tr.rightwayshow.co/7143a65c-ad9e-4790-9645-8149ed8086a8/2?campaign=EmailMobileDAD&TargetContainerType=email&AdID=891288&PublisherID=3693_127875&ClickID=cafddb0cd9764aa487b7ad6e3934bdb8&cost=0.285&pi_adid=891288&pi_clickid=cafddb0cd9764aa487b7ad6e3934bdb8
18.184.38.55 0 B URL tr.rightwayshow.co/7143a65c-ad9e-4790-9645-8149ed8086a8/2?campaign=EmailMobileDAD&TargetContainerType=email&AdID=891288&PublisherID=3693_127875&ClickID=cafddb0cd9764aa487b7ad6e3934bdb8&cost=0.285&pi_adid=891288&pi_clickid=cafddb0cd9764aa487b7ad6e3934bdb8
IP 18.184.38.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7143a65c-ad9e-4790-9645-8149ed8086a8/2?campaign=EmailMobileDAD&TargetContainerType=email&AdID=891288&PublisherID=3693_127875&ClickID=cafddb0cd9764aa487b7ad6e3934bdb8&cost=0.285&pi_adid=891288&pi_clickid=cafddb0cd9764aa487b7ad6e3934bdb8 HTTP/1.1
Host: tr.rightwayshow.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 10 Jun 2023 13:29:54 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://darkagedefense.convertri.com/baffledbystrangedevice?cep=uUZrQ6Bmv3Cb-2dlUNLKEPIocYYqSBgLy_3wWn61vaSjP4rTw0LPm3ewi7j2029P5EErUuoV6l52lQcHZ4kI-iQB7m80R4S5OwTt_d6gZ-zpOAUn1Wk2a7T7zx_GqUpNNpYa6gLIs_SVESacM3mJhA8N6DTE1wS30E3SQlKh7xBY2TMvlHNcxTbIwuGkWCnmh_JsuU50iWVyH2s8NlBVtPSrtDjy9mSwank1BVbEM22TOskesi3XUgJb9w7vvezLdIpItVxUBQbGsp_j4cyWKvT_W6vXfTe8mix3Ejr2Ovu13A2MBMhMD2LEz-8WH-rmfIJhGnGYo-ZER3jKH72QBhVzxYZ7ahe2RYVZpMAPERKkH0tP95SD3zHEjmK2DVqGGNojvwi71LCryrXYZXt4SiNstgV-0qQlhi_tUTVqgydm9RZ7WUQyT0TMn2lgyAp54M2SMMqf6w90W2QYulUOajfVWyEjOBFTLAEzarxbcY831RQUfVPLxKFWUuixVCfR&lptoken=1676860d40ed552f9450&campaign=EmailMobileDAD&TargetContainerType=email&AdID=891288&PublisherID=3693_127875&ClickID=cafddb0cd9764aa487b7ad6e3934bdb8&cost=0.285&pi_adid=891288&pi_clickid=cafddb0cd9764aa487b7ad6e3934bdb8
pragma: no-cache
set-cookie: 7143a65c-ad9e-4790-9645-8149ed8086a8-v4=cmORXkwQ4Is0UyR5Qc-eLZQHCcbWD4jxapH-sXOkCso; Max-Age=86400; Expires=Sun, 11-Jun-2023 13:29:54 GMT; Domain=tr.rightwayshow.co; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=uCvg6LqUGW7YhiZYydmgxxlgswBXkFrqa0Eiy5-xvYi03HuF2erkffQQN3RXp8GVCW_KqgrwC-_jjInHHJD3GvAwVBwlY1Ewf4mkWrezu_BAjBZn2eWdqcRciNyyGqeKffqc3NC92eizWjRAw66N3MwN2Ix0OuDHIOzuU7ZCLtFbcdxQgAgD7trmvibfjP83wvvqV4SXS7Jiwrh0KBB0irm738WiyeOhZHFtCUagoT41eIf-xp17dEmcU3a4F1u2MZYncvioU1UTGStvhS2pkeLnI4BBW6Y__mEeM_OgwUPyEFKOCkkpHIQJoGKNkIItrMtlUDFWr2vWy9FB3j5w9DlZS_vivFpzw4VMXHMQT8XehESfZZco0IkSSO32_iPjKfxE5FaOUdX6c1uZDrObu0oushmKsZMXvHe-VQiQelOxBGPJhH2HRNu2DAJRs7w4KyvpjuyXkpacfROjaRH6CMmPCt8Jrr9yCW4iG2jn7UzZGFkV2Vi3X79XZUWVJyL0; Max-Age=86400; Expires=Sun, 11-Jun-2023 13:29:54 GMT; Domain=tr.rightwayshow.co; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.15.101 472 B IP 104.18.15.101:0
Hash ab4f4f33c33b09bbef3f0419401560ae
b08e6ff2962953a7184e35894cbfd1733b9d440f
741ea7bd6c3337b4a33ff1c915b06e2e3dd9769429c08ae3d2fd37faa4dba5df
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 13:29:54 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Jun 2023 18:14:47 GMT
Expires: Thu, 15 Jun 2023 18:14:46 GMT
Etag: "b08e6ff2962953a7184e35894cbfd1733b9d440f"
Cache-Control: max-age=448491,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d51f743cba61bfe-OSL
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 13:29:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf
216.58.207.227 21 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf
IP 216.58.207.227:0
File type TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-Regularhtt\012- data
Hash a0d084a3e8176664e75f8eca3ebea96c
324ec20b91392a6871d7846e0ff2972447a1b2b8
a9ef021078603005c0b08fba881f1a7eb62ef213238021f3e8a4a00daa60b9d6
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxP.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://darkagedefense.convertri.com
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 10:02:51 GMT
expires: Thu, 06 Jun 2024 10:02:51 GMT
cache-control: public, max-age=31536000
age: 271624
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 13:29:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 13:29:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiYA.ttf
216.58.207.227 13 kB URL fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiYA.ttf
IP 216.58.207.227:0
File type TrueType Font data, 16 tables, 1st "GDEF", 10 names, Microsoft, language 0x409, Copyright 2016 The Oswald Project Authors (https://github.com/googlefonts/OswaldFont)OswaldRegul\012- data
Hash cac7281ea840b11abb7490e1e30acebe
b13383a234eb58aaaf0e39160dd35255de55be34
63063d70238971fbc6e5b1b83125a18adb4a018ee49c72b29a6646288da86b81
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiYA.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://darkagedefense.convertri.com
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12895
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Jun 2023 18:15:53 GMT
expires: Sun, 02 Jun 2024 18:15:53 GMT
cache-control: public, max-age=31536000
age: 587642
last-modified: Mon, 18 Jul 2022 19:24:03 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf
216.58.207.227 21 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf
IP 216.58.207.227:0
File type TrueType Font data, 18 tables, 1st "GDEF", 8 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo\012- data
Hash ecec6c79a27c8914400d4116e02668aa
3b2880007b93580c4b35e2b31afe2fc9b6fa5923
8a9a74f4455f392ec3e7499cfda6097b536bb4b7f1e529a079c3d953c08b54ca
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc9.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://darkagedefense.convertri.com
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Jun 2023 20:49:26 GMT
expires: Thu, 06 Jun 2024 20:49:26 GMT
cache-control: public, max-age=31536000
age: 232829
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 6109dc90074997c867d10212ff8f9a81
4f26dbb187f908c7eb6bc2a550034c85cfe6fc8b
d964eec14e1b68dc5ee99e7b1bc4cbb509255de0c49801ca5034253d4cd16be5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 13:29:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.convertri.com/img/powered-by-badge/v1/mobile.jpg
138.199.37.230 1.9 kB URL cdn.convertri.com/img/powered-by-badge/v1/mobile.jpg
IP 138.199.37.230:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x30, components 3\012- data
Hash 0dfa0754d017188576fd9b649e81fc26
88d1a5d6cb79b3b569b1e663bda02347ce342b0b
bdf23e805d067c111468eb60b30c02995327a58b05255d683e71641d0685afa5
GET /img/powered-by-badge/v1/mobile.jpg HTTP/1.1
Host: cdn.convertri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Jun 2023 13:29:55 GMT
content-type: image/jpeg
content-length: 1899
server: BunnyCDN-DE1-864
cdn-pullzone: 408079
cdn-uid: aa1ac425-1b79-4cdb-bd61-f1990cecd40e
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Tue, 06 Jun 2023 08:29:56 GMT
cdn-cachedat: 06/06/2023 08:30:46
x-bo-server: ASB-197
x-downloadsize: 2010
x-bo-origindownloadtime: 66
x-bo-processingtime: 0
x-bo-compressionratio: 5.52%
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1082
cdn-status: 200
cdn-requestid: 28a93ef8fd5509bf41b199acb5df64c6
cdn-cache: HIT
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227 471 B URL ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 66b9b06c731ce7f0946c618c7d4f85ae
1d68da168157c52245ad4f32facf7ec8d3c04296
ef5a8ef4b8f9afbc5881bd190ff034575d6039a5a3c9df687ba3a5f601b57a02
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 10 Jun 2023 13:29:55 GMT
Last-Modified: Sat, 10 Jun 2023 11:53:10 GMT
Server: ECAcc (nya/79EB)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oVX8qkXbZ5CAlmy-AJ68SjwzBsqAnQ1bLXE_jS7l1MgG6fFzTnWaUg==
Age: 5805
convertri.imgix.net/9b326dd5-e67d-11ec-aeb6-06deec350f13/0ae3bc1dca2491cba3911e88f0f093946b156b33/metal.jpeg%3Fv%3D10001.jpg?auto=compress,format&fit=scale&w=600&h=338
151.101.246.208200 OK 7.2 kB URL GET HTTP/2 convertri.imgix.net/9b326dd5-e67d-11ec-aeb6-06deec350f13/0ae3bc1dca2491cba3911e88f0f093946b156b33/metal.jpeg%3Fv%3D10001.jpg?auto=compress,format&fit=scale&w=600&h=338
IP 151.101.246.208:443
Requested by https://darkagedefense.convertri.com/baffledbystrangedevice?cep=uUZrQ6Bmv3Cb-2dlUNLKEPIocYYqSBgLy_3wWn61vaSjP4rTw0LPm3ewi7j2029P5EErUuoV6l52lQcHZ4kI-iQB7m80R4S5OwTt_d6gZ-zpOAUn1Wk2a7T7zx_GqUpNNpYa6gLIs_SVESacM3mJhA8N6DTE1wS30E3SQlKh7xBY2TMvlHNcxTbIwuGkWCnmh_JsuU50iWVyH2s8NlBVtPSrtDjy9mSwank1BVbEM22TOskesi3XUgJb9w7vvezLdIpItVxUBQbGsp_j4cyWKvT_W6vXfTe8mix3Ejr2Ovu13A2MBMhMD2LEz-8WH-rmfIJhGnGYo-ZER3jKH72QBhVzxYZ7ahe2RYVZpMAPERKkH0tP95SD3zHEjmK2DVqGGNojvwi71LCryrXYZXt4SiNstgV-0qQlhi_tUTVqgydm9RZ7WUQyT0TMn2lgyAp54M2SMMqf6w90W2QYulUOajfVWyEjOBFTLAEzarxbcY831RQUfVPLxKFWUuixVCfR&lptoken=1676860d40ed552f9450&campaign=EmailMobileDAD&TargetContainerType=email&AdID=891288&PublisherID=3693_127875&ClickID=cafddb0cd9764aa487b7ad6e3934bdb8&cost=0.285&pi_adid=891288&pi_clickid=cafddb0cd9764aa487b7ad6e3934bdb8
Certificate IssuerGlobalSign nv-sa
Subject*.imgix.com
FingerprintB4:E4:B7:6D:A3:73:77:08:35:9C:5A:31:F8:BC:B9:C0:D4:91:E5:D4
ValiditySun, 05 Mar 2023 12:38:15 GMT - Fri, 05 Apr 2024 12:38:14 GMT
File type ISO Media, AVIF Image\012- data
Hash 1faf1454cb81ff1e576a7599add61069
9e4fa4a00c1d56bee04560df556b990802828fd2
ef71c2f517140b5ba04544e05ecd5baea183d891a92a2c212967b35eb9a0463f
GET /9b326dd5-e67d-11ec-aeb6-06deec350f13/0ae3bc1dca2491cba3911e88f0f093946b156b33/metal.jpeg%3Fv%3D10001.jpg?auto=compress,format&fit=scale&w=600&h=338 HTTP/1.1
Host: convertri.imgix.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 05 Jun 2023 16:35:52 GMT
cache-control: public, max-age=2419200
x-imgix-id: 7dc1be7aeedd3b178843f1e5f1f435c2320d5206
server: Google Frontend
x-imgix-render-farm: 02.8744
date: Sat, 10 Jun 2023 13:29:56 GMT
age: 420843
accept-ranges: bytes
content-type: image/avif
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: X-Imgix-Bg-Remove-Failure-Reason
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-served-by: cache-sjc1000095-SJC, cache-hel1410022-HEL
x-cache: HIT, MISS
vary: Accept, User-Agent
content-length: 7150
X-Firefox-Spdy: h2
cdn.convertri.com/cdn.min.css?v=2023-05-16-09-11-33
138.199.37.230 10 kB URL cdn.convertri.com/cdn.min.css?v=2023-05-16-09-11-33
IP 138.199.37.230:0
ASN #60068 Datacamp Limited
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7ffcc203eb6131fcd89718a294d3b768
bce2687dc895a5ef27f3bc4584030c64f41a71be
a0af84c150aecc2e33efb2dee03f80cedd17c5decab32318cca215d82ae8cb9e
GET /cdn.min.css?v=2023-05-16-09-11-33 HTTP/1.1
Host: cdn.convertri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 Jun 2023 13:29:55 GMT
content-type: text/css
server: BunnyCDN-DE1-864
cdn-pullzone: 408079
cdn-uid: aa1ac425-1b79-4cdb-bd61-f1990cecd40e
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: max-age=604800
content-encoding: br
etag: W/"7ffcc203eb6131fcd89718a294d3b768"
last-modified: Tue, 06 Jun 2023 08:29:53 GMT
cdn-cachedat: 06/06/2023 08:29:56
x-amz-id-2: LVG+w3j/OqvbFcpgTOEFof3XIaQtn4We05gbNlTe04Un8j8yTTWBMvETMrW+dxh8d99CrVZTPlA=
x-amz-request-id: Y4D1D1DJXZZP9N70
x-amz-server-side-encryption: AES256
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: 47cb4fa20acc839f937cb193e9981ab2
cdn-cache: HIT
X-Firefox-Spdy: h2
snowplow.convertri.com/i?stm=1686403795066&e=pv&url=https%3A%2F%2Fdarkagedefense.convertri.com%2Fbaffledbystrangedevice%3Fcep%3DuUZrQ6Bmv3Cb-2dlUNLKEPIocYYqSBgLy_3wWn61vaSjP4rTw0LPm3ewi7j2029P5EErUuoV6l52lQcHZ4kI-iQB7m80R4S5OwTt_d6gZ-zpOAUn1Wk2a7T7zx_GqUpNNpYa6gLIs_SVESacM3mJhA8N6DTE1wS30E3SQlKh7xBY2TMvlHNcxTbIwuGkWCnmh_JsuU50iWVyH2s8NlBVtPSrtDjy9mSwank1BVbEM22TOskesi3XUgJb9w7vvezLdIpItVxUBQbGsp_j4cyWKvT_W6vXfTe8mix3Ejr2Ovu13A2MBMhMD2LEz-8WH-rmfIJhGnGYo-ZER3jKH72QBhVzxYZ7ahe2RYVZpMAPERKkH0tP95SD3zHEjmK2DVqGGNojvwi71LCryrXYZXt4SiNstgV-0qQlhi_tUTVqgydm9RZ7WUQyT0TMn2lgyAp54M2SMMqf6w90W2QYulUOajfVWyEjOBFTLAEzarxbcY831RQUfVPLxKFWUuixVCfR%26lptoken%3D1676860d40ed552f9450%26campaign%3DEmailMobileDAD%26TargetContainerType%3Demail%26AdID%3D891288%26PublisherID%3D3693_127875%26ClickID%3Dcafddb0cd9764aa487b7ad6e3934bdb8%26cost%3D0.285%26pi_adid%3D891288%26pi_clickid%3Dcafddb0cd9764aa487b7ad6e3934bdb8&page=Elon%20Baffled%20By%20Strange%20Device&tv=js-2.7.0&tna=cvt-cookies-enabled&aid=cvt&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=a282a0b1-a210-4ca1-8048-15bfbf2fbfec&dtm=1686403795064&vp=1280x1024&ds=1280x1769&vid=1&sid=f56079f2-8a03-4bd6-b866-1d240260bee5&duid=04d32f12-9179-4315-b285-daf5db2c5c5c&fp=2411203771
3.213.227.16 43 B URL snowplow.convertri.com/i?stm=1686403795066&e=pv&url=https%3A%2F%2Fdarkagedefense.convertri.com%2Fbaffledbystrangedevice%3Fcep%3DuUZrQ6Bmv3Cb-2dlUNLKEPIocYYqSBgLy_3wWn61vaSjP4rTw0LPm3ewi7j2029P5EErUuoV6l52lQcHZ4kI-iQB7m80R4S5OwTt_d6gZ-zpOAUn1Wk2a7T7zx_GqUpNNpYa6gLIs_SVESacM3mJhA8N6DTE1wS30E3SQlKh7xBY2TMvlHNcxTbIwuGkWCnmh_JsuU50iWVyH2s8NlBVtPSrtDjy9mSwank1BVbEM22TOskesi3XUgJb9w7vvezLdIpItVxUBQbGsp_j4cyWKvT_W6vXfTe8mix3Ejr2Ovu13A2MBMhMD2LEz-8WH-rmfIJhGnGYo-ZER3jKH72QBhVzxYZ7ahe2RYVZpMAPERKkH0tP95SD3zHEjmK2DVqGGNojvwi71LCryrXYZXt4SiNstgV-0qQlhi_tUTVqgydm9RZ7WUQyT0TMn2lgyAp54M2SMMqf6w90W2QYulUOajfVWyEjOBFTLAEzarxbcY831RQUfVPLxKFWUuixVCfR%26lptoken%3D1676860d40ed552f9450%26campaign%3DEmailMobileDAD%26TargetContainerType%3Demail%26AdID%3D891288%26PublisherID%3D3693_127875%26ClickID%3Dcafddb0cd9764aa487b7ad6e3934bdb8%26cost%3D0.285%26pi_adid%3D891288%26pi_clickid%3Dcafddb0cd9764aa487b7ad6e3934bdb8&page=Elon%20Baffled%20By%20Strange%20Device&tv=js-2.7.0&tna=cvt-cookies-enabled&aid=cvt&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=a282a0b1-a210-4ca1-8048-15bfbf2fbfec&dtm=1686403795064&vp=1280x1024&ds=1280x1769&vid=1&sid=f56079f2-8a03-4bd6-b866-1d240260bee5&duid=04d32f12-9179-4315-b285-daf5db2c5c5c&fp=2411203771
IP 3.213.227.16:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1686403795066&e=pv&url=https%3A%2F%2Fdarkagedefense.convertri.com%2Fbaffledbystrangedevice%3Fcep%3DuUZrQ6Bmv3Cb-2dlUNLKEPIocYYqSBgLy_3wWn61vaSjP4rTw0LPm3ewi7j2029P5EErUuoV6l52lQcHZ4kI-iQB7m80R4S5OwTt_d6gZ-zpOAUn1Wk2a7T7zx_GqUpNNpYa6gLIs_SVESacM3mJhA8N6DTE1wS30E3SQlKh7xBY2TMvlHNcxTbIwuGkWCnmh_JsuU50iWVyH2s8NlBVtPSrtDjy9mSwank1BVbEM22TOskesi3XUgJb9w7vvezLdIpItVxUBQbGsp_j4cyWKvT_W6vXfTe8mix3Ejr2Ovu13A2MBMhMD2LEz-8WH-rmfIJhGnGYo-ZER3jKH72QBhVzxYZ7ahe2RYVZpMAPERKkH0tP95SD3zHEjmK2DVqGGNojvwi71LCryrXYZXt4SiNstgV-0qQlhi_tUTVqgydm9RZ7WUQyT0TMn2lgyAp54M2SMMqf6w90W2QYulUOajfVWyEjOBFTLAEzarxbcY831RQUfVPLxKFWUuixVCfR%26lptoken%3D1676860d40ed552f9450%26campaign%3DEmailMobileDAD%26TargetContainerType%3Demail%26AdID%3D891288%26PublisherID%3D3693_127875%26ClickID%3Dcafddb0cd9764aa487b7ad6e3934bdb8%26cost%3D0.285%26pi_adid%3D891288%26pi_clickid%3Dcafddb0cd9764aa487b7ad6e3934bdb8&page=Elon%20Baffled%20By%20Strange%20Device&tv=js-2.7.0&tna=cvt-cookies-enabled&aid=cvt&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&cookie=1&eid=a282a0b1-a210-4ca1-8048-15bfbf2fbfec&dtm=1686403795064&vp=1280x1024&ds=1280x1769&vid=1&sid=f56079f2-8a03-4bd6-b866-1d240260bee5&duid=04d32f12-9179-4315-b285-daf5db2c5c5c&fp=2411203771 HTTP/1.1
Host: snowplow.convertri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 Jun 2023 13:29:56 GMT
content-type: image/gif
content-length: 43
server: spray-can/1.3.3
set-cookie: _CVTa=96da85b4-95cb-4007-8f0c-02c01ecfd618; Expires=Sun, 09 Jun 2024 13:29:56 GMT; Domain=.convertri.com; Path=/
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: *
access-control-allow-credentials: true
X-Firefox-Spdy: h2
darkagedefense.convertri.com/favicon.ico
35.240.1.10 73 B URL darkagedefense.convertri.com/favicon.ico
IP 35.240.1.10:0
File type HTML document, ASCII text
Hash 77437246341595cbdf55a298771b3f42
b4f764885c465e760ddf67cad3de29589d8f5de1
ca3170f23b6703190325c191f808a880be235ed452b2181519d94c34f8eab5ce
GET /favicon.ico HTTP/1.1
Host: darkagedefense.convertri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://darkagedefense.convertri.com/baffledbystrangedevice?cep=uUZrQ6Bmv3Cb-2dlUNLKEPIocYYqSBgLy_3wWn61vaSjP4rTw0LPm3ewi7j2029P5EErUuoV6l52lQcHZ4kI-iQB7m80R4S5OwTt_d6gZ-zpOAUn1Wk2a7T7zx_GqUpNNpYa6gLIs_SVESacM3mJhA8N6DTE1wS30E3SQlKh7xBY2TMvlHNcxTbIwuGkWCnmh_JsuU50iWVyH2s8NlBVtPSrtDjy9mSwank1BVbEM22TOskesi3XUgJb9w7vvezLdIpItVxUBQbGsp_j4cyWKvT_W6vXfTe8mix3Ejr2Ovu13A2MBMhMD2LEz-8WH-rmfIJhGnGYo-ZER3jKH72QBhVzxYZ7ahe2RYVZpMAPERKkH0tP95SD3zHEjmK2DVqGGNojvwi71LCryrXYZXt4SiNstgV-0qQlhi_tUTVqgydm9RZ7WUQyT0TMn2lgyAp54M2SMMqf6w90W2QYulUOajfVWyEjOBFTLAEzarxbcY831RQUfVPLxKFWUuixVCfR&lptoken=1676860d40ed552f9450&campaign=EmailMobileDAD&TargetContainerType=email&AdID=891288&PublisherID=3693_127875&ClickID=cafddb0cd9764aa487b7ad6e3934bdb8&cost=0.285&pi_adid=891288&pi_clickid=cafddb0cd9764aa487b7ad6e3934bdb8
Cookie: _sp_ses.6651=*; _sp_id.6651=04d32f12-9179-4315-b285-daf5db2c5c5c.1686403795.1.1686403795.1686403795.f56079f2-8a03-4bd6-b866-1d240260bee5; _CVTa=96da85b4-95cb-4007-8f0c-02c01ecfd618
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
location: https://cdn.convertri.com/favicon.ico
vary: Accept-Encoding
content-length: 73
date: Sat, 10 Jun 2023 13:29:56 GMT
X-Firefox-Spdy: h2
cdn.convertri.com/favicon.ico
138.199.37.230 2.4 kB URL cdn.convertri.com/favicon.ico
IP 138.199.37.230:0
ASN #60068 Datacamp Limited
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 542a6c950dc11dfdcc8262df4185b767
d997b8f51d2e8b462faf0217b911a23a5383f84e
c79c14bf58a56fb450588a775ea6e0b231f4c8f6977c6334b650795162e14e79
GET /favicon.ico HTTP/1.1
Host: cdn.convertri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://darkagedefense.convertri.com/
DNT: 1
Connection: keep-alive
Cookie: _CVTa=96da85b4-95cb-4007-8f0c-02c01ecfd618
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Jun 2023 13:29:56 GMT
content-type: image/png
content-length: 2425
server: BunnyCDN-DE1-864
cdn-pullzone: 408079
cdn-uid: aa1ac425-1b79-4cdb-bd61-f1990cecd40e
cdn-requestcountrycode: NO
cache-control: max-age=604800
etag: "542a6c950dc11dfdcc8262df4185b767"
last-modified: Tue, 11 Sep 2018 10:57:55 GMT
cdn-cachedat: 06/06/2023 08:30:02
x-amz-id-2: OtvYyqyqaZjFmMS8XtqZO7TENtzyilgFlL4p+APgpMxsEwcezVmj6AM2+kmGc2RshWLXR24Xp2s=
x-amz-request-id: E4X3MZ7MNA98AC29
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1082
cdn-status: 200
cdn-requestid: ef591f6af15078e09b4af09ef49a76a2
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2