evercontest.com/
302 Moved Temporarily 142 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: evercontest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Thu, 02 Feb 2023 04:01:35 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
Location: https://domains.squadhelp.com/lpd/name/evercontest.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7e05c8461bd2dc5a149f71e2c465ea29
705983959c887e243cb55a8a1796757b579ee977
4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5742
Expires: Thu, 02 Feb 2023 05:37:18 GMT
Date: Thu, 02 Feb 2023 04:01:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6259
Expires: Thu, 02 Feb 2023 05:45:55 GMT
Date: Thu, 02 Feb 2023 04:01:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 03:43:28 GMT
content-type: application/json
age: 1088
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17451
Expires: Thu, 02 Feb 2023 08:52:27 GMT
Date: Thu, 02 Feb 2023 04:01:36 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /ZAnu/n5s1D3LcbJFSL4cNAu47Kj6U7t21K4vYvp4EpkyTzjphQVWHsBzyRMdr9dWdTCuQCSWn8=
x-amz-request-id: S35V0J3VNDTEXDFH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 03:51:49 GMT
age: 587
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 04:01:36 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 5d630d49d184c4cd3c05dacca8e4c337
b8db9da2f7410ea182236f8125a7e442eb43a4ee
0b1acdbc2c6a99de330547cb4d9fea25389412e503899a800a49172555c10cf3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "0B1ACDBC2C6A99DE330547CB4D9FEA25389412E503899A800A49172555C10CF3"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2544
Expires: Thu, 02 Feb 2023 04:44:00 GMT
Date: Thu, 02 Feb 2023 04:01:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 03:41:43 GMT
age: 1193
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3973
Expires: Thu, 02 Feb 2023 05:07:49 GMT
Date: Thu, 02 Feb 2023 04:01:36 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: upcxpIao1sqcSj+OytjoLQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: r5XGqXpv0aJHQl+Wx+013bBFhYo=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16486
Expires: Thu, 02 Feb 2023 08:36:24 GMT
Date: Thu, 02 Feb 2023 04:01:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16486
Expires: Thu, 02 Feb 2023 08:36:24 GMT
Date: Thu, 02 Feb 2023 04:01:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16486
Expires: Thu, 02 Feb 2023 08:36:24 GMT
Date: Thu, 02 Feb 2023 04:01:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16486
Expires: Thu, 02 Feb 2023 08:36:24 GMT
Date: Thu, 02 Feb 2023 04:01:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16486
Expires: Thu, 02 Feb 2023 08:36:24 GMT
Date: Thu, 02 Feb 2023 04:01:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b1e36ab-6847-48e2-8227-fc589124cb93.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b1e36ab-6847-48e2-8227-fc589124cb93.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f4dbd75e0cdc28265ccbe825c5c5b6c
78187b014be0ee8bf7543fb873915db8a9c8dbc4
bf49642b990d73f58ca5f9ee979271ba2ab80bae94c8f333fa5737b16016d1c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5b1e36ab-6847-48e2-8227-fc589124cb93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7036
x-amzn-requestid: 9d54dd82-add1-4d7d-97b7-53c92eecb724
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJxCHAqoAMF3qA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcd3-109d34d11a9834886e3080ee;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:01:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: U45NW79hI4Vtd7fV7kXnxqlxRQzC-u9PVlNK4D1pBkAa8CBYuUf9ig==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:06:05 GMT
age: 75333
etag: "78187b014be0ee8bf7543fb873915db8a9c8dbc4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 02:29:58 GMT
age: 5500
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79ec7db4-9aef-4e9e-a8d9-431c9085df2a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79ec7db4-9aef-4e9e-a8d9-431c9085df2a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b0ca0ccee69fbee57aac373f94120bb4
5d6309502ffd0c33f6199d46f0d14d0a22e3c752
bed9d4689ff57fa636ee08dab3eef3cdf6c4e0a7103e5185151afe8ddfb755f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79ec7db4-9aef-4e9e-a8d9-431c9085df2a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11552
x-amzn-requestid: 611f63cb-f058-493b-ac86-7e268b866fd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTvG9VIAMFgPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc17-78de7563537b111924100346;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lHLm3IkJRn59US_8SXKXQnNDUiCLIWnQ7QN-DWB3jkot9Ub3b6FUgA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:01:11 GMT
age: 21627
etag: "5d6309502ffd0c33f6199d46f0d14d0a22e3c752"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7c823f1d6bf1c50d58eb263b85e6e37c
a7b74d11494fb3254df907e5cc1eead070d84617
b2706961eb756383e0988dfdb501dc424aea59697aedd1e4a6c294c314a31935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe18f9e12-0986-423b-911d-6271bb996db4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5356
x-amzn-requestid: fef22c83-35a4-4990-9008-af5853f838d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5BEB6oAMFczg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6c-68d3017555c069bc3107d150;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XyDZc0F-b0rxwoS5wvSXBuBfYE7JljMmuXseBjLOBk4HvxU5gE7Oqg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:18:55 GMT
age: 20563
etag: "a7b74d11494fb3254df907e5cc1eead070d84617"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F868f7eb5-a922-48b3-b59c-21db2389409e.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F868f7eb5-a922-48b3-b59c-21db2389409e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6790e3bf4d10b1ffba32a22dc588c640
cdae35517dfea800134393a1095f44462bc428a5
4f4132588ee7337fff24da64b89e43b277c4ef0a2646acfba37aea08fc0f4256
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F868f7eb5-a922-48b3-b59c-21db2389409e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9416
x-amzn-requestid: acc48967-4cc1-4bfd-bc33-7bcefd8e6547
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKVGjqIAMFa2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-1d1cd4de0a30760e792d32e5;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tO6GOuwj9So6Itm9ug-EQgF5iJ3NPidhS8OY4LpBvq0XftWTqGcOHA==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:57:16 GMT
age: 21862
etag: "cdae35517dfea800134393a1095f44462bc428a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0224e848c34cb32cf932ed99dfd8468a
31c1abac8979bca5a998a6649ca3e6f59c0fb2f5
f93d5a69758e57d4d2b0d307ce98ad5ea8d86b825108873e8ea5bc36567dc5c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F04301881-7728-4218-a61a-642cd5ffae53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5061
x-amzn-requestid: a266acae-8f1e-4cd7-b93b-e40aa5393521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdUpGcmoAMF16Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc1d-1fbae7785fccc58f71c1b3e9;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: PevXZz9rkBo3Cy6EooCVOpSoHyeKHMoYFjKRrvDld34WFWXzOmpANQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:11:31 GMT
age: 21007
etag: "31c1abac8979bca5a998a6649ca3e6f59c0fb2f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/home-icon1.png
200 OK 3.6 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/home-icon1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 255e49a515ce5a8fe5cef7a24045ca30
65072fc8cafd2abbd553c3ad5df5ca93b195d41c
c103affc8be9313fd99aff050e5db5c6d1bc94856e6b52b770ab5d4f5462d7cb
GET /html/html/static_images/home-icon1.png HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 3552
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=315360000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=5219
content-disposition: inline; filename="home-icon1.webp"
etag: "63b2d7ed-1463"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 02 Jan 2023 13:11:09 GMT
vary: Accept
cf-cache-status: HIT
age: 616396
accept-ranges: bytes
server: cloudflare
cf-ray: 793006e74b16b529-OSL
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/home-icon2.png
200 OK 2.2 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/home-icon2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b31c6de35a7a24bd049cee7a1558c157
f53487cd7110bd9addbc08bd91707e34c98ee4e1
8d09c2a5731ced1cf0fd4e7f49645ba163bc2e32d35dd88b07a8fbee29639574
GET /html/html/static_images/home-icon2.png HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 2166
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=315360000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3373
content-disposition: inline; filename="home-icon2.webp"
etag: "63b2d801-d2d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 02 Jan 2023 13:11:29 GMT
vary: Accept
cf-cache-status: HIT
age: 618173
accept-ranges: bytes
server: cloudflare
cf-ray: 793006e74b18b529-OSL
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/home-icon3.png
200 OK 2.7 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/home-icon3.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2669c0dc36a56e7ae681b3c063fe0dcc
efce14449860b648ef0788a6ebdca0151318968c
5315f1506f9c7ff4bcba0a685a489554ef67d8c6c189f24df2193778f34d3caa
GET /html/html/static_images/home-icon3.png HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 2736
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=315360000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4142
content-disposition: inline; filename="home-icon3.webp"
etag: "63b2d7ee-102e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Mon, 02 Jan 2023 13:11:10 GMT
vary: Accept
cf-cache-status: HIT
age: 537447
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=Bs6hFUMh5IAL5CXghqUZQUIOQJlAMtIfahevVrnWwAM-1675310501-0-Aa0ZIR-rig_4cb5391WhKbWZDypV_PORsgScT_elv1h9IwHzWYRU6C_27dUa190uIWQGhJrkC8vhRSFquRnOAowiTRdWGNflgPqL80TlxF5T"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Bs6hFUMh5IAL5CXghqUZQUIOQJlAMtIfahevVrnWwAM-1675310501-0-Aa0ZIR-rig_4cb5391WhKbWZDypV_PORsgScT_elv1h9IwHzWYRU6C_27dUa190uIWQGhJrkC8vhRSFquRnOAowiTRdWGNflgPqL80TlxF5T; report-to cf-csp-endpoint
server: cloudflare
cf-ray: 793006e74b1db529-OSL
X-Firefox-Spdy: h2
www.squadhelp.com/resources/views/frontend/sellers/theme5/imgs/video.png
200 OK 103 kB URL HTTP/2 www.squadhelp.com/resources/views/frontend/sellers/theme5/imgs/video.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 103 kB (102874 bytes)
Hash 5d2393021d371aed3cca4c0db1414cf0
6a3b169c6f5395bfc8f969c634e11daffc558d6c
82b305c25c6a7093ff4f0032658ac2a778de3465a4556656b861377395e043ab
GET /resources/views/frontend/sellers/theme5/imgs/video.png HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 102874
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=315360000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=166612
content-disposition: inline; filename="video.webp"
etag: "630e09f2-28ad4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Tue, 30 Aug 2022 13:00:34 GMT
vary: Accept
cf-cache-status: HIT
age: 621228
accept-ranges: bytes
server: cloudflare
cf-ray: 793006e75b1eb529-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd3f1e20e6b91e1cb1540c72b41ae4e2
807f5023e1587fc697fb8e02232e2c1af375f716
077f093ca425d6d7b7892cb6db250130d1ae6ab8349af5be99aaede84ec39f9a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "077F093CA425D6D7B7892CB6DB250130D1AE6AB8349AF5BE99AAEDE84EC39F9A"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21475
Expires: Thu, 02 Feb 2023 09:59:36 GMT
Date: Thu, 02 Feb 2023 04:01:41 GMT
Connection: keep-alive
img.squadhelp.com/story_images/visual_images/1629881146-Zyg_3.png?class=listing
200 OK 5.1 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1629881146-Zyg_3.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 88e75849ad42a93d33671ae64c9e010b
6d61d53218b52d2d33e0596f301c3f5c0724c312
ac3dea0cc167c2b7e654dfdc604d70f62c405512071bbc0a740b11645ac43c90
GET /story_images/visual_images/1629881146-Zyg_3.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5090
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Wed, 01 Feb 2023 23:12:34 GMT
x-bo-server: ASB-205
x-downloadsize: 3990
x-bo-origindownloadtime: 33
x-bo-processingtime: 11
x-bo-compressionratio: 0%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/01/2023 23:12:34
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: e22ee608c1b56f5e6b247173d47638c4
cdn-cache: HIT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd3f1e20e6b91e1cb1540c72b41ae4e2
807f5023e1587fc697fb8e02232e2c1af375f716
077f093ca425d6d7b7892cb6db250130d1ae6ab8349af5be99aaede84ec39f9a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "077F093CA425D6D7B7892CB6DB250130D1AE6AB8349AF5BE99AAEDE84EC39F9A"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21475
Expires: Thu, 02 Feb 2023 09:59:36 GMT
Date: Thu, 02 Feb 2023 04:01:41 GMT
Connection: keep-alive
www.squadhelp.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL HTTP/2 www.squadhelp.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Hash e50276dad16a911defe31764bf20e003
43d1f70e4681ed0ef06e17f9267345901c62cf44
97424081b4f2d514668adb5a10b195afa902e77db041537b6c4c06058b569dd1
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 14:59:41 GMT
etag: W/"63d7db5d-4d7"
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e79b35b529-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 04 Feb 2023 04:01:41 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd3f1e20e6b91e1cb1540c72b41ae4e2
807f5023e1587fc697fb8e02232e2c1af375f716
077f093ca425d6d7b7892cb6db250130d1ae6ab8349af5be99aaede84ec39f9a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "077F093CA425D6D7B7892CB6DB250130D1AE6AB8349AF5BE99AAEDE84EC39F9A"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21475
Expires: Thu, 02 Feb 2023 09:59:36 GMT
Date: Thu, 02 Feb 2023 04:01:41 GMT
Connection: keep-alive
www.squadhelp.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 4.4 kB URL HTTP/2 www.squadhelp.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
Hash 806eede410e387ca02261881e037bd49
f304f58f200c6e077c08ef60e39ff41f98bb4751
f9f2effbf89c37ad72c4d32beba95f583d0996c15f5de2b86b41e463abdb6c94
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: application/javascript
last-modified: Mon, 30 Jan 2023 14:59:41 GMT
etag: W/"63d7db5d-302c"
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e7ab3bb529-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 04 Feb 2023 04:01:41 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d6b8bf397c49144d1233e64ffd3f9f2b
7e0fd4919c800340d9de00e3028bc807cedf7437
ef368da8cd2923f03c20954e12fed6c7270b5d25d9a7ce50fead1665c7b67edb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 572
Cache-Control: max-age=137673
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:41 GMT
Etag: "63daaa32-118"
Expires: Fri, 03 Feb 2023 18:16:14 GMT
Last-Modified: Wed, 01 Feb 2023 18:06:42 GMT
Server: ECS (amb/6B9E)
X-Cache: HIT
Content-Length: 280
img.squadhelp.com/story_images/visual_images/1640627898-Sleepnetics.png?class=listing
200 OK 6.2 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1640627898-Sleepnetics.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dbdcd492819da7ae2dc68a588dd726e2
1a02fea74a980683df948510c23e3d2dfd4c6188
c210b0684a5bf1a5ab9da1dc22be1c7374cf0c320dff61eef03124daa7ad2bf7
GET /story_images/visual_images/1640627898-Sleepnetics.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6232
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-205
x-downloadsize: 4000
x-bo-origindownloadtime: 19
x-bo-processingtime: 9
x-bo-compressionratio: 0%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6cfdc775f99f5d01232b74bcbb7c8d6c
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/AdaptWise.png?class=listing
200 OK 7.1 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/AdaptWise.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ed1d4663cf1dc1a2793a90f8d3ca012b
c4427ecc00dc6980d4825a48cb9a2588b6f98aa1
216e9e40d391acbdde17cf4858d9bea850fbcdbc4cbdc7666db75edccff927a9
GET /story_images/visual_images/AdaptWise.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 7070
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-193
x-downloadsize: 4714
x-bo-origindownloadtime: 22
x-bo-processingtime: 5
x-bo-compressionratio: 0%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: bbd2ba140b8bb7b495a89cb860cc1d91
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1605383842-ScoreLion-1.jpg?class=listing
200 OK 6.3 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1605383842-ScoreLion-1.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d2f5a7143049d244df1da5f43050301b
68f218c8c2c6b4195fc3133de9b31da83125ff74
61c35383235cb1c3c417002879b3697d354abc867c2224c68db979143be181a6
GET /story_images/visual_images/1605383842-ScoreLion-1.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6266
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-192
x-downloadsize: 15330
x-bo-origindownloadtime: 11
x-bo-processingtime: 6
x-bo-compressionratio: 59.13%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b4cf4ca08ab4f76aa860577f8df64a54
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1670948671-Xersus.jpg?class=listing
200 OK 5.0 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1670948671-Xersus.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 92ebe2a70ececd80a2d460b4dfdff776
52c09899eefcf62527d94d50891f343c8c2c8019
237b511dc5d6401979b3afac2cf0d40ffb6ef797079ee783e3617855340a77f4
GET /story_images/visual_images/1670948671-Xersus.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 4956
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-198
x-downloadsize: 12010
x-bo-origindownloadtime: 22
x-bo-processingtime: 9
x-bo-compressionratio: 58.73%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: c30f358f32ccb18d9bb4e6366a01f627
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1672880700-Duelis-01.jpg?class=listing
200 OK 8.5 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1672880700-Duelis-01.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2961fb9118a8a9dd08610aaea0ef664a
4a58a05838662b1b70c6d567efab389b658c5d27
bde965d6cb685b2120afaf4fdd236cb345191cf3211094a73da8976c1e3858a4
GET /story_images/visual_images/1672880700-Duelis-01.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8548
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-197
x-downloadsize: 41260
x-bo-origindownloadtime: 13
x-bo-processingtime: 12
x-bo-compressionratio: 79.28%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 91a103220633fd6010f5365f869df7b3
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1652339157-Votyr.jpg?class=listing
200 OK 5.1 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1652339157-Votyr.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 754024bb5fcb8d77d602def80a51568b
c2a37310d2a7798194fbf2465662bd9739165ac6
2aa7be517703137da3d6dd9671e084d4a0397cd0f0f93919be4b8aaa6d073913
GET /story_images/visual_images/1652339157-Votyr.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5084
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-211
x-downloadsize: 13158
x-bo-origindownloadtime: 27
x-bo-processingtime: 7
x-bo-compressionratio: 61.36%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 7cc27877b160666133b22428d5451e70
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/RivalKey%20image1.jpg?class=listing
200 OK 8.7 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/RivalKey%20image1.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 185cd5c89087c9d00d33728227b575d6
3e04d3b81fa5368c9335bb0ab8aa64bc7ea8c542
1e3c6696382391e292992fb394ab31a7adc22ab38e5fadcda4999e02ae18742f
GET /story_images/visual_images/RivalKey%20image1.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8708
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-210
x-downloadsize: 20888
x-bo-origindownloadtime: 27
x-bo-processingtime: 7
x-bo-compressionratio: 58.31%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 452ca32cf644ce46ef4140a937fb964b
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1664173317-Inaxa.png?class=listing
200 OK 4.7 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1664173317-Inaxa.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9c7d4a07f4c9e995822115b0875e99d8
54eef07aea1fde785bf581e9d9aa2d4cd0ebbef6
5d820028743c4cfa4c6d097223eb949c123ff053f1754ff53522936129529fcc
GET /story_images/visual_images/1664173317-Inaxa.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 4732
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-195
x-downloadsize: 6622
x-bo-origindownloadtime: 36
x-bo-processingtime: 7
x-bo-compressionratio: 28.54%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: d7c0bd6212d40e35877f00faef764ac1
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1613302121-quaerterfinal.png?class=listing
200 OK 6.0 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1613302121-quaerterfinal.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image\012- data
Hash f7b00120c869824600a3237279ed51a9
797cc3a3bbba3579b700e4fb402c38adf5929a33
f35ab375450c9a97e583ed4b9a4b27c9c7c90e833632e2edd43a8bfc8ba2a3e6
GET /story_images/visual_images/1613302121-quaerterfinal.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5956
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-211
x-downloadsize: 23093
x-bo-origindownloadtime: 51
x-bo-processingtime: 12
x-bo-compressionratio: 74.21%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: ff3b9887b515631c5633279e19c8e45d
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1619047515-GamingContest.jpg?class=listing
200 OK 5.8 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1619047515-GamingContest.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3cd601be3fca0e36a3c60239945ab42c
fc2ac54d41d7ef47fa0499a316328e81fd191f1c
d1de777b2152e38416417cd54a02bb9a6842fdbe7c3d06ce0528e9344baa4c57
GET /story_images/visual_images/1619047515-GamingContest.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5830
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-204
x-downloadsize: 65465
x-bo-origindownloadtime: 69
x-bo-processingtime: 8
x-bo-compressionratio: 91.09%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 05b3cc92cc9384852be30cd270e8a552
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/12153986.jpg?class=listing
200 OK 6.7 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/12153986.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9b44e67ca0f4fe4b39475674bb8a21a6
304ae2101aefa92dfc664513eb4ae8d044770293
27e21ee89ebd35b5f381226c9e786d418dd29583e579d8c327fc3421ac02fbb5
GET /story_images/visual_images/12153986.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6742
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-199
x-downloadsize: 16112
x-bo-origindownloadtime: 58
x-bo-processingtime: 11
x-bo-compressionratio: 58.16%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: d770b5fe71d203ffc4c7b1eb2674e8bb
cdn-cache: MISS
X-Firefox-Spdy: h2
www.squadhelp.com/name/Evercontest
200 OK 39 kB URL HTTP/2 www.squadhelp.com/name/Evercontest
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (26954)
Hash 12dd17be55a649b72dacb64fb554aefb
2b0ac12807733d55dcf0f3d2c729678b88c16ef6
d34539db86248cba669757ebca5d6053b756dac8334240b6352cc00d5ede8c0a
GET /name/Evercontest HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:40 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
endpoint: sh-live-next
cf-cache-status: MISS
last-modified: Thu, 02 Feb 2023 04:01:40 GMT
server: cloudflare
cf-ray: 793006cd89d4b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1632711271-PrimeContesnew1t_SHDomain.jpg?class=listing
200 OK 8.1 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1632711271-PrimeContesnew1t_SHDomain.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash abaedaee34e8f8ae7f4a64a972e3c883
1566527325abd305ca6f7643c9aaac77389385f5
ccc9f1f9f295b7190cb1030ee2bd82fcecff9051de2e06e3e6f108213cda1945
GET /story_images/visual_images/1632711271-PrimeContesnew1t_SHDomain.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8134
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-197
x-downloadsize: 68710
x-bo-origindownloadtime: 106
x-bo-processingtime: 9
x-bo-compressionratio: 88.16%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 9a79d39d068760523dfaa9a3813d919d
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/COMPETIN.png?class=listing
200 OK 6.9 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/COMPETIN.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image\012- data
Hash cb4659007ca042f425744b6818c6e435
0df85bb938514b5609436d63afa47d3b49f4c669
cca8918f2850bee9dbf90b656f76fbbf06dcbe419b554aa6baf6b32421ead74f
GET /story_images/visual_images/COMPETIN.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6876
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-206
x-downloadsize: 11289
x-bo-origindownloadtime: 93
x-bo-processingtime: 8
x-bo-compressionratio: 39.09%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 5158e674468bd6a502053137953b58f0
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1659089864-Edgity.png?class=listing
200 OK 7.4 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1659089864-Edgity.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 72be10839120ca4e833345f49a467262
29e620d2b12df3657862361b1fcfca4fac04ca58
3799c16541f9354a1ab2d5674dfedcc33aa5e164cdef8a3817ddcdfc7e5cca38
GET /story_images/visual_images/1659089864-Edgity.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 7394
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-210
x-downloadsize: 15307
x-bo-origindownloadtime: 100
x-bo-processingtime: 7
x-bo-compressionratio: 51.7%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b19b892f10bb311a76f5926a97c28309
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1666354365-Competition_main.png?class=listing
200 OK 6.7 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1666354365-Competition_main.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b2872bd5c3e73738a1bea9be5d9c1171
373110fc9cbc0e2dd81c617aa062990ab843f408
56c2210919a6af413d48df4eedae650f80eeb9acf9b91803252961cd87dc2e5b
GET /story_images/visual_images/1666354365-Competition_main.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6684
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-210
x-downloadsize: 13286
x-bo-origindownloadtime: 100
x-bo-processingtime: 7
x-bo-compressionratio: 49.69%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b7f4d01ac87a1e1f45fd85c829836a31
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1591288987-1.png?class=listing
200 OK 7.3 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1591288987-1.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image\012- data
Hash c053aa6279377969af968fb3802478f4
0efa5ed04ced93475e750fc12e64823ea5726a4b
4cf348c68e0f3f1efc07411cf5ad1af2656d8da1d79f53bdf24937d9ffb191bd
GET /story_images/visual_images/1591288987-1.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 7332
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-210
x-downloadsize: 51140
x-bo-origindownloadtime: 81
x-bo-processingtime: 43
x-bo-compressionratio: 85.66%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 7c8b5680c7993669c78a81d50ba2b807
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/10840932.jpg?class=listing
200 OK 5.3 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/10840932.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0dbb4f561be0a6d10036fdcac551d6a5
fe7ff74caab061a9e7af33484fa38e5bf78d4a18
971701c6a5c41b737cff1bd57f4b7f9e9a1cef040b4935fcdf19a1d53555540a
GET /story_images/visual_images/10840932.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5272
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-198
x-downloadsize: 13267
x-bo-origindownloadtime: 107
x-bo-processingtime: 8
x-bo-compressionratio: 60.26%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 3af57c043f6c6fa0bd1e800cafed103b
cdn-cache: MISS
X-Firefox-Spdy: h2
www.squadhelp.com/modules/marketplace/assets/fonts/bubble/ProductSans-Regular.woff2
200 OK 13 kB URL HTTP/2 www.squadhelp.com/modules/marketplace/assets/fonts/bubble/ProductSans-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13440, version 1.0\012- data
Hash a2a67cca7e731eecd64d7689f6e58360
da6671f04a96bd5f39b3f3425d7ee101231f511f
abc04a100d9ffb66432cc6b85574582ac7d4da86d7eba38a699c605fe3086fbe
GET /modules/marketplace/assets/fonts/bubble/ProductSans-Regular.woff2 HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: application/octet-stream
content-length: 13440
last-modified: Mon, 12 Sep 2022 15:01:37 GMT
etag: "631f49d1-3480"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 1200296
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9fc3fb529-OSL
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1626337375-FightBreed.png?class=listing
200 OK 8.4 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1626337375-FightBreed.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c6bb4158079bea1c3ebd03017334fb1a
313e2b94e084259b4a66085e11831b58c4b5e73d
3a818b8ee40781c002ad725258211a1e6f49442c5035460b7519d29fb385a06b
GET /story_images/visual_images/1626337375-FightBreed.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8440
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-206
x-downloadsize: 15439
x-bo-origindownloadtime: 72
x-bo-processingtime: 9
x-bo-compressionratio: 45.33%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 5bb89e48e49060f3a9d2ecc694bde829
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1611094569-competive-100.jpg?class=listing
200 OK 7.0 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1611094569-competive-100.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b1cf00a5623970154677c01f84244a48
39d43a6c7c00f12c568e60b44c9a2cfb669e5014
3653979a4cdf4f64bd8a7542d43f995b6c0644decc494b96f101d11be95c35d8
GET /story_images/visual_images/1611094569-competive-100.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6960
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-196
x-downloadsize: 73079
x-bo-origindownloadtime: 102
x-bo-processingtime: 9
x-bo-compressionratio: 90.48%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 1451ead629fc9b2baf2e5b8329351df3
cdn-cache: MISS
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-arrow-down-blue.svg
200 OK 21 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-arrow-down-blue.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (679)
Hash 962e833516ab58136e76344615d446bd
496f32bd47cc290dd11ca9d4211c1d648538309a
ac837f7dd82d2153440262778217eb11e6adb03a02a9de0cb36181f7dda78308
GET /html/html/static_images/icon-arrow-down-blue.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:43 GMT
etag: W/"6345b437-326"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 5895567
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9cc1fb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1658180232-Welixo.png?class=listing
200 OK 4.5 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1658180232-Welixo.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ec9abf7bb63da1e920e315a4d4f951c4
53bf7f7882150b0e5e32f562240c45525a142a66
730f4fbffdc884b6ce659e94d040e5f5347a6c76b937ea40b472044317f81625
GET /story_images/visual_images/1658180232-Welixo.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 4544
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-197
x-downloadsize: 9693
x-bo-origindownloadtime: 96
x-bo-processingtime: 7
x-bo-compressionratio: 53.12%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b78db94176288cae8f3a0446f928f630
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/NimbleRival%20image1.jpg?class=listing
200 OK 8.2 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/NimbleRival%20image1.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash dfce781fc14641baa0b142aedfc8ee5f
56cd2a9603c7f70a66a22e888566575a3b443103
7f97551db0b7c2614cdff4fa61d2c85fa8c509edeb636e6be9ffaa2aba744f99
GET /story_images/visual_images/NimbleRival%20image1.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8218
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-196
x-downloadsize: 86392
x-bo-origindownloadtime: 115
x-bo-processingtime: 8
x-bo-compressionratio: 90.49%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b6c0f88291394e6faca4ab5b19e43a08
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1626770424-Dudly1_SHDomain.jpg?class=listing
200 OK 5.2 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1626770424-Dudly1_SHDomain.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 83e995c7499a330024d5363a2cc226dc
cda79e055ebb6a5c2e196942579cf6476d4ee881
a4d355a9a44c0fd030dd14113f15b28088402face074a38d45409ed1c521ad86
GET /story_images/visual_images/1626770424-Dudly1_SHDomain.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5216
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-199
x-downloadsize: 44914
x-bo-origindownloadtime: 101
x-bo-processingtime: 9
x-bo-compressionratio: 88.39%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 90696e082dcebf7218ee0d04650822fd
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1664235825-Serverr_750x450.jpg?class=listing
200 OK 5.2 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1664235825-Serverr_750x450.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2be0d34d8dc59389d2eec6f6ca873922
77f2eb7174b0dc62bb4469839df89a1785bc50c3
d075cd826951cd9e86eecf7a5fef38e01255fe4db445946601c87fecf99726fa
GET /story_images/visual_images/1664235825-Serverr_750x450.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5172
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-207
x-downloadsize: 33165
x-bo-origindownloadtime: 98
x-bo-processingtime: 11
x-bo-compressionratio: 84.41%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: b634963e36ee26be7d9c56bd0b7b1518
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1637594077-calibrationpro.png?class=listing
200 OK 5.7 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1637594077-calibrationpro.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ff85b314545a0f387a42f62bf89106fb
c942d70b75df5b738ab3defaa5642228000b553a
dbabad594c9b542a39b81910cb0963e7a9ab3266d3b8b1050cfd450ac2837307
GET /story_images/visual_images/1637594077-calibrationpro.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5704
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-210
x-downloadsize: 13076
x-bo-origindownloadtime: 110
x-bo-processingtime: 7
x-bo-compressionratio: 56.38%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 615e2ac1cb3c8704f022ed50ff2c0b90
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/Nouvix.png?class=listing
200 OK 5.6 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/Nouvix.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash d7160aaa3feebe6ed6d44025c909cba9
277508b92c0827ae427409cbc90999ee0d214a58
1e99f824c2a536f6bd97dea52e75a5dec7ca781d05909d498f493284a31236f4
GET /story_images/visual_images/Nouvix.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5584
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-211
x-downloadsize: 11244
x-bo-origindownloadtime: 111
x-bo-processingtime: 6
x-bo-compressionratio: 50.34%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 2808d6241d7d83086d5ba7fc7e714ccb
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/Competeer.png?class=listing
200 OK 6.2 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/Competeer.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 11e781781ff774ff977b8cd5fb761cfb
a84b274e6a680148f011ad6d761d0a7a8d0a0a22
9c4f1af8d4ff0bcf1e0077d050024ed657c95f31fa605a3517989dc6a14f9689
GET /story_images/visual_images/Competeer.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6166
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-204
x-downloadsize: 9858
x-bo-origindownloadtime: 110
x-bo-processingtime: 8
x-bo-compressionratio: 37.45%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 3e315d722bf7a2a8f8738afcb7ae4236
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1658306696-Contestville.jpg?class=listing
200 OK 6.4 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1658306696-Contestville.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7a2bdb945ae539e33d355c713ec08562
ff44e2ff753cff350e60216ae13f46b17bc0ef0e
9a1590f2fe227f8ddfd13fe71abe76d40863e29cc15d7900372e58ce2cc22345
GET /story_images/visual_images/1658306696-Contestville.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 6444
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-195
x-downloadsize: 45918
x-bo-origindownloadtime: 110
x-bo-processingtime: 7
x-bo-compressionratio: 85.97%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: f50fda0d026d59bc9145937d2142420c
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1629563328-Contestan.jpg?class=listing
200 OK 8.6 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1629563328-Contestan.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c8da8ce6baa4507bc7fbac99875ef647
d3c27a30beeab5ed7fa63faaeb8bed58a4f10114
c3b832566a67e1057868f5ffb48ef6054c2ea23a236a5bd67e4fa583096c88fa
GET /story_images/visual_images/1629563328-Contestan.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8620
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-207
x-downloadsize: 91297
x-bo-origindownloadtime: 103
x-bo-processingtime: 10
x-bo-compressionratio: 90.56%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6bb8c8bdfdcede00db49cc0bd9de0250
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1665300479-TrulyPrint.png?class=listing
200 OK 8.9 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1665300479-TrulyPrint.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4ae9df1589c4e74f67d03638a8d5d4d6
acad10d110a94ea2b86c5946cee10486fd2929f6
e0927fb23a12457b48a2f692a6ddbb92c61fe8ad4bd9e015d4a7ef0949e76234
GET /story_images/visual_images/1665300479-TrulyPrint.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8942
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-208
x-downloadsize: 16838
x-bo-origindownloadtime: 104
x-bo-processingtime: 8
x-bo-compressionratio: 46.89%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 4f5151791cdcc24d1deb6dcdd05abcf2
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1637424221-UltraCompetition.png?class=listing
200 OK 5.8 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1637424221-UltraCompetition.png?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image\012- data
Hash d182f875023f14c4de34007a1befbf78
8edb2954a5dcd866a19176e255cbef0096359bee
0cb0d9945cff0e002635ee6f55caf570528b6ecd1cecd75ca11d09c0a91f9246
GET /story_images/visual_images/1637424221-UltraCompetition.png?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 5780
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-207
x-downloadsize: 23238
x-bo-origindownloadtime: 100
x-bo-processingtime: 25
x-bo-compressionratio: 75.13%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 9b1171821646bacbc07ffe84342069e3
cdn-cache: MISS
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/mp_sale_images/sale-image-45449-evercontest.jpg?class=showsq
200 OK 38 kB URL HTTP/2 img.squadhelp.com/story_images/mp_sale_images/sale-image-45449-evercontest.jpg?class=showsq
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 360x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8ad19abaeca39227f1246f1edc033d4c
126f50e61680f867f4bb6d4e7c9fb823e18b467e
90c7f36cf37817cd81a4b2946ea999c4ea5a88c3bc47b7d36a11a3c52cdfb508
GET /story_images/mp_sale_images/sale-image-45449-evercontest.jpg?class=showsq HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 38462
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-206
x-downloadsize: 162414
x-bo-origindownloadtime: 100
x-bo-processingtime: 13
x-bo-compressionratio: 76.32%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6c2023a2e79d7fdc16ff61cf0383fbff
cdn-cache: MISS
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-phone-white.svg
200 OK 1.5 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-phone-white.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (798)
Hash e5d1a50d21582bc3e5ce46cd6a318dc6
8c9abc7798a793c3db37d8fb064a52aa805bf15c
d88421f81094a15cdf0270430b6656b715498ce07e08addadfcdcaedd51a04cb
GET /html/html/static_images/icon-phone-white.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:08 GMT
etag: W/"6345b414-386"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 1200296
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006ea6c74b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 556 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash f678bcfbe98b4039961065c12543bfd0
31a000bba532f910d036c24c795ef3636450e4c3
1dabb56e42c7b0a90264a0e7d8884e4111eed0e1b6321cab5f6e26440d63da8d
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 02 Feb 2023 04:01:41 GMT
date: Thu, 02 Feb 2023 04:01:41 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.calendly.com/assets/external/widget.js
200 OK 16 kB URL HTTP/2 assets.calendly.com/assets/external/widget.js
IP
File type Unicode text, UTF-8 text, with very long lines (44677), with no line terminators
Hash dbd57f5171ffc999419e8b5552cbeb64
87402e4a9ae9b473b5069e5bd79358113d9d2902
29138e64216a3d65ee9e458c34fe6666d209b68ef32bbbee19567e0d48e11f16
GET /assets/external/widget.js HTTP/1.1
Host: assets.calendly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=tijlHOBX7UcJ0IvgJGdn0OHAnmlLiW_SSs7yDTv6arw-1675310501-0-AeTDpZAhgASIn4k4iEwNeWkT5UCXu5eXKxEGo1hhXoiX4gOeQnWbDgFRHmuZGW2jgsepuapr2c/2TRPi0+hbI+o=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: application/javascript
cf-ray: 793006eaae12b4fa-OSL
age: 88
cache-control: public, max-age=300
etag: W/"c30e8b97d12c7710012f00f92bcd9de5"
expires: Fri, 03 Feb 2023 04:01:41 GMT
last-modified: Fri, 20 Jan 2023 19:21:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
cf-bgj: minify
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/domain_audios/evercontest-549.mp3
206 Partial Content 49 kB URL HTTP/2 www.squadhelp.com/domain_audios/evercontest-549.mp3
IP
File type Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, layer III, v2, 48 kbps, 24 kHz, Monaural\012- data
Hash f2d34531920d9fb6ea6f3f76fb9b56e6
0bc0ba6983e01c0b5aafb184d08b2f7a02c46f59
1dbe649744d09604c1c9eb7edb4990ff435a02e336fa2aca49b4b50c6cdb866d
GET /domain_audios/evercontest-549.mp3 HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: audio/mpeg
content-length: 48861
last-modified: Thu, 17 Jun 2021 08:09:57 GMT
etag: "60cb0355-bedd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: MISS
content-range: bytes 0-48860/48861
server: cloudflare
cf-ray: 793006e7db64b529-OSL
X-Firefox-Spdy: h2
img.squadhelp.com/story_images/visual_images/1661774845-contestsumo%203-01.jpg?class=listing
200 OK 8.1 kB URL HTTP/2 img.squadhelp.com/story_images/visual_images/1661774845-contestsumo%203-01.jpg?class=listing
IP
ASN #34989 ServeTheWorld AS
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 375x225, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2f31924a8988269b6e0000fedbf454c
fc516dd4c36781515669885d1cbda743722c60cf
ba48577eeeda59801cf7b448c3ba17e5b84575b736aa7810f4dc6ad8d389ff44
GET /story_images/visual_images/1661774845-contestsumo%203-01.jpg?class=listing HTTP/1.1
Host: img.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/webp
content-length: 8124
server: BunnyCDN-NO1-830
cdn-pullzone: 720681
cdn-uid: f9d574da-6b07-4a25-a965-8797fec66609
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Thu, 02 Feb 2023 04:01:41 GMT
x-bo-server: ASB-203
x-downloadsize: 838544
x-bo-origindownloadtime: 125
x-bo-processingtime: 348
x-bo-compressionratio: 99.03%
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/02/2023 04:01:41
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 51f64e9db27cbbf1411c361ad1a2cea9
cdn-cache: MISS
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/youtube.svg
200 OK 964 B URL HTTP/2 www.squadhelp.com/html/html/static_images/youtube.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (773)
Hash cd9fc8e1bd4ca4944673ff60cf57f016
787ca7a3cb899128877a91b81c8f38351584cac0
bb3a25291cffcc5a9e91fcffa03e947a088e3fd19d4326a24b4a8294f7a7d642
GET /html/html/static_images/youtube.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:09 GMT
etag: W/"6345b415-36d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4364140
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006eabc90b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/facebook.svg
200 OK 103 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/facebook.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (960)
Size 103 kB (102881 bytes)
Hash d332469c7934a1c394ca73e7df45b45a
e0cd7b50c8b05bc99a48f7e71f7a5acb347a848d
b1e632d95c2b6b7cf026974e1aa507cf93b214e03e32d09423543ba58562231e
GET /html/html/static_images/facebook.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:11 GMT
etag: W/"6345b417-428"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4364140
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006eabc87b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.squadhelp.com/html/html/static_images/icon-mail-white.svg
200 OK 119 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-mail-white.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (787)
Size 119 kB (118960 bytes)
Hash cc7d800d2fcc6477477e80226d372702
f969b91ece5ed0a1ef485ede5a3e551ff5c3f6d5
45b88a51b09554f9fa40f15ded041e3c1b5f1f0e1d0ed4cb5a9aecf0c2781079
GET /html/html/static_images/icon-mail-white.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:12 GMT
etag: W/"6345b418-37b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4364084
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006ea6c76b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 1fd5a57e1ade9b56d75002bfeef02984
5282903b1536bab437d742fb88c019b7a0c7391d
40ba148ffb976ca66d9c0e08fdbdbf3f427a872a46c381dbd07ac6db28685b4d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6003
Cache-Control: max-age=137381
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:42 GMT
Etag: "63da93d8-116"
Expires: Fri, 03 Feb 2023 18:11:23 GMT
Last-Modified: Wed, 01 Feb 2023 16:31:20 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 278
widget.intercom.io/widget/ld9mkn53
200 OK 6.0 kB URL HTTP/2 widget.intercom.io/widget/ld9mkn53
IP
File type Unicode text, UTF-8 text, with very long lines (18637), with no line terminators
Hash 37697cd2e5b63d7b96ded5db83b9de71
fcdb1e02c3310c27b848496ec7987834c09890f5
4aa7fc56d2c5f865a2a68574cbf59df364f87fa02977d743ac78b9e274157262
GET /widget/ld9mkn53 HTTP/1.1
Host: widget.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 6046
last-modified: Wed, 01 Feb 2023 15:57:42 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: oMw1RVmDtSnmPjbN4TRQzQd_IXqwIE4C
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 03:46:41 GMT
cache-control: max-age=900, s-maxage=900, public
etag: "37697cd2e5b63d7b96ded5db83b9de71"
x-cache: Error from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: JC4YVPU04xGSciLINkuQmU6MacHAUTgsh5ggh5rNuWCOwRD83oQkvg==
age: 955
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
js.intercomcdn.com/frame.156e3ec1.js
200 OK 140 kB URL HTTP/2 js.intercomcdn.com/frame.156e3ec1.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (139581 bytes)
Hash 2247e1baf54072f487563f7cf93767c9
e73ac64a0469bbfd965a28fb483c885847a12f6b
841584b826ed5d3f1aa36287879cdb34fe4d00428da1edc721feef4d1e65c36f
GET /frame.156e3ec1.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 139581
last-modified: Wed, 01 Feb 2023 15:55:25 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: EY6QI_S._VdrYXEtXLNDhnmBjx1vRsGd
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 03:00:02 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "2247e1baf54072f487563f7cf93767c9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: tVctkSEaNWBN21u22ukyejTB84OkJtHTqBP0-z2PLScy1oy8VJNcIg==
age: 3700
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 621c9d51fc1626afc8205b3f1a813900
7fdc3b13737de934c1fc8f3cd7c6561c1ba45be3
2eb462fe8ec2d915d27d1d047f43114f6a2c97ba173f16b9148ba71547d1e53e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135152
Date: Thu, 02 Feb 2023 04:01:42 GMT
Etag: "63da9269-1d7"
Expires: Fri, 03 Feb 2023 17:34:14 GMT
Last-Modified: Wed, 01 Feb 2023 16:25:13 GMT
Server: ECS (bsa/EB14)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OS3Z1hRJ6pSLWPe166IVANPtHYJEOPFsEc_lECVFXxRHW6_D4Yqppg==
Age: 4142
player.vimeo.com/video/720893092?h=eddf4f3cf1&app_id=122963
200 OK 6.3 kB URL HTTP/1.1 player.vimeo.com/video/720893092?h=eddf4f3cf1&app_id=122963
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (20600), with no line terminators
Hash 349a4eeb534d470e0650bf7f536d7ee2
bd77c84373e6bb94b50f3c7bba9559b35cfebd03
3c9463a1b5357f7733e297a58edccdf84f818d9e85aabcf7fb734c4a34899b10
GET /video/720893092?h=eddf4f3cf1&app_id=122963 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 04:01:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app/ https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Thu, 02 Feb 2023 04:02:52 GMT
x-host: player-6b7bc96c5-k86fg
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 1
x-vserver: playproxy-rollout-prod-varnish-0
x-backend-proxy: playproxy1
x-bapp-server: player-6b7bc96c5-k86fg
Age: 0
X-Served-By: cache-bma1655-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1675310502.224248,VS0,VE119
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=JMXKJC04j7WrS0NRj3V6PUAxSJKVLlWKT6B9vKxC60E-1675310502-0-AXFQhO3k5hkL7ca1LMQD+oJJ12lnFsE2WrTxA4JlmBe/vEytcZqAB30+h97U3Rm3prjYVPHzZWoDf2AuXManhF0=; path=/; expires=Thu, 02-Feb-23 04:31:42 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 793006eec8a90b49-OSL
Content-Encoding: gzip
cdn.jsdelivr.net/npm/search-insights@1.3.1
200 OK 2.9 kB URL HTTP/2 cdn.jsdelivr.net/npm/search-insights@1.3.1
IP
File type ASCII text, with very long lines (10262)
Hash f66557a8cde2590db029b6b8304378db
11bbbcd7974761b20ec50d17f4049977315d9d08
9ab7d5c8a5762c81158601720fd131bef233a57193e6daaa8d1ad26e5912f1d3
GET /npm/search-insights@1.3.1 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.3.1
x-jsd-version-type: version
etag: W/"2817-FGLI0cv/s1qAA3nM5zLdFEpck2Q"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:42 GMT
age: 1911226
x-served-by: cache-fra-eddf8230023-FRA, cache-bma1620-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2870
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/jXzHJ1Qi5ro
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/jXzHJ1Qi5ro
IP
Hash 6426850a0fb73a782267b6441c7b0d6a
782827f699e2d2502b210086a338a6cf89b7a937
c62c66dbf8b57cae4133172e79d81c424e7905bff5de8a724af47facc7bdaba7
POST /s/gts1d4/jXzHJ1Qi5ro HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
monitor.fraudblocker.com/fbt.js?sid=N_PvROEYPR5Jhemba05dv
200 OK 20 kB URL HTTP/2 monitor.fraudblocker.com/fbt.js?sid=N_PvROEYPR5Jhemba05dv
IP
File type Unicode text, UTF-8 text, with very long lines (48108)
Hash ab5f5eda41a0667e8d1c5f5bdb4005eb
8cb4456b3e44f387eccddb822d5834d950c5c840
eb6853e0a1df7ef6034adb7a5ba6280cf39b460002f540dd5b7a0650e3216fe9
GET /fbt.js?sid=N_PvROEYPR5Jhemba05dv HTTP/1.1
Host: monitor.fraudblocker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdvETEaRrd48Zhp7byD9ryadMCppwPFoVaIhcvpfQtsIWKhWlXbhX3eb0u8xBjEmzpPdr9zkKajE6RiMs7T5M_XDc9ao53At
vary: X-Goog-Allowed-Resources,Accept-Encoding
x-goog-generation: 1670458673043402
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 19805
content-encoding: gzip
x-goog-hash: crc32c=gTsrXg==, md5=q19e2kGgZn6NHF9b20AF6w==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 19805
server: UploadServer
date: Thu, 02 Feb 2023 03:08:26 GMT
expires: Thu, 02 Feb 2023 04:08:26 GMT
cache-control: public, max-age=3600
last-modified: Thu, 08 Dec 2022 00:17:53 GMT
etag: "ab5f5eda41a0667e8d1c5f5bdb4005eb"
content-type: application/x-javascript
age: 3196
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
200 OK 7.4 kB URL HTTP/2 www.redditstatic.com/ads/pixel.js
IP
File type ASCII text, with very long lines (23347)
Hash 03d5db9dfd00a5719bb4c9261e6fa1bb
be9899225f59b4d3ef6fefcf0e66b72568353a94
e90f19642062e4311b58ede732592e8f29b7799661086a0bbfc68e259fd81398
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Mon, 23 Jan 2023 21:56:14 GMT
etag: "03d5db9dfd00a5719bb4c9261e6fa1bb"
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:42 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7356
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 194056a4f935309bcc7432672c35ec1f
1e96baf883fe02b40a1e0ca133cc20ef5e42879f
1f081101e774637a087e6e1b038ac5108516365589b1b755240f6c507f02761f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=111639
Date: Thu, 02 Feb 2023 04:01:42 GMT
Etag: "63da3417-1d7"
Expires: Fri, 03 Feb 2023 11:02:21 GMT
Last-Modified: Wed, 01 Feb 2023 09:42:47 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -XXTzQsrHbw8t2rQ9gTZCKoLFu8-v6_2pEGL_EPU--qgkHh5yae8pQ==
Age: 4774
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash 249cbc1669cc175e349f4601c72f8550
652f08a22c8af2cae4e9d5843d8b42f9adfebe6d
3eb502fd0ca06463b81ce86e1fa3c1eaf90748029f67eda3ddb070836944171b
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 04:01:42 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "06F7FC61CC45E45E0D53BC0A97B0FCE9F1B89DCB"
Expires: Thu, 02 Feb 2023 15:00:00 GMT
Last-Modified: Thu, 02 Feb 2023 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 184
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 793006f01938b527-OSL
ocsp.pki.goog/s/gts1d4/jXzHJ1Qi5ro
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/jXzHJ1Qi5ro
IP
Hash 6426850a0fb73a782267b6441c7b0d6a
782827f699e2d2502b210086a338a6cf89b7a937
c62c66dbf8b57cae4133172e79d81c424e7905bff5de8a724af47facc7bdaba7
POST /s/gts1d4/jXzHJ1Qi5ro HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2f668a69d2b2a157e0bf997a599fabb0
9d3b7c29520434cfc21bafeaed0900d86609212d
470af7d95a808b3335ceb5d8e589c17287aced52a050de4d2b4ff25a5e1349cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "470AF7D95A808B3335CEB5D8E589C17287ACED52A050DE4D2B4FF25A5E1349CF"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11137
Expires: Thu, 02 Feb 2023 07:07:19 GMT
Date: Thu, 02 Feb 2023 04:01:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 727 B IP
Hash 52476b04a9deb5ca1980dcb82ca12e24
d74b4fbbca637b75cd6902692850fbf8977bca66
0dfefcaf56a0cafcd00b6abdfa5620bb45eca98aae6c787819810ddbc2f4210d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2252
Cache-Control: max-age=133597
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:42 GMT
Etag: "63da93b7-2d7"
Expires: Fri, 03 Feb 2023 17:08:19 GMT
Last-Modified: Wed, 01 Feb 2023 16:30:47 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 727
q.quora.com/_/ad/dcf3487c2f234553bf375cb5ea4c260b/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest
200 OK 43 B URL HTTP/1.1 q.quora.com/_/ad/dcf3487c2f234553bf375cb5ea4c260b/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /_/ad/dcf3487c2f234553bf375cb5ea4c260b/pixel?tag=ViewContent&i=gtm&u=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest HTTP/1.1
Host: q.quora.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Date: Thu, 02 Feb 2023 04:01:42 GMT
Server: nginx
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Q-Stat: ,d2c76c424f64e5e9a53b519862765f72,10.0.0.230,22410,91.90.42.154,,232454459229,1,1675310502.663,0.002,,.,0,0,0.000,0.000,-,0,0,197,128,64,10,26847,,,,,,-,
Content-Length: 43
Connection: keep-alive
f.vimeocdn.com/p/4.19.2/css/player.css
200 OK 20 kB URL HTTP/2 f.vimeocdn.com/p/4.19.2/css/player.css
IP
File type ASCII text, with very long lines (65495)
Hash c0026d31413bb2152b7719a0760a9e35
7807e493c951cb8ad095ae2456cde9719470ea44
89344b91b186bccdd3f4a2a9c71702950700b9cfa66aced10935de2ab81b9a67
GET /p/4.19.2/css/player.css HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:42 GMT
age: 121164
x-served-by: cache-iad-kiad7000158-IAD, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 10, 32905
x-timer: S1675310503.857346,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 20069
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1451960391-27331ec81e39eb316fde7c35212ed6f1497510379d6f0a68a08f21f2c061fabc-d.jpg?mw=80&q=85
200 OK 1.5 kB URL HTTP/2 i.vimeocdn.com/video/1451960391-27331ec81e39eb316fde7c35212ed6f1497510379d6f0a68a08f21f2c061fabc-d.jpg?mw=80&q=85
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3\012- data
Hash 5e87158ee30c950b032e6335be012e5b
469828cd2eb6bef44f0a91b4a864318ac99af3c9
2351ff70736da33512a32489ea9bf8c6b68bc6dcc6e9275f105e6db5ac42d90a
GET /video/1451960391-27331ec81e39eb316fde7c35212ed6f1497510379d6f0a68a08f21f2c061fabc-d.jpg?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
etag: 5e87158ee30c950b032e6335be012e5b
x-viewmaster-lossless-format: lossy
viewmaster-server: viewmaster-us-east1-dw29
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:42 GMT
age: 1431757
x-served-by: cache-dfw-kdfw8210022-DFW, cache-bma1657-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 935, 2
x-timer: S1675310503.876221,VS0,VE0
content-length: 1518
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.19.2/js/player.module.js
200 OK 118 kB URL HTTP/2 f.vimeocdn.com/p/4.19.2/js/player.module.js
IP
File type Unicode text, UTF-8 text, with very long lines (65445)
Size 118 kB (118106 bytes)
Hash a3997f52d132221645130f34951abf8d
ed1765341e8f05646536584c18d519ee3f455f47
dba3f740169da84d5ad9c5a18d60c16b7b1b5a084ff33abc9abff3758381d54d
GET /p/4.19.2/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:42 GMT
age: 121166
x-served-by: cache-iad-kiad7000084-IAD, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 10, 27245
x-timer: S1675310503.876395,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 118106
X-Firefox-Spdy: h2
acsbapp.com/apps/app/dist/js/app.js
200 OK 144 kB URL HTTP/2 acsbapp.com/apps/app/dist/js/app.js
IP
File type Unicode text, UTF-8 text, with very long lines (59286), with no line terminators
Size 144 kB (143877 bytes)
Hash ae5d8e01613f7dba54fb68980a0e48f0
225d40deeac3c5d58b2a7b9250cc1600e67e5387
3c111ad85e5eac663176551f9bc96916a9c8ce64a106e66f4040a9a051124c97
GET /apps/app/dist/js/app.js HTTP/1.1
Host: acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Fri, 03 Feb 2023 04:01:42 GMT
content-type: application/x-javascript
last-modified: Tue, 31 Jan 2023 16:15:30 GMT
etag: "6bcae-63d93ea2-df0c309c5a2d9525;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 143877
date: Thu, 02 Feb 2023 04:01:42 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash bae868356becb6470806e213f97e8aa6
1a3c7ffdce0f4e9c1f59aa0cd7715f22bade5117
c9930f2471f9a8a87fddfe3989391d65e1c41b3457a3f0fbf2e2357566f81a1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2365
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Last-Modified: Thu, 02 Feb 2023 03:22:18 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
www.squadhelp.com/html/html/static_images/logo.svg
200 OK 5.7 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/logo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (773)
Hash 42a78aa396119151905479a6614ad19b
400ea03ce90f1ffa7c726d634f3d6f959d217e39
1b0c35a0f92ee856bcde63e48f6a793c15c38bdb47dbd02393f66fcbcb8bac95
GET /html/html/static_images/logo.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:16 GMT
etag: W/"6345b41c-1321"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 2643531
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e74b13b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 02 Feb 2023 03:44:08 GMT
expires: Thu, 02 Feb 2023 05:44:08 GMT
cache-control: public, max-age=7200
age: 1055
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
snap.licdn.com/li.lms-analytics/insight.min.js
200 OK 4.8 kB URL HTTP/2 snap.licdn.com/li.lms-analytics/insight.min.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (13351)
Hash 74f72658f6efd10c4c286ab07cd5e452
9fa4dfc644b6e818914f2f2c4fe4bdf791fd6d39
6681619d5962f95b3fccfa34a7f035664edb66522d237ea0c28a05851f9d295c
GET /li.lms-analytics/insight.min.js HTTP/1.1
Host: snap.licdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 10 Jan 2023 17:22:56 GMT
accept-ranges: bytes
content-type: application/x-javascript;charset=utf-8
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=70565
date: Thu, 02 Feb 2023 04:01:43 GMT
content-length: 4777
x-content-type-options: nosniff
x-cdn: AKAM
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
amplify.outbrain.com/cp/obtp.js
200 OK 5.9 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP
File type ASCII text, with very long lines (17737), with no line terminators
Hash 69ccf6d91702cd65dedfbad36e94c61b
adce8bd55dcc466c709dc96e230cbdd72fb27645
9a5b793c3b453c30229658bebe68719aa0df37a71ef371a6c6117e123b091e64
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "9f0b052ec22f789c3cc95c26dd0da7f4:1674389451.57807"
Last-Modified: Sun, 22 Jan 2023 12:08:14 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 02 Feb 2023 04:21:43 GMT
Date: Thu, 02 Feb 2023 04:01:43 GMT
Content-Length: 5884
Connection: keep-alive
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: RqPmycHmucTKFhhLvrZUfgN+6KbkqCBCRIQps3U4LioQE0EVAXTXvnKHWAwmXOXzNNPl+pFiBXuxwAFHE6CxRw==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1904183273
date: Thu, 02 Feb 2023 04:01:43 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2BB08B6CA73245FFA16326E0A1752B0F Ref B: OSL30EDGE0311 Ref C: 2023-02-02T04:01:43Z
date: Thu, 02 Feb 2023 04:01:42 GMT
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/approved.svg
200 OK 195 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/approved.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (40082)
Size 195 kB (194624 bytes)
Hash 0408823258d5b98cbefd104ead93ad42
c6069a1c50c8a9f19f99d97bff08d2609576ae1e
b9b7be78c800addae29ec22f29b6e8751a310372009d2a6fce1b4b2a8174359b
GET /html/html/static_images/approved.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:02 GMT
etag: W/"6345b40e-9e1e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4390818
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e74b14b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.squadhelp.com/html/html/static_images/icon-check.svg
200 OK 1.3 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-check.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash f1e1f43bf67ec29b0345c349927ed855
f3b394cde96473f5163ceaf7f1db35f90c45de66
49f708d08085153dd47e155ca5cb5f92869cbfee59f65210ac14e2eeb2dd3115
GET /html/html/static_images/icon-check.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:22 GMT
etag: W/"6345b422-23e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 531366
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9ec33b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-play.svg
200 OK 16 kB URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-play.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 40e02134e92f480bb7468776c9492f52
40fd1583b8f64777c4d8905ef64164a2f650e546
c428e9a220d2abe77bd39b67d52d488988442d8aeaed21c908009212708ad4a4
GET /html/html/static_images/icon-play.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:18 GMT
etag: W/"6345b41e-1b2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 2643530
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9ec38b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526903&cv=11&fst=1675310526903&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 892 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526903&cv=11&fst=1675310526903&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1907), with no line terminators
Hash 4d53d87ea3c1d6850feac6b6e4c39b95
e5f6eb3c616f08a7d511f1258c91496324825645
394edc7c35ee4df53484668e613f52e06b473a8cb54f7625bff8a04eb3bbe38f
GET /pagead/viewthroughconversion/1030947153/?random=1675310526903&cv=11&fst=1675310526903&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 892
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 02-Feb-2023 04:16:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash bae868356becb6470806e213f97e8aa6
1a3c7ffdce0f4e9c1f59aa0cd7715f22bade5117
c9930f2471f9a8a87fddfe3989391d65e1c41b3457a3f0fbf2e2357566f81a1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2365
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Last-Modified: Thu, 02 Feb 2023 03:22:18 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526712&cv=11&fst=1675310526712&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=ecomm_pagetype%3Dproduct&rfmt=3&fmt=4
200 OK 896 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526712&cv=11&fst=1675310526712&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=ecomm_pagetype%3Dproduct&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (1917), with no line terminators
Hash a4d25f34d44e1c6cd9aca361fddcaa28
a3800c3c5e9ea968dea735ea9bf8ed960423d52d
a96e6f8c8b295754a871f66b9861c5997d4522c6223f4d1fbf8a468c52f7530e
GET /pagead/viewthroughconversion/1030947153/?random=1675310526712&cv=11&fst=1675310526712&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=ecomm_pagetype%3Dproduct&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 896
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 02-Feb-2023 04:16:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526778&cv=11&fst=1675310526778&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=dynx_itemid%3D1221879%3Bdynx_pagetype%3Dofferdetail%3Bdynx_totalvalue%3D17945&rfmt=3&fmt=4
200 OK 926 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526778&cv=11&fst=1675310526778&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=dynx_itemid%3D1221879%3Bdynx_pagetype%3Dofferdetail%3Bdynx_totalvalue%3D17945&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2021), with no line terminators
Hash ce151100b7711394ddc742465aaaafb5
905ea3e9f8f1c7ecd1d99cfafdbf84367cad42b0
7ba74c4e7f2d4ce00d86c5e22c0bcf94a2e92507d3384fb02767411db987d74a
GET /pagead/viewthroughconversion/1030947153/?random=1675310526778&cv=11&fst=1675310526778&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&auid=1502918550.1675310527&data=dynx_itemid%3D1221879%3Bdynx_pagetype%3Dofferdetail%3Bdynx_totalvalue%3D17945&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 926
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 02-Feb-2023 04:16:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526721&cv=11&fst=1675310526721&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=DP_eCJK8xO0BENGCzOsD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&value=0&bttype=purchase&auid=1502918550.1675310527&gcp=1&ct_cookie_present=1
200 OK 42 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/1030947153/?random=1675310526721&cv=11&fst=1675310526721&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=DP_eCJK8xO0BENGCzOsD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&value=0&bttype=purchase&auid=1502918550.1675310527&gcp=1&ct_cookie_present=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/1030947153/?random=1675310526721&cv=11&fst=1675310526721&fmt=3&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=DP_eCJK8xO0BENGCzOsD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&value=0&bttype=purchase&auid=1502918550.1675310527&gcp=1&ct_cookie_present=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Thu, 02-Feb-2023 04:16:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 56589fdddf4e9ec4e557a28dca364e20
15dc746f3c548cae0fd75290d9b8f459361ce3db
c4931c29e7ec66ec7be014099fdb8a4add8181482b96263004a4395e7595372d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 04:01:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 15:27:43 GMT
Expires: Mon, 06 Feb 2023 15:27:42 GMT
Etag: "15dc746f3c548cae0fd75290d9b8f459361ce3db"
Cache-Control: max-age=386158,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793006f228730b59-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 597cf779bde3fb673ad2bd75e65b617c
506275f80205b7dc149ad7ab70b1c03158255b8c
00f495b8f5f8acdec7ad20c1812b7ce0d2fe8056e16cc45740ba66c6cf5d5129
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=90472
Date: Thu, 02 Feb 2023 04:01:43 GMT
Etag: "63d9e6aa-1d7"
Expires: Fri, 03 Feb 2023 05:09:35 GMT
Last-Modified: Wed, 01 Feb 2023 04:12:26 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F5psO97g_1XXLdN1FAZpj8ALKwGAIdrX19ezJA-he1dMLAqqdPZj_g==
Age: 3429
i.vimeocdn.com/video/1451960391-27331ec81e39eb316fde7c35212ed6f1497510379d6f0a68a08f21f2c061fabc-d?mw=500&mh=278
200 OK 9.1 kB URL HTTP/2 i.vimeocdn.com/video/1451960391-27331ec81e39eb316fde7c35212ed6f1497510379d6f0a68a08f21f2c061fabc-d?mw=500&mh=278
IP
File type ISO Media, AVIF Image\012- data
Hash ce8943fcc1990aaa27ba042f7a95198b
3b96cec4008bcac21cb8c2df6fd227fe60118796
8faab915d8e966c2df8846a95f9be8d7c8c9fdf8ca86fa79f298247460361994
GET /video/1451960391-27331ec81e39eb316fde7c35212ed6f1497510379d6f0a68a08f21f2c061fabc-d?mw=500&mh=278 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: ce8943fcc1990aaa27ba042f7a95198b
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-c5zg
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
age: 1254632
x-served-by: cache-dfw-kdfw8210138-DFW, cache-bma1657-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 2444, 1
x-timer: S1675310503.303793,VS0,VE1
vary: Accept
content-length: 9082
X-Firefox-Spdy: h2
f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
200 OK 985 B URL HTTP/2 f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
IP
File type ASCII text, with very long lines (1839)
Hash 0541e0ff8702adadfd34ee8c298afbdf
c10da432fdb8736622c8c1fb7708b2599cae882c
967903be4f14e85fe685577417cf83d53b5363e5f02baa3b2242c19a7030b652
GET /js_opt/modules/utils/vuid.min.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
cache-control: public, max-age=2592000
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
age: 1373069
x-served-by: cache-iad-kiad7000106-IAD, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 4460, 35067
x-timer: S1675310503.305018,VS0,VE0
vary: Accept-Encoding,x-http-method-override
content-length: 985
X-Firefox-Spdy: h2
cdn.taboola.com/libtrc/unip/1344021/tfa.js
200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1344021/tfa.js
IP
File type ASCII text, with very long lines (59644)
Hash 0621fcc6bdda3fc977b3ab8ecfcb0265
2423b18389a0a28eb1edb852cebbdf20470bc988
200686977f5fa2d940efb614b753b9d99c3b2808fb26ed0eecc735fec079a4e9
GET /libtrc/unip/1344021/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Xy+ElIk+u0xQioWyxaaL8Y9LGFGfTDVZmcpFPgvoGTIDqO/1YiC9NTWPIO6pe8iVj8eKvWf6y9Q=
x-amz-request-id: CPBQ68DX2DM6GS58
x-amz-replication-status: PENDING
last-modified: Sun, 29 Jan 2023 11:03:31 GMT
etag: "8a7763179fbc8d251f2c4b003389179a"
x-amz-version-id: 25RJ3B9nAt0QSP.GJp3jUodUUDtKxqNt
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1637-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1675310503.132591,VS0,VE205
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 2
content-length: 18335
X-Firefox-Spdy: h2
insights.algolia.io/1/events?X-Algolia-Application-Id=UY28JH5EE6&X-Algolia-API-Key=eef4bbb1b2bf44af3b7b0b62d16a28fb&X-Algolia-Agent=insights-js%20(1.3.0)%3B%20insights-gtm%20(1.0.1)
200 OK 29 B URL HTTP/2 insights.algolia.io/1/events?X-Algolia-Application-Id=UY28JH5EE6&X-Algolia-API-Key=eef4bbb1b2bf44af3b7b0b62d16a28fb&X-Algolia-Agent=insights-js%20(1.3.0)%3B%20insights-gtm%20(1.0.1)
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ca1d7c9f272503952d3bf37cc4a649bd
7129c38467ef8cd3e902fe034328071f5cd07602
e5ddba99266abd003aa6eef168bc2a2bea5e69b1e0d1fc4373150934ab5dd76a
POST /1/events?X-Algolia-Application-Id=UY28JH5EE6&X-Algolia-API-Key=eef4bbb1b2bf44af3b7b0b62d16a28fb&X-Algolia-Agent=insights-js%20(1.3.0)%3B%20insights-gtm%20(1.0.1) HTTP/1.1
Host: insights.algolia.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 145
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
content-type: application/json
date: Thu, 02 Feb 2023 04:01:43 GMT
content-length: 29
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-VJ36JWQDE1>m=2oe1u0&_p=654336799&cid=778186778.1675310527&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675310527&sct=1&seg=0&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&dt=Evercontest.com%20is%20for%20sale&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-VJ36JWQDE1>m=2oe1u0&_p=654336799&cid=778186778.1675310527&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675310527&sct=1&seg=0&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&dt=Evercontest.com%20is%20for%20sale&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VJ36JWQDE1>m=2oe1u0&_p=654336799&cid=778186778.1675310527&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675310527&sct=1&seg=0&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&dt=Evercontest.com%20is%20for%20sale&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.squadhelp.com
date: Thu, 02 Feb 2023 04:01:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/events.js
301 Moved Permanently 65 B URL HTTP/1.1 tags.srv.stackadapt.com/events.js
IP
File type HTML document, ASCII text
Hash f80e89783ec551e69632712d99fd2224
a760361995b52b09f655a2bb469d7dd464619692
c052ddf9a69031b36e27713dfc2ca1d3494de9e0436c5bb35d17d92dac2c61bd
GET /events.js HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Date: Thu, 02 Feb 2023 04:01:43 GMT
Location: https://qvdt3feo.com/events.js
Content-Length: 65
Connection: keep-alive
cdn.acsbapp.com/cache/app/squadhelp.com/config.json
200 OK 158 B URL HTTP/2 cdn.acsbapp.com/cache/app/squadhelp.com/config.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 08b05e8b1db0f6317e20168a7bf65404
4237f5c51be2141e3140b0df73075b07bff27e82
806f9863a1221afdadf9dadb73e55bfd346097f939a93679cf8a945a6c0483a6
GET /cache/app/squadhelp.com/config.json HTTP/1.1
Host: cdn.acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Origin: https://www.squadhelp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Fri, 03 Feb 2023 04:01:43 GMT
content-type: application/json
last-modified: Thu, 02 Feb 2023 03:59:15 GMT
etag: "9e-63db3513-8d9a78485122d8e;;;"
accept-ranges: bytes
content-length: 158
date: Thu, 02 Feb 2023 04:01:43 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash f34e13cd7bd2390540358d01cbc690ff
15a098b4cd8fbd001a15d36207579fe9b18d4c07
1a74d35e15a7479290f811969f72f0de78f65bcb5b42bdfe673719d746839682
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6075
Cache-Control: max-age=120857
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Etag: "63da5305-139"
Expires: Fri, 03 Feb 2023 13:36:00 GMT
Last-Modified: Wed, 01 Feb 2023 11:54:45 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
alb.reddit.com/rp.gif?ts=1675310527083&id=t2_bc56g0l6&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=7dc90fae-2bfe-4ce1-a2b9-5ed22e8f44e1&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
200 OK 42 B URL HTTP/2 alb.reddit.com/rp.gif?ts=1675310527083&id=t2_bc56g0l6&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=7dc90fae-2bfe-4ce1-a2b9-5ed22e8f44e1&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /rp.gif?ts=1675310527083&id=t2_bc56g0l6&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&uuid=7dc90fae-2bfe-4ce1-a2b9-5ed22e8f44e1&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_65e23bc4 HTTP/1.1
Host: alb.reddit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Varnish
retry-after: 0
cross-origin-resource-policy: cross-origin
content-type: image/gif
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
via: 1.1 varnish
content-length: 42
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 56589fdddf4e9ec4e557a28dca364e20
15dc746f3c548cae0fd75290d9b8f459361ce3db
c4931c29e7ec66ec7be014099fdb8a4add8181482b96263004a4395e7595372d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 04:01:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 15:27:43 GMT
Expires: Mon, 06 Feb 2023 15:27:42 GMT
Etag: "15dc746f3c548cae0fd75290d9b8f459361ce3db"
Cache-Control: max-age=386158,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793006f649d90b59-OSL
t.co/i/adsct?bci=3&eci=2&event_id=35963eba-a580-47ea-a1df-d193c53ac027&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ded670dc-a754-46a6-9950-f6e48b9011af&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=35963eba-a580-47ea-a1df-d193c53ac027&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ded670dc-a754-46a6-9950-f6e48b9011af&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=35963eba-a580-47ea-a1df-d193c53ac027&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ded670dc-a754-46a6-9950-f6e48b9011af&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:43 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=8b486581-12d3-4506-82cb-901b60194355; Max-Age=63072000; Expires=Sat, 01 Feb 2025 04:01:43 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 703b548c2f38d88e
strict-transport-security: max-age=0
x-response-time: 109
x-connection-hash: af22c0e643c9bcd31c5cd7acd3b7172e9af8d13f1eed6a127fcc269ed66501d9
X-Firefox-Spdy: h2
cdn.acsbapp.com/cache/app/en.build.json
200 OK 26 kB URL HTTP/2 cdn.acsbapp.com/cache/app/en.build.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65461), with no line terminators
Hash b170d7e12a2c976c9875db215374a305
948063bceb0a06ca72b9ec2cb193657aea5edf26
9804cb8a7367ee7385b5d9cefa6124c8bd83807997bfac7a9a7506930ccd7983
GET /cache/app/en.build.json HTTP/1.1
Host: cdn.acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Origin: https://www.squadhelp.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Fri, 03 Feb 2023 04:01:43 GMT
content-type: application/json
last-modified: Tue, 31 Jan 2023 15:43:03 GMT
etag: "3bb7f-63d93707-2bb1a971d3bce89f;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 25934
date: Thu, 02 Feb 2023 04:01:43 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
nexus-websocket-a.intercom.io/pubsub/5-23hV-ITUKnaVjlY38_cF22NIVpLL_j00iSzrEtxW8KHnnryLfCgxc1fKEeiFkHt2DiDpz32R_Tfw8xOq5YJw35QUJhTt-n3Hfgs1?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
101 Switching Protocols 0 B URL HTTP/1.1 nexus-websocket-a.intercom.io/pubsub/5-23hV-ITUKnaVjlY38_cF22NIVpLL_j00iSzrEtxW8KHnnryLfCgxc1fKEeiFkHt2DiDpz32R_Tfw8xOq5YJw35QUJhTt-n3Hfgs1?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pubsub/5-23hV-ITUKnaVjlY38_cF22NIVpLL_j00iSzrEtxW8KHnnryLfCgxc1fKEeiFkHt2DiDpz32R_Tfw8xOq5YJw35QUJhTt-n3Hfgs1?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined HTTP/1.1
Host: nexus-websocket-a.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.squadhelp.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uMnrRl/j5hQXB29igpkNGQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Thu, 02 Feb 2023 04:01:43 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cHz1s280fdaZlw9ET+/aOnt1DSQ=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
js-agent.newrelic.com/569.95d4308d-1222.js
200 OK 3.2 kB URL HTTP/2 js-agent.newrelic.com/569.95d4308d-1222.js
IP
File type ASCII text, with very long lines (7513), with no line terminators
Hash 8d0953404ce6fdf0926ef6bf37d7e041
8cec9d9883f8b7720721bb33bffb4afe45193b1d
83966eef1899edd421692b78cda8df58dfb9b0b2b27a7485183c5b4cb44a336d
GET /569.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: v+E2uK5EOShfz1aeDzYcwNWitGv9mKnF6hMwgfWjfoR/qfIZPK6AF+v3z+by8JUQg3fSUYcltK4=
x-amz-request-id: WFNFJ5TESSHD3FE6
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "e97726ab932639fed09971b1d682788c"
x-amz-version-id: umZj.yHws5JPiBHG1j096ELWHEKx7rh0
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 734
x-timer: S1675310504.954430,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3173
X-Firefox-Spdy: h2
js-agent.newrelic.com/620.95d4308d-1222.js
200 OK 1.3 kB URL HTTP/2 js-agent.newrelic.com/620.95d4308d-1222.js
IP
File type ASCII text, with very long lines (2989), with no line terminators
Hash 7094c3f93699a846fe91edd766391f01
25e8c79409acc2bb73a728c0768e1eda66019255
85eb01219e8aaa7c7968aa175c2421454f99615ae66350b15c60465f4616826f
GET /620.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: QggJtv+14rx8wEd4C6ZTDmmxUSe6+8jiYhTGnWcIRu6DC5pRiaL5fPRx8/lgChduQ7GqRSlO6xY=
x-amz-request-id: WFN5FXFSJTZYM7K6
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "ca9b029ff66dd9146273984d16e20abc"
x-amz-version-id: HYguQMwVKEHCmodKuQRUzW1qxlElK9Xr
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 729
x-timer: S1675310504.954622,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1342
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
IP
Hash 6ce3571ee38fcaa34b33ff84c066a392
5ec7c56d433f846bd6c9b1b4e0bb82bb07aa1c6f
6f9259caad4d79b8edb9461de47fdfdf627ea1bf0fc89299bc782c60d16f86ba
POST /s/gts1d4/dzJAsmEe9WY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js-agent.newrelic.com/457.95d4308d-1222.js
200 OK 2.0 kB URL HTTP/2 js-agent.newrelic.com/457.95d4308d-1222.js
IP
File type ASCII text, with very long lines (4809), with no line terminators
Hash 09c0cca8d2a9fd69f1892a1c2d1319b9
b46f4fe3b0adc98785d22a092818b74145a91cc0
593022809e272793157f8280bae176bfa74a02f9f9a6d3269384e2dd434be046
GET /457.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 6YLQBRWWkaavoi6QR5dS+9cRhXVrpaQK5v3G9/iqQ5oKPUxxFI0Uv2tN9ar51sQUG2xwVmTWBnY=
x-amz-request-id: WFN1Z9NXJZGF8XE5
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "c16abc7fa2e34cbb7baf3e290120ad5a"
x-amz-version-id: qROfxBD9CF8WXmbywdhvCmImuu9HvRNA
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 728
x-timer: S1675310504.954925,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1953
X-Firefox-Spdy: h2
js-agent.newrelic.com/41.95d4308d-1222.js
200 OK 439 B URL HTTP/2 js-agent.newrelic.com/41.95d4308d-1222.js
IP
File type ASCII text, with very long lines (828), with no line terminators
Hash 46946da829a2257cd8bdeb75bc6f8ff9
bfb81d0ebb2c5a2c0fe666f6a9c4c09cc5a545b3
50e164f0b5274f88ecc28c833729663593b3380aed5a4ac3a06d29106332a544
GET /41.95d4308d-1222.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 2TG7kVMnt5x5EwbcjDgF/pAaH/jmgGXStlMFEbvOUPNYaRTe14pFRmwb0VQGFJQN7uXfEncHoqkNLs4TYWl92Q==
x-amz-request-id: MFEHG5GPGK6ZYQVP
last-modified: Wed, 18 Jan 2023 20:22:30 GMT
etag: "29dd8aef66100e4c69e07fd60fc88b12"
x-amz-version-id: 6FOFyXAonMoqJqLGEMhx7HWIp32cv4MT
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
via: 1.1 varnish
x-served-by: cache-bma1662-BMA
x-cache: HIT
x-cache-hits: 733
x-timer: S1675310504.955156,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 439
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=15226519&tm=gtm002&Ver=2&mid=f0cb11c3-2179-47fb-bc99-9528e1584e57&sid=5c63d540a2ae11edacdec3ed0c962f7e&vid=5c63c480a2ae11edaa7dcf754a573bee&vids=0&msclkid=N&pagetype=product&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=633611
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=15226519&tm=gtm002&Ver=2&mid=f0cb11c3-2179-47fb-bc99-9528e1584e57&sid=5c63d540a2ae11edacdec3ed0c962f7e&vid=5c63c480a2ae11edaa7dcf754a573bee&vids=0&msclkid=N&pagetype=product&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=633611
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=15226519&tm=gtm002&Ver=2&mid=f0cb11c3-2179-47fb-bc99-9528e1584e57&sid=5c63d540a2ae11edacdec3ed0c962f7e&vid=5c63c480a2ae11edaa7dcf754a573bee&vids=0&msclkid=N&pagetype=product&en=Y&sw=1280&sh=1024&sc=24&evt=custom&rn=633611 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=1AC1BE053B486CB1289BACA93A1F6D50; domain=.bing.com; expires=Tue, 27-Feb-2024 04:01:43 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A81B6390BD8E47ADAA33F147BE255B74 Ref B: OSL30EDGE0311 Ref C: 2023-02-02T04:01:43Z
date: Thu, 02 Feb 2023 04:01:43 GMT
X-Firefox-Spdy: h2
bat.bing.com/p/action/15226519.js
204 No Content 0 B URL HTTP/2 bat.bing.com/p/action/15226519.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/15226519.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8E0020152DA64D57B8A828F74639C614 Ref B: OSL30EDGE0311 Ref C: 2023-02-02T04:01:43Z
date: Thu, 02 Feb 2023 04:01:43 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 314 B IP
Hash a74e9df0da2b1a67dfda6786a37dd2a8
8fefdd28cf1a5806b0f3bb23f86b81e03dbde32a
6a8ae9cbe9e568d449136667058e401101fe5130f4dc92524d44f4498210aa9e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4203
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Last-Modified: Thu, 02 Feb 2023 02:51:42 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 314
web1.acsbapp.com/apps/app/dist/media/logomono.svg
200 OK 1.2 kB URL HTTP/2 web1.acsbapp.com/apps/app/dist/media/logomono.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash 5a1c5c803738f6acbab0a79379c92c10
9f4639325d9e8e69ccc2bfc30d0f83d7dd11cd79
04009697f389893748179c149cad7b1e399d23a2284637350fe07ad94ffa5350
GET /apps/app/dist/media/logomono.svg HTTP/1.1
Host: web1.acsbapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=432000 public
expires: Fri, 02 Feb 2024 04:01:44 GMT
content-type: image/svg+xml
last-modified: Mon, 26 Sep 2022 21:02:04 GMT
etag: "1034-6332134c-7705bf7dfc5e498d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1210
date: Thu, 02 Feb 2023 04:01:44 GMT
access-control-allow-origin: *
access-control-allow-headers: *
X-Firefox-Spdy: h2
fresnel.vimeocdn.com/add/player-test-impression?beacon=1
200 OK 0 B URL HTTP/2 fresnel.vimeocdn.com/add/player-test-impression?beacon=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-test-impression?beacon=1 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 116
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Thu, 02 Feb 2023 04:01:44 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/1030947153/?random=1675310526721&cv=11&fst=1675310526721&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=DP_eCJK8xO0BENGCzOsD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&value=0&bttype=purchase&auid=1502918550.1675310527&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
200 OK 63 B URL HTTP/2 www.google.no/pagead/1p-conversion/1030947153/?random=1675310526721&cv=11&fst=1675310526721&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=DP_eCJK8xO0BENGCzOsD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&value=0&bttype=purchase&auid=1502918550.1675310527&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0
IP
File type ASCII text, with no line terminators
Hash 0339f8f57d1bf75003db591e28957e45
ae2286e497c9f76a02cb40c40a674b73bd293b76
609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/1030947153/?random=1675310526721&cv=11&fst=1675310526721&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=DP_eCJK8xO0BENGCzOsD&hn=www.google.com&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&value=0&bttype=purchase&auid=1502918550.1675310527&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1030947153/?random=1675310526903&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3613553433&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1030947153/?random=1675310526903&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3613553433&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1030947153/?random=1675310526903&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2oa1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=3613553433&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1030947153/?random=1675310526728&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=Jf_hCIzXoNECENGCzOsD&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&fmt=3&is_vtc=1&random=808237185&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1030947153/?random=1675310526728&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=Jf_hCIzXoNECENGCzOsD&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&fmt=3&is_vtc=1&random=808237185&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1030947153/?random=1675310526728&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&label=Jf_hCIzXoNECENGCzOsD&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&fmt=3&is_vtc=1&random=808237185&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=1df0e92d1ab591661a8aca6875f891b27ea4e3f21675310502
200 OK 0 B URL HTTP/2 fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=1df0e92d1ab591661a8aca6875f891b27ea4e3f21675310502
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /add/player-stats?beacon=1&session-id=1df0e92d1ab591661a8aca6875f891b27ea4e3f21675310502 HTTP/1.1
Host: fresnel.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1477
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://player.vimeo.com
date: Thu, 02 Feb 2023 04:01:44 GMT
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
c.clarity.ms/c.gif
302 Found 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.bing.com/c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&RedC=c.clarity.ms&MXFR=09D6AE77872B6A4B1C14BCDB832B6459
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SM=T; domain=c.clarity.ms; path=/; SameSite=None; Secure;
MUID=09D6AE77872B6A4B1C14BCDB832B6459; domain=.clarity.ms; expires=Tue, 27-Feb-2024 04:01:44 GMT; path=/; SameSite=None; Secure; Priority=High;
date: Thu, 02 Feb 2023 04:01:44 GMT
content-length: 0
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1030947153/?random=1675310526778&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=dynx_itemid%3D1221879%3Bdynx_pagetype%3Dofferdetail%3Bdynx_totalvalue%3D17945&fmt=3&is_vtc=1&random=163172819&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1030947153/?random=1675310526778&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=dynx_itemid%3D1221879%3Bdynx_pagetype%3Dofferdetail%3Bdynx_totalvalue%3D17945&fmt=3&is_vtc=1&random=163172819&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1030947153/?random=1675310526778&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=dynx_itemid%3D1221879%3Bdynx_pagetype%3Dofferdetail%3Bdynx_totalvalue%3D17945&fmt=3&is_vtc=1&random=163172819&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/1030947153/?random=1675310526712&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=ecomm_pagetype%3Dproduct&fmt=3&is_vtc=1&random=1998174513&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/1030947153/?random=1675310526712&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=ecomm_pagetype%3Dproduct&fmt=3&is_vtc=1&random=1998174513&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/1030947153/?random=1675310526712&cv=11&fst=1675310400000&bg=ffffff&guid=ON&async=1>m=2wg1u0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tiba=Evercontest.com%20is%20for%20sale&data=ecomm_pagetype%3Dproduct&fmt=3&is_vtc=1&random=1998174513&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 02 Feb 2023 04:01:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-11585500-1&cid=778186778.1675310527&jid=500169472&gjid=1361740633&_gid=1246069076.1675310528&_u=aDDAgEADQAAAAGAAI~&z=862838881
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-11585500-1&cid=778186778.1675310527&jid=500169472&gjid=1361740633&_gid=1246069076.1675310528&_u=aDDAgEADQAAAAGAAI~&z=862838881
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-11585500-1&cid=778186778.1675310527&jid=500169472&gjid=1361740633&_gid=1246069076.1675310528&_u=aDDAgEADQAAAAGAAI~&z=862838881 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.squadhelp.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 02 Feb 2023 04:01:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-11585500-4&cid=778186778.1675310527&jid=985934738&gjid=917999022&_gid=1246069076.1675310528&_u=KDDAAEACQAAAACAAI~&z=1094845785
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-11585500-4&cid=778186778.1675310527&jid=985934738&gjid=917999022&_gid=1246069076.1675310528&_u=KDDAAEACQAAAACAAI~&z=1094845785
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-11585500-4&cid=778186778.1675310527&jid=985934738&gjid=917999022&_gid=1246069076.1675310528&_u=KDDAAEACQAAAACAAI~&z=1094845785 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.squadhelp.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 02 Feb 2023 04:01:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9cc68e933a703ab17858b65432c675f7
8ba7f07b32b4c3fdeb40aaf9bb47126c86010cd3
35479672fb8118dfee89e1ba4c16fdee728920bdd349854b39e090ef6a8d2354
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4459
Cache-Control: max-age=158842
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Etag: "63daedb7-1d7"
Expires: Sat, 04 Feb 2023 00:09:06 GMT
Last-Modified: Wed, 01 Feb 2023 22:54:47 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/dzJAsmEe9WY
IP
Hash 6ce3571ee38fcaa34b33ff84c066a392
5ec7c56d433f846bd6c9b1b4e0bb82bb07aa1c6f
6f9259caad4d79b8edb9461de47fdfdf627ea1bf0fc89299bc782c60d16f86ba
POST /s/gts1d4/dzJAsmEe9WY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 04:01:44 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=35963eba-a580-47ea-a1df-d193c53ac027&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ded670dc-a754-46a6-9950-f6e48b9011af&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=35963eba-a580-47ea-a1df-d193c53ac027&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ded670dc-a754-46a6-9950-f6e48b9011af&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=35963eba-a580-47ea-a1df-d193c53ac027&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ded670dc-a754-46a6-9950-f6e48b9011af&tw_document_href=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o0zgt&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:43 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_6KFLRZ5VbvpRzG5H/WjJ3Q=="; Max-Age=63072000; Expires=Sat, 01 Feb 2025 04:01:44 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 21ce7fb0be45da60
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: 2c10f517113fe6de4611a35a6412421f28485c1e7621d15898451a4db15240f7
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=34987&time=1675310527581&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest
302 Found 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=34987&time=1675310527581&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=34987&time=1675310527581&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D34987%26time%3D1675310527581%26url%3Dhttps%253A%252F%252Fwww.squadhelp.com%252Fname%252FEvercontest%26liSync%3Dtrue
set-cookie: UserMatchHistory=AQKlmKMF_k7RiQAAAYYQSZj0FSFcv-jGCVS7UFMIqI8mk7OcDhXvcgj7WyZ8_Saeh5Rw8tqpsMg-uA; Max-Age=2592000; Expires=Sat, 04 Mar 2023 04:01:44 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
AnalyticsSyncHistory=AQI_cls5S0xWgQAAAYYQSZj0YmFvkRQl7y14mvAiDHJDXyPuLy7F_6kSP0UzeEIysMrkrLfXUjoJ31XW9O9Vmw; Max-Age=2592000; Expires=Sat, 04 Mar 2023 04:01:44 GMT; SameSite=None; Path=/; Domain=.linkedin.com; Secure
lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&58616c9a-737c-405c-82fc-0ec6dac52cb3"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 02-Feb-2024 04:01:44 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2425:u=1:x=1:i=1675310504:t=1675396904:v=2:sig=AQHyPHcGxrYAK0nEFopctfaoZZUOpLaU"; Expires=Fri, 03 Feb 2023 04:01:44 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-source-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzr598lLLmR2lJhntYCA==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 545CD661C4924313A3B3CA08BD15DE55 Ref B: OSL30EDGE0414 Ref C: 2023-02-02T04:01:44Z
date: Thu, 02 Feb 2023 04:01:43 GMT
content-length: 0
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=776488579087398&ev=ViewContent&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&rl=&if=false&ts=1675310528665&cd[content_type]=product&cd[content_ids]=%5B%271221879%27%5D&cd[value]=17945&cd[currency]=USD&cd[content_category]=&cd[content_name]=Evercontest.com&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=30&fbp=fb.1.1675310528662.456599323&it=1675310527625&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=776488579087398&ev=ViewContent&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&rl=&if=false&ts=1675310528665&cd[content_type]=product&cd[content_ids]=%5B%271221879%27%5D&cd[value]=17945&cd[currency]=USD&cd[content_category]=&cd[content_name]=Evercontest.com&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=30&fbp=fb.1.1675310528662.456599323&it=1675310527625&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=776488579087398&ev=ViewContent&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&rl=&if=false&ts=1675310528665&cd[content_type]=product&cd[content_ids]=%5B%271221879%27%5D&cd[value]=17945&cd[currency]=USD&cd[content_category]=&cd[content_name]=Evercontest.com&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=30&fbp=fb.1.1675310528662.456599323&it=1675310527625&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 02 Feb 2023 04:01:44 GMT
X-Firefox-Spdy: h2
c.bing.com/c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&RedC=c.clarity.ms&MXFR=09D6AE77872B6A4B1C14BCDB832B6459
302 Found 0 B URL HTTP/2 c.bing.com/c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&RedC=c.clarity.ms&MXFR=09D6AE77872B6A4B1C14BCDB832B6459
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&RedC=c.clarity.ms&MXFR=09D6AE77872B6A4B1C14BCDB832B6459 HTTP/1.1
Host: c.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
location: https://c.clarity.ms/c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&MUID=0D330671AD926BCD35AE14DDACC56AD7
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: SRM_B=0D330671AD926BCD35AE14DDACC56AD7; domain=c.bing.com; expires=Tue, 27-Feb-2024 04:01:44 GMT; path=/; SameSite=None; Secure;
x-powered-by: ASP.NET
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 1EA3528B535548BB9A98195EA238394D Ref B: OSL30EDGE0311 Ref C: 2023-02-02T04:01:44Z
date: Thu, 02 Feb 2023 04:01:43 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d189035b039cf1b91a924e2b75863982
1a2942d0ca84c08e8d6dea500aa0b294381b0971
a026ef690d684bf08a81f028bb22d434caac727cc8a8347d7aca8734f24b176a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=161629
Date: Thu, 02 Feb 2023 04:01:44 GMT
Etag: "63dafa7c-1d7"
Expires: Sat, 04 Feb 2023 00:55:33 GMT
Last-Modified: Wed, 01 Feb 2023 23:49:16 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -H3-cunc4JVOmts-9G48QEwPsiOUQrvyKQdSAmL-try3VKiilYN8Eg==
Age: 3977
www.facebook.com/tr/?id=776488579087398&ev=PageView&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&rl=&if=false&ts=1675310528663&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1675310528662.456599323&it=1675310527625&coo=false&tm=1&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=776488579087398&ev=PageView&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&rl=&if=false&ts=1675310528663&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1675310528662.456599323&it=1675310527625&coo=false&tm=1&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=776488579087398&ev=PageView&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&rl=&if=false&ts=1675310528663&sw=1280&sh=1024&v=2.9.95&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=30&fbp=fb.1.1675310528662.456599323&it=1675310527625&coo=false&tm=1&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 02 Feb 2023 04:01:44 GMT
X-Firefox-Spdy: h2
c.clarity.ms/c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&MUID=0D330671AD926BCD35AE14DDACC56AD7
200 OK 42 B URL HTTP/2 c.clarity.ms/c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&MUID=0D330671AD926BCD35AE14DDACC56AD7
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 1 x 1\012- data
Hash 32023bb33cfb2a1990a4ef2d85b6ac16
23dcc6d4b5bfe00357fd0248bb5955b8e36bb8f1
99c2917ee5b2a01459a923bdd1c676f15ee73b62b87f696e6735312d26f51e12
GET /c.gif?CtsSyncId=ED1459B8146849D1A45904324E542CB5&MUID=0D330671AD926BCD35AE14DDACC56AD7 HTTP/1.1
Host: c.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, proxy-revalidate, no-store
pragma: no-cache
content-type: image/gif
last-modified: Tue, 17 Jan 2023 20:36:49 GMT
accept-ranges: bytes
etag: "b1c8df6cb32ad91:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
set-cookie: ANONCHK=0; domain=c.clarity.ms; expires=Thu, 02-Feb-2023 04:11:44 GMT; path=/; SameSite=None; Secure;
date: Thu, 02 Feb 2023 04:01:44 GMT
content-length: 42
X-Firefox-Spdy: h2
www.clarity.ms/tag/3xq9rdybkj
200 OK 918 B URL HTTP/2 www.clarity.ms/tag/3xq9rdybkj
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type ASCII text, with very long lines (918), with no line terminators
Hash 7fd13828b483c9a7de528febda4d5f51
12c231542a21ac9be79de0fce5db9d5ab8f1ed06
2e939fffbd64d7c0d009d1528994f70c4909b003f4211cfd1d0d53404a06e18b
GET /tag/3xq9rdybkj HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store
content-type: application/x-javascript
expires: -1
set-cookie: CLID=789a21af6c814547a421d5fa231f7dd1.20230202.20240202; expires=Fri, 02 Feb 2024 04:01:43 GMT; path=/; secure; samesite=none; httponly
request-context: appId=cid-v1:e55edbbe-e22b-46b4-8313-9ee2a4e71d12
x-cache: CONFIG_NOCACHE
x-azure-ref: 0pzXbYwAAAAC89uSBzKoURr7UOc/QoVb8Q1BIMzBFREdFMDQxNgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 02 Feb 2023 04:01:42 GMT
X-Firefox-Spdy: h2
tr.outbrain.com/unifiedPixel?marketerId=00307c4941e2958412d6d5d587832791fc&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&optOut=false&bust=03732460930025976&referrer=
200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00307c4941e2958412d6d5d587832791fc&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&optOut=false&bust=03732460930025976&referrer=
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=00307c4941e2958412d6d5d587832791fc&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&optOut=false&bust=03732460930025976&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 04:01:44 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: b77b3066923dc9e9baad2d20cf3182af
www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D34987%26time%3D1675310527581%26url%3Dhttps%253A%252F%252Fwww.squadhelp.com%252Fname%252FEvercontest%26liSync%3Dtrue
302 Found 0 B URL HTTP/2 www.linkedin.com/px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D34987%26time%3D1675310527581%26url%3Dhttps%253A%252F%252Fwww.squadhelp.com%252Fname%252FEvercontest%26liSync%3Dtrue
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D34987%26time%3D1675310527581%26url%3Dhttps%253A%252F%252Fwww.squadhelp.com%252Fname%252FEvercontest%26liSync%3Dtrue HTTP/1.1
Host: www.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
cache-control: no-cache, no-store
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=34987&time=1675310527581&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&liSync=true
set-cookie: lang=v=2&lang=en-us; Domain=linkedin.com; Path=/; Secure; SameSite=None
bcookie="v=2&4f40b16b-715b-4c5c-8a26-2417c8bc5976"; Domain=.linkedin.com; Expires=Fri, 02-Feb-2024 04:01:44 GMT; Path=/; Secure; SameSite=None
bscookie="v=1&20230202040144a3a08d17-e26d-4911-816d-220976fa3454AQEof2xB64oFVj7cpCqHsV3gyl0kD-5T"; Domain=.www.linkedin.com; Expires=Fri, 02-Feb-2024 04:01:44 GMT; Path=/; HttpOnly; Secure; SameSite=None
li_gc=MTswOzE2NzUzMTA1MDQ7MjswMjEUDyR0KoVRWQhj0TyxGGc7YJitMcs+SrVA50nvk5Tfcg==; Domain=.linkedin.com; Expires=Tue, 01 Aug 2023 04:01:44 GMT; Path=/; Secure; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2425:u=1:x=1:i=1675310504:t=1675396904:v=2:sig=AQHyPHcGxrYAK0nEFopctfaoZZUOpLaU"; Expires=Fri, 03 Feb 2023 04:01:44 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
content-security-policy: default-src *; connect-src 'self' *.licdn.com *.linkedin.com wss://*.linkedin.com dpm.demdex.net/id lnkd.demdex.net blob: accounts.google.com/gsi/ linkedin.sc.omtrdc.net/b/ss/ *.qualtrics.com *.adyen.com *.microsoft.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; worker-src blob: 'self'; frame-src blob: lnkd-communities: voyager: *; frame-ancestors 'self' *.linkedin.com teams.microsoft.com client.learningapp.microsoft.com; report-uri /security/csp?e=p&f=t
x-frame-options: sameorigin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
expect-ct: max-age=86400, report-uri="https://www.linkedin.com/platform-telemetry/ct"
x-li-fabric: prod-lor1
x-li-pop: afd-prod-lor1-x
x-li-proto: http/2
x-li-uuid: AAXzr5+BN3W6GQGLq6LOfw==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: CE9C655AA6694AD5B4C18AAACA2AB762 Ref B: OSL30EDGE0414 Ref C: 2023-02-02T04:01:44Z
date: Thu, 02 Feb 2023 04:01:43 GMT
content-length: 0
X-Firefox-Spdy: h2
tags.srv.stackadapt.com/sa.css
200 OK 27 B URL HTTP/1.1 tags.srv.stackadapt.com/sa.css
IP
Hash 83f5ba33314db5f218488a5a51da1455
87a21689afa235c4c65437334085be4bf5cca170
3f100e5e6ff270dadb43b44878f0118a2389dee0d844acc102b5179d70a824dc
GET /sa.css HTTP/1.1
Host: tags.srv.stackadapt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: only-if-cached, no-transform, private, max-age=7776000
Content-Type: text/css
Date: Thu, 02 Feb 2023 04:01:44 GMT
Content-Length: 27
Connection: keep-alive
d.clarity.ms/collect
204 No Content 0 B IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /collect HTTP/1.1
Host: d.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1528
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
vary: Origin
server: Microsoft-IIS/10.0
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
access-control-allow-origin: https://www.squadhelp.com
access-control-allow-credentials: true
date: Thu, 02 Feb 2023 04:01:44 GMT
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=34987&time=1675310527581&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&liSync=true
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=34987&time=1675310527581&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&liSync=true
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=34987&time=1675310527581&url=https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest&liSync=true HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&0722861c-c6dc-4850-821b-61f2bf0e808b"; domain=.linkedin.com; Path=/; Secure; Expires=Fri, 02-Feb-2024 04:01:44 GMT; SameSite=None
lidc="b=OGST09:s=O:r=O:a=O:p=O:g=2425:u=1:x=1:i=1675310504:t=1675396904:v=2:sig=AQHyPHcGxrYAK0nEFopctfaoZZUOpLaU"; Expires=Fri, 03 Feb 2023 04:01:44 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-lor1
x-li-source-fabric: prod-ltx1
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXzr5+E8GKeINTLLinn9Q==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 78C640645E544877BA8B1D668909B1C4 Ref B: OSL30EDGE0414 Ref C: 2023-02-02T04:01:44Z
date: Thu, 02 Feb 2023 04:01:43 GMT
content-length: 0
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.19.2/js/vendor.module.js
200 OK 0 B URL HTTP/2 f.vimeocdn.com/p/4.19.2/js/vendor.module.js
IP
GET /p/4.19.2/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:43 GMT
age: 121165
x-served-by: cache-iad-kiad7000044-IAD, cache-bma1657-BMA
x-cache: HIT, HIT
x-cache-hits: 20, 33109
x-timer: S1675310503.062638,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 92489
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/approved-footer-2.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/approved-footer-2.svg
IP
GET /html/html/static_images/approved-footer-2.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Mon, 02 Jan 2023 13:11:10 GMT
etag: W/"63b2d7ee-14e52"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 2643531
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e79b37b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-plus.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-plus.svg
IP
GET /html/html/static_images/icon-plus.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:16 GMT
etag: W/"6345b41c-32f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4364084
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9fc3db529-OSL
content-encoding: br
X-Firefox-Spdy: h2
js.intercomcdn.com/vendor.093ba5d6.js
200 OK 0 B URL HTTP/2 js.intercomcdn.com/vendor.093ba5d6.js
IP
GET /vendor.093ba5d6.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 108273
last-modified: Wed, 01 Feb 2023 15:55:25 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: NpPoCVUCd4vkMm81e_W27_i8UjXhREgF
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 02:59:59 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "b07617332a2da4edc9e0f73e8c835864"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nHgXjdFU3C3VtsRm3w0gPFXhBzVr2NWFVt_jnteeFSjP7vg-TZwwyQ==
age: 5241
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.squadhelp.com/geo-business-names/bubble-theme-dynamic-data
200 OK 0 B URL HTTP/2 www.squadhelp.com/geo-business-names/bubble-theme-dynamic-data
IP
GET /geo-business-names/bubble-theme-dynamic-data HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:42 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: PHPSESSID=t650dol6evj8nrvai04ihatic2; expires=Fri, 03-Feb-2023 04:01:42 GMT; Max-Age=86400; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793006ed0d6bb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.clarity.ms/eus/s/0.7.1/clarity.js
200 OK 0 B URL HTTP/2 www.clarity.ms/eus/s/0.7.1/clarity.js
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
GET /eus/s/0.7.1/clarity.js HTTP/1.1
Host: www.clarity.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public,max-age=86400
content-type: application/javascript;charset=utf-8
content-encoding: br
last-modified: Wed, 01 Jun 2022 12:22:22 GMT
accept-ranges: bytes
etag: "1d933d16af8439e"
server: Microsoft-IIS/10.0
x-cache: TCP_HIT
request-context: appId=cid-v1:238681e8-7d6b-453a-acb6-7dcad74f3111
x-azure-ref-originshield: 0LtnaYwAAAABdUhK+Vu4sS4lJU83cZuqMRlJBMjMxMDUwNDE4MDUxADZjZmJlZWUwLTUwMjctNDg0Yi04OTY3LTRhMjlhZjc3ZjFlMQ==
x-azure-ref: 0pzXbYwAAAAA+xiy85lt+QrDbBTuSTyA9Q1BIMzBFREdFMDQxNgA2Y2ZiZWVlMC01MDI3LTQ4NGItODk2Ny00YTI5YWY3N2YxZTE=
date: Thu, 02 Feb 2023 04:01:43 GMT
X-Firefox-Spdy: h2
www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
200 OK 0 B URL HTTP/2 www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
IP
GET /var/103134b27c40655cef2997158c7db866.css HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: text/css
last-modified: Thu, 02 Feb 2023 02:17:42 GMT
vary: Accept-Encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 3860
server: cloudflare
cf-ray: 793006e74b12b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
trc.taboola.com/1344021/trc/3/json?tim=1675310527925&data=%7B%22id%22%3A420%2C%22ii%22%3A%22%2Fname%2Fevercontest%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675310527918%2C%22cv%22%3A%2220230129-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dsquadhelp%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675310527924%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
200 OK 0 B URL HTTP/2 trc.taboola.com/1344021/trc/3/json?tim=1675310527925&data=%7B%22id%22%3A420%2C%22ii%22%3A%22%2Fname%2Fevercontest%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675310527918%2C%22cv%22%3A%2220230129-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dsquadhelp%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675310527924%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP
GET /1344021/trc/3/json?tim=1675310527925&data=%7B%22id%22%3A420%2C%22ii%22%3A%22%2Fname%2Fevercontest%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1675310527918%2C%22cv%22%3A%2220230129-6-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dsquadhelp%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1675310527924%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Fwww.squadhelp.com%2Fname%2FEvercontest%22%2C%22tos%22%3A1%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 02 Feb 2023 04:01:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1637-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675310504.981491,VS0,VE102
vary: Accept-Encoding
x-vcl-time-ms: 102
X-Firefox-Spdy: h2
qvdt3feo.com/events.js
200 OK 0 B IP
GET /events.js HTTP/1.1
Host: qvdt3feo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.squadhelp.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:44 GMT
content-type: text/javascript
access-control-allow-origin: *
cache-control: max-age=5
content-encoding: gzip
X-Firefox-Spdy: h2
domains.squadhelp.com/lpd/name/evercontest.com
302 Found 0 B URL HTTP/2 domains.squadhelp.com/lpd/name/evercontest.com
IP
GET /lpd/name/evercontest.com HTTP/1.1
Host: domains.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 02 Feb 2023 04:01:36 GMT
content-type: text/html; charset=UTF-8
location: https://www.squadhelp.com/name/Evercontest
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: BYPASS
set-cookie: PHPSESSID=rb9ql868apvatfikm3qok3k7a3; expires=Fri, 03-Feb-2023 04:01:36 GMT; Max-Age=86400; path=/
__cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=; path=/; expires=Thu, 02-Feb-23 04:31:36 GMT; domain=.squadhelp.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006c9b86eb529-OSL
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-chat-white.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-chat-white.svg
IP
GET /html/html/static_images/icon-chat-white.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:23 GMT
etag: W/"6345b423-615"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4252647
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006ea6c75b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
assets.calendly.com/assets/external/widget.css
200 OK 0 B URL HTTP/2 assets.calendly.com/assets/external/widget.css
IP
GET /assets/external/widget.css HTTP/1.1
Host: assets.calendly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: text/css
cf-ray: 793006e85d33b4fa-OSL
age: 191
cache-control: public, max-age=300
etag: W/"397a083322efd65055fd33da0d62ee2c"
expires: Fri, 03 Feb 2023 04:01:41 GMT
last-modified: Fri, 20 Jan 2023 19:21:06 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
cf-bgj: minify
cf-polished: status=cannot_optimize
x-content-type-options: nosniff
set-cookie: __cf_bm=tijlHOBX7UcJ0IvgJGdn0OHAnmlLiW_SSs7yDTv6arw-1675310501-0-AeTDpZAhgASIn4k4iEwNeWkT5UCXu5eXKxEGo1hhXoiX4gOeQnWbDgFRHmuZGW2jgsepuapr2c/2TRPi0+hbI+o=; path=/; expires=Thu, 02-Feb-23 04:31:41 GMT; domain=.calendly.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
api-iam.intercom.io/messenger/web/ping
200 OK 0 B URL HTTP/2 api-iam.intercom.io/messenger/web/ping
IP
POST /messenger/web/ping HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 381
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:43 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
x-ratelimit-limit: 13333
x-ratelimit-reset: 1675310510
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-ratelimit-remaining: 13327
access-control-allow-origin: https://www.squadhelp.com
vary: Accept,Accept-Encoding
x-intercom-version: 8196c3d75bdc7731a709de935272310852175710
x-xss-protection: 1; mode=block
content-encoding: gzip
x-request-id: 0019a9a9rr6n7cq2ihc0
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"95423cd05b7f7d48f45f3cfbbbd4a6bb"
x-runtime: 0.272820
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0c75d874912a7b35f
X-Firefox-Spdy: h2
www.squadhelp.com/favicon.ico
200 OK 0 B URL HTTP/2 www.squadhelp.com/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/x-icon
last-modified: Thu, 13 Aug 2015 11:52:45 GMT
etag: W/"55cc850d-3ed"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 8733514
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006ec4d2fb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/controllers/marketplace.php?action=record_show_page&mp_domain_id=1221879&domain_selling_price=17945&date_recache_time=2023-02-01&query_id=
200 OK 0 B URL HTTP/2 www.squadhelp.com/controllers/marketplace.php?action=record_show_page&mp_domain_id=1221879&domain_selling_price=17945&date_recache_time=2023-02-01&query_id=
IP
GET /controllers/marketplace.php?action=record_show_page&mp_domain_id=1221879&domain_selling_price=17945&date_recache_time=2023-02-01&query_id= HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=; lpg=/name/evercontest
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:43 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=b1rbccdmljamv7p1ie8182be16; expires=Fri, 03-Feb-2023 04:01:42 GMT; Max-Age=86400; path=/
uhash=dbbdeb1460def888; expires=Fri, 02-Feb-2024 04:01:42 GMT; Max-Age=31536000; path=/
uhash=689f683a9f010f5b; expires=Fri, 02-Feb-2024 04:01:43 GMT; Max-Age=31536000; path=/
smart_cat_id=619; expires=Sat, 04-Mar-2023 04:01:43 GMT; Max-Age=2592000; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793006ee3df2b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.linkedin.oribi.io/partner/34987/domain/squadhelp.com/token
200 OK 0 B URL HTTP/2 cdn.linkedin.oribi.io/partner/34987/domain/squadhelp.com/token
IP
GET /partner/34987/domain/squadhelp.com/token HTTP/1.1
Host: cdn.linkedin.oribi.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: *
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.squadhelp.com
Connection: keep-alive
Referer: https://www.squadhelp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
date: Thu, 02 Feb 2023 03:10:43 GMT
access-control-allow-origin: *
cache-control: public, max-age=3600
content-encoding: gzip
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sGuLlh5MQ_8hcngVAjFq-_sAh7hdC2qRgcgp0u2WpjRfmRzqiVH6eQ==
age: 3061
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-search.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-search.svg
IP
GET /html/html/static_images/icon-search.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:38 GMT
etag: W/"6345b432-456"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 5909191
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9ac0bb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-arrow-long-right.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-arrow-long-right.svg
IP
GET /html/html/static_images/icon-arrow-long-right.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:41 GMT
etag: W/"6345b435-e1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 1200296
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9cc1cb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-user.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-user.svg
IP
GET /html/html/static_images/icon-user.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:07 GMT
etag: W/"6345b413-766"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4364140
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9ac0cb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-heart-color.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-heart-color.svg
IP
GET /html/html/static_images/icon-heart-color.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:03 GMT
etag: W/"6345b40f-2dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 2643530
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9dc26b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/icon-arrow-blue-right.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/icon-arrow-blue-right.svg
IP
GET /html/html/static_images/icon-arrow-blue-right.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/var/103134b27c40655cef2997158c7db866.css
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:37 GMT
etag: W/"6345b431-e3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 1235571
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e9fc3cb529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.squadhelp.com/html/html/static_images/payment-method.svg
200 OK 0 B URL HTTP/2 www.squadhelp.com/html/html/static_images/payment-method.svg
IP
GET /html/html/static_images/payment-method.svg HTTP/1.1
Host: www.squadhelp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.squadhelp.com/name/Evercontest
Cookie: __cf_bm=K9uuvuEZz3GdNKFEEeA7vvCZE3ux7geSncbrn41yR28-1675310496-0-AWL6hDLSJkPtpyiKLdtsCY9Fb5Nlpx7aV0OXz8WTkLs2uhGNrDFK1sM5VYzReKyeWHsswAIS1fY1Fyip7qfwPXM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 04:01:41 GMT
content-type: image/svg+xml
last-modified: Tue, 11 Oct 2022 18:21:39 GMT
etag: W/"6345b433-a06ab"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: HIT
age: 4390817
vary: Accept-Encoding
server: cloudflare
cf-ray: 793006e74b15b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
52.20.84.62
93.184.220.29
2.18.173.74
104.22.51.96
151.101.86.109
157.240.205.35