ws.xcodelib.net/agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&type=updater1239_start&x=777
77.247.179.86200 OK 619 B URL HTTP/1.1 ws.xcodelib.net/agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&type=updater1239_start&x=777
IP 77.247.179.86:0
ASN #43350 NForce Entertainment B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (619), with no line terminators
Hash 0e5cda94c174f8adb9257b5bb3c96245
40dbecf28e1c7b0c1836f48dd665c8860361f576
0996b9132bcca8531948a35e926143c30754722ca3a25ef6b09aa1b687eb7f04
GET /agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&type=updater1239_start&x=777 HTTP/1.1
Host: ws.xcodelib.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 619
content-type: text/html; charset=utf-8
date: Thu, 06 Oct 2022 06:34:37 GMT
server: nginx
set-cookie: sid=f364c73e-4540-11ed-8ce8-da43ec6cefa8; path=/; domain=.xcodelib.net; expires=Tue, 24 Oct 2090 09:48:45 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/
54.230.111.7200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 54.230.111.7:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3V0jV-NpsgGBY1k_uqh4JY_7ldAZegPinlvhMOOM-STHNoYicITFjg==
Age: 53240
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3888
Expires: Thu, 06 Oct 2022 07:39:26 GMT
Date: Thu, 06 Oct 2022 06:34:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a1073a68ed38c8e3575e889224db944c
ee2a7a3e2da77a8540131f9ffaa0a20d4dd486bd
a9fb1f7ade7c8a79d2ee83e9b7215e66dc89ac733b11079297a8f4b9aceae1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A9FB1F7ADE7C8A79D2EE83E9B7215E66DC89AC733B11079297A8F4B9ACEAE1F5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5970
Expires: Thu, 06 Oct 2022 08:14:08 GMT
Date: Thu, 06 Oct 2022 06:34:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qsnlR6lAK6oRNI7CxLWOWZyHSRyG8wcBH9FlLpi1MEKdvG9zoYjfl7HOa678tdPYWByqzmay9+A=
x-amz-request-id: KC5AB3ACKRF1578Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 06 Oct 2022 05:58:38 GMT
age: 2160
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 06:34:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ws.xcodelib.net/favicon.ico
77.247.179.86404 Not Found 9 B URL HTTP/1.1 ws.xcodelib.net/favicon.ico
IP 77.247.179.86:0
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash d8f4a1993546cc4b850cde3599e27aec
094b763b4cfcc0b05e5d040581cd513c3ca08067
907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: ws.xcodelib.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ws.xcodelib.net/agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&type=updater1239_start&x=777
Cookie: sid=f364c73e-4540-11ed-8ce8-da43ec6cefa8
HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Thu, 06 Oct 2022 06:34:38 GMT
server: nginx
ws.xcodelib.net/agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid=&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NTA0NTI3OCwiaWF0IjoxNjY1MDM4MDc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2RtZWpybGhhNWNxa3JpZjgycTE2ZzEiLCJuYmYiOjE2NjUwMzgwNzgsInRzIjoxNjY1MDM4MDc4MjE1NTU5fQ.q-7tSxGUtjvjZhKX940vQ2nrS1l9I6jYwyATje6wYiI<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&sid=f364c73e-4540-11ed-8ce8-da43ec6cefa8&type=updater1239_start&x=777
77.247.179.86302 Found 11 B URL HTTP/1.1 ws.xcodelib.net/agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid=&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NTA0NTI3OCwiaWF0IjoxNjY1MDM4MDc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2RtZWpybGhhNWNxa3JpZjgycTE2ZzEiLCJuYmYiOjE2NjUwMzgwNzgsInRzIjoxNjY1MDM4MDc4MjE1NTU5fQ.q-7tSxGUtjvjZhKX940vQ2nrS1l9I6jYwyATje6wYiI<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&sid=f364c73e-4540-11ed-8ce8-da43ec6cefa8&type=updater1239_start&x=777
IP 77.247.179.86:0
ASN #43350 NForce Entertainment B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid=&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY2NTA0NTI3OCwiaWF0IjoxNjY1MDM4MDc4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc2RtZWpybGhhNWNxa3JpZjgycTE2ZzEiLCJuYmYiOjE2NjUwMzgwNzgsInRzIjoxNjY1MDM4MDc4MjE1NTU5fQ.q-7tSxGUtjvjZhKX940vQ2nrS1l9I6jYwyATje6wYiI<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&sid=f364c73e-4540-11ed-8ce8-da43ec6cefa8&type=updater1239_start&x=777 HTTP/1.1
Host: ws.xcodelib.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ws.xcodelib.net/agrep/bho/report.php?affid=10080018&agver=1.1.0.29&appid=119&cos=8&guid<m=03_03_10_09_05&mac=005056a0f634&pubid=1008&type=updater1239_start&x=777
Cookie: sid=f364c73e-4540-11ed-8ce8-da43ec6cefa8
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 06 Oct 2022 06:34:38 GMT
location: http://belia-glp.com/zcvisitor/f3c39ca0-4540-11ed-b9b1-12ca1cacab93/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
server: nginx
set-cookie: sid=f364c73e-4540-11ed-8ce8-da43ec6cefa8; path=/; domain=.xcodelib.net; expires=Tue, 24 Oct 2090 09:48:46 GMT; max-age=2147483647; HttpOnly
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
54.230.111.7200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 54.230.111.7:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 06 Oct 2022 06:29:41 GMT
Expires: Thu, 06 Oct 2022 06:58:24 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vGsVKZfShRX93cXzfyNrwQWCGtLa7AA6Q7zu7lCQNgyrJY62VaPALw==
Age: 298
belia-glp.com/zcvisitor/f3c39ca0-4540-11ed-b9b1-12ca1cacab93/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
34.239.209.41200 996 B URL HTTP/1.1 belia-glp.com/zcvisitor/f3c39ca0-4540-11ed-b9b1-12ca1cacab93/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
IP 34.239.209.41:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9fd5dd133fd966ba19b4c1da17c997e7
c67c64707b7f3d7df76c2a24aefa78bf789a8f38
aeb3189a9035e1a37d519c8b788d5abc7f253845151e35f6aa0369726214dd63
GET /zcvisitor/f3c39ca0-4540-11ed-b9b1-12ca1cacab93/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97 HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ws.xcodelib.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 06 Oct 2022 06:34:39 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: VTPYehXk
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 1561c6be7c89d1357a80d12de47b6e74
9a705277922ecca583c867af58b3efce099f83bd
e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4512
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:34:39 GMT
Last-Modified: Thu, 06 Oct 2022 05:19:27 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
belia-glp.com/zcredirect?visitid=f3c39ca0-4540-11ed-b9b1-12ca1cacab93&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
34.239.209.41200 428 B URL HTTP/1.1 belia-glp.com/zcredirect?visitid=f3c39ca0-4540-11ed-b9b1-12ca1cacab93&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP 34.239.209.41:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash faffd6f2aeed98d6f25db909769c8c51
b9aebf7b0398f4b83545cf4ad011134ce2f715dc
3ad6a90d82e13ae716845af5537b8dbf3d19e181f178bc3056fe3f9263ed9d29
GET /zcredirect?visitid=f3c39ca0-4540-11ed-b9b1-12ca1cacab93&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcvisitor/f3c39ca0-4540-11ed-b9b1-12ca1cacab93/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=7e3f9bd0-43cc-11ec-ba04-0a918cbcbb97
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Thu, 06 Oct 2022 06:34:39 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: VTPYehXk
push.services.mozilla.com/
54.187.146.10101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.146.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rC/MvWGsJdm1sDQbL1ojnQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 215B7RsysSbKXggicGfcxOFK1go=
belia-glp.com/favicon.ico
34.239.209.41404 653 B URL HTTP/1.1 belia-glp.com/favicon.ico
IP 34.239.209.41:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: belia-glp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://belia-glp.com/zcredirect?visitid=f3c39ca0-4540-11ed-b9b1-12ca1cacab93&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Thu, 06 Oct 2022 06:34:39 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: mEuQERae
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 073052de70c1e4617bf43bc3b60e1343
f1c1f7791fe8749b678257660ad60e0e7352ec4c
e40a6aa58ed33afe3305eea1c64bafd8520ad2961f29f2a9e7ab47efb641ec69
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 06:34:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 14:26:19 GMT
Expires: Mon, 10 Oct 2022 14:26:18 GMT
Etag: "f1c1f7791fe8749b678257660ad60e0e7352ec4c"
Cache-Control: max-age=373298,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 755c5f5d9ed50af6-OSL
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 961fe1095d6381d8aea076c3619ded95
b66b78215bd3341ad0230c4719ed6b2c70d5e1c7
c0dc1bcbe2a0717bcaad12ff3591c93650fadaaf28ab4df33d5e10e617b12931
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 06 Oct 2022 06:34:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
f5ac6e7aac.smapp.work/api/v1/click/confirm.js?data=gAAAAABjPncAA6qXKJpYaD5GkJSJobqyam-kaHfyIIXh0vrbPLGr-Zdl--rAbojJHMG5RcWCU2nEL7-Q9qLIujnyprGnucdejtbcuI4YRTNOM7Scm091Z_wEmlK4H7lDUmmEyUnt7zBYNuyNtkh36Zq64IpSuH1oiEdZ6tWASYzTHghC5D_2GodxkQMdTTIfOUZu3U7rRsF8iLXvw-XyuIsCNDIk3nDwVDW8HfIXFpW7yNNnyI2r-vZuYQoV-33hdFHyRRpTXQCzl70R_OYsct-uN--x6Q9-q9gS0tcWwLMU7dOpL9J1KAQOlrigVMl9cfov9g2Vzy7v-UglFABeRhIZrVJj5PJKzFQzE6Xb97umvhWsy_mh7385LKTrjZJ2NClY6SZgsgdumKnLwIBzdYy3fRuMA5e72i1KBfZ_Xqr0C06jz3eiA8XQGsjfLIxL8GWeCBDzKBlzOGUYw0Pp2si1OL46XFIP8zM-eRLswttfJgzk6vFBC0rQLTYja9ENVPHRIvJI_FCsivh-Nvri_FPGzL0HgE4dk9BDxEXFX0xbkA18MXJk-zZPbZtGc0k3zuassxs6wVCXIPJmvzD36Q6XUK1jvdSdHsCO8d1F0cSo1nM3JupuC2aMFpa00i5lNf_6HzExLVYlp-PhX3JPDdAz91gkl0t1s4D3FPjDl5_3qk7XCsDSTYUMW1txzdXUrM1QXKr7RLeRQGaHQx7cgczB2bpFUqHcvVqYdVSh3pPg6Ha4W6dZuJEEuw6o5NFEqKI_vjzmmh680vs21mdnOHuKlnQ9YzIrqlxC_bB2N-n8tSXRrouuo12eiRJmokPlUG0iQR7i-C5Qkxu562jQurOlwKIrVo7ZhVXY8ByOQQY9KXe0oua2dO7Z9EVv0kNSi8F4f_hhrFgqWbN5ZavN1OrkyiZ-kowOdNMPRiDSjpeU5sIAVxWqYsZ7j0fmBYkOL9SZWTj8iI48O4Pa7gxtLW1eNwVmmuanQKAQmpRmjNtUMKKoReKUwRY3LCF4PAVmp-ULdVBlTim5qfYduB8lFPPznfKdLfAfPJ2ATLJW2nyj2QhfsZjCl_YxXsvFwlvpXBOnSyBwOJ6EVHE4Ou4_pviOBAdTl1Qizfsas6jqHmPi31BnxqPR1BGm5n6d1tJ948v6fgcdB2BS3XM31_PkHtoRe9An9Fr4JOv5zxAVuxp_JvlbIJzPvLDaxCSwWSQ4cO0rBr7J-__nCfE9JXDU3BY5WogafaqTRb_Ju7ZQtyYGupEK834T6zmq7V5LzTb-FoUlvkpE3I8TucRJq0NsBpyc4YHIFYgCh19ndS3ekJEQnQuAKisvjZoARc-WQfyXbT-E8dTKt3Qwji1Cfs7plwF2TQfZFegJqPHt7ZP0ipLlrZDRK_jl6afIezMnKeEhPkCr6zOaeKQPSI46HDXnMP2mzHAnB-6aiWDxVmZIqpTQNpeIIhA3T2epWk-VgIrLtbnyedO6b2XCizi2-j-CDHfk22YDDvYi8zbkF0Dfyg7jO_i-UNtNcR3zPqL3isG0-ued09KG-3ag0WZKLNm_YWzByGvSIcybSAXSTQw0OStmELv8Jy7EGCsWknO_O-ibkJbOeL0bkLeV-96fxnnXEKmMy-NtD4tJES4eSP1NI1CNsSg-_9HeGAnKI4Qxrtwsk51jQmE7uOzNabIFGgNyWFPY-IOsHsXtNdfCq_qVJAfm0lt761MO6h23UaD-MFTFIv_MTUodhlmzdDOTmv5Ysq1zQ7sGNQy_n-xS8TKrndGA2dABF1i-qUOPCZBDso5ra3kku-nFPyIpBXdOW0k22_dKj5JHRsqt_hFBiDPogSwB9EA08uyB2HUm4r5VwYIHpsM23EqXErr8DXsPOA1DsH_psU52_SLuoiYelTuE9l2BIg4er-VCP3521N2Iz7hXHgZbn0tDTzSAcl7PW3SkyKfIPCimBSqWi7F5OpOrVIr7PqVGCuOAeQXCeYoJK5xPtfnJL_sa0dlGytYFWrKPt1K3fSwvcwKGwc9pTXW5U-kczwvAx4cNfr6_t5iufWvLVKyHWI28gDyeCvHoJIK_6vL3BcxV9rkJuTH-9mRYX6XsXLtXtQZdB6lrNhHjm8H9gnQUSquHFy4vFR1Q4_jHEcNjnD5q0nqiSaw2bUTHbnwWhW4fHtuBtRVtj4XshLSO7qhuuMK3ptSLBg0x5d2exBZyNegFV-2b7jMmV2OFV8xj7NO5IoEtUHC3sOLqmh3UyLdKVuIgKFfpzoHjSv26XXR62FBbMJjMIiHGN3Sku5Wzh-83_IH88xdRypHjFMm2VJzqkgYohcl6gftyaHHgfHFiVlMCkf4pbvoSbHleDj7tBeoqSNrqvSU3wVzsbBixO81Oyscp0aZH6Hz0UK-1yxSjIKwbJ8A5gbJNe0bR65IKPUusngCmvB8yFSUvqFR9btOEuQeb5eiWLEM3m8GADfAfgRSsCG8wydYmVY1_bXebIK54n7glejlowXFPo4QIdSIabpniUWNg
35.186.250.143200 OK 0 B URL HTTP/2 f5ac6e7aac.smapp.work/api/v1/click/confirm.js?data=gAAAAABjPncAA6qXKJpYaD5GkJSJobqyam-kaHfyIIXh0vrbPLGr-Zdl--rAbojJHMG5RcWCU2nEL7-Q9qLIujnyprGnucdejtbcuI4YRTNOM7Scm091Z_wEmlK4H7lDUmmEyUnt7zBYNuyNtkh36Zq64IpSuH1oiEdZ6tWASYzTHghC5D_2GodxkQMdTTIfOUZu3U7rRsF8iLXvw-XyuIsCNDIk3nDwVDW8HfIXFpW7yNNnyI2r-vZuYQoV-33hdFHyRRpTXQCzl70R_OYsct-uN--x6Q9-q9gS0tcWwLMU7dOpL9J1KAQOlrigVMl9cfov9g2Vzy7v-UglFABeRhIZrVJj5PJKzFQzE6Xb97umvhWsy_mh7385LKTrjZJ2NClY6SZgsgdumKnLwIBzdYy3fRuMA5e72i1KBfZ_Xqr0C06jz3eiA8XQGsjfLIxL8GWeCBDzKBlzOGUYw0Pp2si1OL46XFIP8zM-eRLswttfJgzk6vFBC0rQLTYja9ENVPHRIvJI_FCsivh-Nvri_FPGzL0HgE4dk9BDxEXFX0xbkA18MXJk-zZPbZtGc0k3zuassxs6wVCXIPJmvzD36Q6XUK1jvdSdHsCO8d1F0cSo1nM3JupuC2aMFpa00i5lNf_6HzExLVYlp-PhX3JPDdAz91gkl0t1s4D3FPjDl5_3qk7XCsDSTYUMW1txzdXUrM1QXKr7RLeRQGaHQx7cgczB2bpFUqHcvVqYdVSh3pPg6Ha4W6dZuJEEuw6o5NFEqKI_vjzmmh680vs21mdnOHuKlnQ9YzIrqlxC_bB2N-n8tSXRrouuo12eiRJmokPlUG0iQR7i-C5Qkxu562jQurOlwKIrVo7ZhVXY8ByOQQY9KXe0oua2dO7Z9EVv0kNSi8F4f_hhrFgqWbN5ZavN1OrkyiZ-kowOdNMPRiDSjpeU5sIAVxWqYsZ7j0fmBYkOL9SZWTj8iI48O4Pa7gxtLW1eNwVmmuanQKAQmpRmjNtUMKKoReKUwRY3LCF4PAVmp-ULdVBlTim5qfYduB8lFPPznfKdLfAfPJ2ATLJW2nyj2QhfsZjCl_YxXsvFwlvpXBOnSyBwOJ6EVHE4Ou4_pviOBAdTl1Qizfsas6jqHmPi31BnxqPR1BGm5n6d1tJ948v6fgcdB2BS3XM31_PkHtoRe9An9Fr4JOv5zxAVuxp_JvlbIJzPvLDaxCSwWSQ4cO0rBr7J-__nCfE9JXDU3BY5WogafaqTRb_Ju7ZQtyYGupEK834T6zmq7V5LzTb-FoUlvkpE3I8TucRJq0NsBpyc4YHIFYgCh19ndS3ekJEQnQuAKisvjZoARc-WQfyXbT-E8dTKt3Qwji1Cfs7plwF2TQfZFegJqPHt7ZP0ipLlrZDRK_jl6afIezMnKeEhPkCr6zOaeKQPSI46HDXnMP2mzHAnB-6aiWDxVmZIqpTQNpeIIhA3T2epWk-VgIrLtbnyedO6b2XCizi2-j-CDHfk22YDDvYi8zbkF0Dfyg7jO_i-UNtNcR3zPqL3isG0-ued09KG-3ag0WZKLNm_YWzByGvSIcybSAXSTQw0OStmELv8Jy7EGCsWknO_O-ibkJbOeL0bkLeV-96fxnnXEKmMy-NtD4tJES4eSP1NI1CNsSg-_9HeGAnKI4Qxrtwsk51jQmE7uOzNabIFGgNyWFPY-IOsHsXtNdfCq_qVJAfm0lt761MO6h23UaD-MFTFIv_MTUodhlmzdDOTmv5Ysq1zQ7sGNQy_n-xS8TKrndGA2dABF1i-qUOPCZBDso5ra3kku-nFPyIpBXdOW0k22_dKj5JHRsqt_hFBiDPogSwB9EA08uyB2HUm4r5VwYIHpsM23EqXErr8DXsPOA1DsH_psU52_SLuoiYelTuE9l2BIg4er-VCP3521N2Iz7hXHgZbn0tDTzSAcl7PW3SkyKfIPCimBSqWi7F5OpOrVIr7PqVGCuOAeQXCeYoJK5xPtfnJL_sa0dlGytYFWrKPt1K3fSwvcwKGwc9pTXW5U-kczwvAx4cNfr6_t5iufWvLVKyHWI28gDyeCvHoJIK_6vL3BcxV9rkJuTH-9mRYX6XsXLtXtQZdB6lrNhHjm8H9gnQUSquHFy4vFR1Q4_jHEcNjnD5q0nqiSaw2bUTHbnwWhW4fHtuBtRVtj4XshLSO7qhuuMK3ptSLBg0x5d2exBZyNegFV-2b7jMmV2OFV8xj7NO5IoEtUHC3sOLqmh3UyLdKVuIgKFfpzoHjSv26XXR62FBbMJjMIiHGN3Sku5Wzh-83_IH88xdRypHjFMm2VJzqkgYohcl6gftyaHHgfHFiVlMCkf4pbvoSbHleDj7tBeoqSNrqvSU3wVzsbBixO81Oyscp0aZH6Hz0UK-1yxSjIKwbJ8A5gbJNe0bR65IKPUusngCmvB8yFSUvqFR9btOEuQeb5eiWLEM3m8GADfAfgRSsCG8wydYmVY1_bXebIK54n7glejlowXFPo4QIdSIabpniUWNg
IP 35.186.250.143:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/v1/click/confirm.js?data=gAAAAABjPncAA6qXKJpYaD5GkJSJobqyam-kaHfyIIXh0vrbPLGr-Zdl--rAbojJHMG5RcWCU2nEL7-Q9qLIujnyprGnucdejtbcuI4YRTNOM7Scm091Z_wEmlK4H7lDUmmEyUnt7zBYNuyNtkh36Zq64IpSuH1oiEdZ6tWASYzTHghC5D_2GodxkQMdTTIfOUZu3U7rRsF8iLXvw-XyuIsCNDIk3nDwVDW8HfIXFpW7yNNnyI2r-vZuYQoV-33hdFHyRRpTXQCzl70R_OYsct-uN--x6Q9-q9gS0tcWwLMU7dOpL9J1KAQOlrigVMl9cfov9g2Vzy7v-UglFABeRhIZrVJj5PJKzFQzE6Xb97umvhWsy_mh7385LKTrjZJ2NClY6SZgsgdumKnLwIBzdYy3fRuMA5e72i1KBfZ_Xqr0C06jz3eiA8XQGsjfLIxL8GWeCBDzKBlzOGUYw0Pp2si1OL46XFIP8zM-eRLswttfJgzk6vFBC0rQLTYja9ENVPHRIvJI_FCsivh-Nvri_FPGzL0HgE4dk9BDxEXFX0xbkA18MXJk-zZPbZtGc0k3zuassxs6wVCXIPJmvzD36Q6XUK1jvdSdHsCO8d1F0cSo1nM3JupuC2aMFpa00i5lNf_6HzExLVYlp-PhX3JPDdAz91gkl0t1s4D3FPjDl5_3qk7XCsDSTYUMW1txzdXUrM1QXKr7RLeRQGaHQx7cgczB2bpFUqHcvVqYdVSh3pPg6Ha4W6dZuJEEuw6o5NFEqKI_vjzmmh680vs21mdnOHuKlnQ9YzIrqlxC_bB2N-n8tSXRrouuo12eiRJmokPlUG0iQR7i-C5Qkxu562jQurOlwKIrVo7ZhVXY8ByOQQY9KXe0oua2dO7Z9EVv0kNSi8F4f_hhrFgqWbN5ZavN1OrkyiZ-kowOdNMPRiDSjpeU5sIAVxWqYsZ7j0fmBYkOL9SZWTj8iI48O4Pa7gxtLW1eNwVmmuanQKAQmpRmjNtUMKKoReKUwRY3LCF4PAVmp-ULdVBlTim5qfYduB8lFPPznfKdLfAfPJ2ATLJW2nyj2QhfsZjCl_YxXsvFwlvpXBOnSyBwOJ6EVHE4Ou4_pviOBAdTl1Qizfsas6jqHmPi31BnxqPR1BGm5n6d1tJ948v6fgcdB2BS3XM31_PkHtoRe9An9Fr4JOv5zxAVuxp_JvlbIJzPvLDaxCSwWSQ4cO0rBr7J-__nCfE9JXDU3BY5WogafaqTRb_Ju7ZQtyYGupEK834T6zmq7V5LzTb-FoUlvkpE3I8TucRJq0NsBpyc4YHIFYgCh19ndS3ekJEQnQuAKisvjZoARc-WQfyXbT-E8dTKt3Qwji1Cfs7plwF2TQfZFegJqPHt7ZP0ipLlrZDRK_jl6afIezMnKeEhPkCr6zOaeKQPSI46HDXnMP2mzHAnB-6aiWDxVmZIqpTQNpeIIhA3T2epWk-VgIrLtbnyedO6b2XCizi2-j-CDHfk22YDDvYi8zbkF0Dfyg7jO_i-UNtNcR3zPqL3isG0-ued09KG-3ag0WZKLNm_YWzByGvSIcybSAXSTQw0OStmELv8Jy7EGCsWknO_O-ibkJbOeL0bkLeV-96fxnnXEKmMy-NtD4tJES4eSP1NI1CNsSg-_9HeGAnKI4Qxrtwsk51jQmE7uOzNabIFGgNyWFPY-IOsHsXtNdfCq_qVJAfm0lt761MO6h23UaD-MFTFIv_MTUodhlmzdDOTmv5Ysq1zQ7sGNQy_n-xS8TKrndGA2dABF1i-qUOPCZBDso5ra3kku-nFPyIpBXdOW0k22_dKj5JHRsqt_hFBiDPogSwB9EA08uyB2HUm4r5VwYIHpsM23EqXErr8DXsPOA1DsH_psU52_SLuoiYelTuE9l2BIg4er-VCP3521N2Iz7hXHgZbn0tDTzSAcl7PW3SkyKfIPCimBSqWi7F5OpOrVIr7PqVGCuOAeQXCeYoJK5xPtfnJL_sa0dlGytYFWrKPt1K3fSwvcwKGwc9pTXW5U-kczwvAx4cNfr6_t5iufWvLVKyHWI28gDyeCvHoJIK_6vL3BcxV9rkJuTH-9mRYX6XsXLtXtQZdB6lrNhHjm8H9gnQUSquHFy4vFR1Q4_jHEcNjnD5q0nqiSaw2bUTHbnwWhW4fHtuBtRVtj4XshLSO7qhuuMK3ptSLBg0x5d2exBZyNegFV-2b7jMmV2OFV8xj7NO5IoEtUHC3sOLqmh3UyLdKVuIgKFfpzoHjSv26XXR62FBbMJjMIiHGN3Sku5Wzh-83_IH88xdRypHjFMm2VJzqkgYohcl6gftyaHHgfHFiVlMCkf4pbvoSbHleDj7tBeoqSNrqvSU3wVzsbBixO81Oyscp0aZH6Hz0UK-1yxSjIKwbJ8A5gbJNe0bR65IKPUusngCmvB8yFSUvqFR9btOEuQeb5eiWLEM3m8GADfAfgRSsCG8wydYmVY1_bXebIK54n7glejlowXFPo4QIdSIabpniUWNg HTTP/1.1
Host: f5ac6e7aac.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=sierra-ken-v3r0pnyd2p
Cookie: cx_ntsl_i=7c459f7b-3d89-458b-9d13-b409df243ca7; instal-cookie="2|1:0|10:1665038080|13:instal-cookie|124:eyIzMjQ0Njc1IjogImI3YjVhZTc5LTA5YTktNDUyNC1iYmM3LTg4NjRkODA2YzAwNzoyMmU1YzI0NThiZGEyYTJlMzQ5ODZiNGU4OTEzZjhiNDE1NjM4ZjA3In0=|3a01d20873788df265aacbb310a4d0577aa36eb20469cb02e9a609c71abcd09c"
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:34:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: TornadoServer/4.3
etag: "da39a3ee5e6b4b0d3255bfef95601890afd80709"
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=sierra-ken-v3r0pnyd2p
35.186.250.143200 OK 3.5 kB URL HTTP/2 f5ac6e7aac.smapp.work/trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=sierra-ken-v3r0pnyd2p
IP 35.186.250.143:0
Hash c7105109ddaccce63bfea0a463a2d9c4
2fec94178160d58411fb7cdc4f7734bd01bda76e
d334c7bbe49730d4c558711f8842f88ab719f6d4c479ef75b32a3f715488ff9d
GET /trkclk/?pid=6100&cid=3244675&custom1=CPC&fw1=badious-buzzard&aff_sub_id=sierra-ken-v3r0pnyd2p HTTP/1.1
Host: f5ac6e7aac.smapp.work
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://belia-glp.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:34:40 GMT
content-type: text/html; charset=UTF-8
clickid: b7b5ae79-09a9-4524-bbc7-8864d806c007:22e5c2458bda2a2e34986b4e8913f8b415638f07
set-cookie: cx_ntsl_i=7c459f7b-3d89-458b-9d13-b409df243ca7; expires=Fri, 02 Oct 2037 06:34:40 GMT; Path=/
instal-cookie="2|1:0|10:1665038080|13:instal-cookie|124:eyIzMjQ0Njc1IjogImI3YjVhZTc5LTA5YTktNDUyNC1iYmM3LTg4NjRkODA2YzAwNzoyMmU1YzI0NThiZGEyYTJlMzQ5ODZiNGU4OTEzZjhiNDE1NjM4ZjA3In0=|3a01d20873788df265aacbb310a4d0577aa36eb20469cb02e9a609c71abcd09c"; expires=Sat, 05 Nov 2022 06:34:40 GMT; Path=/; SameSite=None; secure
server: TornadoServer/4.3
etag: W/"41c85fdae05a3398c96305e13c5f33a04ab081c1"
x-frame-options: SAMEORIGIN
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10408
Expires: Thu, 06 Oct 2022 09:28:08 GMT
Date: Thu, 06 Oct 2022 06:34:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10408
Expires: Thu, 06 Oct 2022 09:28:08 GMT
Date: Thu, 06 Oct 2022 06:34:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 55331c1dc7e7ebbf456220986278469d
d69a62ee47b03fde68db666512417dda2ae5ad13
a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10408
Expires: Thu, 06 Oct 2022 09:28:08 GMT
Date: Thu, 06 Oct 2022 06:34:40 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 1.8 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 463931d1f0b640606c93ba0a9e470830
9d2636f1dd3ac59ad5e080cfa433a4064bc382a2
5bb111a5f871ef3a1753819e53d471e2c32a429fc3160e91112d019027995f31
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10408
Expires: Thu, 06 Oct 2022 09:28:08 GMT
Date: Thu, 06 Oct 2022 06:34:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73af78d1-5736-4820-b1cd-2746dc2b907b.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73af78d1-5736-4820-b1cd-2746dc2b907b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 746e3c38e01d58e6fa0728798221a830
b19dd1d42995ea4242505b152e77835442341581
c524a2e7e29690030b7402077f711e643674c8f42de071214f3909b447fb1e3b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73af78d1-5736-4820-b1cd-2746dc2b907b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6933
x-amzn-requestid: aa50b0cd-e931-49a9-bce3-00366738aea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjPtNGKPoAMF6UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df987-77a4f8306103dcdf3de7d1fd;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:39:19 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: aRwLcesGtAJ-M6BLPyzdprcMh8tvcxVH6AOG2LJc8aSYLR0BR9WAwg==
via: 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 3c974a460e97e56c6eb1e6a30797d9d6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 22:09:09 GMT
etag: "b19dd1d42995ea4242505b152e77835442341581"
content-type: image/jpeg
age: 30331
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fc2ddd86450d64d3fb659ab4e78be58
bbe71936b78a8c34d03ab87948dc840b35c6948f
84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10158
x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZaqZCH7doAMFcPQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: aeOU8fGkf5uHuYZ79k17EzxiFnwm0_z7SeZJElgwECzRyhR2N_SYJA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 03:50:38 GMT
age: 9842
etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F523563fe-7c63-4bf8-82a9-5a22c254cf4c.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F523563fe-7c63-4bf8-82a9-5a22c254cf4c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 00e43396123462b87cf3d3592dd71f02
8c895a5716462c161f98637053cac4469eaaea33
2fc70d34c11b2fc338714930bdf6efa14a1c3d4d7560a43061aea41c83ec4d2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F523563fe-7c63-4bf8-82a9-5a22c254cf4c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10390
x-amzn-requestid: 3a01001b-3f8a-4118-9cce-af68e92b78bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjP2EEV4oAMFcqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df9c0-254f65637b3d98f8268fe321;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:40:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: ZemQhvOGChopa_bsi6lNCPY0nNsICABg9vAsWBCkPJFv8oz7TyOGBA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:49:35 GMT
age: 31505
etag: "8c895a5716462c161f98637053cac4469eaaea33"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feda182b7-6bc8-4aea-82c3-d9fa08748b61.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feda182b7-6bc8-4aea-82c3-d9fa08748b61.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5a5ee14d41747f46e71f04782e1a3d3
b0205176a58913f57056b91674097bfb58046e97
b3bae0b56b50374cb85fc7fe4c9b551383d1969bf31e7adccb867e3467c59269
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feda182b7-6bc8-4aea-82c3-d9fa08748b61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7385
x-amzn-requestid: 7ada8e43-9cb5-4793-9289-e308e9565e7d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjOZoF7aIAMF43A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df770-73da01595d32809e08b93a83;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:30:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: 14qQi5wDI-_EgyghHCMjRtdZliSj3L6veSqIeBoEjCTfdZfrKb-UzA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:37:06 GMT
etag: "b0205176a58913f57056b91674097bfb58046e97"
content-type: image/jpeg
age: 32254
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 70ea26af79226e9ff06d6198e2c019dc
ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57
f9393e7b8cbaedc8e1ef87fd89c617cf102f58813d84d866ff68e3124f94d44c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccecc8c9-b6da-4470-b2be-fa8d46df1cc2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9044
x-amzn-requestid: 127bce04-9f75-4bb1-bbe7-33bf1694d96c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZdZPmHG5oAMFehw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633ba263-3896085b3b73ff5403237206;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 03:02:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E4yZTPRLFdK717YfwjOIFOJDi0wYpyA736dQELeM5iPLvGDXBosEWg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 05:04:17 GMT
age: 5423
etag: "ae2c476667f63c7f642f0d9f4d0bc0d846b0ef57"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2277f8f2d93b4bc3b05d348343177892
531d9e4ec9078cd2d7376a19fcb287084af36c82
62907648de4a2ed390232a71ab7dce49f1e9c3363cde6a2f30ecae10ab67f93a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7fac259b-7a22-4aa2-ba3f-682cb749091c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11080
x-amzn-requestid: 8fa4d19d-87a5-46c5-96c5-4aec793daad9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZjO7xE5eoAMFQLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633df84b-5c422c7a168c014f57559037;Sampled=0
x-amzn-remapped-date: Wed, 05 Oct 2022 21:34:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: LySueW1si-yWLwecUILV1s57IEV2FdcQ9_pH1Aoe4AYISi7QXXfd3A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 05 Oct 2022 21:39:28 GMT
age: 32112
etag: "531d9e4ec9078cd2d7376a19fcb287084af36c82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 0a25532c4133886e22a425cacca9c027
41a1b476967aed6ac227717098cd8be3209b45b3
f50b860d2b3b4d59df90ad6b36c84639141ca9dd9530a74e07fd79fd9387f52e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 06:34:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 06:25:20 GMT
Expires: Mon, 10 Oct 2022 06:25:19 GMT
Etag: "41a1b476967aed6ac227717098cd8be3209b45b3"
Cache-Control: max-age=344437,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 755c5f666e060af6-OSL
my.rtmark.net/gid.js
139.45.195.8200 OK 22 kB IP 139.45.195.8:0
Hash 210a295cd647fb70b3363fa15914fb39
5969c863c5b2bf17f00a09f46e3c515d1de058fb
b32bc0b6fc61e927309ab2a46d6b4438e1d566d565aaebc691323f0b72b24994
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 06:34:41 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://championtest.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=400dfaa575b144e4819a21bacbe89209; expires=Fri, 06 Oct 2023 06:34:41 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash edfe5303b6afa835cb47acc9d0409db1
7d61e36b47883955e5f47e84ebbaf3a0a571824a
098518d41c22c50ade15082fc257e59fd3770f52909a1a63c4a9f4a6e66969ff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "098518D41C22C50ADE15082FC257E59FD3770F52909A1A63C4A9F4A6E66969FF"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14574
Expires: Thu, 06 Oct 2022 10:37:35 GMT
Date: Thu, 06 Oct 2022 06:34:41 GMT
Connection: keep-alive
itcleffaom.com/track?offer_id=2058&z=4654991&request_var=6100_305&variable2=b7b5ae79-09a9-4524-bbc7-8864d806c007:22e5c2458bda2a2e34986b4e8913f8b415638f07
139.45.197.237200 OK 172 B URL HTTP/2 itcleffaom.com/track?offer_id=2058&z=4654991&request_var=6100_305&variable2=b7b5ae79-09a9-4524-bbc7-8864d806c007:22e5c2458bda2a2e34986b4e8913f8b415638f07
IP 139.45.197.237:0
File type JSON data\012- , ASCII text, with no line terminators
Hash fec43455903a89d1ca6af70bfa949bfb
8b060edf8681961613e906a4675b4574e3a915f1
d25ec828d14771e947e52c1fdac1280a95e78c559279e73d93391eeb3b1d0d37
GET /track?offer_id=2058&z=4654991&request_var=6100_305&variable2=b7b5ae79-09a9-4524-bbc7-8864d806c007:22e5c2458bda2a2e34986b4e8913f8b415638f07 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 06:34:41 GMT
content-type: application/json
content-length: 172
x-trace-id: 33a9c133c2e8c63f09c1f6ed8dfa0d6b
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
itcleffaom.com/rotate?zz=4326382&var=4654991&ymid=6100_305&uid=400dfaa575b144e4819a21bacbe89209
139.45.197.237200 OK 481 B URL HTTP/2 itcleffaom.com/rotate?zz=4326382&var=4654991&ymid=6100_305&uid=400dfaa575b144e4819a21bacbe89209
IP 139.45.197.237:0
File type JSON data\012- , ASCII text, with very long lines (481), with no line terminators
Hash 07e8552ac055e2055664bbcdceab139e
f76faddc456fa4e3cb163105dbaa1699a3ddfa2d
d6290207615d2139d1d1c2c8eecef1db7d6198c93cfbe8d1f73cf859e75215a2
GET /rotate?zz=4326382&var=4654991&ymid=6100_305&uid=400dfaa575b144e4819a21bacbe89209 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 06:34:41 GMT
content-type: application/javascript
content-length: 481
x-trace-id: 680920ca30136776959a5365a4b18c57
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://championtest.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=400dfaa575b144e4819a21bacbe89209; expires=Fri, 06 Oct 2023 06:34:41 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 778dfc33f849d577a1524dedb80c7f7c
deac9620fc086de0c067b75a9e8a126541e9a49c
8ce029c54d83e3d820ca20ea26fdb2c2b78ae4f288c9e39465af4409f0b6242f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 06:34:41 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 01:33:17 GMT
Expires: Tue, 11 Oct 2022 01:33:16 GMT
Etag: "deac9620fc086de0c067b75a9e8a126541e9a49c"
Cache-Control: max-age=413314,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 755c5f685fbd0af6-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
139.45.195.253200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 139.45.195.253:0
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Origin: https://championtest.top
Content-Length: 1774
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 06 Oct 2022 06:34:41 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://championtest.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 1.6 kB URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash e161caa6c8b34005174b5bbf127c2abe
43896490100f68942d1d6b9464841b9fe06b121c
a7459deab609497a69c8ed0aaf0e5b3b0268a3f4bebb4e10961599b461e447f0
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 06 Oct 2022 06:34:41 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Mon, 10 Oct 2022 04:18:57 GMT
ETag: "cde896627c3861b6e92d2aadb8fa8eb8ddb6502f"
Last-Modified: Thu, 06 Oct 2022 04:18:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2199
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 755c5f67edfab4fa-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8e24e36d20ff0dcc9828a8765c7a944b
dc6b6bf2b4dd481e60059da1fb377df01c872ca3
bd545aa6e7a20531fcda90925c3e5940fef1841b4ec6d9d4f1d8fe59a3ac7d88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD545AA6E7A20531FCDA90925C3E5940FEF1841B4EC6D9D4F1D8FE59A3AC7D88"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13177
Expires: Thu, 06 Oct 2022 10:14:18 GMT
Date: Thu, 06 Oct 2022 06:34:41 GMT
Connection: keep-alive
mc.yandex.ru/metrika/tag.js
93.158.134.119200 OK 72 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 93.158.134.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (593)
Hash 7a68c8644032413981e4ba5bc0d66c4a
2d46ca8055e8577ae7138140e34a6e633434973c
e0573e9a9cbfc3f00a921fa64c50270f5941a1ebb253ab70af2cc0dac45cb0d5
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 72341
date: Thu, 06 Oct 2022 06:34:41 GMT
access-control-allow-origin: *
etag: "633be002-11a95"
expires: Thu, 06 Oct 2022 07:34:41 GMT
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
139.45.197.155200 OK 11 kB URL HTTP/2 pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
IP 139.45.197.155:0
File type PNG image data, 140 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash 0fb5a0eccfe6fe27747ca4a84abb1c9b
f83ae7f2c746872a9ba9da626928946e3b6de28d
70eba3a4b499c4ffe4a8e62461c1b8581a9dd904f14b5742b48632dbebdd30a6
GET /contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png HTTP/1.1
Host: pulsersurvey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 06 Oct 2022 06:34:41 GMT
content-type: image/png
content-length: 10580
last-modified: Thu, 21 Jan 2021 09:10:34 GMT
etag: "6009450a-2954"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
104.21.29.183200 OK 16 kB URL HTTP/2 cdntechone.com/stattag.js
IP 104.21.29.183:0
File type Unicode text, UTF-8 text, with very long lines (43256), with no line terminators
Hash 59bbabca18d4de376afc8516ed2e1719
24bd8c02313a007fe5d7c1334e6a2fa1b971fc00
e39f2385f494f465d1a1a96ce97634b4ddba6c7330380427aa30b5d0b0fb338b
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:34:41 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:17:49 GMT
etag: W/"62ebe31d-a8fa"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 2538
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6LZfRwrKSTY%2BgMrPSxlvzsp1t%2Fv4MpePVvIdLL%2BPRghlKuzb9gK7jsE7xaWd6g3w3LwxdfkWuyS6%2FZDHvpL7VTgULNYLxi2xLYk4kBv0IHSQBdgavDcRgCLWgGjD1ISaxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 755c5f668c9ab515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A186%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A768253246%3Arqn%3A1%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C0%2C%2C0%2C%2C80%2C3%2C%2C%2C%2C255%3Ans%3A1665038080756%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
93.158.134.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A186%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A768253246%3Arqn%3A1%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C0%2C%2C0%2C%2C80%2C3%2C%2C%2C%2C255%3Ans%3A1665038080756%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash f85ab40262767fd6047367c2a892f6c4
87a8ef2a700fd3906f091d632844b88bd9949a42
98506580815daf0a3ea0c9d44c5736614603abc163015a019620850c45318b30
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A186%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A768253246%3Arqn%3A1%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C0%2C%2C0%2C%2C80%2C3%2C%2C%2C%2C255%3Ans%3A1665038080756%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 06 Oct 2022 06:34:41 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:41 GMT
last-modified: Thu, 06-Oct-2022 06:34:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A617130738%3Arqn%3A2%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1042%2C1042%2C0%2C%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A617130738%3Arqn%3A2%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1042%2C1042%2C0%2C%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A617130738%3Arqn%3A2%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1042%2C1042%2C0%2C%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 77
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A156115353%3Arqn%3A3%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A156115353%3Arqn%3A3%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A156115353%3Arqn%3A3%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A913822606%3Arqn%3A4%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A913822606%3Arqn%3A4%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A913822606%3Arqn%3A4%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A919212123%3Arqn%3A5%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A919212123%3Arqn%3A5%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A919212123%3Arqn%3A5%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A1036968450%3Arqn%3A6%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A1036968450%3Arqn%3A6%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A1036968450%3Arqn%3A6%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A403361155%3Arqn%3A10%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A403361155%3Arqn%3A10%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A403361155%3Arqn%3A10%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A953352143%3Arqn%3A7%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A953352143%3Arqn%3A7%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A953352143%3Arqn%3A7%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A990551350%3Arqn%3A8%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A990551350%3Arqn%3A8%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonTrackImpression&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A990551350%3Arqn%3A8%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 190
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A889211178%3Arqn%3A9%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A889211178%3Arqn%3A9%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665038081_9ab4d2a659c20db7ce5a6bc5568d89aea080e0dab4b3731cb204aa154c2641ad&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063442%3Aet%3A1665038082%3Ac%3A1%3Arn%3A889211178%3Arqn%3A9%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665038080756%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 78
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 06 Oct 2022 06:34:42 GMT
access-control-allow-origin: https://championtest.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:42 GMT
last-modified: Thu, 06-Oct-2022 06:34:42 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
championtest.top/betting-survey.html?var=6100_305&ymid=b7b5ae79-09a9-4524-bbc7-8864d806c007:22e5c2458bda2a2e34986b4e8913f8b415638f07&offer_id=2058&z=4654991
172.67.131.122200 OK 0 B URL HTTP/2 championtest.top/betting-survey.html?var=6100_305&ymid=b7b5ae79-09a9-4524-bbc7-8864d806c007:22e5c2458bda2a2e34986b4e8913f8b415638f07&offer_id=2058&z=4654991
IP 172.67.131.122:0
GET /betting-survey.html?var=6100_305&ymid=b7b5ae79-09a9-4524-bbc7-8864d806c007:22e5c2458bda2a2e34986b4e8913f8b415638f07&offer_id=2058&z=4654991 HTTP/1.1
Host: championtest.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f5ac6e7aac.smapp.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 06 Oct 2022 06:34:40 GMT
content-type: text/html
last-modified: Wed, 05 Oct 2022 11:06:26 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y8cCtfVgHNShRF%2BETZZnhBlV5wC%2FuOXiqD30h7JlYZ7nlf3msDnhMcXvVzmQ9dPaeUcEK3M9DXECjRGTPi2KO7iO5JqmtrHeuWHnuX7saJJqhFtOOVW%2BMK6uFXqBsxmCcctN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 755c5f633dadb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A186%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A768253246%3Arqn%3A1%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C0%2C%2C0%2C%2C80%2C3%2C%2C%2C%2C255%3Ans%3A1665038080756%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A186%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A768253246%3Arqn%3A1%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C0%2C%2C0%2C%2C80%2C3%2C%2C%2C%2C255%3Ans%3A1665038080756%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A186%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A768253246%3Arqn%3A1%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C0%2C%2C0%2C%2C80%2C3%2C%2C%2C%2C255%3Ans%3A1665038080756%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.top%2Fbetting-survey.html%3Fvar%3D6100_305%26ymid%3Db7b5ae79-09a9-4524-bbc7-8864d806c007%253A22e5c2458bda2a2e34986b4e8913f8b415638f07%26offer_id%3D2058%26z%3D4654991%26utm_campaign%3D6100_305%26utm_medium%3D4654991%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A186%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A711367531097%3Ahid%3A79928728%3Az%3A0%3Ai%3A20221006063441%3Aet%3A1665038082%3Ac%3A1%3Arn%3A768253246%3Arqn%3A1%3Au%3A1665038082899678314%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C0%2C%2C0%2C%2C80%2C3%2C%2C%2C%2C255%3Ans%3A1665038080756%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665038082%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 06 Oct 2022 06:34:41 GMT
access-control-allow-origin: https://championtest.top
set-cookie: yandexuid=1445426201665038081; Expires=Fri, 06-Oct-2023 06:34:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1445426201665038081; Expires=Fri, 06-Oct-2023 06:34:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2111319131665038081; Path=/; SameSite=None; Secure
i=uWoTCCq95oLXtGWLP4/FszYQbVoZqbD8KMJ+IqBnUVBK0QYHloBZg9T3ZkoSY+CcYRsPmBqsyq8fqFVUjAZJYZNbL6g=; Expires=Sun, 03-Oct-2032 06:34:35 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696574081.yrts.1665038081#1696574081.yrtsi.1665038081; Expires=Fri, 06-Oct-2023 06:34:41 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 06-Oct-2022 06:34:41 GMT
last-modified: Thu, 06-Oct-2022 06:34:41 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2