eu.pastmilsk.click/lt/i14s22/splius/
302 Found 0 B URL HTTP/1.1 eu.pastmilsk.click/lt/i14s22/splius/
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lt/i14s22/splius/ HTTP/1.1
Host: eu.pastmilsk.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 25 Oct 2022 15:19:16 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Location: https://7ktpj.bemobtracks.com/go/75ef24d0-aa3e-4f3b-86d4-929dd1c8dad3
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b3537658770790ad6cf0d727f0c0acd2
8365cadda05ef27b2ebd627d545e31886b512bde
df992311f130f15459739841de925c7eec2604d5a68ca6b2a67b6dc8d229212c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF992311F130F15459739841DE925C7EEC2604D5A68CA6B2A67B6DC8D229212C"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10035
Expires: Tue, 25 Oct 2022 18:06:31 GMT
Date: Tue, 25 Oct 2022 15:19:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5707
Cache-Control: max-age=157622
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 15:19:16 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 11:06:18 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3797
Cache-Control: max-age=155712
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 15:19:16 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:34:28 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4736bac84ca28f2b1e961159fb4ea098
1319612979f53896fcfeacd4215c2715d4951e4c
5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
Alt-Used: 0
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 25 Oct 2022 14:41:34 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2262
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13165
Expires: Tue, 25 Oct 2022 18:58:41 GMT
Date: Tue, 25 Oct 2022 15:19:16 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QV9x9w+2Y/qz5rzQ8NkKWJ4WR+KDM8V4C6wHgfrUoLrP8MmzBhxbLCZO2xkxuBucJNuG2vow2kk=
x-amz-request-id: ER3ZH7J3S05E3ET6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 25 Oct 2022 14:38:50 GMT
age: 2426
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0000df29e5b1d6b470c51b1f206eced0
6c3aeedd65cea61d826756d931c9f5fd06a5fa0a
e1fc6cacc716d7d636c9a5f8acf7d0bcdc15f1e747b5ae66611ef5625004215b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E1FC6CACC716D7D636C9A5F8ACF7D0BCDC15F1E747B5AE66611EF5625004215B"
Last-Modified: Sun, 23 Oct 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9210
Expires: Tue, 25 Oct 2022 17:52:46 GMT
Date: Tue, 25 Oct 2022 15:19:16 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 15:19:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
7ktpj.bemobtracks.com/go/75ef24d0-aa3e-4f3b-86d4-929dd1c8dad3
302 Found 194 B URL HTTP/2 7ktpj.bemobtracks.com/go/75ef24d0-aa3e-4f3b-86d4-929dd1c8dad3
IP
File type HTML document, ASCII text, with no line terminators
Hash abe561d3936fce84c0812fb66f1e78b1
befe7e569c03a2ecba0e5403fdbbb60cc9bed96c
bde6ef356fa741f049184c9266e3738c73089ee1a74a1270d173b15535f3168a
GET /go/75ef24d0-aa3e-4f3b-86d4-929dd1c8dad3 HTTP/1.1
Host: 7ktpj.bemobtracks.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: openresty
date: Tue, 25 Oct 2022 15:19:16 GMT
content-type: text/html; charset=utf-8
content-length: 194
access-control-allow-origin: *
location: https://gtoonfd.com/link?z=5450494&var=&ymid=DM8ZLN2oYH1otbfs846oo6
set-cookie: bemob-uniq-visit:75ef24d0-aa3e-4f3b-86d4-929dd1c8dad3=1; Domain=7ktpj.bemobtracks.com; Path=/; Expires=Wed, 26 Oct 2022 15:19:16 GMT; HttpOnly; Secure; SameSite=None
bemob-rotation:75ef24d0-aa3e-4f3b-86d4-929dd1c8dad3:random:50ef7b43bc4e66fb5f9f02f2110e29c9=0-0-12; Domain=7ktpj.bemobtracks.com; Path=/; Expires=Wed, 26 Oct 2022 15:19:16 GMT; HttpOnly; Secure; SameSite=None
bemob-click-id=DM8ZLN2oYH1otbfs846oo6; Domain=7ktpj.bemobtracks.com; Path=/; Expires=Wed, 26 Oct 2022 15:19:16 GMT; HttpOnly; Secure; SameSite=None
vary: Accept
x-response-time: 14.416ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22dd9508aa15d7cbdb1276fc07d7a77e
b399b003bf5af8fa1b170c9d4e83a09beea8fa19
0bd95041885c4f0121431ce64e2f2c4f0422787f3a8cd3e4042931eccbec7818
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BD95041885C4F0121431CE64E2F2C4F0422787F3A8CD3E4042931ECCBEC7818"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5346
Expires: Tue, 25 Oct 2022 16:48:23 GMT
Date: Tue, 25 Oct 2022 15:19:17 GMT
Connection: keep-alive
gtoonfd.com/link?z=5450494&var=&ymid=DM8ZLN2oYH1otbfs846oo6
302 Found 0 B URL HTTP/2 gtoonfd.com/link?z=5450494&var=&ymid=DM8ZLN2oYH1otbfs846oo6
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /link?z=5450494&var=&ymid=DM8ZLN2oYH1otbfs846oo6 HTTP/1.1
Host: gtoonfd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx
date: Tue, 25 Oct 2022 15:19:17 GMT
content-length: 0
location: https://cdntechone.com/r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=5450494&axcusid1=&clid={ymid}&r=http%3A%2F%2Fgtoonfd.com%2Flink%3Fz%3D5450494%26var%3D%26ymid%3DDM8ZLN2oYH1otbfs846oo6%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=7402
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 3586fc6a7ff5aabcf928bfe455d41c53
link: <https://cdntechone.com>; rel="dns-prefetch preconnect"
set-cookie: OAID=5e7781d3a2b145259fcce0422b8776d6; expires=Wed, 25 Oct 2023 15:19:17 GMT
oaidts=1666711157; expires=Wed, 25 Oct 2023 15:19:17 GMT
phpckd5450494=true; expires=Wed, 26 Oct 2022 15:19:17 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d89151f708ba953e0e260eceb010a9dc
5d6d7a6fd3493d9597ed9f3b7bf2c5c332538e35
33dd2066093ba4a72d8387c2e317225330554414e3098c69b518c91f4cf52f1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1437
Cache-Control: max-age=115890
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 15:19:17 GMT
Etag: "63571a8a-118"
Expires: Wed, 26 Oct 2022 23:30:47 GMT
Last-Modified: Mon, 24 Oct 2022 23:06:50 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash d89151f708ba953e0e260eceb010a9dc
5d6d7a6fd3493d9597ed9f3b7bf2c5c332538e35
33dd2066093ba4a72d8387c2e317225330554414e3098c69b518c91f4cf52f1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1909
Cache-Control: max-age=116362
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 15:19:17 GMT
Etag: "63571a8a-118"
Expires: Wed, 26 Oct 2022 23:38:39 GMT
Last-Modified: Mon, 24 Oct 2022 23:06:50 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 471 B IP
Hash 518ff04fd536958e285cf07aaf4a2786
fa5dad2391c2a9957340bd629f0462db4f412a5c
608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5890
Cache-Control: max-age=152741
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 15:19:17 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 09:44:58 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 472 B IP
Hash eb3eadee3bf4069eb9dd28a889d3eebc
0eb4c67b14969eb00ebc60a1a2f409280b94be49
95f614619d056ddf82a8d4a236174f1bc4d415c641561a49592cdadfe6014b65
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 15:19:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 04:52:38 GMT
Expires: Mon, 31 Oct 2022 04:52:37 GMT
Etag: "0eb4c67b14969eb00ebc60a1a2f409280b94be49"
Cache-Control: max-age=480199,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fbedfe8cf10b45-OSL
datatechone.com/log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853
200 OK 2 B URL HTTP/1.1 datatechone.com/log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=e7ddf874-40d2-43d7-b8fd-56541bff0853 HTTP/1.1
Host: datatechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1128
Origin: https://cdntechone.com
Connection: keep-alive
Referer: https://cdntechone.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 25 Oct 2022 15:19:17 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: https://cdntechone.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
ocsp.digicert.com/
200 OK 279 B IP
Hash cd022c62545ea137db17a43ae699066c
5542691384c8bb8a40da5c8bafbb797da0617694
7be7e2662f1931369ded6462e731c38372bc8f6cd93f852fe4281d22146826ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 317
Cache-Control: max-age=104722
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 15:19:17 GMT
Etag: "6356f34a-117"
Expires: Wed, 26 Oct 2022 20:24:39 GMT
Last-Modified: Mon, 24 Oct 2022 20:19:22 GMT
Server: ECS (amb/6B9C)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GA3jvsgc2EBeJIHDc5toxQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bn0R45ZxA/8eanXMj8yfAlrjlcg=
gtoonfd.com/link?z=5450494&var=&ymid=DM8ZLN2oYH1otbfs846oo6&acb=proxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=7402
200 OK 948 B URL HTTP/2 gtoonfd.com/link?z=5450494&var=&ymid=DM8ZLN2oYH1otbfs846oo6&acb=proxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=7402
IP
Hash d978e1857850213c053a371d542084ab
a4d68fe7819f3b1bdf58fc24f5122e6273064346
75c54f05b23163b1fb310c06c4d82c67a6d75b0b8492f35c0246a2ea32799ccc
Analyzer Verdict Alert quad9 Sinkholed
GET /link?z=5450494&var=&ymid=DM8ZLN2oYH1otbfs846oo6&acb=proxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=7402 HTTP/1.1
Host: gtoonfd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: OAID=5e7781d3a2b145259fcce0422b8776d6; oaidts=1666711157; phpckd5450494=true
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: text/html; charset=utf8
x-trace-id: 9ee8256c935732e253287dd1ffd04661
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://championtest.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=5e7781d3a2b145259fcce0422b8776d6; expires=Wed, 25 Oct 2023 15:19:17 GMT; path=/; secure; SameSite=None
oaidts=1666711157; expires=Wed, 25 Oct 2023 15:19:17 GMT; path=/; secure; SameSite=None
allcnt=1; expires=Wed, 25 Oct 2023 15:19:17 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
championtest.com/betting-survey.html?offer_id=2058&s=608793320956895782&z=5450495&var=&geo=NO&ipp=1&rdk=rk1
200 OK 64 kB URL HTTP/2 championtest.com/betting-survey.html?offer_id=2058&s=608793320956895782&z=5450495&var=&geo=NO&ipp=1&rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1940)
Hash f33444f184b5eae82e685da9be8a1d5d
f1369ce47cb4b62486bc7d88f749939117796bd1
f9bd8ee2fca2cbe6196f090c19cdbcc36a9dbb597a18ef92016a55eb39c24730
GET /betting-survey.html?offer_id=2058&s=608793320956895782&z=5450495&var=&geo=NO&ipp=1&rdk=rk1 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: text/html
last-modified: Mon, 24 Oct 2022 13:47:49 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JVtBjiZoTx5f89tAlvVoztCgbGVpAY3m89zytJHX6n%2F3cFqsIBAuM%2BOHeLBk5Sw7CYp%2BRBn2mneYkKJNacxw3na6S6pEgIarbipqHB0Dw7HZc%2BjCc57hb7JimUBpBVia6VnT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fbee004d7d0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
championtest.com/img/betting/sport-betting/ball.png
200 OK 23 kB URL HTTP/2 championtest.com/img/betting/sport-betting/ball.png
IP
File type PNG image data, 211 x 74, 8-bit/color RGBA, non-interlaced\012- data
Hash 50d9c7c1b2ea5e94459861255ad142b2
55fd9b1d556f3c5be65f272fefe48a03185a9e3c
0fe1d16c0a7fbb570b697153b3c900cfc2a177a8525875f5f440ec0f21624e1d
GET /img/betting/sport-betting/ball.png HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://championtest.com/css/sport-betting.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: image/png
content-length: 23156
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
etag: "63569786-5a74"
cache-control: max-age=14400
cf-cache-status: HIT
age: 782
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PVj9I7Eu1bHjh0Zjt5BZGrCfgEcsfAtKa45yt2%2BFswsgGsIZbyhZ9bF%2B1MZ06lkNoeLAr6yB1hhJATTZaSXcx1WDC%2Bl%2BeoukOfT6vKj9zhbfmD51nsjUAe0p5ml0N5ImmNcu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fbee012e600b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
championtest.com/img/betting/sport-betting/girl.png
200 OK 69 kB URL HTTP/2 championtest.com/img/betting/sport-betting/girl.png
IP
File type PNG image data, 381 x 650, 8-bit colormap, non-interlaced\012- data
Hash d6fe5228346e3f9158603f0b45668490
addff59392bb4a7ec9944c3c3607c9ab29c91136
01039c13acbfa2dd45d7eeddeff502e2ab104ace543097728803ff7795bcaa1a
GET /img/betting/sport-betting/girl.png HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://championtest.com/css/sport-betting.css?v=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: image/png
content-length: 68758
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
etag: "63569786-10c96"
cache-control: max-age=14400
cf-cache-status: HIT
age: 782
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vnQmhzYAogL8Dc6DNxKTq98%2FNuqMCVRiwCFG9BxzbcK%2FVpOrPhtVO%2BDChYsa6YpB0gfVtfq6hqNDkf3Nd5jYvZMk0SAIodX4UWGvdWfECAK8QjD9aCmUeZ4iWmJtyMFng3RB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fbee012e620b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash e4e9602f1062e692c3df5dc1eec489cb
ab47ab5548fed1ea1e145becb03a9885eacf7ddb
036e9d4e5c9e9bc75cbb78389fbcc4a5cdfa3463feddd5db8a11375b8c964af0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 15:19:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 06:25:20 GMT
Expires: Mon, 31 Oct 2022 06:25:19 GMT
Etag: "ab47ab5548fed1ea1e145becb03a9885eacf7ddb"
Cache-Control: max-age=485761,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fbee007eae0b45-OSL
my.rtmark.net/img.gif?f=merge&userId=5e7781d3a2b145259fcce0422b8776d6
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=5e7781d3a2b145259fcce0422b8776d6
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=5e7781d3a2b145259fcce0422b8776d6 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 15:19:18 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5e7781d3a2b145259fcce0422b8776d6; expires=Wed, 25 Oct 2023 15:19:18 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 2.2 kB IP
Hash 53fbe198407b06d2788c68ea2685d5fa
251cc96c4e45ebf89b270189201de10beea98b5b
9a90dbcd7fe780d658614cdbba5749ef0f04be6b16d2f758040694770d466de1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 15:19:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 06:25:20 GMT
Expires: Mon, 31 Oct 2022 06:25:19 GMT
Etag: "ab47ab5548fed1ea1e145becb03a9885eacf7ddb"
Cache-Control: max-age=485760,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fbee0278680b45-OSL
ocsp.digicert.com/
200 OK 280 B IP
Hash d89151f708ba953e0e260eceb010a9dc
5d6d7a6fd3493d9597ed9f3b7bf2c5c332538e35
33dd2066093ba4a72d8387c2e317225330554414e3098c69b518c91f4cf52f1c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1910
Cache-Control: max-age=116362
Content-Type: application/ocsp-response
Date: Tue, 25 Oct 2022 15:19:18 GMT
Etag: "63571a8a-118"
Expires: Wed, 26 Oct 2022 23:38:40 GMT
Last-Modified: Mon, 24 Oct 2022 23:06:50 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 280
my.rtmark.net/gid.js
200 OK 65 B IP
File type JSON data\012- , ASCII text
Hash 7cc2efb79fb10caacd164f9fb922b43d
3ef81d247dbdeed762e0a4d0ca4dfb791e0f8b19
ea17c3ba8f6aa06ef548f23b73e31849f7a79d53b6942cbf42fe045d8654f794
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 15:19:18 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://championtest.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=abd60774ecf04b67824d5ec5b26b9bfb; expires=Wed, 25 Oct 2023 15:19:18 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 4d0e6d74c8c57456fd24456cd68fae6f
f1c9adaea0e134fccdb651d23365b6f02b6c94ec
0fb3f4daebae810eb2a1f9d21227f82d4b7d46352d310f75729d0d9dc56f662b
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 15:19:18 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sat, 29 Oct 2022 12:18:48 GMT
ETag: "f1c9adaea0e134fccdb651d23365b6f02b6c94ec"
Last-Modified: Tue, 25 Oct 2022 12:18:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2795
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75fbee044c53b4e8-OSL
ocsp.sectigo.com/
200 OK 1.8 kB IP
Hash d425a9750420c76c6e8ac79cca2e220b
6d733c88902f92be4a67581a90ed8fe5375c1355
08663a6a474d08c3cc80ca599b7c228b76d1dd0e544b1c73c177513e9574640b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Oct 2022 15:19:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 01:33:16 GMT
Expires: Tue, 01 Nov 2022 01:33:15 GMT
Etag: "569947d789ce819632a881cb49b16b79ef6353ec"
Cache-Control: max-age=554636,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75fbee047a750b45-OSL
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash b8652e33f5bd5ff280922739cb5b55f1
a1b0a76e7ed8cf5a87eba6b2bd3413d9c1cc3963
bb6e49dc63f5bae83b1b3303951f9aca12e41bc314db2e7d0315f4dc7396edb6
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73490
date: Tue, 25 Oct 2022 15:19:18 GMT
access-control-allow-origin: *
etag: "63575841-11f12"
expires: Tue, 25 Oct 2022 16:19:18 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f073f494bf019dbd32b850f08e43fe9d
fcf1e3193be26a26b38b7039264ef7ef291107f7
1fd3daa1746a4a979b67e22921c50af040ea420de07269bf101ff06ed30a53d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1FD3DAA1746A4A979B67E22921C50AF040EA420DE07269BF101FF06ED30A53D1"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9405
Expires: Tue, 25 Oct 2022 17:56:03 GMT
Date: Tue, 25 Oct 2022 15:19:18 GMT
Connection: keep-alive
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
200 OK 702 B URL HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
Hash 0092372b471c057c54dac2b76622dcba
ce81cb4e8f0889a5db21a12207f0655bf2e8d0bd
a8e1cf3eaa37fc7de9f45bb5dc7722d489130b374488186bd5280b7b07d6387d
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1005
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 25 Oct 2022 15:19:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://championtest.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8f4c104074d71d465fc08fd942a239a9
c7d771ffc44607ec0a505575fe462b8a0a7dd956
739e6092e4f79cbebc783907219057783673879e574041a270bab77bb56f8f4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "739E6092E4F79CBEBC783907219057783673879E574041A270BAB77BB56F8F4F"
Last-Modified: Mon, 24 Oct 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16400
Expires: Tue, 25 Oct 2022 19:52:38 GMT
Date: Tue, 25 Oct 2022 15:19:18 GMT
Connection: keep-alive
itcleffaom.com/rotate?zz=4326382&var=5450495&uid=abd60774ecf04b67824d5ec5b26b9bfb
200 OK 385 B URL HTTP/2 itcleffaom.com/rotate?zz=4326382&var=5450495&uid=abd60774ecf04b67824d5ec5b26b9bfb
IP
File type JSON data\012- , ASCII text, with very long lines (385), with no line terminators
Hash 2a2d354860ad5ef1f54918d8ae851df9
1f98d879e9aaa9f4cf35dd6aec4d83cec05cbce7
e146bd128e830f96fc28cf64f194bfffb74bdb3f1cec90d850c4a66f9827516f
Analyzer Verdict Alert quad9 Sinkholed
GET /rotate?zz=4326382&var=5450495&uid=abd60774ecf04b67824d5ec5b26b9bfb HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 15:19:18 GMT
content-type: application/javascript
content-length: 385
x-trace-id: cae5a24b595729a7c73d787b5cd62fde
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
vary: Origin
access-control-allow-origin: https://championtest.com
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=abd60774ecf04b67824d5ec5b26b9bfb; expires=Wed, 25 Oct 2023 15:19:18 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
200 OK 11 kB URL HTTP/2 pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
IP
File type PNG image data, 140 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash 0fb5a0eccfe6fe27747ca4a84abb1c9b
f83ae7f2c746872a9ba9da626928946e3b6de28d
70eba3a4b499c4ffe4a8e62461c1b8581a9dd904f14b5742b48632dbebdd30a6
GET /contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png HTTP/1.1
Host: pulsersurvey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 25 Oct 2022 15:19:18 GMT
content-type: image/png
content-length: 10580
last-modified: Thu, 21 Jan 2021 09:10:34 GMT
etag: "6009450a-2954"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
championtest.com/js/data/_global-config-sd.js?v=3
200 OK 2.8 kB URL HTTP/2 championtest.com/js/data/_global-config-sd.js?v=3
IP
File type ASCII text, with very long lines (370), with no line terminators
Hash f18ec294c63a5d805c04ff9f31939ecc
5028c580d7a2194c6df34c12735787d75fd4323b
5eb2738a65b1f2051783cd4a23c471fd849640f366453be5649e0d92b54e0795
GET /js/data/_global-config-sd.js?v=3 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=683
etag: W/"63569786-2ab"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5H9CpXvQHKFLO%2FMTgTB3avI2tln87zZjw8ieRRUQmz4a4MFdnqm0R3TLu64A3JZfjvQYzgQ9VlyMhB3vNApMzfFpXyXcwxK8sN7IImoOd8eVwYEgUPZVF9jwclj0bsMenIAg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fbee00de120b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afp%3A207%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711156%3Ac%3A1%3Arn%3A526406563%3Arqn%3A1%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C43%2C0%2C%2C0%2C%2C101%2C2%2C%2C%2C%2C273%3Ans%3A1666711155757%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afp%3A207%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711156%3Ac%3A1%3Arn%3A526406563%3Arqn%3A1%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C43%2C0%2C%2C0%2C%2C101%2C2%2C%2C%2C%2C273%3Ans%3A1666711155757%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 255b27c187bb9b4bddf64e1ebaaf1b90
3815c912e8fda0cb1f2533bbc6789dd33a4ecf97
d9cb5eb052df5d2bbe7d65fc4a8badaaeae44c2cadb2b1c51bb52593d256660e
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afp%3A207%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711156%3Ac%3A1%3Arn%3A526406563%3Arqn%3A1%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C43%2C0%2C%2C0%2C%2C101%2C2%2C%2C%2C%2C273%3Ans%3A1666711155757%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afp%3A207%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711156%3Ac%3A1%3Arn%3A526406563%3Arqn%3A1%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C43%2C0%2C%2C0%2C%2C101%2C2%2C%2C%2C%2C273%3Ans%3A1666711155757%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 25 Oct 2022 15:19:18 GMT
access-control-allow-origin: https://championtest.com
set-cookie: yandexuid=6871774121666711158; Expires=Wed, 25-Oct-2023 15:19:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6871774121666711158; Expires=Wed, 25-Oct-2023 15:19:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1226390521666711158; Path=/; SameSite=None; Secure
i=znzo3MZJEXUM39rLsy9njMzDfQPO4vV5Y46Om48yq6wyTcobwUijhe9SLbZ69vyDIw1y8ZmXbsL72VtGbcBzHH3W+5I=; Expires=Fri, 22-Oct-2032 15:19:18 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1698247158.yrts.1666711158#1698247158.yrtsi.1666711158; Expires=Wed, 25-Oct-2023 15:19:18 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:18 GMT
last-modified: Tue, 25-Oct-2022 15:19:18 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14801
Expires: Tue, 25 Oct 2022 19:26:00 GMT
Date: Tue, 25 Oct 2022 15:19:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 398e3c90084d7d71fc1e9fd833116f5f
3e202da5559a8f219144adee3639d063a98559c0
724547db3ed9f1779308e9dd6604664e6ffa3580ca076fbdc1dfb1b75591bba4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "724547DB3ED9F1779308E9DD6604664E6FFA3580CA076FBDC1DFB1B75591BBA4"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14801
Expires: Tue, 25 Oct 2022 19:26:00 GMT
Date: Tue, 25 Oct 2022 15:19:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fee370a-a947-4a08-9ba6-18c6c792f716.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fee370a-a947-4a08-9ba6-18c6c792f716.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d0215d09b407ecfd690d63aee6a30add
d2e9a4cba5fc07d90f30a5bfc7efa91eea784f94
6147a16325e6c63e7e3acfde58a4cfcd04564ddd6df61835e6e563ec6e67aa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1fee370a-a947-4a08-9ba6-18c6c792f716.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5662
x-amzn-requestid: cb169868-462c-4083-af25-ca65cb2df563
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3EhH7SoAMFdeg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357054f-1635cae5575eed4a43607a11;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 3AVj0cWeDVgo3DVqvDiofHw2sXlQVGFhijv3QOzs0vNruMXzx8pl2Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:57:04 GMT
etag: "d2e9a4cba5fc07d90f30a5bfc7efa91eea784f94"
content-type: image/jpeg
age: 62535
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: TkdgdFp1dXipnGokyVpkamtD5qLRUC7aNYJrX_OKkEujnQsplMsgXA==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 04:35:17 GMT
age: 38642
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3cf322f19151bcfa374c2e32b9ac986f
e8e69ac951def18bc1e03ecd4fe8a21d3b825b27
54ddfd1876f65e264b9b3209a0e805a3796013b4aacc8e9fd20b49754b4917a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F075a794f-9140-4676-afb2-493f44932cc3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4206
x-amzn-requestid: 6b02f96a-ea03-4eff-acde-c73925260102
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3E3GPQoAMFpIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63570552-77cf762d0e54f1f60efe52c3;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:36:18 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jcuTYNKiYp8BkDnzo34tidRVmcFlE_xDfPGGgrUKfR67IfwGjFxceA==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:42:36 GMT
age: 63403
etag: "e8e69ac951def18bc1e03ecd4fe8a21d3b825b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89448f1a52030b28e9ecfcdc190787d4
5080ba75c230fd2b303f29a9b64868c6e8771df8
10a736997d441e274a54e9689c349d407087fef7aa7c0f4d0a7a603e446fdabd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d616770-e793-4da0-8ebe-826e806ececd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9209
x-amzn-requestid: 94dad7b4-9c12-4bda-9202-3b7427185182
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aLiElGzEIAMFnOg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e16e9-3c79cd392d5bc4312a730cda;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 03:00:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: c5_B2RXKJx7FHrQvHdCG50zcDFWUqaaZu0GYuCxEI8fpK019dSlD3Q==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 22:32:19 GMT
age: 60420
etag: "5080ba75c230fd2b303f29a9b64868c6e8771df8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d122f5c-ef0b-49a6-a68c-137a02ef7894.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d122f5c-ef0b-49a6-a68c-137a02ef7894.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b3e41dda631c7f2ee5e664d43e48af31
5a8579a70d8791a19e0192995c46594e242e864d
c26bec6c4527220272777fe7b3209d8726c94105955ef15f05a584bae50ae719
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d122f5c-ef0b-49a6-a68c-137a02ef7894.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8239
x-amzn-requestid: c37a1abe-9823-4181-a64f-5cc074cfdf2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ah3OeGxOoAMFtJQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6357058f-10c7cfed331c043e00a600e0;Sampled=0
x-amzn-remapped-date: Mon, 24 Oct 2022 21:37:19 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: W3FmIxKlIU9N0kCfbiIqszSpbnmBk5gVmAOZ_w5e7a116zrKEeUpMw==
via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 21:45:49 GMT
etag: "5a8579a70d8791a19e0192995c46594e242e864d"
content-type: image/jpeg
age: 63210
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3694988-223c-4449-a1a5-28c1de7da771.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3694988-223c-4449-a1a5-28c1de7da771.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1970a25715283fecf7a05a199bf4cae6
3a3005e722d2e89c9218c34ba283bbcde72e4bbc
624f6f86abe8c7cb8b24669851103baf152802c3ea915dcdea88ce984d468361
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3694988-223c-4449-a1a5-28c1de7da771.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11051
x-amzn-requestid: 2eef9564-c660-421d-aff6-40644b72ffa1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aFfupETyoAMF3qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634bacc3-48a6442d4ec030f50e8f8f13;Sampled=0
x-amzn-remapped-date: Sun, 16 Oct 2022 07:03:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HgK4QTgdR6OSGV86ooPEJ0_jtGehzs1DHgeynAoCthtKlAAohrKVSg==
via: 1.1 912d83c7c9b4676eb19f09c9bfabda24.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 24 Oct 2022 22:18:45 GMT
age: 61234
etag: "3a3005e722d2e89c9218c34ba283bbcde72e4bbc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A1005907563%3Arqn%3A2%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C764%2C764%2C0%2C%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%222058%22%2C%22userSurveyId%22%3A1509001%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A1005907563%3Arqn%3A2%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C764%2C764%2C0%2C%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%222058%22%2C%22userSurveyId%22%3A1509001%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A1005907563%3Arqn%3A2%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C764%2C764%2C0%2C%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%222058%22%2C%22userSurveyId%22%3A1509001%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A456629697%3Arqn%3A3%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A456629697%3Arqn%3A3%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A456629697%3Arqn%3A3%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A294897095%3Arqn%3A4%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A294897095%3Arqn%3A4%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A294897095%3Arqn%3A4%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A899644380%3Arqn%3A5%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A899644380%3Arqn%3A5%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A899644380%3Arqn%3A5%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A387351424%3Arqn%3A6%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A387351424%3Arqn%3A6%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A387351424%3Arqn%3A6%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A809900875%3Arqn%3A9%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22ipp%22%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A809900875%3Arqn%3A9%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22ipp%22%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A809900875%3Arqn%3A9%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22ipp%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A302785251%3Arqn%3A7%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A302785251%3Arqn%3A7%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A302785251%3Arqn%3A7%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A408404746%3Arqn%3A8%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A408404746%3Arqn%3A8%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D608793320956895782%26z%3D5450495%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk1%26utm_medium%3D5450495%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1666711158_db6188318d850e83d2924050db679f3a07735a24e693b5d14e526c98ce9953af&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahc7gdnn6wxsfezmfynoxo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A414727420127%3Ahid%3A532091595%3Az%3A0%3Ai%3A20221025151916%3Aet%3A1666711157%3Ac%3A1%3Arn%3A408404746%3Arqn%3A8%3Au%3A1666711156429475577%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1666711155757%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666711157%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 25 Oct 2022 15:19:19 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 25-Oct-2022 15:19:19 GMT
last-modified: Tue, 25-Oct-2022 15:19:19 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f0658fbdab2ded4608198a724aaaca01
1e81dde95d0714f07199cb703d765931afc82114
5e3b2c9082542f65c7433dfff6af76e0b3c2de4b896dfce682a0cdd5eb568879
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E3B2C9082542F65C7433DFFF6AF76E0B3C2DE4B896DFCE682A0CDD5EB568879"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9854
Expires: Tue, 25 Oct 2022 18:03:40 GMT
Date: Tue, 25 Oct 2022 15:19:26 GMT
Connection: keep-alive
cdntechone.com/stattag.js
200 OK 0 B URL HTTP/2 cdntechone.com/stattag.js
IP
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:18 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:52 GMT
etag: W/"634eb2c0-32b7"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1878
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6vxFfBvkzka3eDjPszkKiMJcbJLggiDw7jRZu0uj63qpKR8Mdpwv8kf%2F9zxkSp1f3lGFw%2BHuok9gsszet2kt1YQgST7JIB0EuotEirIcFdfg2RHtmgEaFWSMSBZLzaYC%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75fbee036ae2b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
championtest.com/js/data/rtc.js?v=1
200 OK 0 B URL HTTP/2 championtest.com/js/data/rtc.js?v=1
IP
GET /js/data/rtc.js?v=1 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=14949
etag: W/"63569786-3a65"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=azEsjwxyMZLySpxww3OHU3lVQwO%2FEGVhY2SYZkRLNns92UXBHlBGTTQMclxQ4uEgninI8zpWDuVnyrfxDJvVlp%2B5D0a3Z4Wvx7B8XlXr87cbmk9AKpufZDvVVb4%2B6pNSNTeY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fbee00ee160b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
championtest.com/css/survey.css?v=1
200 OK 0 B URL HTTP/2 championtest.com/css/survey.css?v=1
IP
GET /css/survey.css?v=1 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19835
etag: W/"63569786-4d7b"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VF6tA4h0EY0WhZyCMX6aCT8dOe%2B0189CF1iU0ICge3%2FxkM4iPnlI0j7w1GhOiMzdzUqNF1pRYlb0N6%2BDrIT9zMFXuTUaYG8aQ0doID4zEYiYlLpWeEDKIJuEdnAIM0cVc6w%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fbee00ee220b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
championtest.com/js/sport-betting.js?v=1
200 OK 0 B URL HTTP/2 championtest.com/js/sport-betting.js?v=1
IP
GET /js/sport-betting.js?v=1 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63569786-46e"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Bi%2BrUMechvvCnuhmzBCzKGIkm87aPd9LoeF1W0uQIeZtfhEmpE1367n1QNndciWl2XtRrbvKXL4wT7b8tYvlexzcQKz0pa83%2FPbtCqMKhZlfXF1QEQyi0L5kvPkNwPomu9R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fbee00fe270b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
championtest.com/js/survey.js?v=14
200 OK 0 B URL HTTP/2 championtest.com/js/survey.js?v=14
IP
GET /js/survey.js?v=14 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63569786-4a5a2"
last-modified: Mon, 24 Oct 2022 13:47:50 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3FXMCPbdp0XU5x1DIyFP5zEi3afyfhel%2FRVCFSHXZbhwerdtebib6rorhi7U%2FqrUZdzlaFen9rlQA3sabT86n13UG0IzVqmdZcMJHxO9wjK8x1z3PzHsTk1XfzdPawRkKJ31"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fbee00fe250b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdntechone.com/r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=5450494&axcusid1=&clid={ymid}&r=http%3A%2F%2Fgtoonfd.com%2Flink%3Fz%3D5450494%26var%3D%26ymid%3DDM8ZLN2oYH1otbfs846oo6%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=7402
200 OK 0 B URL HTTP/2 cdntechone.com/r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=5450494&axcusid1=&clid={ymid}&r=http%3A%2F%2Fgtoonfd.com%2Flink%3Fz%3D5450494%26var%3D%26ymid%3DDM8ZLN2oYH1otbfs846oo6%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=7402
IP
GET /r.html?axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axtsid=5450494&axcusid1=&clid={ymid}&r=http%3A%2F%2Fgtoonfd.com%2Flink%3Fz%3D5450494%26var%3D%26ymid%3DDM8ZLN2oYH1otbfs846oo6%26acb%3Dproxy-smart-link&axcusid2=Smartlink&axadvid=1053995&axcamid=7402 HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: text/html
last-modified: Tue, 18 Oct 2022 14:05:52 GMT
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MO%2BDvd5ArR1MDGnoaYfeAJiwa8h0HNPSv0A8jfnCytwltR8KMCWdk0XdSoguFxOnkX5mc0NtFhQvzi8rzvIj8nd0aUfJM4m25qOxG73FdkBK4XwDvJHeJmF%2FZ9m5JgcZJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fbedfc1bf51bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
championtest.com/js/config.js?v=8
200 OK 0 B URL HTTP/2 championtest.com/js/config.js?v=8
IP
GET /js/config.js?v=8 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 25 Oct 2022 15:19:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63569785-11876"
last-modified: Mon, 24 Oct 2022 13:47:49 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1393
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cNpSC4kIZFmthA%2FtgNhgUEpSmw9deih0c11xckyzbGcmpTmw4p66MiUBkUrgVYXdUKbIMkQ5DxZ0o38Pfm6%2BouK8pAHa2AfGQpaZvojWxPD%2F5GRsxr48l%2BtLpYcKRQxJjmep"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75fbee00ee180b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
207.154.225.165
139.45.197.237
34.120.237.76
23.36.77.32
37.48.68.71
104.21.31.11
87.250.250.119