r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4567
Expires: Tue, 06 Sep 2022 11:45:44 GMT
Date: Tue, 06 Sep 2022 10:29:37 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 10:04:17 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 22GikpoSwVFy7j1eXCq_jZloYWyUibiXSrtDM-iY35npLRxS9jZJAg==
Age: 1520
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J3HqSbDmktouSPgHBFa2zzR6JAvutir3jwlyHPKLYZVCMt49SYZ67g==
age: 33260
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 09:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 10:33:37 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FzBy6ZEUMRN2IOfVQT5oautzUpvrIEJAmxaYBmmrVH5fo3rvdfeIdw==
Age: 3080
ocsp.digicert.com/
200 OK 471 B IP
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3121
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:29:38 GMT
Last-Modified: Tue, 06 Sep 2022 09:37:37 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
ww16.best-targeted-traffic.com/install.php?unq=5b92262638nqpwmvp&version=1.7&pais=Unknown&sub1=20220906-0837-211f-8466-117a79911297
200 OK 1.2 kB URL HTTP/1.1 ww16.best-targeted-traffic.com/install.php?unq=5b92262638nqpwmvp&version=1.7&pais=Unknown&sub1=20220906-0837-211f-8466-117a79911297
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (703)
Hash d296cc730cc2b5e471e4debbaeb542c6
46b3ed534251f5f4f90f27b07fc43e3c6014e3f9
d059837a5a8a5645290ef5b03e5df5ae64a6f613cedfc4151060fb93015f3183
GET /install.php?unq=5b92262638nqpwmvp&version=1.7&pais=Unknown&sub1=20220906-0837-211f-8466-117a79911297 HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Tue, 06 Sep 2022 10:29:38 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_PxONfA163yFKkezs8sNJaerqtmWXYX63itdM8Vnw+xguXyctah/J3BHpA4OMp2Nf261gFGcUlM4DE3ZEZZSKPA==
last-modified: Tue, 06 Sep 2022 10:29:37 GMT
x-cache-miss-from: parking-b7c449b98-ptz98
server: NginX
content-encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: x428wUlIbW8JEKlMoscKYg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: v2g1LsEmUgW51gbkBvIAmlLoTaA=
img.sedoparking.com/images/js_preloader.gif
200 OK 4.3 kB URL HTTP/1.1 img.sedoparking.com/images/js_preloader.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 90c93102a88c2ab94bff1575b7a6e86e
56d71bf13de464534643db9d127629a0a3bf677a
5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
GET /images/js_preloader.gif HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww16.best-targeted-traffic.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:29:39 GMT
Content-Type: image/gif
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Tue, 13 Sep 2022 10:29:39 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: 31aeff9c436396a38a79a5147ae7e395
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww16.best-targeted-traffic.com/search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTY2MjQ2MDE3OGMwYTkzYWE2MjFmMTEzOGJmYjQzMzI2ZmVkYjE1MTli&crc=871bc52be74ab522f5fc3340b65581ba32687b25&cv=1
200 OK 0 B URL HTTP/1.1 ww16.best-targeted-traffic.com/search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTY2MjQ2MDE3OGMwYTkzYWE2MjFmMTEzOGJmYjQzMzI2ZmVkYjE1MTli&crc=871bc52be74ab522f5fc3340b65581ba32687b25&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/tsc.php?200=NDA4MDEzNDk4&21=OTEuOTAuNDIuMTU0&681=MTY2MjQ2MDE3OGMwYTkzYWE2MjFmMTEzOGJmYjQzMzI2ZmVkYjE1MTli&crc=871bc52be74ab522f5fc3340b65581ba32687b25&cv=1 HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww16.best-targeted-traffic.com/install.php?unq=5b92262638nqpwmvp&version=1.7&pais=Unknown&sub1=20220906-0837-211f-8466-117a79911297
HTTP/1.1 200 OK
date: Tue, 06 Sep 2022 10:29:39 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-cache-miss-from: parking-b7c449b98-4jjpv
server: NginX
img.sedoparking.com/templates/logos/sedo_logo.png
200 OK 15 kB URL HTTP/1.1 img.sedoparking.com/templates/logos/sedo_logo.png
IP
File type MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash def00c11b1596db4efee6a9fbe64fc27
bd298981e6d8d7e4ffa18abcf687041f4246672d
95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4
GET /templates/logos/sedo_logo.png HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww16.best-targeted-traffic.com/
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:29:39 GMT
Content-Type: image/png
Content-Length: 15086
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Tue, 13 Sep 2022 10:29:39 GMT
X-CFHash: "def00c11b1596db4efee6a9fbe64fc27"
X-CFF: B
Last-Modified: Mon, 11 Jan 2021 07:44:34 GMT
X-CF3: M
CF4Age: 0
x-cf-tsc: 1633605922
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: ee1bccb6a8b90f19cb61b8884e9bab7c
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww16.best-targeted-traffic.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DzjycUeinBOI_0&v=NDczNGFiYTJmMWMxYTk5OWNjNzQ0NGE1NjlmOTkyZDQJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYTc5My4yODA1NzQyMAl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYWE2Ni42MTI4NDYyMgkxNjYyNDYwMTc4CWFkXzYzXzA=&l=OAliYzI0MTkxNDBhZTI3MDQ2ZmI5ZmY5MjRlZjBiNTc4ZQkwCTM1CTAJNTg0MmRjNjlkYjBkNzQ5ODE1YmEwMjg4ODdiZmMzMzQJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNDYwMTc4CTAuMDAwMzk2CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D
302 Found 0 B URL HTTP/1.1 ww16.best-targeted-traffic.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DzjycUeinBOI_0&v=NDczNGFiYTJmMWMxYTk5OWNjNzQ0NGE1NjlmOTkyZDQJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYTc5My4yODA1NzQyMAl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYWE2Ni42MTI4NDYyMgkxNjYyNDYwMTc4CWFkXzYzXzA=&l=OAliYzI0MTkxNDBhZTI3MDQ2ZmI5ZmY5MjRlZjBiNTc4ZQkwCTM1CTAJNTg0MmRjNjlkYjBkNzQ5ODE1YmEwMjg4ODdiZmMzMzQJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNDYwMTc4CTAuMDAwMzk2CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DzjycUeinBOI_0&v=NDczNGFiYTJmMWMxYTk5OWNjNzQ0NGE1NjlmOTkyZDQJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYTc5My4yODA1NzQyMAl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYWE2Ni42MTI4NDYyMgkxNjYyNDYwMTc4CWFkXzYzXzA=&l=OAliYzI0MTkxNDBhZTI3MDQ2ZmI5ZmY5MjRlZjBiNTc4ZQkwCTM1CTAJNTg0MmRjNjlkYjBkNzQ5ODE1YmEwMjg4ODdiZmMzMzQJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNDYwMTc4CTAuMDAwMzk2CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww16.best-targeted-traffic.com/install.php?unq=5b92262638nqpwmvp&version=1.7&pais=Unknown&sub1=20220906-0837-211f-8466-117a79911297
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Tue, 06 Sep 2022 10:29:39 GMT
content-type: text/html; charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 06 Sep 2022 10:29:39 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DzjycUeinBOI_0&v=NDczNGFiYTJmMWMxYTk5OWNjNzQ0NGE1NjlmOTkyZDQJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYTc5My4yODA1NzQyMAl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYWE2Ni42MTI4NDYyMgkxNjYyNDYwMTc4CWFkXzYzXzA=&l=OAliYzI0MTkxNDBhZTI3MDQ2ZmI5ZmY5MjRlZjBiNTc4ZQkwCTM1CTAJNTg0MmRjNjlkYjBkNzQ5ODE1YmEwMjg4ODdiZmMzMzQJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNDYwMTc4CTAuMDAwMzk2CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D
x-cache-miss-from: parking-b7c449b98-k5vhs
server: NginX
ww16.best-targeted-traffic.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DzjycUeinBOI_0&v=NDczNGFiYTJmMWMxYTk5OWNjNzQ0NGE1NjlmOTkyZDQJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYTc5My4yODA1NzQyMAl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYWE2Ni42MTI4NDYyMgkxNjYyNDYwMTc4CWFkXzYzXzA=&l=OAliYzI0MTkxNDBhZTI3MDQ2ZmI5ZmY5MjRlZjBiNTc4ZQkwCTM1CTAJNTg0MmRjNjlkYjBkNzQ5ODE1YmEwMjg4ODdiZmMzMzQJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNDYwMTc4CTAuMDAwMzk2CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D
302 Found 311 B URL HTTP/1.1 ww16.best-targeted-traffic.com/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DzjycUeinBOI_0&v=NDczNGFiYTJmMWMxYTk5OWNjNzQ0NGE1NjlmOTkyZDQJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYTc5My4yODA1NzQyMAl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYWE2Ni42MTI4NDYyMgkxNjYyNDYwMTc4CWFkXzYzXzA=&l=OAliYzI0MTkxNDBhZTI3MDQ2ZmI5ZmY5MjRlZjBiNTc4ZQkwCTM1CTAJNTg0MmRjNjlkYjBkNzQ5ODE1YmEwMjg4ODdiZmMzMzQJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNDYwMTc4CTAuMDAwMzk2CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bcfdccd7471284be32cc352a25f327ee
ea75174001e5f2a16712c46a31ba377c404be12c
bf488ed591758a94a5eaf86b49d504870c628e028996750aa57225314a5cc74b
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DzjycUeinBOI_0&v=NDczNGFiYTJmMWMxYTk5OWNjNzQ0NGE1NjlmOTkyZDQJMQl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYTc5My4yODA1NzQyMAl3dzE2LmJlc3QtdGFyZ2V0ZWQtdHJhZmZpYy5jb202MzE3MjExMWFkYWE2Ni42MTI4NDYyMgkxNjYyNDYwMTc4CWFkXzYzXzA=&l=OAliYzI0MTkxNDBhZTI3MDQ2ZmI5ZmY5MjRlZjBiNTc4ZQkwCTM1CTAJNTg0MmRjNjlkYjBkNzQ5ODE1YmEwMjg4ODdiZmMzMzQJNDA4MDEzNDk4CWJlc3QtdGFyZ2V0ZWQtdHJhZmZpYwkwCTYzCTYJMgkxNjYyNDYwMTc4CTAuMDAwMzk2CU4JMAkxCTE4MDUJMTIwNQkyNjUxMDY2Mwk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1
Host: ww16.best-targeted-traffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww16.best-targeted-traffic.com/install.php?unq=5b92262638nqpwmvp&version=1.7&pais=Unknown&sub1=20220906-0837-211f-8466-117a79911297
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Tue, 06 Sep 2022 10:29:39 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Tue, 06 Sep 2022 10:29:39 GMT
location: http://xml.sedodna.com/click?i=zjycUeinBOI_0
x-cache-miss-from: parking-b7c449b98-sdx9h
server: NginX
xml.sedodna.com/click?i=zjycUeinBOI_0
302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=zjycUeinBOI_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=zjycUeinBOI_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww16.best-targeted-traffic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: http://api.quotes.com/cf145270-2dce-11ed-ad45-e1b329b36a09
Pragma: no-cache
api.quotes.com/cf145270-2dce-11ed-ad45-e1b329b36a09
200 OK 171 B URL HTTP/1.1 api.quotes.com/cf145270-2dce-11ed-ad45-e1b329b36a09
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 8de879ba837a5406cf3d9c7b01766d48
ad5e544914bb012f78979bd524a41ef533332fd6
5e4fe816929edc02c2b0b81a09f8917ee0cd9309c429b81546262a159b8cff2b
GET /cf145270-2dce-11ed-ad45-e1b329b36a09 HTTP/1.1
Host: api.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww16.best-targeted-traffic.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 171
content-type: text/html; charset=utf-8
date: Tue, 06 Sep 2022 10:29:39 GMT
server: nginx
api.quotes.com/cf145270-2dce-11ed-ad45-e1b329b36a09?hr=1
302 Found 11 B URL HTTP/1.1 api.quotes.com/cf145270-2dce-11ed-ad45-e1b329b36a09?hr=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /cf145270-2dce-11ed-ad45-e1b329b36a09?hr=1 HTTP/1.1
Host: api.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 06 Sep 2022 10:29:39 GMT
location: http://artax-evn.com/zcvisitor/cf251423-2dce-11ed-aaed-1250740c758b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
server: nginx
artax-evn.com/zcvisitor/cf251423-2dce-11ed-aaed-1250740c758b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
200 996 B URL HTTP/1.1 artax-evn.com/zcvisitor/cf251423-2dce-11ed-aaed-1250740c758b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1fbdee5448492783a66e8d72997fff5b
cf7131c8a8a1755f6d8ab82938a59dc3255a0165
ed72fe19ab7b8150e0ae3697d8ccb421e0f848c517f4687e6cd92cc5480a0b22
Analyzer Verdict Alert fortinet Phishing
GET /zcvisitor/cf251423-2dce-11ed-aaed-1250740c758b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97 HTTP/1.1
Host: artax-evn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 06 Sep 2022 10:29:39 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: AJzLfNcy
artax-evn.com/zcredirect?visitid=cf251423-2dce-11ed-aaed-1250740c758b&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 424 B URL HTTP/1.1 artax-evn.com/zcredirect?visitid=cf251423-2dce-11ed-aaed-1250740c758b&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bb528704a03ccb77a54e947616fec744
5c2d11dfbc64afd392ae0a8bfd1f8539568c7d6d
8c9465592b77f8c009a568ef74605c87b140b2c29f6c196680137994686dcf05
GET /zcredirect?visitid=cf251423-2dce-11ed-aaed-1250740c758b&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: artax-evn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://artax-evn.com/zcvisitor/cf251423-2dce-11ed-aaed-1250740c758b/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Tue, 06 Sep 2022 10:29:39 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: BewUfcNS
ocsp.sectigo.com/
200 OK 471 B IP
Hash 237bff13842c51f832a7a8c602322a7d
c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3
c9bfb609f993f2d9316e54ee1c3151a80b654b4c0d9f51d1839ffde60490f5a2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:29:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 14:26:19 GMT
Expires: Mon, 12 Sep 2022 14:26:18 GMT
Etag: "c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3"
Cache-Control: max-age=531997,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466865d2f881bfa-OSL
artax-evn.com/favicon.ico
404 653 B URL HTTP/1.1 artax-evn.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: artax-evn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://artax-evn.com/zcredirect?visitid=cf251423-2dce-11ed-aaed-1250740c758b&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Tue, 06 Sep 2022 10:29:40 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: CRgyQeNp
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5611
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 10:29:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5611
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 10:29:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5611
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 10:29:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5611
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 10:29:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5611
Expires: Tue, 06 Sep 2022 12:03:11 GMT
Date: Tue, 06 Sep 2022 10:29:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 19b452d6541a6028e7d3f90529477077
1c16eb50bc2490b4ebff6775ef611fdcb282f9f9
f4763a0f464067991c2c484c384df4fe791d7df6e3d6ad15650a954db537249f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10694
x-amzn-requestid: c3d2f71c-927d-41f6-93ab-bf041374a9f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWsgHQOIAMFvSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-5d2efd595cdf300972f4fb79;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eikhT8BkN5e163S6QriQybdyPNTKDTf3BCsHifNwfBJfrWv7LqgL8Q==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:02:23 GMT
etag: "1c16eb50bc2490b4ebff6775ef611fdcb282f9f9"
content-type: image/jpeg
age: 44837
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8a5ed2a9c430f2f02da773c400d096e0
618252c5082ccfeeb8bc92aecba4485c48ac4206
948158a29f15f5f5ab45f541b665269d43bfc1e3b444ee4ecb9ba715d5b616d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F404ac7e7-f8ba-4b04-b736-5cab0995739f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11003
x-amzn-requestid: 29b9c3bc-4b10-44ed-9bc0-111a672c1d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqpJpGjxoAMFzSw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630dbbd7-1547b64d2fc3052e510f6218;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 07:27:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: EXc9RRYhl4EmZGyr2V-YVVoNRU4VC-K1lQcsEzY_PdnYl8qNg3vEAw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 09:36:47 GMT
age: 3173
etag: "618252c5082ccfeeb8bc92aecba4485c48ac4206"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c23179b2131543088771e3fa84ff231
ae50ae4aecd962b698c19f2863857b51cea7fcec
660900ca69b1787a734c1dbe3d6b9b19656912b4bc4715964c4325edff57f008
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc4b02d0f-9da0-42dc-a234-02e974e7d286.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7855
x-amzn-requestid: d7c8054c-d7d3-4b76-815d-36c3a2e1f6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYn6FwzoAMF40g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166e32-3ededbf27f83503978e0d775;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:46:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 8OlwFzmUfQEPeP7pT-g5wRMq0I1jllBnRU0Nxk4kNkcVD_evLZYc7g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:17:51 GMT
etag: "ae50ae4aecd962b698c19f2863857b51cea7fcec"
content-type: image/jpeg
age: 43909
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5540d72831e7e7b9fc287f92c48d9f5e
ec19429fa76d9ad47a0578734b011b530b79ebbf
bc27a44853fd17cf51d6bba0db58a755c75a309d9b0cbcd454dfc9d62785f72f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F803e9506-f3ea-4e09-a966-608b8dabf3b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8134
x-amzn-requestid: 5f6027e8-842f-476a-85e5-cc8b848e4567
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEoVIAMFuiA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7095c29a04d2f5310b1b84c4;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Gf6IGDeM-y_nDO1C3m9xeyAJdkYRe2CN87Pi986A7B1qsjq5p9VkQw==
via: 1.1 d7782b26e589b8e1397d352f4daf0d58.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 07:41:25 GMT
age: 10095
etag: "ec19429fa76d9ad47a0578734b011b530b79ebbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec466c0d472e43c11d36bf6fce068205
720d3624a76d060b8e2699e9aa7a320e3efd4878
5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:36:52 GMT
age: 21168
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d404793e430ea237e75be9cb1e2bce4
059b34d1809abedd223f7beec75e7831673878be
f180b1cdeb9a794ba3211348673783508d021aeaed419d782374be1a92a4c8dc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc784000-5c7c-4aa9-8318-e4d0319d1a09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9300
x-amzn-requestid: dc833608-6b16-4baa-af21-d3885043556c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWshHVxIAMFlGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-1710086818614ab247bcaf58;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: sPkksSz3FIV3WcWpoY8E8UYKmUTE8LJ2lr5WO2JVNCGIuAvpPwYMYg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:01:20 GMT
age: 44900
etag: "059b34d1809abedd223f7beec75e7831673878be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 237bff13842c51f832a7a8c602322a7d
c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3
c9bfb609f993f2d9316e54ee1c3151a80b654b4c0d9f51d1839ffde60490f5a2
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:29:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 14:26:19 GMT
Expires: Mon, 12 Sep 2022 14:26:18 GMT
Etag: "c604e7fb0f67fc5ee443ac0a8ddf463d3e8b3fb3"
Cache-Control: max-age=531997,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466865ee9a91bfa-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 48fdb672dcaa975dc49281d2c7cf1f5e
0ecd66dedfde3c9e25a48d3dba09f3e998e93ca9
74f03c2ad43d00612f744ac213aa51377d30d33846fb3c5c98ae78c9abf59d6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:29:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjbGlja19pZCI6ICI3YzMxOWQzMC00Y2I3LTQ5MjgtYTE2MS1kZjQ5NmM1MjZiYmY6YWVkYWZmMjc1YmQ2NzU5MjJlMTQyOTM1NjA5NWU2YTVkOWI0M2UwMiIsICJjb3VudHJ5IjogIk5PIn0=
200 OK 1.4 kB URL HTTP/2 storage.googleapis.com/tmp-static/instal-impressions/impressions.html?data=eyJjbGlja19pZCI6ICI3YzMxOWQzMC00Y2I3LTQ5MjgtYTE2MS1kZjQ5NmM1MjZiYmY6YWVkYWZmMjc1YmQ2NzU5MjJlMTQyOTM1NjA5NWU2YTVkOWI0M2UwMiIsICJjb3VudHJ5IjogIk5PIn0=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 54f99c9e98a5b4f17b219e94417e6d2f
80247746ede724755155d0aa8c0082c8b00542bf
c7f94d1b21fdadbcc934c2d31503832763070136eafd23d65cec53f6e49b5634
GET /tmp-static/instal-impressions/impressions.html?data=eyJjbGlja19pZCI6ICI3YzMxOWQzMC00Y2I3LTQ5MjgtYTE2MS1kZjQ5NmM1MjZiYmY6YWVkYWZmMjc1YmQ2NzU5MjJlMTQyOTM1NjA5NWU2YTVkOWI0M2UwMiIsICJjb3VudHJ5IjogIk5PIn0= HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvviLigotw0ajTZUFV6oMiOmhJlUFJVMnRhQb8BTUJYg3SLOJJVI13r5fqBF4lD003Ue9HrDR9RlW1TWfBy9yWyKYeQK5Mv
expires: Tue, 06 Sep 2022 11:29:40 GMT
date: Tue, 06 Sep 2022 10:29:40 GMT
cache-control: public, max-age=3600
last-modified: Mon, 10 Jun 2019 16:09:51 GMT
etag: "54f99c9e98a5b4f17b219e94417e6d2f"
x-goog-generation: 1560182991115409
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1357
content-type: text/html
x-goog-hash: crc32c=+7k9hA==, md5=VPmcnpiltPF7IZ6UQX5tLw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 1357
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
f5ac6e7aac.smapp.work/api/v1/click/confirm.js?data=gAAAAABjFyEUIHaqH2t4tNHCpvQO8vUC_u8aNjWhNCA0lpS-BhkfHyGJVOEhgwoMmy1jPo__eUS_VgYsHwXA9cz-GzaUET1jWt2LJB6tXi_5zo15PMs5BhdLC5TKbyjbiYuoh5aohDIv_ZYP65fK6bEpIpzwIPY7V60lqSRvXMqPlo4s8C6aDZ-X6vB3G2rVe-F2oKEwTUO9n_OawGlF_x3ovQKhNynW3EZf-s6N08T13RESwK-IngtITRVSYthYm9O_7FbXxBku1pAOW-3C1XLDNBOCR9t1UOEA-9M19aeTG4ZBv2cTw3ApjcW2JxDcFirw3QiYLoPd0A_cAgaVDtDLopgPeEO-FRb5jMpdSFQyDQSn_0qyn-Yvyx1GW7UNQzDlWzUncZKMfii5YJ5_iNo5JsHcXdj9xAn9vfuMYNjeJr5N6GCDPSiIT9puPKDs78wdaVsK15mTz1EglfElsLUEzMhya7AxoyVE8IWimKWBFl8vJwmQB-3jRGf4_ARIiXICr6VLgy0YbJ8G222KwVW06PgYlqlnq28OShyX1Rwcakj_CgA4DNXC2CCKWakvWst-YtwZcBq3Uje2mNeklEg0U5NohDGaWvkSJzpNdQ9BqfoZ8al5Flxxpv3b7ZbL7F2dXz1SKZd37cxQsDonBLp0B5hPVtnw_hwigwgjruaMer-TbJtNwtwVx7cj-M_KSqbr1RokGWsHQYqaog7e_XH-zTJdNmozm5JQlGGTxEOD5tDrGt2FjS8rwjL6yH2JjTGPp1y3SCiSvbs-wKpijmytCouUA_TMLAxfgG0RLzxMoh5XkuKxhVUrKjpxZVOdRE7C6yPkM5drY-HzO_97WWQOS3CA-HH1b6qtmSOfeWeC7Lvadg9YbmXy2470YEctNyRsoALreTwI2c4UuhbrsSgQCxUHetPBJ5HsMCn5U-6zImzgABsyFYndN2Sig02L5c4t2cBBhkZbDO5q4c3Lr0G-vCxINBEud8KXAt5A09W_PDgDOqNc38juDXCzeyM9378brSIwECBxYASf2w7dr2UviG8J_g0yfd3V3nmqaXbo_znGmN9G_1fKW_ufvl2HBoeSmyYRaR2w1LH6NiE0HBvK6VbWUvJks2FPy6pL-Lf9A0vJbjggxBWm3dgjpkn9SvTJIBoKpeZNSPYWIazfStoW_7PwvrIOpu7FXGIM4imaDzGdO_q-M5_qV8_CKfUZ1F0DBUs_ykyypNmQZ8zjklpW34f72RA0lALOesf560SVAP-Mcxii2aDPV516-6S6CSkzLhNh9y28Nn5GMyOhlmjGmGtMkcVwNeze3oDF6iUHqcaN9gFF-qppkw2eEVS4b3338fxVyYx3fY8C0D2QFW9A-kytUAG2IO4wJ74PB4gPN4eTwVhwncx_ajJuqo8gZI7Uk8jZV63EvG0Bjlikjm6KBSh5rnF_V8yBshELvh4MZyNdRAt-nDJkUFAWn4A1m19kbME4kOqI1YjnxC3tgHI_XvRmyuRATJN4JOFZTpU_ciGqPpWLPrdQjuBbjLta7irDQWmc3pDrS-BrivEPPBI1bJP3xPwQaRKjKZDF4V3oofO18E4V4Wr3_PtFAHpRd5dgFsQ301khb5H3D0tehRYWi1dxzn-gOKRvHVnTJUO-szHuQcPGAwqPE4tdBUiPGMjq824IhXWgN2qKHWj3JaUXJ9UhEy9BHA2joUy90NKb6zKAu-tK0Q6YteZQu7YbAYmcN9eh13semIcpW7hMTrRXMqILq9mQXlOWvperZEjqOod91SdeVHyVvKx6SIeHssoPnuRcxC0or6M6nrvVrgyBjptXORTP73ixYalrq12yb-W2W738PVYf29XYZJLVV4MXWeAD5to9p5Igyh8k2R2f7cLlM2qoiLqAP9_79O6xo-qvPZFFPwxsX53YJM7syrYzH5hg0d_pYhr3gngcyK0jvU-CzrFgG15SRX3ioi11BO7_rz7oinab200PRj7FUjsTcJiRdRU_N1Yy4ujrpi8ypsIOoZ2ulUxmbvVPckpxYWFCdwAuV5MNFFr_PoAGsLSYo3EzQeNnhLnS1egBZVjiEO1tQOOn6O8M18pSKugxS3gF5uuMmU0vUq1NX_w-qyc1YD9UcD59VjNgyEC7CWRowr9wSvZnjdZjW5oAU1ix9N1a1v1k-NsFnzezvW027VbkN5FqVambN65q91VOGcVyUJ76tFtqPzfFeEg-XwpmXN4IVCxMHYPfYYL1Y9hczeIZxZRjXYulgWwErZT9WNjjy2r32y8ypMSFtkLbH5A3N5Jz6VxCtCVzCDurn7uhPSVmhRE3CaDp-QEM9i6rYNiYI55t4F9kANAn-PmcFbwOATR0JRK1L4ipnVbkd9O8LM4mnhgGai7h_iTbAnYgdxnD4scE1V9LAc4BUbdGs-40OprjZr2f-IR-OVdwK5NLLSuqkPC7mJUUzcRPO6XDP_B3lGcrHtlz2i1GNEccolJuByBwieaKnUZwnsvcbDPSM-WR4GdN02Ti
200 OK 0 B URL HTTP/2 f5ac6e7aac.smapp.work/api/v1/click/confirm.js?data=gAAAAABjFyEUIHaqH2t4tNHCpvQO8vUC_u8aNjWhNCA0lpS-BhkfHyGJVOEhgwoMmy1jPo__eUS_VgYsHwXA9cz-GzaUET1jWt2LJB6tXi_5zo15PMs5BhdLC5TKbyjbiYuoh5aohDIv_ZYP65fK6bEpIpzwIPY7V60lqSRvXMqPlo4s8C6aDZ-X6vB3G2rVe-F2oKEwTUO9n_OawGlF_x3ovQKhNynW3EZf-s6N08T13RESwK-IngtITRVSYthYm9O_7FbXxBku1pAOW-3C1XLDNBOCR9t1UOEA-9M19aeTG4ZBv2cTw3ApjcW2JxDcFirw3QiYLoPd0A_cAgaVDtDLopgPeEO-FRb5jMpdSFQyDQSn_0qyn-Yvyx1GW7UNQzDlWzUncZKMfii5YJ5_iNo5JsHcXdj9xAn9vfuMYNjeJr5N6GCDPSiIT9puPKDs78wdaVsK15mTz1EglfElsLUEzMhya7AxoyVE8IWimKWBFl8vJwmQB-3jRGf4_ARIiXICr6VLgy0YbJ8G222KwVW06PgYlqlnq28OShyX1Rwcakj_CgA4DNXC2CCKWakvWst-YtwZcBq3Uje2mNeklEg0U5NohDGaWvkSJzpNdQ9BqfoZ8al5Flxxpv3b7ZbL7F2dXz1SKZd37cxQsDonBLp0B5hPVtnw_hwigwgjruaMer-TbJtNwtwVx7cj-M_KSqbr1RokGWsHQYqaog7e_XH-zTJdNmozm5JQlGGTxEOD5tDrGt2FjS8rwjL6yH2JjTGPp1y3SCiSvbs-wKpijmytCouUA_TMLAxfgG0RLzxMoh5XkuKxhVUrKjpxZVOdRE7C6yPkM5drY-HzO_97WWQOS3CA-HH1b6qtmSOfeWeC7Lvadg9YbmXy2470YEctNyRsoALreTwI2c4UuhbrsSgQCxUHetPBJ5HsMCn5U-6zImzgABsyFYndN2Sig02L5c4t2cBBhkZbDO5q4c3Lr0G-vCxINBEud8KXAt5A09W_PDgDOqNc38juDXCzeyM9378brSIwECBxYASf2w7dr2UviG8J_g0yfd3V3nmqaXbo_znGmN9G_1fKW_ufvl2HBoeSmyYRaR2w1LH6NiE0HBvK6VbWUvJks2FPy6pL-Lf9A0vJbjggxBWm3dgjpkn9SvTJIBoKpeZNSPYWIazfStoW_7PwvrIOpu7FXGIM4imaDzGdO_q-M5_qV8_CKfUZ1F0DBUs_ykyypNmQZ8zjklpW34f72RA0lALOesf560SVAP-Mcxii2aDPV516-6S6CSkzLhNh9y28Nn5GMyOhlmjGmGtMkcVwNeze3oDF6iUHqcaN9gFF-qppkw2eEVS4b3338fxVyYx3fY8C0D2QFW9A-kytUAG2IO4wJ74PB4gPN4eTwVhwncx_ajJuqo8gZI7Uk8jZV63EvG0Bjlikjm6KBSh5rnF_V8yBshELvh4MZyNdRAt-nDJkUFAWn4A1m19kbME4kOqI1YjnxC3tgHI_XvRmyuRATJN4JOFZTpU_ciGqPpWLPrdQjuBbjLta7irDQWmc3pDrS-BrivEPPBI1bJP3xPwQaRKjKZDF4V3oofO18E4V4Wr3_PtFAHpRd5dgFsQ301khb5H3D0tehRYWi1dxzn-gOKRvHVnTJUO-szHuQcPGAwqPE4tdBUiPGMjq824IhXWgN2qKHWj3JaUXJ9UhEy9BHA2joUy90NKb6zKAu-tK0Q6YteZQu7YbAYmcN9eh13semIcpW7hMTrRXMqILq9mQXlOWvperZEjqOod91SdeVHyVvKx6SIeHssoPnuRcxC0or6M6nrvVrgyBjptXORTP73ixYalrq12yb-W2W738PVYf29XYZJLVV4MXWeAD5to9p5Igyh8k2R2f7cLlM2qoiLqAP9_79O6xo-qvPZFFPwxsX53YJM7syrYzH5hg0d_pYhr3gngcyK0jvU-CzrFgG15SRX3ioi11BO7_rz7oinab200PRj7FUjsTcJiRdRU_N1Yy4ujrpi8ypsIOoZ2ulUxmbvVPckpxYWFCdwAuV5MNFFr_PoAGsLSYo3EzQeNnhLnS1egBZVjiEO1tQOOn6O8M18pSKugxS3gF5uuMmU0vUq1NX_w-qyc1YD9UcD59VjNgyEC7CWRowr9wSvZnjdZjW5oAU1ix9N1a1v1k-NsFnzezvW027VbkN5FqVambN65q91VOGcVyUJ76tFtqPzfFeEg-XwpmXN4IVCxMHYPfYYL1Y9hczeIZxZRjXYulgWwErZT9WNjjy2r32y8ypMSFtkLbH5A3N5Jz6VxCtCVzCDurn7uhPSVmhRE3CaDp-QEM9i6rYNiYI55t4F9kANAn-PmcFbwOATR0JRK1L4ipnVbkd9O8LM4mnhgGai7h_iTbAnYgdxnD4scE1V9LAc4BUbdGs-40OprjZr2f-IR-OVdwK5NLLSuqkPC7mJUUzcRPO6XDP_B3lGcrHtlz2i1GNEccolJuByBwieaKnUZwnsvcbDPSM-WR4GdN02Ti
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/click/confirm.js?data=gAAAAABjFyEUIHaqH2t4tNHCpvQO8vUC_u8aNjWhNCA0lpS-BhkfHyGJVOEhgwoMmy1jPo__eUS_VgYsHwXA9cz-GzaUET1jWt2LJB6tXi_5zo15PMs5BhdLC5TKbyjbiYuoh5aohDIv_ZYP65fK6bEpIpzwIPY7V60lqSRvXMqPlo4s8C6aDZ-X6vB3G2rVe-F2oKEwTUO9n_OawGlF_x3ovQKhNynW3EZf-s6N08T13RESwK-IngtITRVSYthYm9O_7FbXxBku1pAOW-3C1XLDNBOCR9t1UOEA-9M19aeTG4ZBv2cTw3ApjcW2JxDcFirw3QiYLoPd0A_cAgaVDtDLopgPeEO-FRb5jMpdSFQyDQSn_0qyn-Yvyx1GW7UNQzDlWzUncZKMfii5YJ5_iNo5JsHcXdj9xAn9vfuMYNjeJr5N6GCDPSiIT9puPKDs78wdaVsK15mTz1EglfElsLUEzMhya7AxoyVE8IWimKWBFl8vJwmQB-3jRGf4_ARIiXICr6VLgy0YbJ8G222KwVW06PgYlqlnq28OShyX1Rwcakj_CgA4DNXC2CCKWakvWst-YtwZcBq3Uje2mNeklEg0U5NohDGaWvkSJzpNdQ9BqfoZ8al5Flxxpv3b7ZbL7F2dXz1SKZd37cxQsDonBLp0B5hPVtnw_hwigwgjruaMer-TbJtNwtwVx7cj-M_KSqbr1RokGWsHQYqaog7e_XH-zTJdNmozm5JQlGGTxEOD5tDrGt2FjS8rwjL6yH2JjTGPp1y3SCiSvbs-wKpijmytCouUA_TMLAxfgG0RLzxMoh5XkuKxhVUrKjpxZVOdRE7C6yPkM5drY-HzO_97WWQOS3CA-HH1b6qtmSOfeWeC7Lvadg9YbmXy2470YEctNyRsoALreTwI2c4UuhbrsSgQCxUHetPBJ5HsMCn5U-6zImzgABsyFYndN2Sig02L5c4t2cBBhkZbDO5q4c3Lr0G-vCxINBEud8KXAt5A09W_PDgDOqNc38juDXCzeyM9378brSIwECBxYASf2w7dr2UviG8J_g0yfd3V3nmqaXbo_znGmN9G_1fKW_ufvl2HBoeSmyYRaR2w1LH6NiE0HBvK6VbWUvJks2FPy6pL-Lf9A0vJbjggxBWm3dgjpkn9SvTJIBoKpeZNSPYWIazfStoW_7PwvrIOpu7FXGIM4imaDzGdO_q-M5_qV8_CKfUZ1F0DBUs_ykyypNmQZ8zjklpW34f72RA0lALOesf560SVAP-Mcxii2aDPV516-6S6CSkzLhNh9y28Nn5GMyOhlmjGmGtMkcVwNeze3oDF6iUHqcaN9gFF-qppkw2eEVS4b3338fxVyYx3fY8C0D2QFW9A-kytUAG2IO4wJ74PB4gPN4eTwVhwncx_ajJuqo8gZI7Uk8jZV63EvG0Bjlikjm6KBSh5rnF_V8yBshELvh4MZyNdRAt-nDJkUFAWn4A1m19kbME4kOqI1YjnxC3tgHI_XvRmyuRATJN4JOFZTpU_ciGqPpWLPrdQjuBbjLta7irDQWmc3pDrS-BrivEPPBI1bJP3xPwQaRKjKZDF4V3oofO18E4V4Wr3_PtFAHpRd5dgFsQ301khb5H3D0tehRYWi1dxzn-gOKRvHVnTJUO-szHuQcPGAwqPE4tdBUiPGMjq824IhXWgN2qKHWj3JaUXJ9UhEy9BHA2joUy90NKb6zKAu-tK0Q6YteZQu7YbAYmcN9eh13semIcpW7hMTrRXMqILq9mQXlOWvperZEjqOod91SdeVHyVvKx6SIeHssoPnuRcxC0or6M6nrvVrgyBjptXORTP73ixYalrq12yb-W2W738PVYf29XYZJLVV4MXWeAD5to9p5Igyh8k2R2f7cLlM2qoiLqAP9_79O6xo-qvPZFFPwxsX53YJM7syrYzH5hg0d_pYhr3gngcyK0jvU-CzrFgG15SRX3ioi11BO7_rz7oinab200PRj7FUjsTcJiRdRU_N1Yy4ujrpi8ypsIOoZ2ulUxmbvVPckpxYWFCdwAuV5MNFFr_PoAGsLSYo3EzQeNnhLnS1egBZVjiEO1tQOOn6O8M18pSKugxS3gF5uuMmU0vUq1NX_w-qyc1YD9UcD59VjNgyEC7CWRowr9wSvZnjdZjW5oAU1ix9N1a1v1k-NsFnzezvW027VbkN5FqVambN65q91VOGcVyUJ76tFtqPzfFeEg-XwpmXN4IVCxMHYPfYYL1Y9hczeIZxZRjXYulgWwErZT9WNjjy2r32y8ypMSFtkLbH5A3N5Jz6VxCtCVzCDurn7uhPSVmhRE3CaDp-QEM9i6rYNiYI55t4F9kANAn-PmcFbwOATR0JRK1L4ipnVbkd9O8LM4mnhgGai7h_iTbAnYgdxnD4scE1V9LAc4BUbdGs-40OprjZr2f-IR-OVdwK5NLLSuqkPC7mJUUzcRPO6XDP_B3lGcrHtlz2i1GNEccolJuByBwieaKnUZwnsvcbDPSM-WR4GdN02Ti HTTP/1.1
Host: f5ac6e7aac.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=zulu-asp-1ewp8oem0q
Cookie: cx_ntsl_i=6b0f1569-34d3-47d6-92b3-7b38492c99ad; instal-cookie="2|1:0|10:1662460180|13:instal-cookie|124:eyIzMjQ0Njc1IjogIjdjMzE5ZDMwLTRjYjctNDkyOC1hMTYxLWRmNDk2YzUyNmJiZjphZWRhZmYyNzViZDY3NTkyMmUxNDI5MzU2MDk1ZTZhNWQ5YjQzZTAyIn0=|170292d39fa2b00dad94113f3bdc5dda52c23bb48245899a82f2afffea8fbec2"
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:29:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: TornadoServer/4.3
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 48fdb672dcaa975dc49281d2c7cf1f5e
0ecd66dedfde3c9e25a48d3dba09f3e998e93ca9
74f03c2ad43d00612f744ac213aa51377d30d33846fb3c5c98ae78c9abf59d6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 10:29:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 912f9a32166cf6d4e458969545df501d
6cecdd7246361b80f2464910ba31ee1f4381ee7d
58d632863a6aab3b308ad380f47595e74120f4495f48e83e89647e4f42533fa3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:29:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 06:25:21 GMT
Expires: Mon, 12 Sep 2022 06:25:20 GMT
Etag: "6cecdd7246361b80f2464910ba31ee1f4381ee7d"
Cache-Control: max-age=503138,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746686635e741bfa-OSL
my.rtmark.net/gid.js
200 OK 65 B IP
File type JSON data\012- , ASCII text
Hash a65f60133964fb5da24b482ec444b274
d3ad78221d401e54d5251e44f01558af75fa8c96
24cda230c3f3a395ab53d24c58a7939dd62a2067716d1f869877695b389561b9
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:41 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://championtest.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7f959702b6774291a15678d49bd34547; expires=Wed, 06 Sep 2023 10:29:41 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash eeb08c95de5d16882c2ee624f183de0a
1e8eb071d4e69704fffc20fd09761c87fd193510
e04e4eb7136da9d59d9234f66b4d2aecc31119f1d8b7eb5e20de9897a245b4e8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E04E4EB7136DA9D59D9234F66B4D2AECC31119F1D8B7EB5E20DE9897A245B4E8"
Last-Modified: Mon, 05 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7730
Expires: Tue, 06 Sep 2022 12:38:31 GMT
Date: Tue, 06 Sep 2022 10:29:41 GMT
Connection: keep-alive
itcleffaom.com/track?offer_id=2058&z=4654991&request_var=6100_2456&variable2=7c319d30-4cb7-4928-a161-df496c526bbf:aedaff275bd675922e1429356095e6a5d9b43e02
200 OK 172 B URL HTTP/2 itcleffaom.com/track?offer_id=2058&z=4654991&request_var=6100_2456&variable2=7c319d30-4cb7-4928-a161-df496c526bbf:aedaff275bd675922e1429356095e6a5d9b43e02
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 7f128061c460465021e432b8c7f455a4
2c149e29655a371a47876a6eea18dc3730415cf2
f547f700ae8266331282aff4ee2de70bf146eaaff126a6737b762c0349664178
Analyzer Verdict Alert quad9 Sinkholed
GET /track?offer_id=2058&z=4654991&request_var=6100_2456&variable2=7c319d30-4cb7-4928-a161-df496c526bbf:aedaff275bd675922e1429356095e6a5d9b43e02 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:41 GMT
content-type: application/json
content-length: 172
x-trace-id: 70569d0414c5f43689406c03019de5da
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c4b532d52cf5ab4817f239ff16565024
fc4167f3d3772f5cfc8ecffa90a31b96df89bcac
26b212b5a59e9bbc1476e953c81482cf9cebd1022a2659a5baae9c10cc794ba2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26B212B5A59E9BBC1476E953C81482CF9CEBD1022A2659A5BAAE9C10CC794BA2"
Last-Modified: Sun, 04 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18693
Expires: Tue, 06 Sep 2022 15:41:14 GMT
Date: Tue, 06 Sep 2022 10:29:41 GMT
Connection: keep-alive
ugyplysh.com/zone?&pub=0&zone_id=4843162&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_2456&var_3=null&dsig=&action=prerequest
200 OK 0 B URL HTTP/2 ugyplysh.com/zone?&pub=0&zone_id=4843162&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_2456&var_3=null&dsig=&action=prerequest
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4843162&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_2456&var_3=null&dsig=&action=prerequest HTTP/1.1
Host: ugyplysh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:41 GMT
content-length: 0
x-trace-id: c9de357a6a6d09d170494d5c2c7aac0f
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=&zoneId=4843162&checkDuplicate=true&ymid=6100_2456&var=4654991
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=&zoneId=4843162&checkDuplicate=true&ymid=6100_2456&var=4654991
IP
File type JSON data\012- , ASCII text
Hash a65f60133964fb5da24b482ec444b274
d3ad78221d401e54d5251e44f01558af75fa8c96
24cda230c3f3a395ab53d24c58a7939dd62a2067716d1f869877695b389561b9
GET /gid.js?pub=0&userId=&zoneId=4843162&checkDuplicate=true&ymid=6100_2456&var=4654991 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Cookie: ID=7f959702b6774291a15678d49bd34547
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:41 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://championtest.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=7f959702b6774291a15678d49bd34547; expires=Wed, 06 Sep 2023 10:29:41 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
itcleffaom.com/rotate?zz=4326388&var=4654991&ymid=6100_2456&uid=7f959702b6774291a15678d49bd34547
200 OK 493 B URL HTTP/2 itcleffaom.com/rotate?zz=4326388&var=4654991&ymid=6100_2456&uid=7f959702b6774291a15678d49bd34547
IP
File type JSON data\012- , ASCII text, with very long lines (493), with no line terminators
Hash 1b9dfec2bcff01c0bace2d58e3cf1a52
52b9b40690bad2193cd282c36a203549749203fe
79be2ce5d10a570376567c08f947e47aa3c5669afdbbb3c59fac52f1a4ca94e1
Analyzer Verdict Alert quad9 Sinkholed
GET /rotate?zz=4326388&var=4654991&ymid=6100_2456&uid=7f959702b6774291a15678d49bd34547 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:41 GMT
content-type: application/javascript
content-length: 493
x-trace-id: cc9f7bc29f0565dc874e30a5ef159f55
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://championtest.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=7f959702b6774291a15678d49bd34547; expires=Wed, 06 Sep 2023 10:29:41 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 5643aec3330087818dc36a74cd107a56
475b129f0f7c9c3d64f142eea5aff485899038bf
ce81d0f927c502b19afaf9734e7704fad986186ddb6520a32bfb9a7703bd4ec1
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:29:41 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 10 Sep 2022 08:54:10 GMT
ETag: "475b129f0f7c9c3d64f142eea5aff485899038bf"
Last-Modified: Tue, 06 Sep 2022 08:54:11 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2215
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 746686668b03b51b-OSL
ugyplysh.com/zone?&pub=0&zone_id=4843162&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_2456&var_3=null&dsig=&action=settings
200 OK 735 B URL HTTP/2 ugyplysh.com/zone?&pub=0&zone_id=4843162&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_2456&var_3=null&dsig=&action=settings
IP
File type JSON data\012- , ASCII text, with very long lines (734)
Hash c737b708c1d1bdf4b92993432df287a7
b7ba92e67567e40de9cae8906e61137c202fe67e
225b9c9c5ed2f0105ea346cb300cbb8c5021a9a99d70cede660b9136c1cbe98d
GET /zone?&pub=0&zone_id=4843162&is_mobile=false&domain=championtest.top&var=4654991&ymid=6100_2456&var_3=null&dsig=&action=settings HTTP/1.1
Host: ugyplysh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:41 GMT
content-type: application/json; charset=utf-8
content-length: 735
x-trace-id: ff28020a4caff5d26b1d525fcf22a764
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 025f42e33629904b4433e298f7e3c269
1da40037a3cf33d2440a535424a6b8af5e86301f
bbead5dab569d34c18647c91204d142e858cf3997bb567009e10317f61192ad0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BBEAD5DAB569D34C18647C91204D142E858CF3997BB567009E10317F61192AD0"
Last-Modified: Sat, 03 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6643
Expires: Tue, 06 Sep 2022 12:20:24 GMT
Date: Tue, 06 Sep 2022 10:29:41 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5431c571e352d86a0440c1f1b07afbe3
4c5bc75ca69d522ae90263adf3d9b81aea605e72
1031d2d3188c564b436f3ac0a85e5a13b7e3c7a91507638c3f6d4a3a05a6a19f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Sep 2022 10:29:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 01:33:17 GMT
Expires: Tue, 13 Sep 2022 01:33:16 GMT
Etag: "4c5bc75ca69d522ae90263adf3d9b81aea605e72"
Cache-Control: max-age=572014,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7466866689671bfa-OSL
mc.yandex.ru/metrika/tag.js
200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (681)
Hash 034d4604beaddff5783b9878fadfaee6
64d5e1e0dbbbd62d6a64349dd964763b7ab4cbea
f8a957ee3468693f465da61d899438a2b674369b80c9d5c9ffff1111a7091290
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 71985
date: Tue, 06 Sep 2022 10:29:41 GMT
access-control-allow-origin: *
etag: "6315c3a4-11931"
expires: Tue, 06 Sep 2022 11:29:41 GMT
last-modified: Mon, 05 Sep 2022 12:38:44 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
200 OK 11 kB URL HTTP/2 pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
IP
File type PNG image data, 140 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash 0fb5a0eccfe6fe27747ca4a84abb1c9b
f83ae7f2c746872a9ba9da626928946e3b6de28d
70eba3a4b499c4ffe4a8e62461c1b8581a9dd904f14b5742b48632dbebdd30a6
GET /contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png HTTP/1.1
Host: pulsersurvey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 10:29:41 GMT
content-type: image/png
content-length: 10580
last-modified: Thu, 21 Jan 2021 09:10:34 GMT
etag: "6009450a-2954"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: *
etag: "6315c3a4-2b"
expires: Tue, 06 Sep 2022 11:29:42 GMT
accept-ranges: bytes
last-modified: Mon, 05 Sep 2022 12:38:44 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A294%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A106474042%3Arqn%3A1%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662460175419%3Ads%3A0%2C0%2C71%2C1%2C%2C0%2C%2C163%2C3%2C%2C%2C%2C375%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A294%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A106474042%3Arqn%3A1%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662460175419%3Ads%3A0%2C0%2C71%2C1%2C%2C0%2C%2C163%2C3%2C%2C%2C%2C375%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash d54f2d1a4c296804f7d365a019f79b81
484faacc052ce9417fb5f6c41921b89dbaec8e97
68abb7b3e9080f4f88c67d45300a74471a8f1b6807b8cd16cc9c662cdb0e2041
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A294%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A106474042%3Arqn%3A1%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662460175419%3Ads%3A0%2C0%2C71%2C1%2C%2C0%2C%2C163%2C3%2C%2C%2C%2C375%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Tue, 06 Sep 2022 10:29:42 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A1041103699%3Arqn%3A2%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1118%2C1118%2C0%2C%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A1041103699%3Arqn%3A2%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1118%2C1118%2C0%2C%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A1041103699%3Arqn%3A2%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1118%2C1118%2C0%2C%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A167774370%3Arqn%3A3%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
200 OK 4.4 kB URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A167774370%3Arqn%3A3%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
IP
Hash 560825ecdb53a0565a1652f566fcd276
bdc7cabb338b30b0f0f7b8bdca57bc8658cb988e
07e81568831f4b5f8f4281b8c9a830979bb40cfc270cc20d5571cb622278f4eb
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A167774370%3Arqn%3A3%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 77
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A564360101%3Arqn%3A4%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A564360101%3Arqn%3A4%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A564360101%3Arqn%3A4%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A1001182419%3Arqn%3A6%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A1001182419%3Arqn%3A6%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A1001182419%3Arqn%3A6%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A948498430%3Arqn%3A5%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A948498430%3Arqn%3A5%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A948498430%3Arqn%3A5%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A742324768%3Arqn%3A7%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A742324768%3Arqn%3A7%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A742324768%3Arqn%3A7%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A239068984%3Arqn%3A10%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A239068984%3Arqn%3A10%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A239068984%3Arqn%3A10%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A732163847%3Arqn%3A8%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A732163847%3Arqn%3A8%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A732163847%3Arqn%3A8%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 190
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A124825781%3Arqn%3A9%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A124825781%3Arqn%3A9%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662460182_6de07b1d6722da25fe1978102153ce8be5e3c690c7da09f9a509f832f0f6b9ff&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A124825781%3Arqn%3A9%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662460175419%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=zulu-asp-1ewp8oem0q
200 OK 0 B URL HTTP/2 f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=zulu-asp-1ewp8oem0q
IP
GET /trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=zulu-asp-1ewp8oem0q HTTP/1.1
Host: f5ac6e7aac.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://artax-evn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:29:40 GMT
content-type: text/html; charset=UTF-8
clickid: 7c319d30-4cb7-4928-a161-df496c526bbf:aedaff275bd675922e1429356095e6a5d9b43e02
set-cookie: cx_ntsl_i=6b0f1569-34d3-47d6-92b3-7b38492c99ad; expires=Wed, 02 Sep 2037 10:29:40 GMT; Path=/
instal-cookie="2|1:0|10:1662460180|13:instal-cookie|124:eyIzMjQ0Njc1IjogIjdjMzE5ZDMwLTRjYjctNDkyOC1hMTYxLWRmNDk2YzUyNmJiZjphZWRhZmYyNzViZDY3NTkyMmUxNDI5MzU2MDk1ZTZhNWQ5YjQzZTAyIn0=|170292d39fa2b00dad94113f3bdc5dda52c23bb48245899a82f2afffea8fbec2"; expires=Thu, 06 Oct 2022 10:29:40 GMT; Path=/; SameSite=None; secure
server: TornadoServer/4.3
etag: W/"77960a05738c68a3880f000907899d6196bf6a84"
x-frame-options: SAMEORIGIN
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
championtest.top/betting-survey.html?var=6100_2456&ymid=7c319d30-4cb7-4928-a161-df496c526bbf:aedaff275bd675922e1429356095e6a5d9b43e02&offer_id=2058&z=4654991
200 OK 0 B URL HTTP/2 championtest.top/betting-survey.html?var=6100_2456&ymid=7c319d30-4cb7-4928-a161-df496c526bbf:aedaff275bd675922e1429356095e6a5d9b43e02&offer_id=2058&z=4654991
IP
GET /betting-survey.html?var=6100_2456&ymid=7c319d30-4cb7-4928-a161-df496c526bbf:aedaff275bd675922e1429356095e6a5d9b43e02&offer_id=2058&z=4654991 HTTP/1.1
Host: championtest.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:29:40 GMT
content-type: text/html
last-modified: Mon, 05 Sep 2022 10:42:48 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tw1kjdOmqtj89Domq%2B1CkW1RhqP48QKuX6zDwlGastzJuMqDJktXq7j6PPsmtjP1NsLSgQgOz8dTr5dabvTE43IAJq4m5nBzF%2B02i%2BW6uuIprcSVt6RrNvyq5EYBEgBc6dk8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74668660bb84b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
200 OK 0 B URL HTTP/2 cdntechone.com/stattag.js
IP
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 10:29:41 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:17:49 GMT
etag: W/"62ebe31d-a8fa"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6256
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4qxfqNO1cyKrh5Mxdgd0qrJ%2FNbU5HTBJe1hmHr2H8NNoHj1qkeXPOSgp3fjYOMrSroWF9Bhk7P7r1yBg%2Fd%2BYDvhpnhrlfonBbVkdPoqZ1jTpYUiKDR14Zaz1WYjkR5bzUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 746686648faeb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A294%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A106474042%3Arqn%3A1%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662460175419%3Ads%3A0%2C0%2C71%2C1%2C%2C0%2C%2C163%2C3%2C%2C%2C%2C375%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A294%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A106474042%3Arqn%3A1%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662460175419%3Ads%3A0%2C0%2C71%2C1%2C%2C0%2C%2C163%2C3%2C%2C%2C%2C375%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A294%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A106474042%3Arqn%3A1%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662460175419%3Ads%3A0%2C0%2C71%2C1%2C%2C0%2C%2C163%2C3%2C%2C%2C%2C375%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_2456%26ymid%3D7c319d30-4cb7-4928-a161-df496c526bbf%253Aaedaff275bd675922e1429356095e6a5d9b43e02%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_2456%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A294%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A951021656256%3Ahid%3A437393759%3Az%3A0%3Ai%3A20220906102936%3Aet%3A1662460177%3Ac%3A1%3Arn%3A106474042%3Arqn%3A1%3Au%3A16624601771014884201%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662460175419%3Ads%3A0%2C0%2C71%2C1%2C%2C0%2C%2C163%2C3%2C%2C%2C%2C375%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662460177%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 06 Sep 2022 10:29:42 GMT
access-control-allow-origin: https://championtest.top
set-cookie: yandexuid=9581097381662460182; Expires=Wed, 06-Sep-2023 10:29:42 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9581097381662460182; Expires=Wed, 06-Sep-2023 10:29:42 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2127050041662460182; Path=/; SameSite=None; Secure
i=x1lh2oamUdmG4YgEBPlXBgGXnb4R+/ygGBdmbXZI7jPysNjep6r6LaAc1tn3kepAsq9Q0PK44fHsUKs4cDXc+vqS9lk=; Expires=Fri, 03-Sep-2032 10:29:35 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1693996182.yrts.1662460182#1693996182.yrtsi.1662460182; Expires=Wed, 06-Sep-2023 10:29:42 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 06-Sep-2022 10:29:42 GMT
last-modified: Tue, 06-Sep-2022 10:29:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
64.190.63.136
143.204.55.49
139.45.197.237
104.18.20.226
93.158.134.119
23.36.76.226
5.79.68.236