/link?z=5585013&var=3647676&ymid=626483822099440099&rdk=rk3 IP139.45.197.249:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /link?z=5585013&var=3647676&ymid=626483822099440099&rdk=rk3 HTTP/1.1
Host: rejdfa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-length: 0
location: https://playcaliber.com/promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: b2082fa7729854e2231010fe00ce5b2c
link: <https://playcaliber.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=5d0d598980f64fc29e91c6f6242b0f07; expires=Wed, 13 Dec 2023 10:55:02 GMT
oaidts=1670928902; expires=Wed, 13 Dec 2023 10:55:02 GMT
OXCCLK=6404632.1; expires=Wed, 13 Dec 2023 10:55:02 GMT
allcnt=1; expires=Wed, 13 Dec 2023 10:55:02 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| playcaliber.com/en/promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676 | 52.57.25.143 | 302 Found | 0 B |
URL HTTP/2playcaliber.com/en/promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676 IP52.57.25.143:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676 HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: /en/
expires: Tue, 13 Dec 2022 10:55:02 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
content-security-policy: frame-ancestors 'self' http://webvisor.com https://webvisor.com; report-uri https://caliber.report-uri.com/r/d/csp/enforce
content-language: en
vary: Cookie
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: unsafe-none
set-cookie: utm_source=emV5ZG9v; expires=Wed, 13 Dec 2023 10:55:02 GMT; Max-Age=31536000; Path=/; Secure
utm_term=MzY0NzY3Ng; expires=Thu, 12 Jan 2023 10:55:02 GMT; Max-Age=2592000; Path=/; Secure
utm_content=NTU4NTAxMw; expires=Thu, 12 Jan 2023 10:55:02 GMT; Max-Age=2592000; Path=/; Secure
subid=NjI2NDgzNTcxNDgzNDg0MjQ2; expires=Thu, 12 Jan 2023 10:55:02 GMT; Max-Age=2592000; Path=/; Secure
utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; expires=Thu, 12 Jan 2023 10:55:02 GMT; Max-Age=2592000; Path=/; Secure
sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; expires=Tue, 27 Dec 2022 10:55:02 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/profile_icon.fcf2638dd2bc.png | 52.57.25.143 | 200 OK | 648 B |
URL HTTP/2playcaliber.com/s/img/profile_icon.fcf2638dd2bc.png IP52.57.25.143:0
File typePNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data Hashfcf2638dd2bc5f3e843d481e923cbf5b fe0c3a81bf05dfce1c501afc2eb6c5e338d523ea 3afcbe2e8954bafcf39302c6958f6b13f85eb82d641ad6a80e69a888c3390b03
GET /s/img/profile_icon.fcf2638dd2bc.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 648
last-modified: Wed, 27 Jan 2021 07:32:09 GMT
etag: "601116f9-288"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/lang_en_15x10.49b615d5ef13.png | 52.57.25.143 | 200 OK | 612 B |
URL HTTP/2playcaliber.com/s/img/lang_en_15x10.49b615d5ef13.png IP52.57.25.143:0
File typePNG image data, 15 x 10, 8-bit/color RGBA, non-interlaced\012- data Hash49b615d5ef1321a10265a005fec93dd0 5d8273e5551e22986238f8e8ebddb1e62731247f 9406243a1c758a3d8975736c60e6a75a462e21f841d3a6fd74c0e29cc1912c97
GET /s/img/lang_en_15x10.49b615d5ef13.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 612
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-264"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/profile_icon_16.f220a48b3048.png | 52.57.25.143 | 200 OK | 510 B |
URL HTTP/2playcaliber.com/s/img/profile_icon_16.f220a48b3048.png IP52.57.25.143:0
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hashf220a48b3048a716c241e0ffaa9700fc 223ea767e7124d58d9765b6450b901259a8286ae be930928a715b40351ea62a97380a801975e6ba6494b85bf6c5b23b391099de3
GET /s/img/profile_icon_16.f220a48b3048.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 510
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-1fe"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/lang_ru_15x10.dd47a3bd011b.png | 52.57.25.143 | 200 OK | 334 B |
URL HTTP/2playcaliber.com/s/img/lang_ru_15x10.dd47a3bd011b.png IP52.57.25.143:0
File typePNG image data, 15 x 10, 8-bit/color RGBA, non-interlaced\012- data Hashdd47a3bd011bd70e2630c575097b6d12 dba316aada8c5bc856a3ed0bec5cc55334faec6f 7b12fec1a2f2cdd93b71e854c1d4043ddc5353dd2dfd2f4857a9db964fa92e76
GET /s/img/lang_ru_15x10.dd47a3bd011b.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 334
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-14e"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| ouhastay.net/afu.php?zoneid=3647676 | 139.45.197.239 | 200 OK | 9.6 kB |
URL HTTP/2ouhastay.net/afu.php?zoneid=3647676 IP139.45.197.239:0
Hash3a9b798bf3d22ed8f82d48856fac0319 3e51d92db6344773af162ff24ae0cee11dbe3c4f 06fa47e986456991639e23485d55433c5c7c5a5e6a73dcd52f34d93292e67031
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /afu.php?zoneid=3647676 HTTP/1.1
Host: ouhastay.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:01 GMT
content-type: text/html; charset=utf8
x-trace-id: 2d63b7781ab6fe18b9b3a7befca470e4
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=a5fae0cfd8624f788eac948ea8897e46; expires=Wed, 13 Dec 2023 10:55:01 GMT; path=/; secure; SameSite=None
oaidts=1670928901; expires=Wed, 13 Dec 2023 10:55:01 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js | 151.101.65.229 | 200 OK | 86 kB |
URL HTTP/2cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js IP151.101.65.229:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (659) Hash8d95130f070f0c763b244fda35c7935c 4f6fb9e89d060f04f07ce1e5a8988e9353c5c97d 9509634071c38a10d37884473fb589b330c9a1bb125c978c4d65def8a689df27
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.253.0
x-jsd-version-type: version
etag: W/"34dc7-QN+lYHnjJ+PpkS6+fgpqfPCXGHE"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 13 Dec 2022 10:55:02 GMT
age: 16219
x-served-by: cache-fra-eddf8230060-FRA, cache-bma1646-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 85649
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/screenshots/en/screenshot1t.f59672c55601.jpg | 52.57.25.143 | 200 OK | 98 kB |
URL HTTP/2playcaliber.com/s/img/main/screenshots/en/screenshot1t.f59672c55601.jpg IP52.57.25.143:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x576, components 3\012- data Hashf59672c55601d7ca5cfe553df13560f1 76a096261489dbe7cd9dc395a5bf49fe5043d16b f37d521fd1dd1f83f629367d99d3447c0182c187a6e757a1914a78f082957d87
GET /s/img/main/screenshots/en/screenshot1t.f59672c55601.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 98137
last-modified: Wed, 26 May 2021 08:08:46 GMT
etag: "60ae020e-17f59"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/class_assault.c715157f4575.png | 52.57.25.143 | 200 OK | 7.3 kB |
URL HTTP/2playcaliber.com/s/img/main/class_assault.c715157f4575.png IP52.57.25.143:0
Hash80a3b1693cce7241cae3b23f0c99afae 4ec7d515399305be25a3de425b531a4e5838a0ad eaf7f9ffb713d0eb29f62ee88a994125adf1d0ce029f3eb507972626364eb117
GET /s/img/main/class_assault.c715157f4575.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 465
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-1d1"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/class_gunner.b277a7251967.png | 52.57.25.143 | 200 OK | 302 B |
URL HTTP/2playcaliber.com/s/img/main/class_gunner.b277a7251967.png IP52.57.25.143:0
File typePNG image data, 65 x 65, 8-bit colormap, non-interlaced\012- data Hashb277a7251967f8eaba1ecf118d6a46c4 d83c568c8a40b2b9c96a3860d23967c977b4486d aba42040c9db7febf4fc2368528cd041a629be589b20f746c79ad14fc81481ea
GET /s/img/main/class_gunner.b277a7251967.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 302
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-12e"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/class_medic.36a9e29b4779.png | 52.57.25.143 | 200 OK | 239 B |
URL HTTP/2playcaliber.com/s/img/main/class_medic.36a9e29b4779.png IP52.57.25.143:0
File typePNG image data, 65 x 65, 4-bit colormap, non-interlaced\012- data Hash36a9e29b4779f4875fc51f049b746c77 7c9f3b9c731958966639717fd203772410efee08 a583b115ac344a5d15a8e54816ae80308d4eef8e235a3510145369f39d0f6ef6
GET /s/img/main/class_medic.36a9e29b4779.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 239
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-ef"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/class_sniper.bd74e52e61d2.png | 52.57.25.143 | 200 OK | 547 B |
URL HTTP/2playcaliber.com/s/img/main/class_sniper.bd74e52e61d2.png IP52.57.25.143:0
File typePNG image data, 65 x 65, 8-bit colormap, non-interlaced\012- data Hashbd74e52e61d2acc16293b847a9ad407d c97ec3022c5bf2b61194dddb7bf948378a9c236e 202a192f50be479d8bfd64ab0cab2d01705a585200288e40594b8d2b8d5ba784
GET /s/img/main/class_sniper.bd74e52e61d2.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 547
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-223"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/1cgs_logo.acfbc2cd0707.png | 52.57.25.143 | 200 OK | 3.9 kB |
URL HTTP/2playcaliber.com/s/img/1cgs_logo.acfbc2cd0707.png IP52.57.25.143:0
File typePNG image data, 626 x 124, 8-bit colormap, non-interlaced\012- data Hashacfbc2cd0707ce6260e9f2fbbb987134 cf8afecd125e041b9cdf1d14911ea4d241758493 4768c5c91fbd34215755de105117f49f2cd6bbfda5f0e14234d7fdeab131f39d
GET /s/img/1cgs_logo.acfbc2cd0707.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 3928
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-f58"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/screenshots/en/screenshot2t.ef08aec9be50.jpg | 52.57.25.143 | 200 OK | 94 kB |
URL HTTP/2playcaliber.com/s/img/main/screenshots/en/screenshot2t.ef08aec9be50.jpg IP52.57.25.143:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x576, components 3\012- data Hashef08aec9be50138c516fdf0ad092cc28 ec08cf8c4add9fe14ac3dfee51489f8d3ad7ca80 c5e7ba232f23ba924ad5f0cc27fb53af0a709fc9f1d12f371739d9d52735157d
GET /s/img/main/screenshots/en/screenshot2t.ef08aec9be50.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 93692
last-modified: Wed, 26 May 2021 08:08:46 GMT
etag: "60ae020e-16dfc"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/screenshots/en/screenshot4t.d9a40dc53e3b.jpg | 52.57.25.143 | 200 OK | 98 kB |
URL HTTP/2playcaliber.com/s/img/main/screenshots/en/screenshot4t.d9a40dc53e3b.jpg IP52.57.25.143:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x576, components 3\012- data Hashd9a40dc53e3b25cbd5503921682866e0 a7eb65f126f5583321b2f129c7cfd84d020fa11d 572324d687f83d637f981c2ab191cc8e49d058103a080370bb0bb9f9953c46e4
GET /s/img/main/screenshots/en/screenshot4t.d9a40dc53e3b.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 97758
last-modified: Wed, 26 May 2021 08:08:46 GMT
etag: "60ae020e-17dde"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/screenshots/en/screenshot5t.6d667cfc4251.jpg | 52.57.25.143 | 200 OK | 103 kB |
URL HTTP/2playcaliber.com/s/img/main/screenshots/en/screenshot5t.6d667cfc4251.jpg IP52.57.25.143:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x576, components 3\012- data Size103 kB (102988 bytes) Hash6d667cfc42515cda5b968eb3c7c76cfa 33b3fc7c930e0bbbfdcafc08a775e335109f6c1c 79c04ee886846dc7cb667e96664aa135efe3dfbb20a262a04fd191b39e5a5670
GET /s/img/main/screenshots/en/screenshot5t.6d667cfc4251.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 102988
last-modified: Wed, 26 May 2021 08:08:46 GMT
etag: "60ae020e-1924c"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/screenshots/en/screenshot6t.2ec21bddbf5c.jpg | 52.57.25.143 | 200 OK | 83 kB |
URL HTTP/2playcaliber.com/s/img/main/screenshots/en/screenshot6t.2ec21bddbf5c.jpg IP52.57.25.143:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x576, components 3\012- data Hash2ec21bddbf5cfb11d02838524fc3a18e f48cceb3e3d057102a1711ddf9be2a17a1f14ccc e549d821b093b7c58ddfcbee71023f07573d722b7e4a64dd5b6d2382ce10c753
GET /s/img/main/screenshots/en/screenshot6t.2ec21bddbf5c.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 83098
last-modified: Wed, 26 May 2021 08:08:46 GMT
etag: "60ae020e-1449a"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/feature_1.c43b536556a4.jpg | 52.57.25.143 | 200 OK | 102 kB |
URL HTTP/2playcaliber.com/s/img/main/feature_1.c43b536556a4.jpg IP52.57.25.143:0
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=251, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=351], baseline, precision 8, 350x250, components 3\012- data Size102 kB (102018 bytes) Hashc43b536556a4de99ec1505c22c28b256 05a33f1a5cc0ccdbfe30c3832203a95f00548461 28a33263a25ba8007bd4b6e48447ef265c28cf7853cd498cc197f10c58c38599
GET /s/img/main/feature_1.c43b536556a4.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 102018
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-18e82"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/feature_2.1b1b5b6a0e7a.jpg | 52.57.25.143 | 200 OK | 108 kB |
URL HTTP/2playcaliber.com/s/img/main/feature_2.1b1b5b6a0e7a.jpg IP52.57.25.143:0
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=251, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=351], baseline, precision 8, 350x250, components 3\012- data Size108 kB (108338 bytes) Hash1b1b5b6a0e7ad2d7801c6dcdc7524f02 6c1308bc435c4f007fc07fed224c37946637563a 5a6b8364b263e9143e85dd10468b0fbe16ea668089a0b59939bb27e08a595aa2
GET /s/img/main/feature_2.1b1b5b6a0e7a.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 108338
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-1a732"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/feature_3.838a1361d3de.jpg | 52.57.25.143 | 200 OK | 99 kB |
URL HTTP/2playcaliber.com/s/img/main/feature_3.838a1361d3de.jpg IP52.57.25.143:0
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=251, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=351], baseline, precision 8, 350x250, components 3\012- data Hash838a1361d3de8ec7c60f01fbc2b0553b 2b63901db4ef841f769aa64190b202ebd0ceee33 63b7705948d50551b4813c3303894880efdf7824d2ac0503093cfd8a3987b578
GET /s/img/main/feature_3.838a1361d3de.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 99198
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-1837e"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/lang_arrow.59207f4a3cd5.png | 52.57.25.143 | 200 OK | 1.5 kB |
URL HTTP/2playcaliber.com/s/img/lang_arrow.59207f4a3cd5.png IP52.57.25.143:0
File typePNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data Hash59207f4a3cd50094c4a37000a21ffc7a 3c9529591261b342abba541599391608923ad3bc c63af8b8186f13e86fc19b8ecadf4878a366123e9211aa417730844741e38252
GET /s/img/lang_arrow.59207f4a3cd5.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber.min.f2567753fd17.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/png
content-length: 1460
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-5b4"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/icon_play_video.362a64bfceab.png | 52.57.25.143 | 200 OK | 3.8 kB |
URL HTTP/2playcaliber.com/s/img/main/icon_play_video.362a64bfceab.png IP52.57.25.143:0
File typePNG image data, 109 x 108, 8-bit/color RGBA, non-interlaced\012- data Hash362a64bfceab091681faac8965f1b6fb 39ee80ae42220083cd34c061d2fec869350771e1 d3899d0ea1ca7eb8fcbb8153cf2a2d6f2f78ea4bb8b500c84497b392dbfb9152
GET /s/img/main/icon_play_video.362a64bfceab.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_main.min.65899c014f9c.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 3781
last-modified: Wed, 28 Apr 2021 08:30:41 GMT
etag: "60891d31-ec5"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/css/caliber_footer.min.943461029711.css | 52.57.25.143 | 200 OK | 3.7 kB |
URL HTTP/2playcaliber.com/s/css/caliber_footer.min.943461029711.css IP52.57.25.143:0
Hasha1d93aeb903217d3ce581ff5171000c5 e111b1c1ad27ce6b2e145af230f69ebae805e7c8 b44562712b4cc119d5adfb26acacc6cbcbdea2f2ed9609786dce7b41c9e0f1ca
GET /s/css/caliber_footer.min.943461029711.css HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-17e3"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/logo_hor_en.616837fd2ec7.svg | 52.57.25.143 | 200 OK | 62 kB |
URL HTTP/2playcaliber.com/s/img/main/logo_hor_en.616837fd2ec7.svg IP52.57.25.143:0
Hashc8bc71e13d99ccf54792198fc4ac4466 254a8b555ce6bc07dfe4e11ecccc896c53405ec1 8eaad9cb26f4ae14df28e99c3105d0c03cae0e53ed451924278da6cab9a1f52d
GET /s/img/main/logo_hor_en.616837fd2ec7.svg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Jul 2021 14:15:33 GMT
vary: Accept-Encoding
etag: W/"60f58905-d9e"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/landing_bg_roles.2841af24b913.jpg | 52.57.25.143 | 200 OK | 117 kB |
URL HTTP/2playcaliber.com/s/img/main/landing_bg_roles.2841af24b913.jpg IP52.57.25.143:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1440x711, components 3\012- data Size117 kB (117000 bytes) Hash2841af24b91367060f20cb61a0983b88 4dc9f8a02e688d0abd327bd9f1f3f451571ff068 4d4054c2c0a9e3ee36a32cc2260843294de03384705efb59050c666e6ef8d2b4
GET /s/img/main/landing_bg_roles.2841af24b913.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_main.min.65899c014f9c.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/jpeg
content-length: 117000
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-1c908"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/landing_bg_2.08397d443b5d.jpg | 52.57.25.143 | 200 OK | 86 kB |
URL HTTP/2playcaliber.com/s/img/main/landing_bg_2.08397d443b5d.jpg IP52.57.25.143:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2100x1200, components 3\012- data Hash08397d443b5d1ecc7edffcbc2009d45b 3f32be4d1df8c46ddbbd2a25c95d849350c8c60c a642cf21d20cb2b91290181226d9785c766cb5414dc13662ec4ec110eb9edf26
GET /s/img/main/landing_bg_2.08397d443b5d.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_main.min.65899c014f9c.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/jpeg
content-length: 85608
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-14e68"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676 | 52.57.25.143 | 302 Found | 87 kB |
URL HTTP/2playcaliber.com/promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676 IP52.57.25.143:0
File typegzip compressed data, from Unix\012- data Hash9e1868f07e9f20c15dd8040b473389dd cec69db55720028400df77efd6ecff63bf2ff262 19493d5e3980f2629fe3d8b45c88d1dd3e5a4f70086e27021f7d9aff5210c209
GET /promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676 HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: text/html; charset=utf-8
location: /en/promo/?utm_source=zeydoo&subid=626483571483484246&utm_content=5585013&utm_term=3647676
vary: Accept-Language, Cookie
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: unsafe-none
set-cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; expires=Tue, 27 Dec 2022 10:55:02 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/smoke_yellow_bg.822fd89c95cd.png | 52.57.25.143 | 200 OK | 154 kB |
URL HTTP/2playcaliber.com/s/img/main/smoke_yellow_bg.822fd89c95cd.png IP52.57.25.143:0
File typePNG image data, 1440 x 800, 8-bit colormap, non-interlaced\012- data Size154 kB (154131 bytes) Hash822fd89c95cd5535a37e08e58c448149 0e5191f46612025a7d1b16812effaf13845c552c 0a774fb06383f24c3b1b5c8fb46398db5dd7b8540be6279c24bb7fa812734b42
GET /s/img/main/smoke_yellow_bg.822fd89c95cd.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_main.min.65899c014f9c.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 154131
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-25a13"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/logo_white.79ec9dada16c.svg | 52.57.25.143 | 200 OK | 1.4 kB |
URL HTTP/2playcaliber.com/s/img/logo_white.79ec9dada16c.svg IP52.57.25.143:0
Hash175374208ddf9ee26d5cff3f77aa08d0 a28b9d8df7b6d3c542d2820c927e99fd3e2ba044 b80dc4d17790c5ffa0c17f13e686c61de4a5067a7e110f2fe102ee86b33c22a0
GET /s/img/logo_white.79ec9dada16c.svg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber.min.f2567753fd17.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/svg+xml
last-modified: Mon, 19 Jul 2021 14:15:33 GMT
vary: Accept-Encoding
etag: W/"60f58905-716"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/css/caliber.min.f2567753fd17.css | 52.57.25.143 | 200 OK | 321 kB |
URL HTTP/2playcaliber.com/s/css/caliber.min.f2567753fd17.css IP52.57.25.143:0
Size321 kB (321225 bytes) Hash8ac656082501071e67a319da560ea90a 8ff78b2e8cd540220a920f8bdab48ee6d49faf64 e9852a86e0522c33e8f5eabce27ece0773e930283a3e2cbeee885ebe3b5bd18a
GET /s/css/caliber.min.f2567753fd17.css HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-2211c"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/gametypes_pve.38c153e2e68a.png | 52.57.25.143 | 200 OK | 269 kB |
URL HTTP/2playcaliber.com/s/img/main/gametypes_pve.38c153e2e68a.png IP52.57.25.143:0
File typePNG image data, 1440 x 670, 8-bit colormap, non-interlaced\012- data Size269 kB (269428 bytes) Hash38c153e2e68ab4c9287b1e56e2101754 2e8bee5c816e7f1db50dfb904aa75a62d734a0bc 160a62e5183a81958197db596bdaf3ac2eaf1d98d35f8b8f3286a1e767d43ccc
GET /s/img/main/gametypes_pve.38c153e2e68a.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_main.min.65899c014f9c.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 269428
last-modified: Tue, 19 Apr 2022 15:42:03 GMT
etag: "625ed84b-41c74"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash53074a70414838d4a025c9421cdcc446 36eb6d67c567c3bcda9397818d4f14f2d4e02f0c 9033da7f83f51aec41eddce784d67089687c06d437bf9589c919e5bf31f456a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5729
Cache-Control: max-age=123437
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Etag: "639782d3-1d7"
Expires: Wed, 14 Dec 2022 21:12:20 GMT
Last-Modified: Mon, 12 Dec 2022 19:36:51 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| playcaliber.com/s/js/simplebar.min.bf2b0f78573e.js | 52.57.25.143 | 200 OK | 271 kB |
URL HTTP/2playcaliber.com/s/js/simplebar.min.bf2b0f78573e.js IP52.57.25.143:0
Size271 kB (270883 bytes) Hash33a99acad7a8370dc980b8541f7cb1ad 934e9d99389c78ce1c786fd81ebd185d4c1b43b6 d310d52cbaf6974b0cee01162c72409e365919f6eb017644c688970deb99268b
GET /s/js/simplebar.min.bf2b0f78573e.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-e338"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/js/numeral.min.9a47e71ab1b7.js | 52.57.25.143 | 200 OK | 287 kB |
URL HTTP/2playcaliber.com/s/js/numeral.min.9a47e71ab1b7.js IP52.57.25.143:0
Size287 kB (286885 bytes) Hash2d2b0c1c937275c5a35a10d0a2db3bc9 6a903250c7cc5ec0ff5c8ca06a55dbd6a2fdea6c fe6ce9a7dd5e0661e881c24cff13fda3e61b7655f432bbc4c95392a4277b9c7d
GET /s/js/numeral.min.9a47e71ab1b7.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-2cb4"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/fonts/CaliberFont/regular/Caliber.74b2c7c47c31.ttf | 52.57.25.143 | 200 OK | 134 kB |
URL HTTP/2playcaliber.com/s/fonts/CaliberFont/regular/Caliber.74b2c7c47c31.ttf IP52.57.25.143:0
File typeTrueType Font data, 15 tables, 1st "FFTM", 14 names, Macintosh\012- data Size134 kB (133720 bytes) Hash74b2c7c47c31f80ec37bdd49491b0f04 517d2fa40c1b3a058c321536b2be4d70c0287e1a 3b8eb504cb9d5c8db842d232fa727c87098616bbb5f02769f2ca82979894d8ae
GET /s/fonts/CaliberFont/regular/Caliber.74b2c7c47c31.ttf HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_fonts.min.f50a6af44ea0.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: application/octet-stream
content-length: 133720
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-20a58"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/fonts/CaliberFont/medium/Caliber-Medium.b366543e8e7f.ttf | 52.57.25.143 | 200 OK | 122 kB |
URL HTTP/2playcaliber.com/s/fonts/CaliberFont/medium/Caliber-Medium.b366543e8e7f.ttf IP52.57.25.143:0
File typeTrueType Font data, 15 tables, 1st "FFTM", 18 names, Macintosh\012- data Size122 kB (121608 bytes) Hashb366543e8e7fd62ab8f47d9a449efcdd 76d76b8933a03f295d02600ad357d819f45d38fb 55edc1c12d72266c096db85d2a8c7734d2b761dda926f5fcc84bc4840f425997
GET /s/fonts/CaliberFont/medium/Caliber-Medium.b366543e8e7f.ttf HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_fonts.min.f50a6af44ea0.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: application/octet-stream
content-length: 121608
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-1db08"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/js/lightslider.min.50f50ebefe7e.js | 52.57.25.143 | 200 OK | 125 kB |
URL HTTP/2playcaliber.com/s/js/lightslider.min.50f50ebefe7e.js IP52.57.25.143:0
Size125 kB (125114 bytes) Hashfe257024a70a7f8fef171fc74293be06 39e8e85d177bb545f863d475417d319664b8f5be e2726e8f1a9eb071db9583a129b24b4fa4f6b64c4f2061f75d36a733840b3142
GET /s/js/lightslider.min.50f50ebefe7e.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-3e97"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 | 104.18.20.226 | 200 OK | 1.5 kB |
URL HTTP/1.1ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 IP104.18.20.226:0
Hash041fc8eeef1b1d5da1f7e34479af5e3a c7932668eb504bb0b638e75978d40df9b3f7591e 0f3476c153c83d3feeafc8e72ced1d419b577a264822b16ed9eca908fb1a7570
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 10:55:03 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "EBDCC3D458EE586062FEC88290642C1282C429FC"
Expires: Tue, 13 Dec 2022 21:00:00 GMT
Last-Modified: Tue, 13 Dec 2022 09:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2548
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778e2a4d9a1db4f4-OSL
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash53074a70414838d4a025c9421cdcc446 36eb6d67c567c3bcda9397818d4f14f2d4e02f0c 9033da7f83f51aec41eddce784d67089687c06d437bf9589c919e5bf31f456a9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4102
Cache-Control: max-age=121810
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Etag: "639782d3-1d7"
Expires: Wed, 14 Dec 2022 20:45:13 GMT
Last-Modified: Mon, 12 Dec 2022 19:36:51 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| playcaliber.com/s/js/jquery.marquee.min.074346565f31.js | 52.57.25.143 | 200 OK | 3.3 kB |
URL HTTP/2playcaliber.com/s/js/jquery.marquee.min.074346565f31.js IP52.57.25.143:0
Hash861848f927dfe939bcd741318188bd52 7a710ea0ee07b67e744d0c65bf1ea5c98d008dba f244663a21c94195ef21cd63acf3992a90e767f79338682b1cb0f08ec92e4f42
GET /s/js/jquery.marquee.min.074346565f31.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-235d"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/css/lightslider.min.590b55d2093c.css | 52.57.25.143 | 200 OK | 2.0 kB |
URL HTTP/2playcaliber.com/s/css/lightslider.min.590b55d2093c.css IP52.57.25.143:0
Hash66d38ab0129ecc2e55daf067de00237b 2365c861ea7aafc275fd8845e8a77e5afa7ebeed dee2d4867ed73e5f038a68ce5e85b326789f96ee42ca2ee36e77c9c6fd76e5b9
GET /s/css/lightslider.min.590b55d2093c.css HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-15f6"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/js/cart.02b40b954741.js | 52.57.25.143 | 200 OK | 2.4 kB |
URL HTTP/2playcaliber.com/s/js/cart.02b40b954741.js IP52.57.25.143:0
Hash39a7a6a5857d8d5ff823bc89abc5eb1c cbe29ff843eca1e86f6d4f1588aa8cc4b2ea59a6 a20f5b1dd3bb73d5801390e89bbb9d224ff71a545437f396913993b1b777a1cc
GET /s/js/cart.02b40b954741.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-139c"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.20.226 | 200 OK | 939 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.20.226:0
Hash7b80fca156be9a4e29e421c6d67933c0 62a7718970bce524e30efdf6565dc7d497af4f90 34af5b4dfa04214ad1c5368ae27be91a91d0c73c11079e547ca6a8c468d953f1
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 10:55:03 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 17 Dec 2022 09:41:27 GMT
ETag: "62a7718970bce524e30efdf6565dc7d497af4f90"
Last-Modified: Tue, 13 Dec 2022 09:41:28 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 689
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778e2a4dea79b4f4-OSL
|
|
| playcaliber.com/s/js/caliber.8ae5cb74d496.js | 52.57.25.143 | 200 OK | 2.2 kB |
URL HTTP/2playcaliber.com/s/js/caliber.8ae5cb74d496.js IP52.57.25.143:0
Hashc567e992613cbb071af91a7d1d71e4f2 194b4c0bcf88db44787780892d66a4132b901e9c 02b413a1723bb3df1b09ce1a5d8c12ac5e8dc01094c0ebf33786f374507e9a78
GET /s/js/caliber.8ae5cb74d496.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-163e"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/footer/youtube_icon.3859212f3fe2.png | 52.57.25.143 | 200 OK | 674 B |
URL HTTP/2playcaliber.com/s/img/footer/youtube_icon.3859212f3fe2.png IP52.57.25.143:0
File typePNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data Hash3859212f3fe21fc5de86c28334821d3b 89c0619cb304427a2c1d54c8a7e37536fcf21979 aa4abfa823ef7463cb415c7d39d7dfd03cdf87fa3e3c27550c30e79b6fa4a229
GET /s/img/footer/youtube_icon.3859212f3fe2.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_footer.min.943461029711.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 674
last-modified: Wed, 07 Apr 2021 10:43:15 GMT
etag: "606d8cc3-2a2"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/footer/16plus.1225bb67332a.png | 52.57.25.143 | 200 OK | 2.1 kB |
URL HTTP/2playcaliber.com/s/img/footer/16plus.1225bb67332a.png IP52.57.25.143:0
File typePNG image data, 106 x 108, 8-bit/color RGBA, non-interlaced\012- data Hash1225bb67332a1471c5c2dc86bfc13c3a ae3284d7fddcf24ea5c74a24559e1ed00fd2cb20 71ae665f31446c06287ff7dda8d756a87c235c58bcc49f84375b37e984cfbb53
GET /s/img/footer/16plus.1225bb67332a.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/caliber_footer.min.943461029711.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 2053
last-modified: Wed, 07 Apr 2021 10:43:15 GMT
etag: "606d8cc3-805"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/en/api/store/cart/ | 52.57.25.143 | 200 OK | 126 B |
URL HTTP/2playcaliber.com/en/api/store/cart/ IP52.57.25.143:0
File typeJSON data\012- , ASCII text, with no line terminators Hash63e87ec83317ff70d4a892d3176da4ba 3647119bb3cc94b8e86cdf9deefc649063f4fc03 bbe4d5253b5d3f1d93abe2dfb668d653f0477e6cf4dc3883f8124cf5858f78dd
POST /en/api/store/cart/ HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-CSRFToken: Qk4s3ZVdkG4XSiHYED9DPVeVYEfFdroncTq0LEsZI5IuZPBxQYIIli4XtBHNlvjF
X-Requested-With: XMLHttpRequest
Content-Length: 2
Origin: https://playcaliber.com
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx; _ym_uid=1670928901877338684; _ym_d=1670928901
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: application/json
content-length: 126
expires: Tue, 13 Dec 2022 10:55:03 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
content-security-policy: frame-ancestors 'self' http://webvisor.com https://webvisor.com; report-uri https://caliber.report-uri.com/r/d/csp/enforce
content-language: en
vary: Cookie
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: unsafe-none
set-cookie: cart_id=1be1d7aa-2705-423a-9beb-01a5acd85888; expires=Tue, 27 Dec 2022 10:55:03 GMT; Max-Age=1209600; Path=/en/; Secure
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash1f984d58053be39408d40ea947d38943 871048440e5ee63f08e83909802a4cae099d24d2 cf34f29cecf5262d96efec6d5302d083733a55809df7a1c60ebbacce89ada95f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.playcaliber.com/site/media/news/2022/12/07/cover_qwQrvty.jpg |  92.223.84.84 | 200 OK | 86 kB |
URL HTTP/2cdn.playcaliber.com/site/media/news/2022/12/07/cover_qwQrvty.jpg IP92.223.84.84:0 ASN#199524 G-Core Labs S.A.
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 550x250, components 3\012- data Hash63ab0b6495afff5291699fa17f0561b3 eac5ef1efce55fbada48381fea7bb38b9378ea96 2d6d1b64c9ea995aec76198b96455ac2fd6dbff1ce40cc7e300df4417c838348
GET /site/media/news/2022/12/07/cover_qwQrvty.jpg HTTP/1.1
Host: cdn.playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/jpeg
content-length: 86001
x-amz-id-2: 09hGVMoQbP6xjW+1bb9koV209Y56PSOdCmBtYYWzeC79FpUndOoIdE9b/1Z5qNziUKuRyOCzCDg=
x-amz-request-id: JFCNY5XHQ7H0NY1C
last-modified: Wed, 07 Dec 2022 12:42:06 GMT
etag: "63ab0b6495afff5291699fa17f0561b3"
cache: HIT, HIT
x-cached-since: 2022-12-07T13:05:08+00:00, 2022-12-11T13:06:02+00:00
x-id: am3-up-gc81, sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-4HB8STKEBV&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 76 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-4HB8STKEBV&l=dataLayer&cx=c IP142.250.74.168:0
File typeASCII text, with very long lines (20080) Hash1f2f92d64722f37b13cd1662273903c6 59b8ea749d28459a1170696d643c0606d07cf5a6 e8d9ecf7ed8e77a1f723bc1e20983527120fbb2b5676bb08e1fe5d700eef4343
GET /gtag/js?id=G-4HB8STKEBV&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 13 Dec 2022 10:55:03 GMT
expires: Tue, 13 Dec 2022 10:55:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76344
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/js/jquery.magnific-popup.min.ba6cf724c8bb.js | 52.57.25.143 | 200 OK | 128 kB |
URL HTTP/2playcaliber.com/s/js/jquery.magnific-popup.min.ba6cf724c8bb.js IP52.57.25.143:0
Size128 kB (128309 bytes) Hashbc852f5ed90b3abfe124ca379cd1c634 2bae20644723d660ea82599496962017e8771161 009497251b6c35193d2ba2559acd5ec9780ea64f014a732829359b38b70cf246
GET /s/js/jquery.magnific-popup.min.ba6cf724c8bb.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-4ef8"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/controls.1c432cf03c81.png | 52.57.25.143 | 200 OK | 493 B |
URL HTTP/2playcaliber.com/s/img/controls.1c432cf03c81.png IP52.57.25.143:0
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data Hash1c432cf03c81f32ff9ac5fa19c0989f4 7f8226f4e388567b2303159799cf7fe4f63164c2 365626a6a36df6d1b89264ebb36f51c9b9bfc8368727cc0477ed15e890c38d60
GET /s/img/controls.1c432cf03c81.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://playcaliber.com/s/css/lightslider.min.590b55d2093c.css
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx; _ym_uid=1670928901877338684; _ym_d=1670928901
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 493
last-modified: Wed, 28 Apr 2021 08:30:41 GMT
etag: "60891d31-1ed"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| cdn.playcaliber.com/site/media/news/2022/12/09/cover_oil_Hn4EhMC.jpg | 92.223.84.84 | 200 OK | 102 kB |
URL HTTP/2cdn.playcaliber.com/site/media/news/2022/12/09/cover_oil_Hn4EhMC.jpg IP92.223.84.84:0 ASN#199524 G-Core Labs S.A.
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 550x250, components 3\012- data Size102 kB (102459 bytes) Hash8d8990149dd6d21fcbdde263795d07e8 02f3392a0c7a7188a5b6a7a2b94a39046de75e3a 8e5d0908b99d9f36917bbd867b572dd6b793381611b5dfe2e991d9828a3c8efd
GET /site/media/news/2022/12/09/cover_oil_Hn4EhMC.jpg HTTP/1.1
Host: cdn.playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/jpeg
content-length: 102459
x-amz-id-2: gbSnxBw8HJPbaOcEGOUiTjGdrpay0rHTuKnV31vq77KXabK/Y+6h/WaXMroQircbzJUocIp0ZkY=
x-amz-request-id: 69HKAA12WRV0TT4F
last-modified: Fri, 09 Dec 2022 10:47:09 GMT
etag: "8d8990149dd6d21fcbdde263795d07e8"
cache: HIT, HIT
x-cached-since: 2022-12-09T10:53:16+00:00, 2022-12-13T10:53:36+00:00
x-id: am3-up-gc81, sto5-up-gc11
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.playcaliber.com/site/media/main/2022/11/BG_0172_Desktop_6_ZisNDJ7.png | 92.223.84.84 | 200 OK | 1.1 MB |
URL HTTP/2cdn.playcaliber.com/site/media/main/2022/11/BG_0172_Desktop_6_ZisNDJ7.png IP92.223.84.84:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 2560 x 1280, 8-bit colormap, non-interlaced\012- data Size1.1 MB (1066802 bytes) Hash05f72f334f50f447ee53a449d07b1f81 56253c5081a3ea792a9af753f2cdbd9742d96f8c 5b69a2d99f88b9cc43215039275ca0284e7a64843e5a64ab3ba1de264aae6d35
GET /site/media/main/2022/11/BG_0172_Desktop_6_ZisNDJ7.png HTTP/1.1
Host: cdn.playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 1066802
x-amz-id-2: Le777wJNuNqC7VCIVxrm9bccJND7MzT+hPyj/5c8D2j+dYEHBjG/euwxRoskv6u9D6GSpoVykiA=
x-amz-request-id: ZFZ6R9J6RSSW24K5
last-modified: Wed, 16 Nov 2022 06:49:58 GMT
etag: "05f72f334f50f447ee53a449d07b1f81"
cache: HIT, HIT
x-cached-since: 2022-11-16T06:50:00+00:00, 2022-12-12T06:56:09+00:00
x-id: am3-up-gc89, sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.playcaliber.com/site/media/main/2022/11/BannerEN.png | 92.223.84.84 | 200 OK | 1.7 MB |
URL HTTP/2cdn.playcaliber.com/site/media/main/2022/11/BannerEN.png IP92.223.84.84:0 ASN#199524 G-Core Labs S.A.
File typePNG image data, 1500 x 720, 8-bit/color RGB, non-interlaced\012- data Size1.7 MB (1743461 bytes) Hash8966c93c635dec47bd8fd661bbdfc352 1768510af957a08844cc96d9cb6bb9bdbb136213 a75e6c394449fea38fa7b45c8efc075def5bcde7cba01c8a7c14540894b3191d
GET /site/media/main/2022/11/BannerEN.png HTTP/1.1
Host: cdn.playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 1743461
x-amz-id-2: swd/pYAeLQ40SwGCeIfkL8zd5H/BseyhpmTCqzb3fG0e19FeAJupTqq8NyUUgxM/Bd2n4JROpS8=
x-amz-request-id: QA5WZYW2VK16N5QQ
last-modified: Wed, 16 Nov 2022 06:34:37 GMT
etag: "8966c93c635dec47bd8fd661bbdfc352"
cache: HIT, HIT
x-cached-since: 2022-11-16T06:34:39+00:00, 2022-12-12T06:46:08+00:00
x-id: am3-up-gc81, sto5-up-gc13
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.playcaliber.com/site/media/main/2021/10/%D0%9E%D0%B1%D0%BB%D0%BE%D0%B6%D0%BA%D0%B0-%D0%BD%D0%B0-%D0%B3%D0%BB%D0%B0%D0%B2%D0%BD%D1%83%D1%8E-eng.jpg | 92.223.84.84 | 200 OK | 2.4 MB |
URL HTTP/2cdn.playcaliber.com/site/media/main/2021/10/%D0%9E%D0%B1%D0%BB%D0%BE%D0%B6%D0%BA%D0%B0-%D0%BD%D0%B0-%D0%B3%D0%BB%D0%B0%D0%B2%D0%BD%D1%83%D1%8E-eng.jpg IP92.223.84.84:0 ASN#199524 G-Core Labs S.A.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data Size2.4 MB (2418658 bytes) Hash91af1a268009afc42c444cb82d6ded5b 22c152ba75ad6d33562d56affba1c70f61e3f31e 23dbf57a4348ce13d001a118f33e4bb32ad67276a23231c394563830f34bc77b
GET /site/media/main/2021/10/%D0%9E%D0%B1%D0%BB%D0%BE%D0%B6%D0%BA%D0%B0-%D0%BD%D0%B0-%D0%B3%D0%BB%D0%B0%D0%B2%D0%BD%D1%83%D1%8E-eng.jpg HTTP/1.1
Host: cdn.playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/jpeg
content-length: 2418658
x-amz-id-2: jCS+CrWnZqM6t2zS45kt3IGYLQfeKw/xpJ+vAOwBK7rHhh8hWUdtGqlYNwOedfy2PthO5zFE1Fs=
x-amz-request-id: 3JRV9Y1J7B618752
last-modified: Fri, 29 Oct 2021 13:00:21 GMT
etag: "91af1a268009afc42c444cb82d6ded5b"
cache: HIT, HIT
x-cached-since: 2022-07-20T20:50:11+00:00, 2022-12-12T08:49:03+00:00
x-id: am3-up-gc89, sto5-up-gc15
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/68712622/1?wmode=7&page-url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A678%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A892847411376%3Ahid%3A365083498%3Az%3A0%3Ai%3A20221213105500%3Aet%3A1670928901%3Ac%3A1%3Arn%3A19677337%3Arqn%3A1%3Au%3A1670928901877338684%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C49%2C1%2C497%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Ans%3A1670928900041%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670928901%3At%3ACaliber%20is%20a%20team-based%20online%20game&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 |  93.158.134.119 | 200 OK | 400 B |
URL HTTP/2mc.yandex.ru/watch/68712622/1?wmode=7&page-url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A678%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A892847411376%3Ahid%3A365083498%3Az%3A0%3Ai%3A20221213105500%3Aet%3A1670928901%3Ac%3A1%3Arn%3A19677337%3Arqn%3A1%3Au%3A1670928901877338684%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C49%2C1%2C497%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Ans%3A1670928900041%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670928901%3At%3ACaliber%20is%20a%20team-based%20online%20game&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 IP93.158.134.119:0
File typeJSON data\012- , ASCII text, with very long lines (400), with no line terminators Hash9887a298db2f2944e2d0eaf763997386 94ac972dab0711c5eee1ac769f006b45064dd20e 6782c5231a5ed0ab58300409587108f972165386d5da7be68275a19a62c22977
GET /watch/68712622/1?wmode=7&page-url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A678%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A892847411376%3Ahid%3A365083498%3Az%3A0%3Ai%3A20221213105500%3Aet%3A1670928901%3Ac%3A1%3Arn%3A19677337%3Arqn%3A1%3Au%3A1670928901877338684%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C49%2C1%2C497%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Ans%3A1670928900041%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670928901%3At%3ACaliber%20is%20a%20team-based%20online%20game&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playcaliber.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 13 Dec 2022 10:55:03 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://playcaliber.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 10:55:03 GMT
last-modified: Tue, 13-Dec-2022 10:55:03 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/apple-touch-icon.fa8751fdd96b.png | 52.57.25.143 | 200 OK | 5.0 kB |
URL HTTP/2playcaliber.com/s/img/apple-touch-icon.fa8751fdd96b.png IP52.57.25.143:0
File typePNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data Hashfa8751fdd96b179baf201a40857096d7 b0f0cfa050461c43b90292fc5de62e2edb63137c c6704d21a09304e59b54709258a3889379c7470a202f051f48498e0ad31cbb03
GET /s/img/apple-touch-icon.fa8751fdd96b.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx; _ym_uid=1670928901877338684; _ym_d=1670928901; _gcl_au=1.1.2057476566.1670928901; _ga_4HB8STKEBV=GS1.1.1670928901.1.1.1670928901.0.0.0; _ga=GA1.1.987325149.1670928901
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 4997
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-1385"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/favicon-16x16.f41cecfd971b.png | 52.57.25.143 | 200 OK | 1.1 kB |
URL HTTP/2playcaliber.com/s/img/favicon-16x16.f41cecfd971b.png IP52.57.25.143:0
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Hashf41cecfd971b295f3e5afba13d9d286a a474edcc83497500cacfd79e7ba10f7cf08bde39 1ffa56971540e194fa7c2b57e0849d2acca8fcc960effc458b7dec037415aaf8
GET /s/img/favicon-16x16.f41cecfd971b.png HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx; _ym_uid=1670928901877338684; _ym_d=1670928901; _gcl_au=1.1.2057476566.1670928901; _ga_4HB8STKEBV=GS1.1.1670928901.1.1.1670928901.0.0.0; _ga=GA1.1.987325149.1670928901
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/png
content-length: 1084
last-modified: Thu, 26 Nov 2020 11:26:42 GMT
etag: "5fbf90f2-43c"
expires: Thu, 12 Jan 2023 10:55:03 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8bc1b4db769ee14aba872f3f93af10b1 f24c742805ff56d77d50924d60dabd2b6750c46e 35e6181045327df4b97bddff70ea1f9510e03d6896213b5f8473d8da771b15f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| mc.yandex.ru/metrika/advert.gif | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 13 Dec 2022 10:55:03 GMT
access-control-allow-origin: *
etag: "63933377-2b"
expires: Tue, 13 Dec 2022 11:55:03 GMT
accept-ranges: bytes
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash77f6fd691d7e23516a2c635dd90629f8 4ff7a3db953657ff104ff39405f310353853e015 925debd4de0043e61c856567c01b3a68c9d9d5ce38c9fbb8ab950ba8624519b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4b1dfadd44861ce3644c2aff158e9cc1 de69a782c797e32181c7abee8e8143575b3b6697 b34a07a5c0dd2be8c8695d82c8032f3dfbdd6ef08edc2eed2709302863129082
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6010
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Last-Modified: Tue, 13 Dec 2022 09:14:53 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| googleads.g.doubleclick.net/pagead/viewthroughconversion/443903655/?random=1670928901238&cv=11&fst=1670928901238&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&auid=2057476566.1670928901&rfmt=3&fmt=4 | 142.250.74.66 | 200 OK | 877 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/viewthroughconversion/443903655/?random=1670928901238&cv=11&fst=1670928901238&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&auid=2057476566.1670928901&rfmt=3&fmt=4 IP142.250.74.66:0
File typeASCII text, with very long lines (1835), with no line terminators Hash095f2a4f56cd6d45c1f99e399e1a218b 4035114f7205dee5c39578b870498cdda7e643fb 40584fde9f8b71c20e2a96ac68dbd412019ec70a584e3d60af212372e4b12702
GET /pagead/viewthroughconversion/443903655/?random=1670928901238&cv=11&fst=1670928901238&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&auid=2057476566.1670928901&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Dec 2022 10:55:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 877
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 13-Dec-2022 11:10:03 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/js/jquery-3.5.1.min.dc5e7f18c8d3.js | 52.57.25.143 | 200 OK | 36 kB |
URL HTTP/2playcaliber.com/s/js/jquery-3.5.1.min.dc5e7f18c8d3.js IP52.57.25.143:0
Hashc631dc2a7348501626e37543e14c54a0 f22d5b34277c66c75590476fe8b1581941cabd33 fdff310d698c08bee2f62ae2e3b59da0be4d6895640810a5250cc6d40da1675b
GET /s/js/jquery-3.5.1.min.dc5e7f18c8d3.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-15d84"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash8bc1b4db769ee14aba872f3f93af10b1 f24c742805ff56d77d50924d60dabd2b6750c46e 35e6181045327df4b97bddff70ea1f9510e03d6896213b5f8473d8da771b15f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash77f6fd691d7e23516a2c635dd90629f8 4ff7a3db953657ff104ff39405f310353853e015 925debd4de0043e61c856567c01b3a68c9d9d5ce38c9fbb8ab950ba8624519b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| connect.facebook.net/en_US/fbevents.js | 157.240.240.1 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP157.240.240.1:0
File typeASCII text, with very long lines (64348) Hash470e4aea6e001f873722e538eac088d6 13462ac01b14053d7ca780c20db161619adcc2b4 e744b9ec87192ee329221101dbfc1fb034e93c3a7e44734f08827323982189d2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: PaAynCMz0MsY1u/vfZJuhtxZhJmRoKaRtzDcX2JsromETFzZAXw1ieY/eQoNXMbfAYMdq7i3M+6XtLqb4lUQvQ==
content-length: 27316
x-fb-trip-id: 1679558926
date: Tue, 13 Dec 2022 10:55:03 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/gseccovsslca2018 | 104.18.20.226 | 200 OK | 938 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.20.226:0
Hash4b1626ed6e6357462045c276f665051b b8f75d06d77e17fd0a94ec4128a78aa2c3a38063 de5485edd7419151811bc5e512132c3bf73c6760346dab84892d75ccf1ff759a
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Dec 2022 10:55:03 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 17 Dec 2022 07:46:50 GMT
ETag: "b8f75d06d77e17fd0a94ec4128a78aa2c3a38063"
Last-Modified: Tue, 13 Dec 2022 07:46:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2904
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 778e2a50be0cb4f4-OSL
|
|
| playcaliber.com/s/css/magnific_popup.min.21985a73bc00.css | 52.57.25.143 | 200 OK | 2.8 kB |
URL HTTP/2playcaliber.com/s/css/magnific_popup.min.21985a73bc00.css IP52.57.25.143:0
Hash893f8fd7ebae52ae0f872695f0cf44d9 aebad36cea72ad944ea10334c686c9580c952b88 44b65f71b03b18fc7d4195aeeb9ee67fdde3090fb19924714d9e1c731ead1acc
GET /s/css/magnific_popup.min.21985a73bc00.css HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-14c8"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hashb9649509b14db5a889641078ccb05066 92c2224c6a970bf397d23a2fd37de759f74dd46c 6e7d750905e29196f6246744bb30b0ab0c5baa4a3909db5fabad7809b58aa825
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash199925093192d6206fa6235535ad8471 3f6a6f790a64f9b85965c5a6be09805a0f38af90 206dd41c7d15caae4f59b111b41f6f9fa317981e800c5d946b83803ca7eb93ea
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/pagead/1p-user-list/443903655/?random=1670928901238&cv=11&fst=1670925600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&fmt=3&is_vtc=1&random=100319652&rmt_tld=0&ipr=y | 216.58.207.228 | 200 OK | 42 B |
URL HTTP/2www.google.com/pagead/1p-user-list/443903655/?random=1670928901238&cv=11&fst=1670925600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&fmt=3&is_vtc=1&random=100319652&rmt_tld=0&ipr=y IP216.58.207.228:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/443903655/?random=1670928901238&cv=11&fst=1670925600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&fmt=3&is_vtc=1&random=100319652&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Dec 2022 10:55:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.no/pagead/1p-user-list/443903655/?random=1670928901238&cv=11&fst=1670925600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&fmt=3&is_vtc=1&random=100319652&rmt_tld=1&ipr=y | 142.250.74.67 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/443903655/?random=1670928901238&cv=11&fst=1670925600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&fmt=3&is_vtc=1&random=100319652&rmt_tld=1&ipr=y IP142.250.74.67:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/443903655/?random=1670928901238&cv=11&fst=1670925600000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&tiba=Caliber%20is%20a%20team-based%20online%20game&fmt=3&is_vtc=1&random=100319652&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 13 Dec 2022 10:55:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| vk.com/rtrg?p=VK-RTRG-741625-bNvJc&metatag_url=https%3A%2F%2Fplaycaliber.com&metatag_title=Caliber%20is%20a%20team-based%20online%20game | 87.240.132.72 | 200 OK | 65 B |
URL HTTP/2vk.com/rtrg?p=VK-RTRG-741625-bNvJc&metatag_url=https%3A%2F%2Fplaycaliber.com&metatag_title=Caliber%20is%20a%20team-based%20online%20game IP87.240.132.72:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashec4341fe3a8b2c4880fbfe0ef9cde34f a0947414eb426b2939ca1a05fc870763f6bfc63f 01229c58f8015c623259e635969b8520945e2e0de1927a1375d48ad0ce915463
GET /rtrg?p=VK-RTRG-741625-bNvJc&metatag_url=https%3A%2F%2Fplaycaliber.com&metatag_title=Caliber%20is%20a%20team-based%20online%20game HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: image/gif
content-length: 65
x-powered-by: KPHP/7.4.112842
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Thu, 14 Dec 2023 22:43:57 GMT; path=/; domain=.vk.com
remixstlid=9059218865646939203_0fxtHfuycXtUI3zo5cNNHtYlRZhGnhCzGWkaxnZ4ebg; expires=Wed, 13 Dec 2023 10:55:03 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front220206
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash199925093192d6206fa6235535ad8471 3f6a6f790a64f9b85965c5a6be09805a0f38af90 206dd41c7d15caae4f59b111b41f6f9fa317981e800c5d946b83803ca7eb93ea
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-4HB8STKEBV>m=2oebu0&_p=1310912128&cid=987325149.1670928901&ul=en-us&sr=1280x1024&_s=1&sid=1670928901&sct=1&seg=0&dl=https%3A%2F%2Fplaycaliber.com%2Fen%2F&dt=Caliber%20is%20a%20team-based%20online%20game&en=page_view&_fv=1&_nsi=1&_ss=1 | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-4HB8STKEBV>m=2oebu0&_p=1310912128&cid=987325149.1670928901&ul=en-us&sr=1280x1024&_s=1&sid=1670928901&sct=1&seg=0&dl=https%3A%2F%2Fplaycaliber.com%2Fen%2F&dt=Caliber%20is%20a%20team-based%20online%20game&en=page_view&_fv=1&_nsi=1&_ss=1 IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-4HB8STKEBV>m=2oebu0&_p=1310912128&cid=987325149.1670928901&ul=en-us&sr=1280x1024&_s=1&sid=1670928901&sct=1&seg=0&dl=https%3A%2F%2Fplaycaliber.com%2Fen%2F&dt=Caliber%20is%20a%20team-based%20online%20game&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: null
date: Tue, 13 Dec 2022 10:55:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=1070447773478372&ev=PageView&dl=https%3A%2F%2Fplaycaliber.com%2Fen%2F&rl=&if=false&ts=1670928901985&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670928901985.1181803362&it=1670928901741&coo=false&exp=a1&rqm=GET | 157.240.240.35 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/tr/?id=1070447773478372&ev=PageView&dl=https%3A%2F%2Fplaycaliber.com%2Fen%2F&rl=&if=false&ts=1670928901985&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670928901985.1181803362&it=1670928901741&coo=false&exp=a1&rqm=GET IP157.240.240.35:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=1070447773478372&ev=PageView&dl=https%3A%2F%2Fplaycaliber.com%2Fen%2F&rl=&if=false&ts=1670928901985&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1670928901985.1181803362&it=1670928901741&coo=false&exp=a1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 13 Dec 2022 10:55:04 GMT
X-Firefox-Spdy: h2
|
|
| top-fwz1.mail.ru/js/code.js | 95.163.52.67 | 200 OK | 14 kB |
URL HTTP/2top-fwz1.mail.ru/js/code.js IP95.163.52.67:0
File typeASCII text, with very long lines (729) Hashe2e25d9473a05570c20838aca1c2c3ea a8ac67a13111a4e61cf7eb9bb8850ef5ab1246d4 b75b8d2fe8eb0c9e8191c51f99eb62b37c944f36118aacb5237e4bde65c60e11
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:03 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 16:42:10 GMT
set-cookie: FTID=1RMYgQ0tkIIE:1670928903:0:::; path=/; expires=Thu, 14-Dec-23 10:55:03 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"637e4d62-85c6"
expires: Tue, 13 Dec 2022 11:55:03 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| top-fwz1.mail.ru/counter2?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670928902064%3A1670928902067%3A1%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.4329190512205848 | 95.163.52.67 | 200 OK | 43 B |
URL HTTP/2top-fwz1.mail.ru/counter2?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670928902064%3A1670928902067%3A1%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.4329190512205848 IP95.163.52.67:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash9bb191c6827273aa978cab39a3587950 25d8043336eb799e52b1a0e15ff6b95e09c24e35 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1670928902064%3A1670928902067%3A1%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.4329190512205848 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:04 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670928904:3242998:::; path=/; expires=Thu, 14-Dec-23 10:55:04 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashe0d2d2afee6220bb83a888607c8e13bf e86cef0f0abd1985ad499ce11bf161b4aa3c1968 21573eaf3a6e696af486fe9f1cbe877de5bdce0a53a5ffd0953ead22f1f9da74
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| static.doubleclick.net/instream/ad_status.js | 142.250.74.134 | 200 OK | 29 B |
URL HTTP/2static.doubleclick.net/instream/ad_status.js IP142.250.74.134:0
Hash1fa71744db23d0f8df9cce6719defcb7 e4be9b7136697942a036f97cf26ebaf703ad2067 eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 10:51:04 GMT
expires: Tue, 13 Dec 2022 11:06:04 GMT
cache-control: public, max-age=900
age: 240
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash4cfff21eb23d58996d9e27a376974cb5 79c2ffbc0f6594a69eaa643edee1757760fb848e 7916a7a170a38e6b445dadcf83d3fac44305960c6c15f756e0cde0a6a6e90970
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash4cfff21eb23d58996d9e27a376974cb5 79c2ffbc0f6594a69eaa643edee1757760fb848e 7916a7a170a38e6b445dadcf83d3fac44305960c6c15f756e0cde0a6a6e90970
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.170 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.170:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 13 Dec 2022 10:55:04 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hashe0d2d2afee6220bb83a888607c8e13bf e86cef0f0abd1985ad499ce11bf161b4aa3c1968 21573eaf3a6e696af486fe9f1cbe877de5bdce0a53a5ffd0953ead22f1f9da74
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create | 142.250.74.170 | 200 OK | 31 kB |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create IP142.250.74.170:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hashccb2ed17e896767b309c5aabe9bd5c49 57db2a18e1ca604052ba980afafb74b8ce77dd6c b0ffb4dd1de37c0bb44b36b6630c4e345831b0c143b53e66d826491527655eae
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 13 Dec 2022 10:55:04 GMT
server: ESF
cache-control: private
content-length: 30904
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash4cfff21eb23d58996d9e27a376974cb5 79c2ffbc0f6594a69eaa643edee1757760fb848e 7916a7a170a38e6b445dadcf83d3fac44305960c6c15f756e0cde0a6a6e90970
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 10:55:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| top-fwz1.mail.ru/tracker?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;nt=0/0/1670928900041/////497/497/497/497/497/497/499/548/548/553/1001/1006/1008/2675/2675/;ni=;lvid=1670928902064%3A1670928902718%3A2%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.8918971799827902;e=RT/load;et=1670928902717 | 95.163.52.67 | 200 OK | 43 B |
URL HTTP/2top-fwz1.mail.ru/tracker?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;nt=0/0/1670928900041/////497/497/497/497/497/497/499/548/548/553/1001/1006/1008/2675/2675/;ni=;lvid=1670928902064%3A1670928902718%3A2%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.8918971799827902;e=RT/load;et=1670928902717 IP95.163.52.67:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash9bb191c6827273aa978cab39a3587950 25d8043336eb799e52b1a0e15ff6b95e09c24e35 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;nt=0/0/1670928900041/////497/497/497/497/497/497/499/548/548/553/1001/1006/1008/2675/2675/;ni=;lvid=1670928902064%3A1670928902718%3A2%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.8918971799827902;e=RT/load;et=1670928902717 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:04 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670928904:3242998:::; path=/; expires=Thu, 14-Dec-23 10:55:04 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
|
|
| jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT | 142.250.74.170 | 200 OK | 0 B |
URL HTTP/2jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT IP142.250.74.170:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 13 Dec 2022 10:55:04 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| top-fwz1.mail.ru/tracker?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670928902064%3A1670928906132%3A3%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.16240827376203493;e=RT/unload;et=1670928906130;pvt=5088;vtauto=4073 | 95.163.52.67 | 200 OK | 43 B |
URL HTTP/2top-fwz1.mail.ru/tracker?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670928902064%3A1670928906132%3A3%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.16240827376203493;e=RT/unload;et=1670928906130;pvt=5088;vtauto=4073 IP95.163.52.67:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash9bb191c6827273aa978cab39a3587950 25d8043336eb799e52b1a0e15ff6b95e09c24e35 24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3242998;u=https%3A//playcaliber.com/en/;st=1670928901042;title=Caliber%20is%20a%20team-based%20online%20game;s=1280*1024;vp=1268*939;touch=0;hds=1;frame=0;flash=;sid=b4d4510ec4e83878;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1670928902064%3A1670928906132%3A3%3A4c61df1654b624f9989c8b35fc2b829e;opts=dl%2Cjst-gtag-ym-vk;visible=true;_=0.16240827376203493;e=RT/unload;et=1670928906130;pvt=5088;vtauto=4073 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:08 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIE:1670928908:3242998:::; path=/; expires=Thu, 14-Dec-23 10:55:08 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/img/main/screenshots/en/screenshot3t.216610829a57.jpg | 52.57.25.143 | 200 OK | 0 B |
URL HTTP/2playcaliber.com/s/img/main/screenshots/en/screenshot3t.216610829a57.jpg IP52.57.25.143:0
GET /s/img/main/screenshots/en/screenshot3t.216610829a57.jpg HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: image/jpeg
content-length: 97824
last-modified: Wed, 26 May 2021 08:08:46 GMT
etag: "60ae020e-17e20"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/css/caliber_main.min.65899c014f9c.css | 52.57.25.143 | 200 OK | 0 B |
URL HTTP/2playcaliber.com/s/css/caliber_main.min.65899c014f9c.css IP52.57.25.143:0
GET /s/css/caliber_main.min.65899c014f9c.css HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-5c0d"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| redrotou.net/pfe/current/micro.tag.min.js?z=4826947&sw=/sw-check-permissions-8b114.js | 139.45.197.251 | 200 OK | 0 B |
URL HTTP/2redrotou.net/pfe/current/micro.tag.min.js?z=4826947&sw=/sw-check-permissions-8b114.js IP139.45.197.251:0
GET /pfe/current/micro.tag.min.js?z=4826947&sw=/sw-check-permissions-8b114.js HTTP/1.1
Host: redrotou.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://expressphoneupdate.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:01 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 09:06:10 GMT
etag: W/"63984082-9a87"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/68712622?wmode=7&page-url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A678%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A892847411376%3Ahid%3A365083498%3Az%3A0%3Ai%3A20221213105500%3Aet%3A1670928901%3Ac%3A1%3Arn%3A19677337%3Arqn%3A1%3Au%3A1670928901877338684%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C49%2C1%2C497%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Ans%3A1670928900041%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670928901%3At%3ACaliber%20is%20a%20team-based%20online%20game&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) | 93.158.134.119 | 302 Found | 0 B |
URL HTTP/2mc.yandex.ru/watch/68712622?wmode=7&page-url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A678%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A892847411376%3Ahid%3A365083498%3Az%3A0%3Ai%3A20221213105500%3Aet%3A1670928901%3Ac%3A1%3Arn%3A19677337%3Arqn%3A1%3Au%3A1670928901877338684%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C49%2C1%2C497%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Ans%3A1670928900041%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670928901%3At%3ACaliber%20is%20a%20team-based%20online%20game&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) IP93.158.134.119:0
GET /watch/68712622?wmode=7&page-url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A678%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A892847411376%3Ahid%3A365083498%3Az%3A0%3Ai%3A20221213105500%3Aet%3A1670928901%3Ac%3A1%3Arn%3A19677337%3Arqn%3A1%3Au%3A1670928901877338684%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C49%2C1%2C497%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Ans%3A1670928900041%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670928901%3At%3ACaliber%20is%20a%20team-based%20online%20game&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://playcaliber.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/68712622/1?wmode=7&page-url=https%3A%2F%2Fplaycaliber.com%2Fen%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A1931hwv4ldos2hv9k9dzvr%3Afp%3A678%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A892847411376%3Ahid%3A365083498%3Az%3A0%3Ai%3A20221213105500%3Aet%3A1670928901%3Ac%3A1%3Arn%3A19677337%3Arqn%3A1%3Au%3A1670928901877338684%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C49%2C1%2C497%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Ans%3A1670928900041%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670928901%3At%3ACaliber%20is%20a%20team-based%20online%20game&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Tue, 13 Dec 2022 10:55:03 GMT
access-control-allow-origin: https://playcaliber.com
set-cookie: yabs-sid=396479961670928903; Path=/; SameSite=None; Secure
i=pfCb1ApVGCgV1vZe20Nfwq8RcLVaEynsEvuez5OAz3/8NdJh0HdPZi69snJalogD7U8VOdFtYpgiArrN1rjRi5ZB9Fw=; Expires=Fri, 10-Dec-2032 10:55:01 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=9153534641670928903; Expires=Wed, 13-Dec-2023 10:55:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9153534641670928903; Expires=Wed, 13-Dec-2023 10:55:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1702464903.yc.1670928903#1702464903.yrts.1670928903#1702464903.yrtsi.1670928903; Expires=Wed, 13-Dec-2023 10:55:03 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 13-Dec-2022 10:55:03 GMT
last-modified: Tue, 13-Dec-2022 10:55:03 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| playcaliber.com/s/js/js.cookie.min.4f4a6fe90451.js | 52.57.25.143 | 200 OK | 0 B |
URL HTTP/2playcaliber.com/s/js/js.cookie.min.4f4a6fe90451.js IP52.57.25.143:0
GET /s/js/js.cookie.min.4f4a6fe90451.js HTTP/1.1
Host: playcaliber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://playcaliber.com/en/
Connection: keep-alive
Cookie: sessionid=0i37n5rou0id3fxz8haqc0ki79op61fi; utm_source=emV5ZG9v; utm_term=MzY0NzY3Ng; utm_content=NTU4NTAxMw; subid=NjI2NDgzNTcxNDgzNDg0MjQ2; utm_click_id=NjI2NDgzNTcxNDgzNDg0MjQ2; csrftoken=z8oFL034MrTP6PngLLPQKMK8sHTHfjRfVHKdtFAQaQxmdmhPX6oVg9AaXElPnnMx
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 10:55:02 GMT
content-type: application/javascript; charset=utf8
last-modified: Wed, 16 Nov 2022 14:04:38 GMT
vary: Accept-Encoding
etag: W/"6374edf6-695"
expires: Thu, 12 Jan 2023 10:55:02 GMT
cache-control: max-age=2592000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| expressphoneupdate.club/smart-security-0/index.html?clickid={clickid}&utm_source={var1}&utm_medium=restart_push_{offer.name}&publisher={trafficsource.name}&utm_campaign={trafficsource.name} | 172.67.136.87 | 200 OK | 0 B |
URL HTTP/2expressphoneupdate.club/smart-security-0/index.html?clickid={clickid}&utm_source={var1}&utm_medium=restart_push_{offer.name}&publisher={trafficsource.name}&utm_campaign={trafficsource.name} IP172.67.136.87:0
GET /smart-security-0/index.html?clickid={clickid}&utm_source={var1}&utm_medium=restart_push_{offer.name}&publisher={trafficsource.name}&utm_campaign={trafficsource.name} HTTP/1.1
Host: expressphoneupdate.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 13 Dec 2022 10:54:59 GMT
content-type: text/html
last-modified: Mon, 13 Jun 2022 09:09:10 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z0qDk%2BRrtBovxGqz8WgMeayx5v4gb5NV5sA321bcItuyBhYqoV8numPdFPEKRB5SUREm8hdhXvhVxDLYyjXMaQCGHcqv6QvZvkLR4Yl7daBKBnaPcKCTGfakw%2F1dVcqHp5pFACWDrTIuYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 778e2a334c0f1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|