Overview

URLwww.seacow.ru.com/ksarji/elxeu877248gnktqarpk/sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq
IP 104.21.6.16 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-10-07 05:19:56 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (19)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-06 05:02:20 UTC 34.215.107.141
www.google-analytics.com (3) 40 2012-10-03 01:04:21 UTC 2022-10-06 18:51:56 UTC 142.250.74.174
stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-10-06 06:27:32 UTC 173.194.73.154
www.schoolofsquirt.com (3) 0 2015-04-13 03:46:23 UTC 2022-10-06 18:26:01 UTC 74.121.205.60 Unknown ranking
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-10-06 04:46:31 UTC 23.36.76.226
p.typekit.net (1) 620 2012-05-23 14:28:57 UTC 2022-10-07 04:53:51 UTC 23.36.76.184
e1.o.lencr.org (2) 6159 2021-08-20 07:36:30 UTC 2022-10-06 06:04:03 UTC 23.36.76.226
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-06 04:46:50 UTC 34.117.237.239
ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-10-06 04:46:05 UTC 142.250.74.3
pixel.wp.com (1) 2545 2017-01-30 05:31:40 UTC 2022-10-06 23:23:54 UTC 192.0.76.3
firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-10-06 17:42:29 UTC 54.230.111.7
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-06 04:55:14 UTC 34.160.144.191
www.googletagmanager.com (1) 75 2012-12-25 14:52:06 UTC 2022-10-06 12:50:56 UTC 142.250.74.168
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-10-06 22:47:50 UTC 93.184.220.29
use.typekit.net (3) 494 2012-07-05 01:42:39 UTC 2022-10-07 04:53:51 UTC 23.36.76.186
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-10-07 04:02:24 UTC 142.250.74.3
www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-10-06 23:56:29 UTC 142.250.74.164
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-06 15:33:49 UTC 34.120.237.76
www.seacow.ru.com (38) 0 2022-10-06 10:10:34 UTC 2022-10-06 18:26:00 UTC 172.67.134.41 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-07 2 www.seacow.ru.com/ksarji/elxeu877248gnktqarpk/sacupjecerodc6r9smxpekvjnacqc (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 104.21.6.16
Date UQ / IDS / BL URL IP
2023-02-24 20:49:18 +0000 0 - 2 - 0 wzknh.duair.top/ 104.21.6.16
2022-10-07 05:19:56 +0000 0 - 0 - 1 www.seacow.ru.com/ksarji/elxeu877248gnktqarpk (...) 104.21.6.16


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-28 00:06:30 +0000 0 - 1 - 0 cdn.discordapp.com/attachments/10785045396127 (...) 162.159.130.233
2023-03-28 00:05:01 +0000 0 - 2 - 0 raymond.cc/wp-content/sun/Apps%20tracker%20in (...) 172.67.75.93
2023-03-28 00:01:42 +0000 0 - 2 - 0 raymond.cc/wp-content/sun/PowerTool_en_201512 (...) 104.26.5.250
2023-03-27 23:58:34 +0000 0 - 1 - 0 ww.healthacharya.com/ 172.67.213.65
2023-03-27 23:58:32 +0000 1 - 0 - 0 a.loyalglimmeringmobile.shop/wbiwxb/i13s21m/i (...) 104.16.118.67


Last 1 reports on domain: seacow.ru.com
Date UQ / IDS / BL URL IP
2022-10-07 05:19:56 +0000 0 - 0 - 1 www.seacow.ru.com/ksarji/elxeu877248gnktqarpk (...) 104.21.6.16


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-17 06:58:28 +0000 0 - 0 - 39 hit.charmred.shop/wxxslak/lhpu1163vbof/et86nM (...) 172.67.130.130
2022-12-05 05:58:40 +0000 0 - 0 - 1 www.candidatescan.shop/Lnulmnvgjpp/vevxwfo744 (...) 172.67.196.230
2022-12-05 05:58:37 +0000 0 - 0 - 1 www.candidatescan.shop/pxbenkkbo/fdhide744ril (...) 172.67.196.230
2022-12-05 05:58:25 +0000 0 - 0 - 1 www.candidatescan.shop/kawvxralh/dfwdrbqtm744 (...) 172.67.196.230
2022-12-05 05:58:12 +0000 0 - 0 - 1 www.candidatescan.shop/ypturxati/xiga744peahj (...) 172.67.196.230

JavaScript

Executed Scripts (30)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (80)


Request Response
                                        
                                            GET /ksarji/elxeu877248gnktqarpk/sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 07 Oct 2022 05:19:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t0XfYwylCBFwM7xaJWXtBq6i4aWnxOJSrm24mX9kLrZ5GfmNXtwwkCB4IWFl%2F3FJalRRr3gq1JwjXeZzf60XUOAvsr5E6tSgu6fqd1iOOML6rAm7a0N6nTYqzw%2FRsS0qVeVzwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75642f025f18b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (316)
Size:   543
Md5:    c7c1634e5ce8499f73b086fd47cc94dc
Sha1:   f8a7d32a1380ed1c137087882e8a129a7e7ff719
Sha256: 3f88173730e1725d3fb62d93f19cb3cea9e719987743955cf4027a0d4b0b5718

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EPh9o3tGbul7r9_YY_dfwcKdCpf6Em5BQDJCfJ8YkZE2hGat5DhX1g==
Age: 135147


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6279
Expires: Fri, 07 Oct 2022 07:04:24 GMT
Date: Fri, 07 Oct 2022 05:19:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B91D37F606EAF448B9C7DFC05566A11DE004CE44503409E1A776288EE2622805"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21566
Expires: Fri, 07 Oct 2022 11:19:11 GMT
Date: Fri, 07 Oct 2022 05:19:45 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: cG4ebwMsMzTJheAPd7X6FNPx4x5fscWVLixuH7qIwb/LJl938BTsMMarMhTVrU5PtstaUk+8jSI=
x-amz-request-id: YNNRNBTWA0N15AM1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 07 Oct 2022 04:59:02 GMT
age: 1243
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 07 Oct 2022 05:19:45 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-22484186-3 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 07 Oct 2022 05:19:45 GMT
expires: Fri, 07 Oct 2022 05:19:45 GMT
cache-control: private, max-age=900
last-modified: Fri, 07 Oct 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42429
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2039)
Size:   42429
Md5:    6b0b4b30535a3f3cae5dc433e47749e7
Sha1:   216e5f07d49bed6adec88af00ffed3bc85f1a90b
Sha256: ad2caad646cb9981f7fd0dcf168e605ecb46c6d553ec4039d9dec7f0e4e3c839
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /jquery-1.11.0.min.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/ksarji/elxeu877248gnktqarpk/sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:03:39 GMT
ETag: W/"62e8238b-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W3JTycDgIiD8kraGdFqL8aaMll%2BhHtZd%2BRHJumcJzYtnEkVvAyNgPt9kQLI7DKMY57IudkXu%2Fyqh9Iw9MrB4%2F%2BJ5SMKbSylhMbRWa7ofJh%2FUScefnBfM%2BnDGBFtEZ4ouL4oo9w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f04b8b1b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (32341)
Size:   33436
Md5:    95fe3f4dd117c33f6015e1c3d6df1d0d
Sha1:   d5b8856932d1ea63f51824de0bb50670d2e960bc
Sha256: e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Fri, 07 Oct 2022 04:29:41 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 07 Oct 2022 05:14:50 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9VOdIaKVI-0IbRlzwFmYnnHaTaLp6BpP5DO1HwSyh8KAdFHkxzrY3g==
Age: 3004


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "9187DC92BD97E362D50B7E1523B0EA805BF0F196AFF5C0649AC29CC6EC4ECC75"
Last-Modified: Wed, 05 Oct 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 07 Oct 2022 11:19:45 GMT
Date: Fri, 07 Oct 2022 05:19:45 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "9187DC92BD97E362D50B7E1523B0EA805BF0F196AFF5C0649AC29CC6EC4ECC75"
Last-Modified: Wed, 05 Oct 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Fri, 07 Oct 2022 11:19:45 GMT
Date: Fri, 07 Oct 2022 05:19:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5414
Cache-Control: 'max-age=158059'
Date: Fri, 07 Oct 2022 05:19:46 GMT
Last-Modified: Fri, 07 Oct 2022 03:49:33 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.25
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GYd1XtKncMwAwAktqNigFN6oY57h0VtrmLUqCvvmma0pSSLHK%2B206I8bgbCb6z2WjDwVsUM8V3PQyT2ctrAexp3ugCPV5vpN6sZShG6nlZlXsqblcDSDPL3gXLv5n90V6bGCaw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75642f08ac1ab4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (14202), with CRLF line terminators
Size:   14006
Md5:    55642210ef29f7367f959e0f374a5bdd
Sha1:   4ef1266918516176f8879ef167d9620c3b7b19d6
Sha256: eee58458ac008041a1f9f74fe95d22d561445bc25c33c979528ea6276f9bb4bf
                                        
                                            GET /offer.php?id=314&sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         172.67.134.41
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 07 Oct 2022 05:19:45 GMT
x-powered-by: PHP/7.3.25
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ovp72XYezvxqPClnlCZFsllBd8OG9mJwA9FYB%2BFpryWMNpW5w%2FBgmWq5av8%2FELy8QdRr0AOy0PFxAaaWrxoPn9ckq88khe68yJmXJd%2Fv6jKEB9GW7KrWXoba9zeTEVL7ugnCQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75642f07ee020b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (328)
Size:   19950
Md5:    ebd1725d622a0c4d0891f4e0a65c350a
Sha1:   c37ba5b9b2a92aa0b50ccf5cf6c184e38f0e383e
Sha256: 6ff9a813861b4ad7d55edb86240d3927169d1a1f9b5372376217ba747da76e1e
                                        
                                            GET /clicks/SquirtingSchool2_files/gtm.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-1745f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Qx%2FtBtOMBiEPi8jTE4Au8Wn%2BMpmk6E4fj9YFOoIBjpg7v7nBAlWdLPd77Hh7eW%2Fr8sMalbBPww6ZmD75QDVAIhn3eG%2FEQ1e%2FqN8r7sEFJ21owTkqw6nirL4KawWwHyEqyLRkw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f092cf60b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1769)
Size:   35077
Md5:    0836fe24cc27b8bb4487f54b58f02862
Sha1:   0d15857b796c032367c80f9896619f90d93e72dc
Sha256: ddb1db449d1988abbfe8e4a0aa6aa347ce62f14deeb486469691e324547dd72a
                                        
                                            GET /clicks/SquirtingSchool2_files/screen.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-484"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sFwb0LAjdrgXgqgYkXOZ8rV48X3j3or0lv1m9JC9kM7EKpg9JNc9jrfn83GeOcQllmWHlCNgCC9swo3Db89bpiYlxFPHWYzQvODxt%2FPR4RUMYcwqD5l00ckpWGlrfk1%2FKFKMWg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f093d96b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1156), with no line terminators
Size:   451
Md5:    9cbb12ded165859b75441a829fb683af
Sha1:   1e85f7bd7f0fa9dbc53157bbead5eb703c502db8
Sha256: 3dba212407392e05ef866072e63f519c9ef7365ea376cb5a8824e77726a6759b
                                        
                                            GET /clicks/SquirtingSchool2_files/style.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-e33b"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OgJ42t0ehhZ3Os2quRcWccTb0nsoyXFsF1R2dALj9qwt0LAAYFXC2L%2B%2BjgfHucK3jE1H2io1zwrHD7FQDdmn%2FTqUIqi00QpWBxfXYmnmI57r9XTRtG%2BERNz8vZauXDQtENjpzg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f093fccb51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (29677)
Size:   8609
Md5:    9fb5134f2a659735f48ff96b78196847
Sha1:   9c39894b8e981273e4a45754f8f3ad93e8955522
Sha256: 28d1eb4db568bac23b22b4f660dce0bbf0adbf2de7114fffa8249b4e2f59acc1
                                        
                                            GET /clicks/SquirtingSchool2_files/wp-emoji-release.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-3795"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HcD9RZM%2FeFJ1YpKcs32CbAyrxzL3umvy2U4z3h1P8Xo6vWX9Qu%2Bai28Oj7O1do%2FJQ7n5UdX45ic5akzPv8ICbOxMNmnIBCEC%2BiwFecN1yEyZ5hPSebWEFhMbgPwdw%2B1OcuKvMA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f093e7cfac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (11272)
Size:   4657
Md5:    71b6d75cd4e93368516cec04a93790f8
Sha1:   d274862e4ee8bea24bf1d6d6f8f1e231abd778c2
Sha256: 7f1d272195370f3d6541779815b23d961b1cb9474d3bf57786f9844840083596
                                        
                                            GET /clicks/SquirtingSchool2_files/thrive_flat.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-62908"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ICp0pKDN3xYDJqmBi1gSlRUALSw2FlOVryG6ViaudljE5fU6qsBKJBhgUriq9MU97EuRYIueWTvQpUOM1rZOqElx4MOdHU0Npy%2BEFBG8KrVJ4LMDWZyp37D5G7hME%2Bs6NBsZ%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f097cb5b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   46653
Md5:    f948543f23ff3cfcea2c31d02f7b5fbf
Sha1:   93504a5f7f442e737257e5a1f0bb116b67c7c1b0
Sha256: 5402356a150943826eb706c1277d4da5045ae47bcb772494a0996d00d2744838
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ipTqCGQJLOr3q0K8E+Vi6Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         34.215.107.141
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XqlYTtOEJizREj65RoPY18Miy14=

                                        
                                            GET /clicks/SquirtingSchool2_files/style_002.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-556a"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aZ8wYyytbP7P12FknJmc8GQipZAEbbMUqNnRU%2BnSDsJabqTy8STilTC4l3EA7q0DuNM3hWANPES8ybWjFNEY6zOVatIGZezRrdpFHFyIthzMjo3EHCy7H8w9FyKkxIiq6Clv7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0a2da70b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (21866), with no line terminators
Size:   5099
Md5:    83f8bf595ce89616b8f84b08029c4bf4
Sha1:   b96af70e68a3bae9b4f40a6f1f72387e63e075fc
Sha256: 9cd4310731c9a1edb3d464f1758bf914b91211f293144015e32eb17509b2a016
                                        
                                            GET /clicks/SquirtingSchool2_files/unsemantic-grid.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-3107"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mnEOvSm4bXWP7un25cNlG%2BKubodz711PNRRu4XHSLTkYGmgqmVz7hWa%2FQ0yrpDifjapAAZcpAW06VjPbImeaCtIncdd9Tv2yVf%2BB90DAxhflzu6rFEIdmx29pwL6KbpiPzOrtw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0a2d9cb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (12551), with no line terminators
Size:   2214
Md5:    32b7e5a2b0fe6a7e72680d51da96ea2a
Sha1:   ef8af7f6261e77158293a4f6d9a012c33695c541
Sha256: 214a39b0b08579b9821d5c676de0d9c646786e5ce2a82c66cdfa4ba538efeb8b
                                        
                                            GET /clicks/SquirtingSchool2_files/mobile.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-ec5"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UEJEwcqsJOeqBD9BjQWkKDKTOrIn%2BP%2B2rdvOy%2Fr04JtGRTBVtD%2Fs9lyMc16PqPiaQQwZf3z4xGwgaf%2BJDS4oqJYFLddEQQ1fFp4MPou2rHblcbfrZa8%2BxjbY0GrqYEe4pnD06g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0a2e40b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (3781), with no line terminators
Size:   1126
Md5:    776786ab3f58f5c0eb2ca63a9628e73c
Sha1:   7d74cddc365ed8bcd306d054655dfb2e9c38602e
Sha256: d456ed7b3f59cfe6efa0aa068ad0e382e9436f95c6287f17998d223c10215ca4
                                        
                                            POST /j/collect?v=1&_v=j90&a=259216803&t=pageview&_s=1&dl=http%3A%2F%2Fwww.seacow.ru.com%2Fclicks%2Fwts_ss2.php%3Fsid%3D996084%26h%3Dsacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0%2Fn5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq&ul=en-us&de=UTF-8&dt=School%20Of%20Squirt%20-%20The%20Original%20%26%20Best%20Place%20To%20Learn%20About%20Squirting&sd=24-bit&sr=1280x1024&vp=&je=0&_u=YEBAAUABAAAAAC~&jid=415873611&gjid=1442051691&cid=947291979.1665119986&tid=UA-22484186-3&_gid=1748894116.1665119986&_r=1&gtm=2oua50&z=220930824 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.seacow.ru.com
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.seacow.ru.com
date: Fri, 07 Oct 2022 05:19:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            GET /clicks/SquirtingSchool2_files/font-icons.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-ade"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JbA%2FsbSSshToQFZxAQ1AnTHGf64ddNsqJK%2FOpPLKwoU7oafpKGZ%2BBN%2Fct03U7qmuEYM7xMpgdlpk4guQA0bpPiHxpXy8GxFYrP81Lm75gMmC4Rf%2FKq9PyJ5At%2F%2FV%2Fm3QvD0wOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0a38ccb51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (2782), with no line terminators
Size:   747
Md5:    bd44afb37826464e574701ae847b16c2
Sha1:   8a5a06edf34aeadf78e755379f7d6be8bff5e048
Sha256: 1e26ba685f20d10f19b5bf8a9e354a6d09786a1a12b9f45b0767f73ae52fd490
                                        
                                            POST /j/collect?v=1&_v=j90&a=259216803&t=pageview&_s=1&dl=http%3A%2F%2Fwww.seacow.ru.com%2Fclicks%2Fwts_ss2.php%3Fsid%3D996084%26h%3Dsacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0%2Fn5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq&ul=en-us&de=UTF-8&dt=School%20Of%20Squirt%20-%20The%20Original%20%26%20Best%20Place%20To%20Learn%20About%20Squirting&sd=24-bit&sr=1280x1024&vp=&je=0&_u=aEDAAUABAAAAAC~&jid=1146604772&gjid=782788189&cid=947291979.1665119986&tid=UA-50355398-1&_gid=1748894116.1665119986&_r=1&gtm=2wg5c1WQK7ZT&z=387672177 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.seacow.ru.com
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.seacow.ru.com
date: Fri, 07 Oct 2022 05:19:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            GET /clicks/SquirtingSchool2_files/style_003.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-6b"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LmEr%2Ftj0rGmkUn1wqp0tZpv8QB6csC7XaKYJs2Rz7LUhfDJVXPVyXRy2NKOvPzpI59A9Rny%2FDS4wUjGvUDBjilWu49E5Ft4NTPprS32WRtj2Jc1KJmCoJ3%2FSlWjePJ8%2BKOrMBg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0a6ee4fac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   110
Md5:    c0ce07835cc3940928c3e6bd8d501dee
Sha1:   9da1f52b500128d489a43a63b6c40bd3c731be88
Sha256: cc7cee1a2fe3834abcd828389484f777ddaeda38f477091c8b7479057de799e1
                                        
                                            GET /clicks/SquirtingSchool2_files/sticky.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-74d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FfP63iMdV58ZvIZj%2BxWmW9VJnKUQwJ9lSl9dHADsmYR9o42fUeKUHW6rDa8DVHAnrloscAiCjJCXhqH7k8XhtQvt7cBbCNfxA0kydShSxRqumvhcyWUaFAWGNFd%2BkIt5LpcsuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0a7d96b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1869), with no line terminators
Size:   482
Md5:    72c3bf996dd5aef0ecb40d656c74088a
Sha1:   1afb023c6cbbad030079e8f640b9132e10305e30
Sha256: c1ca5b2f6c5f9b6f65cbba9cf8fe7b63c36c2d79b9c47df6c9dd6ee974989241
                                        
                                            GET /clicks/SquirtingSchool2_files/menu-logo.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-678"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H6YsOWMNMNs3M4CSYlyAg%2FLfoYRBQrPsud9UtBifBS0TYo4ig30BkVv4nAAcKMnAwkSp0GMZgBCInEcBKXgzmONTCEiA1TG2sFfYG22GL%2BuGJ9bvG6jOFYoJiHybWQ1ZNMol0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0b1e390b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1656), with no line terminators
Size:   504
Md5:    20c4b619c52f48f55d451eebf6c7ad4e
Sha1:   4796ec4c04c717364aa60b8c0b249caa309ececf
Sha256: d56b5b82cda9c72fa1bb91012f2a50da264453411fe661580e4b7df2199d5b50
                                        
                                            GET /clicks/SquirtingSchool2_files/jquery.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-15d98"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g705tz6PqnK%2BbTKJEuKHZYG%2FUNdKqWtRAgZpFVckV%2FUfOU6gNlBuVEH%2BUoq7VlM99xMh%2FpN7wC85%2F59txm8ZU3QoTiEYBFPX7FgrZnQHMoxCviMNOv%2BW10ZHk3V3GOcAkJYNjg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0b2ef0b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30908
Md5:    de51a7f2c2c244ceb7103216144f03dc
Sha1:   9545e4547e01b6fcabebdfa08c2d75089808fbee
Sha256: 10b58517301b7a47ed1354030c9b652a1d96259d24e1e1b4c4b1aa33b94682ee
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /clicks/SquirtingSchool2_files/jquery-migrate.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-2bd8"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iBWvqu%2BSV%2Bidv1o8NkuXl%2F7poIVBSNOHMlzi0rfiktzsRjdPLo2NCtwU8eLwqxOE5cdA%2Fjuq2ZJ4XC3R9lwtH%2FDepxvEta8HJvLXKZTGxc5dK06wAe7nC2g5QHTlUNLu2e0fJg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0b29c4b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (11126)
Size:   4165
Md5:    0d5bb2a36d1fc2e095235bc201eb5579
Sha1:   98f0154e2ed5322a9f65077f954868d6c800b337
Sha256: fe6382620c35c12aa4f3f96fe395e5813defe330c1d95fd3de1e94f8f5d1f0a5
                                        
                                            GET /clicks/SquirtingSchool2_files/jetpack.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-12f9f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ba9j7O%2FbHu52GvIu0hwBi9ZD1dlrKpOQC%2Fi2mFBAmPbJljLTPAfHWGf6GG6BDPhiyfmFnlq4785iR8uYAMPOCOJ716jypAktwib%2FnzCX%2BiRCPAKdz7dzlCpi6hmeSksssB2f5A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0b1e46b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (21094)
Size:   13743
Md5:    fa0206609d148e4d384589bd7a57cdfa
Sha1:   d9a87ad4fec075a6c03ead16f5ee5c72a85d1d5f
Sha256: c1d6b2d7e92a2d4499ddbb71d3810ae3acd7efe3500f45972e8f07c0da46f403
                                        
                                            GET /clicks/SquirtingSchool2_files/edc2avj.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-cae"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NThBsxPAPVEOnOJrvNqSc8vDsoKJ%2B2D%2FgCex1CW0SUZDM60jXVnKDMRx1ZZ8GwKyp4BLa5zwzc6Mg8Si3JKq2dVdUVNROdU8InoNWZ8Z226e1zlCCiCEX4yJOePF6h9VYc9Sxg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0b5f27fac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (516)
Size:   705
Md5:    74bf8e45d66b7014769ab20b05350661
Sha1:   ad1ef70c0dc132a6b3ff0f89be04d4bc4115b91a
Sha256: 752723aeb62873f2e7dd0a681e2d14b7ba1c3e1ff02c0058c87a7cd1da2c3c56
                                        
                                            GET /clicks/SquirtingSchool2_files/sticky.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-2115"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jKHYDR5%2FsMsapPO9DVsQtPfbxSGF38Iq6Ew5yWqRcrRiZzW5gNl2ryfVLwo4kW6410%2FXaWS3Q9EepL5jFAARK45Qu5%2FSzO8BKCLT8dKXr2OqsU2wZv6ZXaUOhPQZRLhfYd98Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0b6e34b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (8469), with no line terminators
Size:   2819
Md5:    b5d19bcf0259c2672bb81ec36eaa4c77
Sha1:   7ffd39fc7bc7926fcbc704551df51815874f968e
Sha256: dd35600463b936d97c84767bf47133249495d6ad9adfa2fb9df30b7907e8e384
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j90&tid=UA-22484186-3&cid=947291979.1665119986&jid=415873611&gjid=1442051691&_gid=1748894116.1665119986&_u=YEBAAUAAAAAAAC~&z=555303640 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.seacow.ru.com
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         173.194.73.154
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.seacow.ru.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 07 Oct 2022 05:19:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /p.css?s=1&k=edc2avj&ht=tk&f=139.140.175.176&a=13090676&app=typekit&e=css HTTP/1.1 
Host: p.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.184
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
cross-origin-resource-policy: cross-origin
etag: "613bee4d-5"
last-modified: Fri, 10 Sep 2021 23:46:21 GMT
server: nginx
content-length: 5
unused62: 8096267
date: Fri, 07 Oct 2022 05:19:46 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5
Md5:    83d24d4b43cc7eef2b61e66c95f3d158
Sha1:   f0cafc285ee23bb6c28c5166f305493c4331c84d
Sha256: 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /clicks/SquirtingSchool2_files/front.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-17cb"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wfi3Pb%2FereKB8n42jFZSdV9wBzmI%2FPbxS0T%2Bc1li5QFcn73whNRaODXb%2FBuVfRjQUY5YmwjQpPuD1EKLyi15ptD2MpyftN3iNpJBHQ4mquAfHNvJD%2B97hzX3jaoKhctOur8iEg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0bdeba0b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (6091), with no line terminators
Size:   2339
Md5:    4f4a997bc181498157d148ba9b649949
Sha1:   87ff26f8385fcf11c28fcc40c2e5619a8138f44d
Sha256: fe722eb1adc5eb6c3642f87ba188bfb0b899130719fd73381712d6d710d3ed4b
                                        
                                            GET /clicks/SquirtingSchool2_files/jquery_002.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-71b"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hq%2Fxl%2BhGXAArfrQ9okkvC9ziDmmgp8MR6SyJt3asuM1vMN1w%2FRS%2FSXrIALYrdEytjq5JpO9LXnLqkzpTEF57Ya311pHTIO5hsgWSxJpNmOj2s95e3wPARIMVxTmiU%2FGAINnbDg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0c2f9cb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1626)
Size:   715
Md5:    46cfee7a6b6ed76c0fd609b98415e886
Sha1:   27a59318b05327183e1b7807e2071626f4a08419
Sha256: 21245efcfeb0ee1d850f895f472eca45c5d471e10f03e8f10e826218be1c356a
                                        
                                            GET /clicks/SquirtingSchool2_files/imagesloaded.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-15fd"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9LwlMfwil7q689XxoC6WIOaZWPCU0%2F2tNvRc8mPw4q%2BOCcpImuyzXhJUXk1oGhyPpC4xNfFcyR0oRdKVkuiOpvrtpJv4PzJJtqj4FIiepOitRs5QpB6oqCYeuEgC8m4NHZwBWw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0c0f72b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (5477)
Size:   1831
Md5:    5bc847fcae1a1a6c4b7f79c00d2b7e29
Sha1:   b2237db0dd679c2c8e397e833f04df00d43165e7
Sha256: bfa7a74e5830c0c26da7ccc50b8e44b401ce1ee8604fceb62e6c1310c47ddb2a
                                        
                                            GET /clicks/SquirtingSchool2_files/masonry.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-5e4a"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t9vcS6YnKpOvFPoZOzwEn2zVbcRVuHKA70KPIwRCdkgqTITSh8NNUBH21n3Cflj1XqdNnDRP02n4C%2F%2FUL5MuA4ntE9DN1JUJefhEA0oStWXemtEJewskSnfMhgnmOd3axKSfVw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0c2a97b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (23966)
Size:   7368
Md5:    6ce3f21f929ba0582a1aebcac0392fe6
Sha1:   b328e3a868d0e515fecd0b9c1fe273ba893d9cc0
Sha256: 7cd5ef9624b8a0425c875c005df78cb5626b23c4a9526b0668ec278cd17e4517
                                        
                                            GET /clicks/SquirtingSchool2_files/frontend_002.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-115cb"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XMDU663clH%2FrmpEbF1whJhoNpcrToQqAkjvFTO3eSOMnz8kEBzjFPMPnRLGGCTHwteoalIv4oTueFsE%2FDMga2WKJA78Tsn11EO5Ez4eGItX1DBsM0Wjxldq5b1y6EkkD4mbXsA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0c3f86fac4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65426)
Size:   20571
Md5:    dfdcfe6740fa68f6c6df8dbbc2638dd2
Sha1:   78a7b518f0ff63f68916104730cbe061937126df
Sha256: 11b2106c59812ee4971ed5c761a28f7e05a746cf4d3e49506896c39ca7353a0c
                                        
                                            GET /clicks/SquirtingSchool2_files/main.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-1c98"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nBwyAUvUwnvqs585ZAPvK5eY2SLcQYk%2B4MAoOZXAUBPki1tf5%2BLiEce%2BWlpSGjWYkRb4JVpVqRiVdQf8pADvyosqnVmvoBHudHwmFPbGpGaWg9ifnMbk0M4barzmFUtmnGLsfw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0c4efdb4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (7320), with no line terminators
Size:   1752
Md5:    7675b9cdce538b3351d44c317fc8bcd8
Sha1:   98e14e7d933d89799603e78eb68175196b119b7c
Sha256: 23d60748f50065e6664f663e339999277f3fdad54a104e3581395a197bbf74b9
                                        
                                            GET /af/71f83c/00000000000000003b9b093b/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.seacow.ru.com
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.186
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 33660
etag: "a0f35f91fdc2ca0a90c8288c08c20681c1aecfcf"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 07 Oct 2022 05:19:46 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 33660, version 1.0\012- data
Size:   33660
Md5:    e21953c87f09ca307fea4132455a059a
Sha1:   08b07c629dc5407c6f9dfa375279d53af4bf2727
Sha256: a2b997da567762896061490c3c08e506b2e5b936978560fc12251dd245140b32
                                        
                                            GET /af/6aec08/00000000000000003b9b0935/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.seacow.ru.com
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.186
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 34380
etag: "98ea2e3888e90196090ca6bc7ddc5345e1871a7a"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 07 Oct 2022 05:19:46 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 34380, version 1.0\012- data
Size:   34380
Md5:    96c6233bf95dee5352747935713f423f
Sha1:   81951f395017eb00aae5aaa6c89c5963a1cd06e7
Sha256: a0acc524b541f57df4024b039206425fbcc49c7b3cba369bc0b4a57cfc0e9629
                                        
                                            GET /af/4838bd/00000000000000003b9b0934/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1 
Host: use.typekit.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.seacow.ru.com
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         23.36.76.186
HTTP/2 200 OK
content-type: application/font-woff2
                                        
server: nginx
content-length: 32688
etag: "852dacc5cd2685c187708b882b28635465e17bd0"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Fri, 07 Oct 2022 05:19:46 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), CFF, length 32688, version 1.0\012- data
Size:   32688
Md5:    c654f50b24ad0685a12a2c387542e700
Sha1:   b2cfcca0589023f4371e4a673ec305f8ecace38e
Sha256: 9b99ce50d05750058143cb93936075ad5107f9a3e5b03f2d4872c0ebe753a9f7
                                        
                                            GET /clicks/SquirtingSchool2_files/wp-embed.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-592"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fMN%2FR9wwZFiRiTHUxezmuhql1vpemXx2WZiAIG1zzS0GMxtuM%2FK4q57kpY9kfX4p68whyRWDLzgKLnNoAz5gFRdAoKPvKKlGHQCwUUwtnINKKL%2BQmCn%2FKxfPU1k2DM8Hc%2BfskA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0cd834b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391)
Size:   769
Md5:    82e67f050afdb38c20ac6eb305f97c17
Sha1:   df1349df76d66a9cf64377cf335c67c337d85470
Sha256: 5f6c33116e2106cd0f2f28c16062f1d584e74b8539a14ed45e17957634d71b7e
                                        
                                            GET /clicks/SquirtingSchool2_files/e-202115.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-230c"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1fycpK3hi%2FnKKuUkVdOBFpYuf%2Fxtd4lcZMRRSh3%2FwSoLzJoD%2BX71kn3meadOhZhAyKg7FViK046OU4BZqqTt9PHLe%2BjO34tJ4O8DaMLkYAmtYCrzDlDkRLQzCVhwOHNzwXAh%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0d0870b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (2692)
Size:   2987
Md5:    59b791e299f9a3a35fc01011197f480c
Sha1:   76147580053e798533dbb2c9c4e2604893572ee6
Sha256: 1f126b8513afe8102ffb9299bdfff3673dd55601524b17bbc9d0b641b7fe6d77
                                        
                                            GET /clicks/SquirtingSchool2_files/frontend.js HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-728"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xwqx04altSRfmonr5GSy2C65QSeLel3xZn6LLD1omiy3iYbgn%2FZ%2Fxxic8fWYHl%2FwE98h8nL5byP%2Fb8ddOE9tPz%2FEvcxskqU2lWrrFgpUNLpdya3Bejd2xiaa9EadVmKR%2BvZ3FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0ccf780b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (1728)
Size:   906
Md5:    1eb2d85be572c4156f592d1598abbec7
Sha1:   6e28faaea39603f81049ff7668cf771cd1c591cb
Sha256: 0fdded1df72c99324bfb42c29ba15b752740e12a2960899506262c120bd3e7ba
                                        
                                            GET /clicks/SquirtingSchool2_files/sos-logo-tiny-1.png HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Content-Length: 5807
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: "62e82401-16af"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JfsUrrEweGONsIioJ58%2FZtKMhjYrdlQS8MoGOhiU0tKbnoDQJYAkQA3eV99S0eDKnFKyOVOUQ%2FYATd2mE1sESmhIgxMY3ebbkFMYZYJlIfqYHz8MWmntbEQvDCO3nXmHTPaweQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0d2f8eb4f7-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 270 x 51, 8-bit/color RGBA, non-interlaced\012- data
Size:   5807
Md5:    913a8e7cdbb3f0ce0a4300407f002398
Sha1:   f7723bc907647cd05a92516f722fe4a24cd33b63
Sha256: 970d7e7b687bbb122c2418af225ecc6e6d3d39057fcd9f467757462d3064f90d
                                        
                                            GET /clicks/SquirtingSchool2_files/click-box.jpg HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq
Cookie: _ga=GA1.3.947291979.1665119986; _gid=GA1.3.1748894116.1665119986; _gat_gtag_UA_22484186_3=1; _gcl_au=1.1.1287031047.1665119986; _gat_UA-50355398-1=1

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Content-Length: 336086
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: "62e82401-520d6"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UzbZhzn65FC%2B3cOHTTEAvQsEdVqMhZlFap1sC21LVt2hALFfnEEa5iInO8deZwTJuxXLtI4zg2qxYI1xsKneexl1Qa95kBApo1rYNFUT7NLvcuJja7%2F0xpAwpdvhLgeGe1fo%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0d1fe9fac4-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 751 x 545, 8-bit/color RGBA, non-interlaced\012- data
Size:   336086
Md5:    a6ba1ef263c5585fa00644e28ddd917d
Sha1:   2bc5c2849d8df5e48f7023f367286f7cbf284acc
Sha256: 69d8acb1d591a05de8ee50e77ce8f6872cc5cdd120125d8aa386eb31ccf98ec8
                                        
                                            GET /g.gif?v=ext&j=1%3A9.6.1&blog=64496574&post=4228&tz=1&srv=www.schoolofsquirt.com&host=www.seacow.ru.com&ref=&fcp=635&rand=0.32335301366798175 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/

search
                                         192.0.76.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 07 Oct 2022 05:19:46 GMT
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /clicks/SquirtingSchool2_files/1f609.svg HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-49f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oJ8fgjv2rSRuJoo0iT2B2VXWPiRSImLH9WsDpLnG8ZObmpJtM7UmX8r45hFAvZnP4va9EfilvjZ0PVXZn9M85Z6NI9%2BSR9mZcveGoifO%2Fj%2FF4ZuZYSNTFOWTsOKsxCtGMDMbsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0d0b47b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1183), with no line terminators
Size:   642
Md5:    9da946d07a4a0ad9700e04d664961c8d
Sha1:   dfb1c2d95d5ea16a3bb6d385c5652822cb494944
Sha256: 7dd7886faa058fa153e825e57ccbe1095a134aa1fb5a46c3941865406f1f5be2
                                        
                                            GET /clicks/SquirtingSchool2_files/blank.htm HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq
Cookie: _ga=GA1.3.947291979.1665119986; _gid=GA1.3.1748894116.1665119986; _gat_gtag_UA_22484186_3=1; _gcl_au=1.1.1287031047.1665119986; _gat_UA-50355398-1=1
Upgrade-Insecure-Requests: 1

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2FnXaueoTLY9Vukl62pvc8dzbUcikpN8i1nqLdxZG0LyvdJr5iL8zr6V3%2FJNbYdXZolMM6ffJ5NIlDRNv9MuHccE4YWXdBsC%2BtNPQ%2FC%2BR%2F7Zv6nC8QDPF0B8xiU3SbWlBxQNHA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75642f0de81f0b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators
Size:   548
Md5:    0a16aec008013f053a922381dee71f9d
Sha1:   13a69b2e43a426ce54f9a47146955ec0bb169172
Sha256: 4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae
                                        
                                            GET /clicks/SquirtingSchool2_files/g.gif HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 07 Oct 2022 05:19:46 GMT
Content-Length: 50
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: "62e82401-32"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3lytntOk7jxpHkJWKVzGf4qMwNFTtm7Zw0F%2B0MOJS1eRjf8Bp6Ey1qtk7JIXplssbFIHD1JTqNkF9Le6rNOM0trNQVEl%2F5V9bee%2FzzHMfd9WPnBPmOKs%2FaB%2F06mQPic%2BTAd0XA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0dc8feb509-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET /clicks/SquirtingSchool2_files/wap-megan-small.jpg HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq
Cookie: _ga=GA1.3.947291979.1665119986; _gid=GA1.3.1748894116.1665119986; _gat_gtag_UA_22484186_3=1; _gcl_au=1.1.1287031047.1665119986; _gat_UA-50355398-1=1

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 07 Oct 2022 05:19:47 GMT
Content-Length: 42485
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: "62e82401-a5f5"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OXik0PsFHthW2d%2BTnm%2FXonlUE40PlEMdYIxBrxHpQmwBph7lKXAGsQ7YLjLUmRHKX7sTqa7iD%2Fubhs7%2BCdz6hMhnIVK9IvQF2Zx5QnhcT3N4ic59UcPwZgcZo%2F%2BshGUPcGVDUw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0e6865fac4-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x525, components 3\012- data
Size:   42485
Md5:    10a269b27f69da15e769372192690830
Sha1:   4b31832b672026725b5fbb2e1b54e9bb172e9cc0
Sha256: b6abed458bcfd5c4bab5cea2f84ad8fdad9a4488ca5b949f34020f7077053bb0
                                        
                                            GET /clicks/SquirtingSchool2_files/wap-chrissy-small.jpg HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/wts_ss2.php?sid=996084&h=sacupjecerodc6r9smxpekvjnacqc3szu-cd2yozce0/n5nxsaxie7u1jvykpek0hel6wvhtje6vozyq_wh785gjiu_nag7ngosvuv0vpkq5jjjtt1go1dbtdxpuzfabx1lt6tvxaly-s1kbempafmcruyu6seutimqrnkp46-iuj3dv-qtfn5_msjoofdyiaapq2f3vudihiombeywr8wq
Cookie: _ga=GA1.3.947291979.1665119986; _gid=GA1.3.1748894116.1665119986; _gat_gtag_UA_22484186_3=1; _gcl_au=1.1.1287031047.1665119986; _gat_UA-50355398-1=1

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 07 Oct 2022 05:19:47 GMT
Content-Length: 46067
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: "62e82401-b3f3"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XDK5ubzHqnh8qfLe0DCPMCkQfPRapqYQpVFLkyrFLbKMX7s6mohj9RpJjhaxXqRPjxSRYn41nggRzBFvhFwDaokB9zV5wPMTaYRyWto1WvSKEfIDSh9MhAYpBUxxBDJ9I%2FHI%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0e69a7b4fd-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x525, components 3\012- data
Size:   46067
Md5:    dcb5160c3e0035ab522e4dfcf57eed80
Sha1:   f0f43bcf335a2c157f8b4a3b70ed04f51de7d8ab
Sha256: 13065c081312f094ed752e74f9f9fb71244f4975efdf707f57dddb7b17fa819f
                                        
                                            GET /clicks/SquirtingSchool2_files/blank_data/inject.css HTTP/1.1 
Host: www.seacow.ru.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/clicks/SquirtingSchool2_files/blank.htm
Cookie: _ga=GA1.3.947291979.1665119986; _gid=GA1.3.1748894116.1665119986; _gat_gtag_UA_22484186_3=1; _gcl_au=1.1.1287031047.1665119986; _gat_UA-50355398-1=1

search
                                         172.67.134.41
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 07 Oct 2022 05:19:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 01 Aug 2022 19:05:37 GMT
ETag: W/"62e82401-f28"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XVmzJELgFkE4R7fKIBhY5PNeTbT%2FyTNiAmdys6VB%2BRd%2FnVnuclHIWqPR74TAtszLl0LJHtiwHt0U%2FnAIkAnpV%2Ft22nmFJG29bJfBDzs1YdLFaTYn69SYS3z2gClBNI1MAu70GA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75642f0ec8a20b02-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   928
Md5:    e1c22e631b7cce42e3ef13cd9bb02ff5
Sha1:   6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae
Sha256: 93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.seacow.ru.com/

search
                                         142.250.74.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Fri, 07 Oct 2022 04:22:04 GMT
Expires: Fri, 07 Oct 2022 06:22:04 GMT
Cache-Control: public, max-age=7200
Age: 3463
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j90&tid=UA-22484186-3&cid=947291979.1665119986&jid=415873611&_u=YEBAAUAAAAAAAC~&z=385513815 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 05:19:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j90&tid=UA-22484186-3&cid=947291979.1665119986&jid=415873611&_u=YEBAAUAAAAAAAC~&z=385513815 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 07 Oct 2022 05:19:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 07 Oct 2022 05:19:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2016/08/cropped-tablet-logo-220x220.png HTTP/1.1 
Host: www.schoolofsquirt.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         74.121.205.60
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 07 Oct 2022 05:19:47 GMT
content-length: 31334
last-modified: Sun, 20 May 2018 16:30:52 GMT
vary: Accept-Encoding
etag: "5b01a2bc-7a66"
server: nginx centminmod
x-powered-by: centminmod
x-hosted-by: BigScoots
cache-control: public, must-revalidate, proxy-revalidate, immutable, max-age=31536000, stale-while-revalidate=86400, stale-if-error=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 220 x 220, 8-bit/color RGBA, non-interlaced\012- data
Size:   31334
Md5:    0f493980b2a11680f438ce45634fb8f4
Sha1:   cfc51ded8ed9c4e7a5889090826c0f7281230918
Sha256: 4b2ed7f914385667420f472a97b65e6e101c3a952f07b2c6224019784b2d4e70
                                        
                                            GET /wp-content/uploads/2016/08/cropped-tablet-logo-80x80.png HTTP/1.1 
Host: www.schoolofsquirt.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         74.121.205.60
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 07 Oct 2022 05:19:47 GMT
content-length: 7307
last-modified: Sun, 20 May 2018 16:30:52 GMT
vary: Accept-Encoding
etag: "5b01a2bc-1c8b"
server: nginx centminmod
x-powered-by: centminmod
x-hosted-by: BigScoots
cache-control: public, must-revalidate, proxy-revalidate, immutable, max-age=31536000, stale-while-revalidate=86400, stale-if-error=604800
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size:   7307
Md5:    3f6f4d3000c82b5b5dbdd203c5c785f6
Sha1:   c79a0ce49734d3700b30eddacce322fbcda5960d
Sha256: 1b123d2a958e40670495ab3f9133df0d13c825a5728ccb69c272886578fc960f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6181
Expires: Fri, 07 Oct 2022 07:02:48 GMT
Date: Fri, 07 Oct 2022 05:19:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6181
Expires: Fri, 07 Oct 2022 07:02:48 GMT
Date: Fri, 07 Oct 2022 05:19:47 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6181
Expires: Fri, 07 Oct 2022 07:02:48 GMT
Date: Fri, 07 Oct 2022 05:19:47 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F41249b23-0479-4820-9c68-da428c1d2faa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8090
x-amzn-requestid: 7aeb8664-0241-40e1-ac8d-aef56b2a1847
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmirBHS9IAMFYKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4b13-19caf51e2f8b7df363293db3;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: -Y3Utot6t5i9ws9JDG4eGGQYEzrN5d48KD9rZ0p1mscrMzOXBTsp1Q==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:25 GMT
etag: "25a573f90d12a42a6e63c65485be5fc325b0bfde"
age: 27322
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8090
Md5:    caf0e5e75898e70a4f2caa2a707c7af9
Sha1:   25a573f90d12a42a6e63c65485be5fc325b0bfde
Sha256: cec7ab3a7f6e02b57ee72ca7eee70c16b9026679aa7cd6c0739669731ccc94d5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4cfb29b1-34eb-4ec3-8390-1145a644534c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6052
x-amzn-requestid: 6c8abd32-7499-4636-bf8a-3baaa88bf1ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi-HWOoAMFalA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-464364630dd2dbfa0d69f6f5;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: L13zNwITYkfg7x7UlAs_eVjJWRJsdxV5R7g5GHSAE8BgjN-1FB1AHQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:16 GMT
etag: "10c0d991f7ad234557792c175fdbf81e3356416a"
age: 25891
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6052
Md5:    06283ec49d3981b60b28731fd8a9940d
Sha1:   10c0d991f7ad234557792c175fdbf81e3356416a
Sha256: 0d8d932cd46fa377ce3dfe5fe1287ab1cd0daad0ef52a42baad2462d10e5a80f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7261
x-amzn-requestid: e1bdf299-b29e-4f58-9c8a-33f5dacdb081
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmirBELYoAMFfgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4b13-1969b32c6f4f7e5749e7caa0;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: V3fTgH8URZ1iWMxWPy49--20mtdJvMK6XTG_aPKk68pvwCxPl8lULw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
age: 27329
etag: "e3d5210207f6ff922bc28e328285059c19a523a4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7261
Md5:    ed3fa86bbe319c9a2f81ff625e677cb0
Sha1:   e3d5210207f6ff922bc28e328285059c19a523a4
Sha256: 5919694bd942a4f25d5b7ffc3f8aee1af6cdb8461d4ba3dba9a2e72cf19164c8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2da6f7a-675a-45e2-af30-4afd851d825d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2478
x-amzn-requestid: ed2a2dca-5367-42c1-b982-07a39762063e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmigWFvGIAMF9CQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4ace-6fabb7845e4d04613897a866;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:38:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: GFxAiO1AQfV1-pVy0NBmc9VoQoxBuBeOWsbPkVpOuT06D8Tw_YuZfA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:09 GMT
etag: "854c326016059d67fae42cc34905d0feb58cb6fc"
age: 25898
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2478
Md5:    17df62c3e2ed48ba9c788f5e1b3b702f
Sha1:   854c326016059d67fae42cc34905d0feb58cb6fc
Sha256: d0bee7a7e629f6594a79bad563bb91c71a17768c2f347fd4a366f7f0daf94fda
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F773e2560-6c32-4224-8404-2794a40799cd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9564
x-amzn-requestid: 38d87e57-3600-4e0e-bd24-a8f857800bc6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmhkGHtZIAMFz0w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f494d-21b041d97b406dea36b9f35b;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:57 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: DNBjRFbLHdYGd4-klRgAiRXPCq2_uOMh5LGi9udoD1c0eSVXJ6h4xw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
age: 27329
etag: "ad0ed304e5173bdb8f08254c2e4a5032e8fcafa5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9564
Md5:    39cf77bd6009d3c538455b3846680278
Sha1:   ad0ed304e5173bdb8f08254c2e4a5032e8fcafa5
Sha256: 792997f1f9a485ca57d274c7899e4f526476bf15ed564a8b74d248c4458b188f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: iClOZEPMiFmpeprT8McJ2HI0dCmyxkhEdfYr0qP0YK3U_Pcd9N0Fhg==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 11:10:12 GMT
age: 65375
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10987
Md5:    53b7ffdc3799e0ac7a225145242579ef
Sha1:   c47f0525fe5354ee13fe63c0ec31f0f826a58005
Sha256: 4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=5.7 HTTP/1.1 
Host: www.schoolofsquirt.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.seacow.ru.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         74.121.205.60
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Fri, 07 Oct 2022 05:19:46 GMT
last-modified: Wed, 25 May 2022 12:55:05 GMT
vary: Accept-Encoding
etag: W/"628e2729-48b9"
server: nginx centminmod
x-powered-by: centminmod
x-hosted-by: BigScoots
cache-control: public, must-revalidate, proxy-revalidate, immutable, max-age=2592000, stale-while-revalidate=86400, stale-if-error=604800
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---