Overview

URLtechnicalatg.com/?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0=
IP 172.67.138.171 (United States)
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-23 21:51:14 UTC
StatusLoading report..
IDS alerts0
Blocklist alert7
urlquery alerts No alerts detected
Tags None

Domain Summary (49)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-09T05:09:18Z 782 2373 35.241.9.150
9d4b7fe87bbcd6ad20655abb9a7327dd.safeframe.googlesyndication.com (1) 0 550 3495 142.250.74.97
knewwholesomecharming.com (2) 462916 2021-12-23T09:58:18Z 2023-02-24T05:17:06Z 808 20992 173.233.137.52
partner.googleadservices.com (1) 798 2012-10-03T03:04:21Z 2023-03-09T08:43:03Z 464 922 216.58.207.226
simplewebanalysis.com (2) 0 2022-02-25T05:06:25Z 2023-03-09T11:23:24Z 786 818 18.195.193.92
r3.o.lencr.org (11) 344 2020-12-02T09:52:13Z 2023-03-09T05:09:05Z 3718 9749 23.36.77.32
maxcdn.bootstrapcdn.com (2) 724 2014-06-18T02:37:31Z 2023-03-09T12:10:42Z 828 78946 188.114.98.234
pagead2.googlesyndication.com (2) 101 2021-02-20T16:52:05Z 2023-03-09T13:41:04Z 894 62232 142.250.74.98
shortssibilantcrept.com (1) 0 2022-12-16T09:28:51Z 2023-03-09T03:58:39Z 940 3262 173.233.139.164
a1s.unibet.com (1) 297625 2017-01-30T01:44:42Z 2023-03-09T05:30:47Z 705 17271 85.184.96.5
cm.everesttech.net (1) 996 2017-01-30T05:59:57Z 2023-03-09T05:14:52Z 429 475 54.171.1.252
onclickperformance.com (2) 40767 2015-05-28T23:57:43Z 2023-03-09T00:36:55Z 1411 710 35.190.55.95
ocsp.sectigo.com (2) 487 2019-11-29T12:50:24Z 2023-03-09T11:25:06Z 680 1926 104.18.32.68
securepubads.g.doubleclick.net (1) 190 2013-05-31T06:19:39Z 2023-03-09T05:12:53Z 380 45384 142.250.74.34
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-22T01:36:00Z 2023-03-09T10:04:36Z 2705 47052 34.120.237.76
pixel.wp.com (1) 2545 2017-01-30T06:31:40Z 2023-03-09T05:09:56Z 516 239 192.0.76.3
ocsp.sca1b.amazontrust.com (3) 1015 2017-03-03T16:20:51Z 2019-03-27T05:05:54Z 1050 2952 54.230.245.110
s-img.adskeeper.co.uk (1) 23063 2019-01-14T11:30:19Z 2023-03-09T13:50:56Z 733 15221 172.64.153.20
welcome.unibet.com (16) 242429 2017-01-30T06:39:28Z 2023-03-09T14:11:48Z 14606 207299 104.18.24.188
ocsp.digicert.com (11) 86 2012-05-21T09:02:23Z 2023-03-09T11:52:10Z 3751 7608 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-09T05:09:13Z 606 127 35.164.186.39
a1s-cdn.unibet.com (1) 283505 2014-04-23T17:07:51Z 2023-03-09T05:30:47Z 717 1667 85.184.96.5
fonts.googleapis.com (1) 8877 2013-06-10T22:14:26Z 2023-03-09T12:17:45Z 402 12314 142.250.74.74
fonts.gstatic.com (2) 0 2014-09-09T02:40:21Z 2023-03-09T10:01:47Z 972 33558 216.58.207.227
use.fontawesome.com (1) 942 2017-01-30T05:43:25Z 2023-03-09T05:10:25Z 432 93651 172.64.133.15
bannerflow-feed-builder.azurewebsites.net (1) 659103 2017-11-23T14:27:15Z 2023-03-09T14:11:50Z 553 783 104.40.147.180
crrepo.com (1) 82002 2017-11-14T19:58:13Z 2023-03-09T04:43:16Z 451 139359 104.21.235.114
cdn.pubxmedia.com (1) 0 2022-12-12T07:27:27Z 2023-02-18T08:27:48Z 396 13624 104.21.87.81
www.spikereekvelocity.com (2) 0 2022-10-19T16:11:25Z 2023-02-27T03:48:24Z 2274 3809 192.243.61.227
technicalatg.com (2) 0 2021-09-17T18:59:15Z 2023-02-23T20:38:34Z 1018 16668 104.21.70.184
e1.o.lencr.org (4) 6159 2021-08-20T09:36:30Z 2023-03-09T05:14:34Z 1352 2910 23.36.76.226
adservice.google.com (1) 76 2021-02-20T17:10:48Z 2023-03-09T13:58:16Z 400 779 142.250.74.66
secure.adnxs.com (1) 396 2012-05-22T18:37:37Z 2023-03-09T05:09:14Z 405 990 185.89.210.82
dpm.demdex.net (3) 204 2012-05-22T07:45:05Z 2023-03-09T05:14:52Z 1402 2642 52.18.15.195
unibet.demdex.net (1) 338024 2017-01-30T06:50:24Z 2023-03-09T09:15:17Z 488 3460 52.213.181.195
stats.wp.com (1) 2711 2017-01-30T06:06:59Z 2023-03-09T05:15:08Z 360 356 192.0.76.3
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-09T05:09:48Z 333 391 34.117.237.239
code.jquery.com (1) 634 2012-05-21T19:28:02Z 2023-03-09T05:11:44Z 372 34076 69.16.175.42
adservice.google.no (1) 96969 2018-06-20T01:38:38Z 2023-03-09T05:13:18Z 399 1104 142.250.74.98
adserving.unibet.com (1) 98000 2015-05-26T08:56:53Z 2023-03-09T13:34:43Z 541 1332 23.36.79.43
ajax.googleapis.com (1) 12905 2013-08-16T11:51:31Z 2023-03-09T13:58:35Z 394 31499 142.250.74.138
script.crazyegg.com (2) 1992 2014-10-23T19:42:31Z 2023-03-09T05:14:40Z 856 4042 104.19.148.8
unibetlondonltd.d3.sc.omtrdc.net (2) 444877 2017-01-29T22:05:05Z 2023-03-09T11:36:32Z 2450 992 15.188.95.229
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-09T05:09:49Z 413 5844 34.160.144.191
ocsp.pki.goog (19) 175 2018-07-01T08:43:07Z 2023-03-09T05:09:50Z 6517 15753 142.250.74.131
hundredscultureenjoyed.com (2) 0 2022-12-21T04:30:35Z 2023-03-09T12:09:13Z 2968 4634 173.233.139.164
ads.pubmatic.com (1) 469 2012-05-21T05:56:35Z 2023-03-09T05:44:20Z 387 73836 23.38.200.201
www.unibet.nu (2) 0 2022-11-04T12:13:23Z 2023-03-09T09:38:17Z 2250 5815 85.184.96.0
cdn.bannerflow.com (3) 23819 2018-02-22T13:57:21Z 2023-03-09T05:30:48Z 1313 1734 104.16.174.188

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-23 medium simplewebanalysis.com/stats Malware
2022-12-23 medium simplewebanalysis.com/stats Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-23 medium hundredscultureenjoyed.com Sinkholed
2022-12-23 medium hundredscultureenjoyed.com Sinkholed
2022-12-23 medium spikereekvelocity.com Sinkholed
2022-12-23 medium shortssibilantcrept.com Sinkholed
2022-12-23 medium spikereekvelocity.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.138.171
Date UQ / IDS / BL URL IP
2023-05-22 22:35:12 UTC 0 - 1 - 0 lmlfiw.trefjehier.nl 172.67.138.171
2023-05-20 10:51:34 UTC 0 - 0 - 9 files.technicalatg.com/97xeVhEGr 172.67.138.171
2023-05-10 13:17:27 UTC 0 - 3 - 0 wywaojoa.tk/ 172.67.138.171
2023-05-10 12:43:46 UTC 0 - 2 - 0 pmrznhjo.tk/ 172.67.138.171
2023-04-18 09:51:00 UTC 0 - 0 - 4 mobilbahiss883.com/ 172.67.138.171


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-05 22:41:49 UTC 0 - 0 - 13 www.searchingforsingles.com/landing/milf_dark (...) 104.26.3.164
2023-06-05 22:41:40 UTC 0 - 0 - 0 certaainly3.nl/ 188.114.96.1
2023-06-05 22:41:35 UTC 0 - 0 - 2 shababeekdubai.com/huntington/login/login.php (...) 172.67.161.65
2023-06-05 22:37:46 UTC 0 - 2 - 0 your.safefollow.life/zRypX0sU?cd=1686004626&p=VA2i 172.67.144.34
2023-06-05 22:34:49 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/44561027320250 (...) 162.159.129.233


Last 5 reports on domain: technicalatg.com
Date UQ / IDS / BL URL IP
2023-05-30 21:49:03 UTC 0 - 0 - 1 files.technicalatg.com/dGtB 188.114.97.1
2023-05-26 16:44:54 UTC 0 - 0 - 4 files.technicalatg.com/G5DTvuyQzL 104.21.70.184
2023-05-20 10:51:34 UTC 0 - 0 - 9 files.technicalatg.com/97xeVhEGr 172.67.138.171
2023-03-19 07:49:13 UTC 0 - 0 - 2 technicalatg.com/verify/?TPs8lrH 172.67.138.171
2023-01-06 23:37:31 UTC 0 - 0 - 10 technicalatg.com/?go=869997c18b5d1338fd7ca828 (...) 104.21.70.184


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-16 15:51:30 UTC 0 - 0 - 2 aj1090.online/ztsvt3gS79-n-hMajNCOKYUhhHMOQNZ (...) 199.80.53.177
2022-09-16 06:39:16 UTC 0 - 0 - 5 c1.getapplicationmy.info/?step_id=2_0&install (...) 162.210.196.172
2022-09-16 05:36:50 UTC 0 - 0 - 2 skymoviehd.kim/ 64.225.91.73
2022-09-16 05:36:52 UTC 0 - 0 - 2 skymoviehd.kim/ 64.225.91.73
2022-09-16 04:10:45 UTC 0 - 0 - 14 mkkuei4kdsz.com/920/326.html 64.225.91.73

JavaScript

Executed Scripts (85)

Executed Evals (40)
#1 JavaScript::Eval (size: 30) - SHA256: 7ceacb36606d6f6599d3ed5454c31152cb4417fb3c02ebb66431c4227a653726
this.context['clearImmediate']
#2 JavaScript::Eval (size: 36) - SHA256: 2d498779a32244d72a8a7d953918ce95c00fab9d3b129b2a1c3125fb263ccb45
this.context['self']['SharedWorker']
#3 JavaScript::Eval (size: 39) - SHA256: 04f881dff1163e4e36943700ddbcf25667dfe7e0b154d21e181a771955264d60
this.context['document']['createTouch']
#4 JavaScript::Eval (size: 135) - SHA256: fc7b851f30df68c5cc6d1fb3f06c300b2b1d7271f76cc187224050270141f0ed
(function() {
    if (window.innerHeight) return window.innerHeight;
    d = screen.width + "x" + screen.height;
    return d.documentElement.offsetHeight
})();
#5 JavaScript::Eval (size: 61) - SHA256: 9259355921509ced00b4d7d3e76c151037a06c88a646cd7d47d5d9c96984697c
(function() {
    return window.functions.timeParting("n", "0")
})();
#6 JavaScript::Eval (size: 35) - SHA256: 41aae560d6dd4b675e6e45d30c1572db537659e580ac434c4b89b76e4f3dc5ac
this.context['SiteBoundCredential']
#7 JavaScript::Eval (size: 60) - SHA256: 9d51544cc513110b130345a977b1e9e630b5a7aa01518f7f7898758b79a9699f
(function() {
    return visitor.getMarketingCloudVisitorID()
})();
#8 JavaScript::Eval (size: 31) - SHA256: 6e4c074bba968f3a2899edcbccf9e893ebdad7a5a533463e4d9630f28f3baed1
(a = 0) => {
    let b;
    const c = class {};
}
#9 JavaScript::Eval (size: 31) - SHA256: fb71685befff6e5c6fb9e2dd5f9bea6c71a2a162b39920f3927ef5ebfcf0134d
this.context['BeforeLoadEvent']
#10 JavaScript::Eval (size: 41) - SHA256: e9d851c02746b7bd4d9207264c143f76480b69aa3552b1cdaa79ee537d83f5ac
this.context['navigator']['taintEnabled']
#11 JavaScript::Eval (size: 19) - SHA256: 631bd9a13534679ce526b007d4fc8352793377d89bcc321392b01ecf075c4101
this.context['Set']
#12 JavaScript::Eval (size: 88) - SHA256: 5e05e2cf30322e8f71d65a22aa5f4a095923b67286a61d83b7787e3468f42f62
(function() {
    return "LP:" + BF_prop.LandingPageName.toString().replace(/:/ig, "").trim()
})();
#13 JavaScript::Eval (size: 55) - SHA256: 14986cbd70f8b8a1770adf9800c113847daf392c2999dfff9dc71d2be98f3282
(function() {
    return visitor.getAnalyticsVisitorID()
})();
#14 JavaScript::Eval (size: 28) - SHA256: 4f6a557989f79654728dcb244539b604c5329db30b964d6e8c524c72517b9fa6
this.context['Notification']
#15 JavaScript::Eval (size: 41) - SHA256: 25fde17ee6ee622be6ebf83118c8802af55f2721a375a4017d6dec6edaf3b37b
this.context['DOMException']['ABORT_ERR']
#16 JavaScript::Eval (size: 19) - SHA256: 67909fba812519f6eced963d195970a41923b591290d48f96704719fc6b74ec5
this.context['NaN']
#17 JavaScript::Eval (size: 62) - SHA256: adf0ca592504ef680d5ea02d5161b15be0572fd3e5b41d152b74f0c76aea6c42
(function() {
    return window.functions.getPageNameOldEvar1()
})();
#18 JavaScript::Eval (size: 43) - SHA256: 0220aceb9c3413632235ce2598b94dd7a130a95558114c04ad41f9386b69777b
this.context['clientInformation']['vendor']
#19 JavaScript::Eval (size: 46) - SHA256: e218a1ac15f252350ef2646dead414bf35db450215962e63da301cb7c3f064eb
this.context['navigator']['webkitGetGamepads']
#20 JavaScript::Eval (size: 22) - SHA256: c624a79f9c72c617d0ed1ad3207a67a39f6243071e14c4ebeace5dcff97313a3
this.context['Entity']
#21 JavaScript::Eval (size: 28) - SHA256: fca3cd5a7ca3a44b75f81e0c169fe599fb48741835c83b5616e304b3f722522b
this.context['AnalyserNode']
#22 JavaScript::Eval (size: 45) - SHA256: e44d38f746ee1fa3b3ef03ed6ea3f298c25e173b6daea3c4505afce8bb869508
this.context['CanvasCaptureMediaStreamTrack']
#23 JavaScript::Eval (size: 469) - SHA256: 91f418c520f227355db381120aeb0ac0005497307defe49bfeebc6e31868391b
           if (typeof dfc221c35e !== 'undefined') {
               if (!isNaN(dfc221c35e) && dfc221c35e > 0) setTimeout(function() {
                   window.top.location = 'https://www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17798884';
               }, dfc221c35e * 1000);
               else window.top.location = 'https://www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17798884';
           }
#24 JavaScript::Eval (size: 54) - SHA256: fc490a09c28110ae2a7c965801ebeb5c572587f55c3524889f547dbcc34c1d81
(function() {
    return screen.width + "x" + screen.height
})();
#25 JavaScript::Eval (size: 25) - SHA256: cfd8889f26f46323b63c7766e414faf4a4171cc959c4c2b2e6a64c0ec3edf13f
this.context['CryptoKey']
#26 JavaScript::Eval (size: 35) - SHA256: 022ae916a59e1d7cb709a35e757c60e6626bfccd2c1e87c5ad6b432f0f1b1538
this.context['HTMLBaseFontElement']
#27 JavaScript::Eval (size: 21) - SHA256: 37ceb2a749341c51c7b8c25daaa71dc167b4aba7485c9b398b8ab004b685e492
this.context['Touch']
#28 JavaScript::Eval (size: 29) - SHA256: b2ebc210c5c379879d07a4a9e046a4ea803d56dcc91d533db817ec272cbcfaf4
var dfc221c35e = Number('');
#29 JavaScript::Eval (size: 21) - SHA256: 5f7d79033f82e1d81e2e6490b1fe43f241e2889aae35ea6d5f968ca697f5a577
this.context['close']
#30 JavaScript::Eval (size: 31) - SHA256: 0408d20a8555f96ab5cced9f89880c477f78d4ade576e5618b04094f034fb081
this.context['ArrayBufferView']
#31 JavaScript::Eval (size: 35) - SHA256: 7013ec5264e02f54f3b42e05b51fd1ad0f180fa3870b71acd2f1a384cc81d601
this.context['document']['prepend']
#32 JavaScript::Eval (size: 132) - SHA256: 0a23e511994a2c03a725773de07810ff171878b9c0177f40a663038e4e251168
(function() {
    if (window.innerWidth) return window.innerWidth;
    d = screen.width + "x" + screen.height;
    return d.documentElement.offsetWidth
})();
#33 JavaScript::Eval (size: 71) - SHA256: dcdd7e7e286c45c94638f28053384616d6ca9a1b396b0109cb51f1298ba342bb
(function() {
    return Math.round((new Date).getTime() / 1E3).toString()
})();
#34 JavaScript::Eval (size: 32) - SHA256: a535a9a97ed5a801419c63a6e764dd3b24c8456f177155717caf9ba3411ef756
this.context['chrome']['search']
#35 JavaScript::Eval (size: 26) - SHA256: 59d45abada49f5b514521b527330402a2d826ae3f0dab2199c58c38f1e511777
this.context['TouchEvent']
#36 JavaScript::Eval (size: 42) - SHA256: 2fc752a40595d1d6681e6be3ebd8f44cdda99876ff9ee19fe654647a6a11415e
this.context['ApplicationCacheErrorEvent']
#37 JavaScript::Eval (size: 45) - SHA256: d7fff9897aaa9675a3652e7cac1a8c2a3427b896b5cc0ab5ffd628f9bb106e34
this.context['external']['AddSearchProvider']
#38 JavaScript::Eval (size: 33) - SHA256: 92cc9c48ca7d897742a37b1578ba7c99e9d9c405fced233bb9a3270ef84fddfc
this.context['DeviceMotionEvent']
#39 JavaScript::Eval (size: 39) - SHA256: aaa8c0ab87c7070701d0a29a610c65a4c1d29153c2d14623602acef3eea646dd
this.context['EventTarget']['toString']
#40 JavaScript::Eval (size: 36) - SHA256: a612f8985aebacd5c5fa6b17d16982a29983ae9131bae94403ff9abe1ce2ded2
this.context['navigator']['appName']

Executed Writes (10)
#1 JavaScript::Write (size: 695) - SHA256: 6d3880c396b4adf6c7cf9a03d74e35f9d4f99b09b69ebf603ed1d8f6774be37a
< a href = "https://onclickperformance.com/do/c.php?stamat=m%257C%252C%252CAjF-N2FSoGU3BE9GH0dEdHP3xP.489%252CIEkrzSZ4NDLjf5y0f_LmUdCnsw62jAcZ6eCkNwFcmBOyAcRHJ-pQ5CE_sArgMCzGJ1l0DNHFkKA_Ys7ny9-GVbzYlN0h9pcjGVNJ7iL98fgXo1mEl5eB2ouBCnEytMsPeqKabtJAAAjZvNqeKa7cmpYjbbJkBrOf8URYMYiK3ZELLc5SG1VqQkrUN5h5VdBi6OtmkP0hYFuS2nZFT4yfZDOTwRRhyU6tfJmTBGZcJ5YqLvvLY0B5lUS_iuVkCghNDAHB7Rtf8TG4hmzdyjZv1fZSc7dllHfiWEJ2iFEdpA4O4ux4O7QQ-SdpCVENCE3Tx7j2s93GKz4jTW70Odisz31hAznNuk6_zcB4hY9RIAm_99bXGLok4PyJcxdW1f1eyKFg8NwM1xWZPQkgy_hTTAMi0nQG2O-NlmE7QI7e2c4%252C"
target = "_blank" > < img border = "0"
src = "https://crrepo.com/extban/261160620/creatives/23276906/746a681c008e9512034507041aa6f3f3_8707.gif"
width = "100%" / > < /a>
#2 JavaScript::Write (size: 47485) - SHA256: ef9e0fe65f9b8073dc71b3648a83dfa0e37393a4da90ef247fb65b2c5a78ec9b
< !doctype html > < html amp4ads class = i - amphtml - inabox i - amphtml - layout i - amphtml - no - boilerplate > < head > < meta name = "referrer"
content = "origin" > < meta charset = utf - 8 > < meta content = "width=device-width,minimum-scale=1,initial-scale=1"
name = viewport > < style amp - runtime i - amphtml - version = 012211060024000 > html {
    overflow - x: hidden!important
}
html.i - amphtml - fie {
    height: 100 % !important;width: 100 % !important
}
html: not([amp4ads]), html: not([amp4ads]) body {
    height: auto!important
}
html: not([amp4ads]) body {
    margin: 0!important
}
body {
    -webkit - text - size - adjust: 100 % ; - moz - text - size - adjust: 100 % ; - ms - text - size - adjust: 100 % ;
    text - size - adjust: 100 %
}
html.i - amphtml - singledoc.i - amphtml - embedded {
    -ms - touch - action: pan - y pinch - zoom;
    touch - action: pan - y pinch - zoom
}
html.i - amphtml - fie > body, html.i - amphtml - singledoc > body {
    overflow: visible!important
}
html.i - amphtml - fie: not(.i - amphtml - inabox) > body, html.i - amphtml - singledoc: not(.i - amphtml - inabox) > body {
    position: relative!important
}
html.i - amphtml - ios - embed - legacy > body {
    overflow - x: hidden!important;
    overflow - y: auto!important;
    position: absolute!important
}
html.i - amphtml - ios - embed {
    overflow - y: auto!important;
    position: static
}
# i - amphtml - wrapper {
    overflow - x: hidden!important;
    overflow - y: auto!important;
    position: absolute!important;
    top: 0!important;
    left: 0!important;
    right: 0!important;
    bottom: 0!important;
    margin: 0!important;
    display: block!important
}
html.i - amphtml - ios - embed.i - amphtml - ios - overscroll, html.i - amphtml - ios - embed.i - amphtml - ios - overscroll > # i - amphtml - wrapper {
    -webkit - overflow - scrolling: touch!important
}
# i - amphtml - wrapper > body {
    position: relative!important;border - top: 1 px solid transparent!important
}
# i - amphtml - wrapper + body {
    visibility: visible
}
# i - amphtml - wrapper + body.i - amphtml - lightbox - element, # i - amphtml - wrapper + body[i - amphtml - lightbox] {
    visibility: hidden
}
# i - amphtml - wrapper + body[i - amphtml - lightbox].i - amphtml - lightbox - element {
    visibility: visible
}
# i - amphtml - wrapper.i - amphtml - scroll - disabled, .i - amphtml - scroll - disabled {
    overflow - x: hidden!important;
    overflow - y: hidden!important
}
amp - instagram {
    padding: 54 px 0 px 0 px!important;background - color: # fff
}
amp - iframe iframe {
    box - sizing: border - box!important
}[amp - access][amp - access - hide] {
    display: none
}[subscriptions - dialog], body: not(.i - amphtml - subs - ready)[subscriptions - action], body: not(.i - amphtml - subs - ready)[subscriptions - section] {
    display: none!important
}
amp - experiment, amp - live - list > [update] {
    display: none
}
amp - list[resizable - children] > .i - amphtml - loading - container.amp - hidden {
    display: none!important
}
amp - list[fetch - error], amp - list[load - more][load - more - button], amp - list[load - more][load - more - end], amp - list[load - more][load - more - failed], amp - list[load - more][load - more - loading] {
    display: none
}
amp - list[diffable] div[role = list] {
    display: block
}
amp - story - page, amp - story[standalone] {
    min - height: 1 px!important;
    display: block!important;
    height: 100 % !important;
    margin: 0!important;
    padding: 0!important;
    overflow: hidden!important;
    width: 100 % !important
}
amp - story[standalone] {
    background - color: #000!important;position:relative!important}amp-story-page{background-color:# 757575
}
amp - story.amp - active > div, amp - story.i - amphtml - loader - background {
    display: none!important
}
amp - story - page: not(: first - of - type): not([distance]): not([active]) {
    transform: translateY(1000 vh) !important
}
amp - autocomplete {
    position: relative!important;display: inline - block!important
}
amp - autocomplete > input, amp - autocomplete > textarea {
    padding: 0.5 rem;border: 1 px solid rgba(0, 0, 0, 0.33)
}.i - amphtml - autocomplete - results, amp - autocomplete > input, amp - autocomplete > textarea {
    font - size: 1 rem;
    line - height: 1.5 rem
}[amp - fx ^= fly - in ] {
    visibility: hidden
}
amp - script[nodom], amp - script[sandboxed] {
        position: fixed!important;top: 0!important;width: 1 px!important;height: 1 px!important;overflow: hidden!important;visibility: hidden
    }
    /*# sourceURL=/css/ampdoc.css*/
    [hidden] {
        display: none!important
    }.i - amphtml - element {
        display: inline - block
    }.i - amphtml - blurry - placeholder {
        transition: opacity 0.3 s cubic - bezier(0.0, 0.0, 0.2, 1) !important;pointer - events: none
    }[layout = nodisplay]: not(.i - amphtml - element) {
        display: none!important
    }.i - amphtml - layout - fixed, [layout = fixed][width][height]: not(.i - amphtml - layout - fixed) {
        display: inline - block;position: relative
    }.i - amphtml - layout - responsive, [layout = responsive][width][height]: not(.i - amphtml - layout - responsive), [width][height][heights]: not([layout]): not(.i - amphtml - layout - responsive), [width][height][sizes]: not(img): not([layout]): not(.i - amphtml - layout - responsive) {
        display: block;position: relative
    }.i - amphtml - layout - intrinsic, [layout = intrinsic][width][height]: not(.i - amphtml - layout - intrinsic) {
        display: inline - block;position: relative;max - width: 100 %
    }.i - amphtml - layout - intrinsic.i - amphtml - sizer {
        max - width: 100 %
    }.i - amphtml - intrinsic - sizer {
        max - width: 100 % ;
        display: block!important
    }.i - amphtml - layout - container, .i - amphtml - layout - fixed - height, [layout = container], [layout = fixed - height][height]: not(.i - amphtml - layout - fixed - height) {
        display: block;position: relative
    }.i - amphtml - layout - fill, .i - amphtml - layout - fill.i - amphtml - notbuilt, [layout = fill]: not(.i - amphtml - layout - fill), body noscript > * {
        display: block;overflow: hidden!important;position: absolute;top: 0;left: 0;bottom: 0;right: 0
    }
body noscript > * {
    position: absolute!important;width: 100 % ;height: 100 % ;z - index: 2
}
body noscript {
    display: inline!important
}.i - amphtml - layout - flex - item, [layout = flex - item]: not(.i - amphtml - layout - flex - item) {
    display: block;position: relative; - ms - flex: 1 1 auto;flex: 1 1 auto
}.i - amphtml - layout - fluid {
    position: relative
}.i - amphtml - layout - size - defined {
    overflow: hidden!important
}.i - amphtml - layout - awaiting - size {
    position: absolute!important;top: auto!important;bottom: auto!important
}
i - amphtml - sizer {
    display: block!important
}@
supports(aspect - ratio: 1 / 1) {
    i - amphtml - sizer.i - amphtml - disable - ar {
        display: none!important
    }
}.i - amphtml - blurry - placeholder, .i - amphtml - fill - content {
    display: block;height: 0;max - height: 100 % ;max - width: 100 % ;min - height: 100 % ;min - width: 100 % ;width: 0;margin: auto
}.i - amphtml - layout - size - defined.i - amphtml - fill - content {
    position: absolute;top: 0;left: 0;bottom: 0;right: 0
}.i - amphtml - replaced - content, .i - amphtml - screen - reader {
    padding: 0!important;border: none!important
}.i - amphtml - screen - reader {
    position: fixed!important;top: 0 px!important;left: 0 px!important;width: 4 px!important;height: 4 px!important;opacity: 0!important;overflow: hidden!important;margin: 0!important;display: block!important;visibility: visible!important
}.i - amphtml - screen - reader~.i - amphtml - screen - reader {
    left: 8 px!important
}.i - amphtml - screen - reader~.i - amphtml - screen - reader~.i - amphtml - screen - reader {
    left: 12 px!important
}.i - amphtml - screen - reader~.i - amphtml - screen - reader~.i - amphtml - screen - reader~.i - amphtml - screen - reader {
    left: 16 px!important
}.i - amphtml - unresolved {
    position: relative;overflow: hidden!important
}.i - amphtml - select - disabled {
    -webkit - user - select: none!important; - ms - user - select: none!important;
    user - select: none!important
}.i - amphtml - notbuilt, [layout]: not(.i - amphtml - element), [width][height][heights]: not([layout]): not(.i - amphtml - element), [width][height][sizes]: not(img): not([layout]): not(.i - amphtml - element) {
    position: relative;overflow: hidden!important;color: transparent!important
}.i - amphtml - notbuilt: not(.i - amphtml - layout - container) > * , [layout]: not([layout = container]): not(.i - amphtml - element) > * , [width][height][heights]: not([layout]): not(.i - amphtml - element) > * , [width][height][sizes]: not([layout]): not(.i - amphtml - element) > * {
    display: none
}
amp - img: not(.i - amphtml - element)[i - amphtml - ssr] > img.i - amphtml - fill - content {
    display: block
}.i - amphtml - notbuilt: not(.i - amphtml - layout - container), [layout]: not([layout = container]): not(.i - amphtml - element), [width][height][heights]: not([layout]): not(.i - amphtml - element), [width][height][sizes]: not(img): not([layout]): not(.i - amphtml - element) {
    color: transparent!important;line - height: 0!important
}.i - amphtml - ghost {
    visibility: hidden!important
}.i - amphtml - element > [placeholder], [layout]: not(.i - amphtml - element) > [placeholder], [width][height][heights]: not([layout]): not(.i - amphtml - element) > [placeholder], [width][height][sizes]: not([layout]): not(.i - amphtml - element) > [placeholder] {
    display: block;line - height: normal
}.i - amphtml - element > [placeholder].amp - hidden, .i - amphtml - element > [placeholder].hidden {
    visibility: hidden
}.i - amphtml - element: not(.amp - notsupported) > [fallback], .i - amphtml - layout - container > [placeholder].amp - hidden, .i - amphtml - layout - container > [placeholder].hidden {
    display: none
}.i - amphtml - layout - size - defined > [fallback], .i - amphtml - layout - size - defined > [placeholder] {
    position: absolute!important;top: 0!important;left: 0!important;right: 0!important;bottom: 0!important;z - index: 1
}
amp - img[i - amphtml - ssr]: not(.i - amphtml - element) > [placeholder] {
    z - index: auto
}.i - amphtml - notbuilt > [placeholder] {
    display: block!important
}.i - amphtml - hidden - by - media - query {
    display: none!important
}.i - amphtml - element - error {
    background: red!important;color: # fff!important;position: relative!important
}.i - amphtml - element - error: before {
    content: attr(error - message)
}
i - amp - scroll - container, i - amphtml - scroll - container {
    position: absolute;top: 0;left: 0;right: 0;bottom: 0;display: block
}
i - amp - scroll - container.amp - active, i - amphtml - scroll - container.amp - active {
    overflow: auto; - webkit - overflow - scrolling: touch
}.i - amphtml - loading - container {
    display: block!important;pointer - events: none;z - index: 1
}.i - amphtml - notbuilt > .i - amphtml - loading - container {
    display: block!important
}.i - amphtml - loading - container.amp - hidden {
    visibility: hidden
}.i - amphtml - element > [overflow] {
    cursor: pointer;position: relative;z - index: 2;visibility: hidden;display: initial;line - height: normal
}.i - amphtml - layout - size - defined > [overflow] {
    position: absolute
}.i - amphtml - element > [overflow].amp - visible {
    visibility: visible
}
template {
    display: none!important
}.amp - border - box, .amp - border - box * , .amp - border - box: after, .amp - border - box: before {
    box - sizing: border - box
}
amp - pixel {
    display: none!important
}
amp - analytics, amp - auto - ads, amp - story - auto - ads {
    position: fixed!important;top: 0!important;width: 1 px!important;height: 1 px!important;overflow: hidden!important;visibility: hidden
}
amp - story {
    visibility: hidden!important
}
html.i - amphtml - fie > amp - analytics {
    position: initial!important
}[visible - when - invalid]: not(.visible), form[submit - error], form[submit - success], form[submitting] {
    display: none
}
amp - accordion {
    display: block!important
}@
media(min - width: 1 px) {: where(amp - accordion > section) > : first - child {
        margin: 0;background - color: # efefef;padding - right: 20 px;border: 1 px solid # dfdfdf
    }: where(amp - accordion > section) > : last - child {
        margin: 0
    }
}
amp - accordion > section {
    float: none!important
}
amp - accordion > section > * {
    float: none!important;display: block!important;overflow: hidden!important;position: relative!important
}
amp - accordion, amp - accordion > section {
    margin: 0
}
amp - accordion: not(.i - amphtml - built) > section > : last - child {
    display: none!important
}
amp - accordion: not(.i - amphtml - built) > section[expanded] > : last - child {
        display: block!important
    }
    /*# sourceURL=/css/ampshared.css*/
html.i - amphtml - inabox {
    width: 100 % !important;height: 100 % !important
}
html.i - amphtml - inabox > body {
        position: initial!important
    } < /style><meta content="vendor=doubleclick,type=impression-id,value=CKTQ5MLckPwCFf0IogMdij0K7g" name=amp4ads-id><link as=script href=https:/ / cdn.ampproject.org / rtv / 012211060024000 / amp4ads - v0.mjs rel = preload > < script async src = https: //cdn.ampproject.org/rtv/012211060024000/amp4ads-v0.mjs></script><script async custom-element=amp-ad-exit src=https://cdn.ampproject.org/rtv/012211060024000/v0/amp-ad-exit-0.1.mjs></script><script async custom-element=amp-analytics src=https://cdn.ampproject.org/rtv/012211060024000/v0/amp-analytics-0.1.mjs></script><script async custom-element=amp-fit-text src=https://cdn.ampproject.org/rtv/012211060024000/v0/amp-fit-text-0.1.mjs></script><script async custom-element=amp-form src=https://cdn.ampproject.org/rtv/012211060024000/v0/amp-form-0.1.mjs></script><style amp-custom>a { color: #000000 }body { margin: 0; background: transparent; }#google_image_div {height: 250px;width: 300px;overflow:hidden;position:relative}html, body {width:100%;height:100%;}body {display:table;text-align:center;}#google_center_div {display:table-cell;vertical-align:middle;}#google_image_div {display:inline-block;}.abgc {position:absolute;z-index:2147483646;right:0;top:0;}.abgc amp-img, .abgc img {display:block;}.abgs {position:absolute;-webkit-transform:translateX(92px);transform:translateX(92px);right:17px;top:1px;}.abgcp {position:absolute;right:0;top:0;width:32px;height:15px;padding-left:10px;padding-bottom:10px;}.abgb {position:relative;margin-right:17px;top:1px;}.abgc:hover .abgs {-webkit-transform:none;transform:none;}.cbb{display:block;position:absolute;right:1px;top:1px;cursor:pointer;height:15px;width:15px;z-index:9020;padding-left:16px;}@media (max-width:375px) and (min-height:100px){.btn{display:block;width:90%;max-width:240px;margin-left:auto;margin-right:auto}}#spv1 amp-fit-text>div{-webkit-justify-content:flex-start;justify-content:flex-start}#sbtn:hover,#sbtn:active{background-color:#f5f5f5}#rbtn:hover,#rbtn:active{background-color:#3275e5}#mta{left:0;}#mta input[type="radio"]{display:none}#mta .pn{right:-300px;top:-250px;width:300px;height:250px;}.sv #spv2{-webkit-flex-direction:column;flex-direction:column}.jm.sv #spv2{-webkit-justify-content:center;justify-content:center;-webkit-align-items:center;align-items:center}#spv2 *{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}#spr1:checked ~ #cbb,#spr2:checked ~ #cbb,#spr3:checked ~ #cbb{display:none}.amp-animate #spv4{opacity:0;transition:opacity .5s linear 2.5s}.amp-animate  #spv3 amp-fit-text{opacity:1;transition:opacity .5s linear 2s}#spr3:checked ~ #spv3 amp-fit-text{opacity:0}#spr3:checked ~ #spv4{opacity:1}#spr1:checked ~ #spv1,#spr2:checked ~ #spv2,#spr3:checked ~ #spv3,#spr3:checked ~ #spv4{right:0px;top:0px}[dir="rtl"] .close{transform:scaleX(-1)}.ct svg{border:0;margin:0 0 -.45em 0;display:inline-block;height:1.38em;opacity:.4}#ti{width:300px}#btns{width:300px}.fl{width:300px;height:250px;}#spr4:checked ~ #cbb,#spr5:checked ~ #cbb{display:none}#spr5:checked ~ #spv5{right:0px;top:0px}#abtn:hover,#abtn:active{background-color:#3275e5}#mta .fl > div{justify-content:flex-start}.pt .ph:before{position:absolute;content:"";height:20px;width:20px;left:-4px;bottom:-3px;margin-left:4px;background-color:#fff;-webkit-transition:transform .4s;transition:transform .4s;box-shadow:0 1px 2px 0 rgba(60,64,67,.3), 0 1px 3px 1px rgba(60,64,67,.15);border-radius:50%}.pt input:checked + .ph{background-color:rgba(66,133,244,.5)}.pt input:focus + .ph{box-shadow:0 0 1px #4285f4}.pt input:checked + .ph:before{-webkit-transform:translateX(16px);-ms-transform:translateX(16px);transform:translateX(16px);transition:transform .4s;background-color:#1a73e8}.sb{height:50px}.so{width:96px;height:50px;}.so:hover,.so:active{background-color:#f5f5f5}@media (min-height:54px){.sh.ss .so,.sv .so{box-shadow:0px 0px 2px rgba(0,0,0,.12), 0px 1px 3px rgba(0,0,0,.26);border:none}}.sv .so,.sh.ss .so{border-radius:2px}.sv .so{margin:4px}</style></head><body class=amp-animate><div id=google_center_div><div id=google_image_div><a href="https://googleads.g.doubleclick.net/aclk?sa=l&amp;ai=CyVUByiKmY6TDCf2RiM0Pivuo8A7F1NeCbqeswpDJENvZHhABILGfl5YBYMOEgICYGKABofOExijIAQLgAgCoAwHIAwiqBJcCT9BERJIH5S6cTfesG9L9C64GZSf5Yz8JGywQeCXPElmrF1U7bfkQkhkgWA2KBmTrm_9RMG7cVgQvZJ4LbmfOKCp_4-TfxwfY2umywisuFDt_11HRrdxN4bE-kFMrVzGGmNDVRD3zNetAsmE48pgHhLwxzzhwZttfFF_ZlQs4QFffTXnJ0i4KQ-tbIll0-AvIZ_XT8-zUhr4ChqoEJhxOOQDyYfqYdB0gtxk2ts4xSS63NwUtMZq-G4AyjGNaZygY9PDre5V51bNAfy4Ia0T5RyoC3TTDpLYP-cXMmCgZdwCM-dgIGSMrINwUYgsDyQz16x2-pQwrgSZHr6BVC0Unm8eyd3fu1uIfc9HASOJWSA-8AExXVeTxwAShyrSKnATgBAGgBgKAB6Gr1aUDqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHAdIIEQiA4YAQEAEYHTICqgI6AoBAsQkJdXqKp0RzeIAKA5gLAcgLAbgMAdgTCtAVAfgWAYAXAQ&amp;ae=1&amp;num=1&amp;cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AYASAT&amp;sig=AOD64_2WuL7MWDhcKxdn3ODNNntH_RASuQ&amp;client=ca-pub-9665351610288016&amp;nx=CLICK_X&amp;ny=CLICK_Y&amp;uap=UACH(platform)&amp;uapv=UACH(platformVersion)&amp;uaa=UACH(architecture)&amp;uam=UACH(model)&amp;uafv=UACH(uaFullVersion)&amp;uab=UACH(bitness)&amp;uaw=UACH(wow64)&amp;uafvl=UACH(fullVersionList)&amp;nb=2&amp;adurl=https://mendedhearts.org/join-us-today/" id=aw0 on="tap:exit-api.exit(target=&#39;landingPage&#39;,_googClickLocation=&#39;2&#39;)" target=_top><amp-img alt class="img_ad i-amphtml-layout-fixed i-amphtml-layout-size-defined" height=250 i-amphtml-layout=fixed i-amphtml-ssr src="https://tpc.googlesyndication.com/simgad/2259138468724086633?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&amp;rs=AOga4qmEAOepjFx2ws70jZe4VOiZTj0SDA" style=width:300px;height:250px; width=300><img alt class="i-amphtml-fill-content i-amphtml-replaced-content" decoding=async src="https://tpc.googlesyndication.com/simgad/2259138468724086633?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&amp;rs=AOga4qmEAOepjFx2ws70jZe4VOiZTj0SDA"></amp-img></a><amp-pixel class="i-amphtml-layout-fixed i-amphtml-layout-size-defined" i-amphtml-layout=fixed referrerpolicy=no-referrer src=//www.google.com/pagead/drt/ui style=width:1px;height:1px;></amp-pixel><div aria-hidden=true class="abgc abgf pen" dir=ltr id=abgc><div class="abgcp pea" id=abgcp><div class=abgs id=abgs><a class=abgl href="https://adssettings.google.com/whythisad?source=display&amp;reasons=AZLCTSqYmEP0GHP5mBBx9OeFc654whl0hLSQTTyPN14rIRYsxQyQa18p0IDvJoLXpFKBpxB1fUY6sFst9ZM777b-5k38a4eYVZ8-qVoH8v_Xu-Vd6PSF_JcAHKt209piQZJwCkt1tfh81P4N63azVRd4M-gPvFqsLHc9k-N3RNJhU-LFzRlfOy5Cr4mPcRF-n0M07Luv9pxO_ZR_2cpCAWDBomj6VCXnuRZ85OF7ILYXijTlJKeUNyIjETQBvXyIALl5I0EefyKp_Dw92NXBcSHO_3DdkI9LyEFKLn8xSL-PjQEWqxaqS7S87xYhOdQNjARJTG7m5qiaLa6MzvQp7B6RLGrlrRA6LoXC8zzCZsbCRA953-vBUEu0Q8h-H0mVj_QgCrrA1iRs7tUVQUSPlaPlDcbQrKSR3xi8l1bACqEwIFcs5Wf70OLkO0W_okFQ5xEl4Y17utYppBXD28s0s-WcImeCXR3NS28uPekHLr3qcIGxt7sRi_yJoLz_pr1bOjneuCFh-E3gJtdmPMVroIcqBAdhAJMsmlVNDARG3r9XLMONJGxx_FCh7B0UENzirWMVpSKOo6KqJ5n8vGQQ2p00e5NOaJSZ1zhBNmXdTN84po4sIj7OLRRVQQFRAtVfel31X472FlDqD7UbO5HYiZGFgfsnxtOL_PQIqQYfGxuON4zLHzQ060EzHsQOO0WK6FR1Do8kvA9uCFQydF8E-NJ27a6sVtA_iCynsD6qhG5CxbftW2PMNQwEUpwLB8xq0T7czPDLvNr_N_W2zilp2tTASJD6uxbKLcMucIQQ3g99aZ3NBnuHUBaKlCaIzNk6Wl8cZOSlycIvmtdbKszUZZF8CwI7V0JH6XFaBpZGFSfRiWjv0QkByPYm8whUluP3pSVk9UMBUYdWT_7ydlaF0pDZgTSS7kkvDhYnuEmqQ9MUe4zCUBBtgTCRMbJuzh2XjYDPiCM1_hZIAkAS25mmJJN04NcoslMxpaaygPyC0s778Ij-DC9_eycJ1cPSsplD9nRjvdDt6XyOdcEHDGuMh9vukAGnRGmoV4oOrCIi_IlQaRAM6mW1dr3ynwX7BUyhFbmbiIR0GNWesG242lUU6b4AnOXAr9HL92tQO4w6mNGCFe-o7jau26QKFf-gsu2R9PTt0HxflnBYvV3wAsHn8j5o9TGVZjptcsZWtZxOxE7DtWWbIOa0bcixwFJEOx66a4JQDV1AeyHWpoQJ5oAfG5I5RYTCs180YBvdrnlvluT6Ap4cpiSY6eaPTeUscrrcq9JSlhrD4Az_9Cv97cQxpt4Luturt_eynDVMqGtXQLkD-ZwOuZd7Fi9e86spY372tWcYDFdhmO5PoM20pILYBEkCPJxQS6tpjnOgklhv1xO81dEmL8iRAqIF4i2Pais3gBgkH885RjDHPRW3VlzzpUhx46CkZDjGnHgAev4JQItTfmfEMj1EwY7gTR4w8IclD-H57U5_aidq7QnEnqzVaXxZmR8D4_kkyBvbPu30UtfIzhkeWjWoQQ4Br2t8IXlTVVrG99_p9l58o_p6bk3h2_OUCQHvOnGWJVcipOAlWSEmLfV_9Of3HksVxLKHqbm2mTudbx-CkbIKYLwiEPWNO9o3K1W9CP99oHz0qvEyE-t9lTr71VrMKDL3qpRGT2kLAluVCUzYJX7Z8KWpZnHoWbwfdcrL6Uso1V2xDowhOz0O3RzM6ZpnJtE4eeQXXijbvGR_m68dOBow3lTcT-pv42ih64n1XpGs9tVM41I19a5i1z8D0ZXW85QiSaD6bmErslHH0N6PPanQydW7oIuSnBIN978e4Uz75kdibIHpLMFApnvuIVmtVlvBU_QzLCYfs7v_2DBXiOntTD0JmSVulc4Y" id=abgl target=_blank><amp-img class="i-amphtml-layout-fixed i-amphtml-layout-size-defined" height=15 i-amphtml-layout=fixed i-amphtml-ssr src=https://tpc.googlesyndication.com/pagead/images/adchoices/en.png style=width:75px;height:15px; width=75><img class="i-amphtml-fill-content i-amphtml-replaced-content" decoding=async src=https://tpc.googlesyndication.com/pagead/images/adchoices/en.png></amp-img></a></div><div class=abgb id=abgb><a href="https://adssettings.google.com/whythisad?source=display&amp;reasons=AZLCTSqYmEP0GHP5mBBx9OeFc654whl0hLSQTTyPN14rIRYsxQyQa18p0IDvJoLXpFKBpxB1fUY6sFst9ZM777b-5k38a4eYVZ8-qVoH8v_Xu-Vd6PSF_JcAHKt209piQZJwCkt1tfh81P4N63azVRd4M-gPvFqsLHc9k-N3RNJhU-LFzRlfOy5Cr4mPcRF-n0M07Luv9pxO_ZR_2cpCAWDBomj6VCXnuRZ85OF7ILYXijTlJKeUNyIjETQBvXyIALl5I0EefyKp_Dw92NXBcSHO_3DdkI9LyEFKLn8xSL-PjQEWqxaqS7S87xYhOdQNjARJTG7m5qiaLa6MzvQp7B6RLGrlrRA6LoXC8zzCZsbCRA953-vBUEu0Q8h-H0mVj_QgCrrA1iRs7tUVQUSPlaPlDcbQrKSR3xi8l1bACqEwIFcs5Wf70OLkO0W_okFQ5xEl4Y17utYppBXD28s0s-WcImeCXR3NS28uPekHLr3qcIGxt7sRi_yJoLz_pr1bOjneuCFh-E3gJtdmPMVroIcqBAdhAJMsmlVNDARG3r9XLMONJGxx_FCh7B0UENzirWMVpSKOo6KqJ5n8vGQQ2p00e5NOaJSZ1zhBNmXdTN84po4sIj7OLRRVQQFRAtVfel31X472FlDqD7UbO5HYiZGFgfsnxtOL_PQIqQYfGxuON4zLHzQ060EzHsQOO0WK6FR1Do8kvA9uCFQydF8E-NJ27a6sVtA_iCynsD6qhG5CxbftW2PMNQwEUpwLB8xq0T7czPDLvNr_N_W2zilp2tTASJD6uxbKLcMucIQQ3g99aZ3NBnuHUBaKlCaIzNk6Wl8cZOSlycIvmtdbKszUZZF8CwI7V0JH6XFaBpZGFSfRiWjv0QkByPYm8whUluP3pSVk9UMBUYdWT_7ydlaF0pDZgTSS7kkvDhYnuEmqQ9MUe4zCUBBtgTCRMbJuzh2XjYDPiCM1_hZIAkAS25mmJJN04NcoslMxpaaygPyC0s778Ij-DC9_eycJ1cPSsplD9nRjvdDt6XyOdcEHDGuMh9vukAGnRGmoV4oOrCIi_IlQaRAM6mW1dr3ynwX7BUyhFbmbiIR0GNWesG242lUU6b4AnOXAr9HL92tQO4w6mNGCFe-o7jau26QKFf-gsu2R9PTt0HxflnBYvV3wAsHn8j5o9TGVZjptcsZWtZxOxE7DtWWbIOa0bcixwFJEOx66a4JQDV1AeyHWpoQJ5oAfG5I5RYTCs180YBvdrnlvluT6Ap4cpiSY6eaPTeUscrrcq9JSlhrD4Az_9Cv97cQxpt4Luturt_eynDVMqGtXQLkD-ZwOuZd7Fi9e86spY372tWcYDFdhmO5PoM20pILYBEkCPJxQS6tpjnOgklhv1xO81dEmL8iRAqIF4i2Pais3gBgkH885RjDHPRW3VlzzpUhx46CkZDjGnHgAev4JQItTfmfEMj1EwY7gTR4w8IclD-H57U5_aidq7QnEnqzVaXxZmR8D4_kkyBvbPu30UtfIzhkeWjWoQQ4Br2t8IXlTVVrG99_p9l58o_p6bk3h2_OUCQHvOnGWJVcipOAlWSEmLfV_9Of3HksVxLKHqbm2mTudbx-CkbIKYLwiEPWNO9o3K1W9CP99oHz0qvEyE-t9lTr71VrMKDL3qpRGT2kLAluVCUzYJX7Z8KWpZnHoWbwfdcrL6Uso1V2xDowhOz0O3RzM6ZpnJtE4eeQXXijbvGR_m68dOBow3lTcT-pv42ih64n1XpGs9tVM41I19a5i1z8D0ZXW85QiSaD6bmErslHH0N6PPanQydW7oIuSnBIN978e4Uz75kdibIHpLMFApnvuIVmtVlvBU_QzLCYfs7v_2DBXiOntTD0JmSVulc4Y" target=_blank><amp-img class="i-amphtml-layout-fixed i-amphtml-layout-size-defined" height=15 i-amphtml-layout=fixed i-amphtml-ssr src=https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png style=width:15px;height:15px; width=15><img class="i-amphtml-fill-content i-amphtml-replaced-content" decoding=async src=https://tpc.googlesyndication.com/pagead/images/adchoices/icon.png></amp-img></a></div></div><amp-analytics class="i-amphtml-layout-fixed i-amphtml-layout-size-defined" i-amphtml-layout=fixed style=width:1px;height:1px; trigger=immediate><script type=application/json>{"requests": {"reportNoLabelInstance": "https://googleads.g.doubleclick.net/pagead/interaction/?ai=CyVUByiKmY6TDCf2RiM0Pivuo8A7F1NeCbqeswpDJENvZHhABILGfl5YBYMOEgICYGKABofOExijIAQLgAgCoAwHIAwiqBJcCT9BERJIH5S6cTfesG9L9C64GZSf5Yz8JGywQeCXPElmrF1U7bfkQkhkgWA2KBmTrm_9RMG7cVgQvZJ4LbmfOKCp_4-TfxwfY2umywisuFDt_11HRrdxN4bE-kFMrVzGGmNDVRD3zNetAsmE48pgHhLwxzzhwZttfFF_ZlQs4QFffTXnJ0i4KQ-tbIll0-AvIZ_XT8-zUhr4ChqoEJhxOOQDyYfqYdB0gtxk2ts4xSS63NwUtMZq-G4AyjGNaZygY9PDre5V51bNAfy4Ia0T5RyoC3TTDpLYP-cXMmCgZdwCM-dgIGSMrINwUYgsDyQz16x2-pQwrgSZHr6BVC0Unm8eyd3fu1uIfc9HASOJWSA-8AExXVeTxwAShyrSKnATgBAGgBgKAB6Gr1aUDqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHAdIIEQiA4YAQEAEYHTICqgI6AoBAsQkJdXqKp0RzeIAKA5gLAcgLAbgMAdgTCtAVAfgWAYAXAQ&sigh=Ap93Rwj-PFY&cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AgEw&cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AgEw&label=${label}","reportLabelInstance": "https://googleads.g.doubleclick.net/pagead/interaction/?ai=CyVUByiKmY6TDCf2RiM0Pivuo8A7F1NeCbqeswpDJENvZHhABILGfl5YBYMOEgICYGKABofOExijIAQLgAgCoAwHIAwiqBJcCT9BERJIH5S6cTfesG9L9C64GZSf5Yz8JGywQeCXPElmrF1U7bfkQkhkgWA2KBmTrm_9RMG7cVgQvZJ4LbmfOKCp_4-TfxwfY2umywisuFDt_11HRrdxN4bE-kFMrVzGGmNDVRD3zNetAsmE48pgHhLwxzzhwZttfFF_ZlQs4QFffTXnJ0i4KQ-tbIll0-AvIZ_XT8-zUhr4ChqoEJhxOOQDyYfqYdB0gtxk2ts4xSS63NwUtMZq-G4AyjGNaZygY9PDre5V51bNAfy4Ia0T5RyoC3TTDpLYP-cXMmCgZdwCM-dgIGSMrINwUYgsDyQz16x2-pQwrgSZHr6BVC0Unm8eyd3fu1uIfc9HASOJWSA-8AExXVeTxwAShyrSKnATgBAGgBgKAB6Gr1aUDqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHAdIIEQiA4YAQEAEYHTICqgI6AoBAsQkJdXqKp0RzeIAKA5gLAcgLAbgMAdgTCtAVAfgWAYAXAQ&sigh=Ap93Rwj-PFY&cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AgEw&cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AgEw&label=${label}&label_instance=${labelInstance}&cbt=uGepEgkg4eEIp6zCkMkQEOz4zsRGGKGgz6gDIhBtZW5kZWRoZWFydHMub3JnMggIBRMY9ZUFFEIXY2EtcHViLTk2NjUzNTE2MTAyODgwMTZIBFgCcAE"},"transport": {"beacon": false,"xhrpost": false,"image": true},"triggers": {"trackMute": {"on": "click","selector": "label[for='spr1']","request": "reportNoLabelInstance"},"trackReportAd": {"on": "click","selector": "label[for='spr2']","request": "reportLabelInstance"},"trackSurveyResponse": {"on": "click","selector": "label[for='spr3']","request": "reportLabelInstance"},"trackWhyThisAd": {"on": "click","selector": "#sbtn","request": "reportLabelInstance"},"personalizationOff": {"on": "click","selector": "#personalize-checkbox:checked","parentPostMessage": "{\"googMsgType\":\"gpi-uoo\",\"userOptOut\":true}\n"},"personalizationOn": {"on": "click","selector": "#personalize-checkbox:not(:checked)","parentPostMessage": "{\"googMsgType\":\"gpi-uoo\",\"userOptOut\":false}\n"}}}</script></amp-analytics><form action=//g.co class="sv jm amp-animate abgf pen" id=mta style=position:absolute;top:0;font-family:Arial,sans-serif;font-size:12px;font-weight:400;line-height:1em target=_blank><input id=spr0 name=a type=radio><input id=spr1 name=a type=radio><input id=spr2 name=a type=radio><input id=spr3 name=a type=radio><input id=spr5 name=a type=radio><label class="cbb pea" data-vars-label=user_feedback_menu_interaction for=spr1 id=cbb><svg style=width:15px;height:15px;vertical-align:top xmlns=//www.w3.org/2000/svg><path d=M0,0l15,0l0,15l-15,0Z fill=#cdcccc></path><path d=M3.25,3.25l8.5,8.5M11.75,3.25l-8.5,8.5 stroke=#00aecd stroke-width=1.25></path></svg></label><div class="pn abgf" id=spv1 style=position:absolute;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#fafafa;text-align:center><amp-fit-text class="fl i-amphtml-layout-responsive i-amphtml-layout-size-defined" height=250 i-amphtml-layout=responsive layout=responsive max-font-size=20 min-font-size=8 width=300><i-amphtml-sizer slot=i-amphtml-svc style=display:block;padding-top:83.3333%;></i-amphtml-sizer><div class=close id=menu-dismiss style=position:absolute;top:2px;color:#000;font-size:15px;line-height:15px;opacity:.5;height:15px;width:15px;user-select:none;cursor:pointer><label for=spr0><svg viewbox="0 0 24 24"><path class=native-arrow d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"></path></svg></label></div><div id=ti><span class=ct style=display:inline-block;line-height:1.28em;color:rgba(0,0,0,.4);text-align:center;padding:.3em>Ad served by <svg fill=#000000 viewbox="0 0 60 24" xmlns=http://www.w3.org/2000/svg><path d="M7.5 16.29c-4.07 0-7.49-3.31-7.49-7.38S3.43 1.53 7.5 1.53c2.25 0 3.85.88 5.06 2.03l-1.42 1.42c-.87-.81-2.04-1.44-3.64-1.44-2.97 0-5.29 2.4-5.29 5.37s2.32 5.37 5.29 5.37c1.93 0 3.03-.77 3.73-1.48.58-.58.95-1.4 1.1-2.54H7.5V8.24h6.79c.07.36.11.79.11 1.26 0 1.51-.41 3.39-1.75 4.72-1.3 1.35-2.95 2.07-5.15 2.07zm17.75-4.76c0 2.74-2.13 4.75-4.75 4.75s-4.75-2.02-4.75-4.75c0-2.75 2.13-4.75 4.75-4.75s4.75 2 4.75 4.75zm-2.08 0c0-1.71-1.24-2.88-2.67-2.88s-2.67 1.17-2.67 2.88c0 1.69 1.24 2.88 2.67 2.88s2.67-1.18 2.67-2.88zm13.08 0c0 2.74-2.13 4.75-4.75 4.75s-4.75-2.02-4.75-4.75c0-2.75 2.13-4.75 4.75-4.75s4.75 2 4.75 4.75zm-2.08 0c0-1.71-1.24-2.88-2.67-2.88s-2.67 1.17-2.67 2.88c0 1.69 1.24 2.88 2.67 2.88s2.67-1.18 2.67-2.88zm12.58-4.46v8.53c0 3.51-2.07 4.95-4.52 4.95-2.3 0-3.69-1.55-4.21-2.81l1.82-.76c.32.77 1.12 1.69 2.39 1.69 1.57 0 2.54-.97 2.54-2.79v-.68h-.07c-.47.58-1.37 1.08-2.5 1.08-2.38 0-4.56-2.07-4.56-4.74 0-2.68 2.18-4.77 4.56-4.77 1.13 0 2.03.5 2.5 1.06h.07v-.76h1.98zm-1.84 4.48c0-1.67-1.12-2.9-2.54-2.9-1.44 0-2.65 1.22-2.65 2.9 0 1.66 1.21 2.86 2.65 2.86 1.43.01 2.54-1.2 2.54-2.86zm5.89-9.52V16h-2.09V2.03h2.09zm8.49 11.07l1.62 1.08c-.52.77-1.78 2.11-3.96 2.11-2.7 0-4.72-2.09-4.72-4.75 0-2.83 2.03-4.75 4.48-4.75 2.47 0 3.67 1.96 4.07 3.02l.22.54-6.36 2.63c.49.95 1.24 1.44 2.3 1.44 1.07 0 1.81-.53 2.35-1.32zm-4.99-1.71l4.25-1.76c-.23-.59-.94-1.01-1.76-1.01-1.06 0-2.54.93-2.49 2.77z"></path><path d="M0 0h62v24H0z" fill=none></path></svg></span></div><div id=btns><label for=spr5><a class=btn id=abtn style="background-color:#4285f5;color:#fff;display:inline-block;border-radius:2px;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;box-shadow:0px 0px 2px rgba(0,0,0,.12),0px 1px 3px rgba(0,0,0,.26);cursor:pointer;font-size:.7em;margin:0 1px .4em 1px"><span style="display:inline-block;padding:.5em .6em;line-height:1em">Ad options</span></a></label><label data-vars-label=user_feedback_menu_option data-vars-label-instance=1 for=spr2><a class=btn id=rbtn style="display:inline-block;border-radius:2px;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;box-shadow:0px 0px 2px rgba(0,0,0,.12),0px 1px 3px rgba(0,0,0,.26);cursor:pointer;font-size:.7em;margin:0 1px .4em 1px;background-color:#4285f5;color:white"><span style="display:inline-block;padding:.5em .6em;line-height:1em">Send feedback</span></a></label><label><a class=btn data-vars-label=closebutton_whythisad_click data-vars-label-instance=1 href="https://adssettings.google.com/whythisad?source=display&amp;reasons=AZLCTSqYmEP0GHP5mBBx9OeFc654whl0hLSQTTyPN14rIRYsxQyQa18p0IDvJoLXpFKBpxB1fUY6sFst9ZM777b-5k38a4eYVZ8-qVoH8v_Xu-Vd6PSF_JcAHKt209piQZJwCkt1tfh81P4N63azVRd4M-gPvFqsLHc9k-N3RNJhU-LFzRlfOy5Cr4mPcRF-n0M07Luv9pxO_ZR_2cpCAWDBomj6VCXnuRZ85OF7ILYXijTlJKeUNyIjETQBvXyIALl5I0EefyKp_Dw92NXBcSHO_3DdkI9LyEFKLn8xSL-PjQEWqxaqS7S87xYhOdQNjARJTG7m5qiaLa6MzvQp7B6RLGrlrRA6LoXC8zzCZsbCRA953-vBUEu0Q8h-H0mVj_QgCrrA1iRs7tUVQUSPlaPlDcbQrKSR3xi8l1bACqEwIFcs5Wf70OLkO0W_okFQ5xEl4Y17utYppBXD28s0s-WcImeCXR3NS28uPekHLr3qcIGxt7sRi_yJoLz_pr1bOjneuCFh-E3gJtdmPMVroIcqBAdhAJMsmlVNDARG3r9XLMONJGxx_FCh7B0UENzirWMVpSKOo6KqJ5n8vGQQ2p00e5NOaJSZ1zhBNmXdTN84po4sIj7OLRRVQQFRAtVfel31X472FlDqD7UbO5HYiZGFgfsnxtOL_PQIqQYfGxuON4zLHzQ060EzHsQOO0WK6FR1Do8kvA9uCFQydF8E-NJ27a6sVtA_iCynsD6qhG5CxbftW2PMNQwEUpwLB8xq0T7czPDLvNr_N_W2zilp2tTASJD6uxbKLcMucIQQ3g99aZ3NBnuHUBaKlCaIzNk6Wl8cZOSlycIvmtdbKszUZZF8CwI7V0JH6XFaBpZGFSfRiWjv0QkByPYm8whUluP3pSVk9UMBUYdWT_7ydlaF0pDZgTSS7kkvDhYnuEmqQ9MUe4zCUBBtgTCRMbJuzh2XjYDPiCM1_hZIAkAS25mmJJN04NcoslMxpaaygPyC0s778Ij-DC9_eycJ1cPSsplD9nRjvdDt6XyOdcEHDGuMh9vukAGnRGmoV4oOrCIi_IlQaRAM6mW1dr3ynwX7BUyhFbmbiIR0GNWesG242lUU6b4AnOXAr9HL92tQO4w6mNGCFe-o7jau26QKFf-gsu2R9PTt0HxflnBYvV3wAsHn8j5o9TGVZjptcsZWtZxOxE7DtWWbIOa0bcixwFJEOx66a4JQDV1AeyHWpoQJ5oAfG5I5RYTCs180YBvdrnlvluT6Ap4cpiSY6eaPTeUscrrcq9JSlhrD4Az_9Cv97cQxpt4Luturt_eynDVMqGtXQLkD-ZwOuZd7Fi9e86spY372tWcYDFdhmO5PoM20pILYBEkCPJxQS6tpjnOgklhv1xO81dEmL8iRAqIF4i2Pais3gBgkH885RjDHPRW3VlzzpUhx46CkZDjGnHgAev4JQItTfmfEMj1EwY7gTR4w8IclD-H57U5_aidq7QnEnqzVaXxZmR8D4_kkyBvbPu30UtfIzhkeWjWoQQ4Br2t8IXlTVVrG99_p9l58o_p6bk3h2_OUCQHvOnGWJVcipOAlWSEmLfV_9Of3HksVxLKHqbm2mTudbx-CkbIKYLwiEPWNO9o3K1W9CP99oHz0qvEyE-t9lTr71VrMKDL3qpRGT2kLAluVCUzYJX7Z8KWpZnHoWbwfdcrL6Uso1V2xDowhOz0O3RzM6ZpnJtE4eeQXXijbvGR_m68dOBow3lTcT-pv42ih64n1XpGs9tVM41I19a5i1z8D0ZXW85QiSaD6bmErslHH0N6PPanQydW7oIuSnBIN978e4Uz75kdibIHpLMFApnvuIVmtVlvBU_QzLCYfs7v_2DBXiOntTD0JmSVulc4Y" id=sbtn style="background-color:#fff;color:#9e9ea6;text-decoration:none;display:inline-block;border-radius:2px;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;box-shadow:0px 0px 2px rgba(0,0,0,.12),0px 1px 3px rgba(0,0,0,.26);cursor:pointer;font-size:.7em;margin:0 1px .4em 1px" target=_blank><span style="display:inline-block;padding:.5em .6em;line-height:1em">Why this ad?�<svg fill=#000000 id=si style=position:relative;display:inline-block;margin-bottom:-.15em;height:1em;width:1em;opacity:.4 viewbox="0 0 16 16" xmlns=//www.w3.org/2000/svg><circle cx=6 cy=6 r=0.67></circle><path d=M4.2,11.3Q3.3,11.8,3.3,10.75L3.3,4.1Q3.3,3.1,4.3,3.5L10.4,7.0Q12.0,7.5,10.4,8.0L6.65,10.0L6.65,7.75a0.65,0.65,0,1,0,-1.3,0L5.35,10.75a0.9,0.9,0,0,0,1.3,0.8L12.7,8.2Q13.7,7.5,12.7,6.7L3.3,1.6Q2.2,1.3,1.8,2.5L1.8,12.5Q2.2,13.9,3.3,13.3L4.8,12.5A0.3,0.3,0,1,0,4.2,11.3Z></path></svg></span></a></label></div></amp-fit-text></div><div class="pn abgf" id=spv2 style=display:-webkit-flex;display:flex;-webkit-justify-content:center;justify-content:center;-webkit-flex-wrap:nowrap;flex-wrap:nowrap;overflow:hidden;background-color:#fafafa;font-size:0;position:absolute;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#fafafa;text-align:center><label class="sb so" data-vars-label=mute_survey_option data-vars-label-instance=2 for=spr3 style="position:relative;z-index:9110;overflow:hidden;display:inline-block;padding:1px 5px;background-color:#FFF;cursor:pointer;flex-shrink:0"><div style=display:-webkit-flex;display:flex;-webkit-align-items:center;align-items:center;-webkit-justify-content:center;justify-content:center;width:100%;height:100%><span style=color:#4285f4;font-family:Arial,sans-serif;text-align:center;font-size:12px;line-height:14px;white-space:normal>Seen this ad multiple times</span></div></label><label class="sb so" data-vars-label=mute_survey_option data-vars-label-instance=8 for=spr3 style="position:relative;z-index:9110;overflow:hidden;display:inline-block;padding:1px 5px;background-color:#FFF;cursor:pointer;flex-shrink:0"><div style=display:-webkit-flex;display:flex;-webkit-align-items:center;align-items:center;-webkit-justify-content:center;justify-content:center;width:100%;height:100%><span style=color:#4285f4;font-family:Arial,sans-serif;text-align:center;font-size:12px;line-height:14px;white-space:normal>Ad was inappropriate</span></div></label><label class="sb so" data-vars-label=mute_survey_option data-vars-label-instance=3 for=spr3 style="position:relative;z-index:9110;overflow:hidden;display:inline-block;padding:1px 5px;background-color:#FFF;cursor:pointer;flex-shrink:0"><div style=display:-webkit-flex;display:flex;-webkit-align-items:center;align-items:center;-webkit-justify-content:center;justify-content:center;width:100%;height:100%><span style=color:#4285f4;font-family:Arial,sans-serif;text-align:center;font-size:12px;line-height:14px;white-space:normal>Ad covered content</span></div></label><label class="sb so" data-vars-label=mute_survey_option data-vars-label-instance=7 for=spr3 style="position:relative;z-index:9110;overflow:hidden;display:inline-block;padding:1px 5px;background-color:#FFF;cursor:pointer;flex-shrink:0"><div style=display:-webkit-flex;display:flex;-webkit-align-items:center;align-items:center;-webkit-justify-content:center;justify-content:center;width:100%;height:100%><span style=color:#4285f4;font-family:Arial,sans-serif;text-align:center;font-size:12px;line-height:14px;white-space:normal>Not interested in this ad</span></div></label></div><div class="pn abgf" id=spv3 style=position:absolute;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#fafafa;text-align:center;opacity:1><amp-fit-text class="fl i-amphtml-layout-responsive i-amphtml-layout-size-defined" height=250 i-amphtml-layout=responsive layout=responsive max-font-size=17 min-font-size=8 width=300><i-amphtml-sizer slot=i-amphtml-svc style=display:block;padding-top:83.3333%;></i-amphtml-sizer><span id=pct style="display:block;font-weight:bold;padding:1em .3em">Thanks. Feedback improves Google ads</span></amp-fit-text></div><div class="pn abgf" id=spv4 style=position:absolute;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#fafafa;text-align:center><amp-fit-text class="fl i-amphtml-layout-responsive i-amphtml-layout-size-defined" height=250 i-amphtml-layout=responsive layout=responsive max-font-size=20 min-font-size=8 width=300><i-amphtml-sizer slot=i-amphtml-svc style=display:block;padding-top:83.3333%;></i-amphtml-sizer><span class="ct fct" style=display:inline-block;line-height:1.28em;color:rgba(0,0,0,.4);text-align:center;padding:1em>Ad closed by <svg fill=#000000 viewbox="0 0 60 24" xmlns=http://www.w3.org/2000/svg><path d="M7.5 16.29c-4.07 0-7.49-3.31-7.49-7.38S3.43 1.53 7.5 1.53c2.25 0 3.85.88 5.06 2.03l-1.42 1.42c-.87-.81-2.04-1.44-3.64-1.44-2.97 0-5.29 2.4-5.29 5.37s2.32 5.37 5.29 5.37c1.93 0 3.03-.77 3.73-1.48.58-.58.95-1.4 1.1-2.54H7.5V8.24h6.79c.07.36.11.79.11 1.26 0 1.51-.41 3.39-1.75 4.72-1.3 1.35-2.95 2.07-5.15 2.07zm17.75-4.76c0 2.74-2.13 4.75-4.75 4.75s-4.75-2.02-4.75-4.75c0-2.75 2.13-4.75 4.75-4.75s4.75 2 4.75 4.75zm-2.08 0c0-1.71-1.24-2.88-2.67-2.88s-2.67 1.17-2.67 2.88c0 1.69 1.24 2.88 2.67 2.88s2.67-1.18 2.67-2.88zm13.08 0c0 2.74-2.13 4.75-4.75 4.75s-4.75-2.02-4.75-4.75c0-2.75 2.13-4.75 4.75-4.75s4.75 2 4.75 4.75zm-2.08 0c0-1.71-1.24-2.88-2.67-2.88s-2.67 1.17-2.67 2.88c0 1.69 1.24 2.88 2.67 2.88s2.67-1.18 2.67-2.88zm12.58-4.46v8.53c0 3.51-2.07 4.95-4.52 4.95-2.3 0-3.69-1.55-4.21-2.81l1.82-.76c.32.77 1.12 1.69 2.39 1.69 1.57 0 2.54-.97 2.54-2.79v-.68h-.07c-.47.58-1.37 1.08-2.5 1.08-2.38 0-4.56-2.07-4.56-4.74 0-2.68 2.18-4.77 4.56-4.77 1.13 0 2.03.5 2.5 1.06h.07v-.76h1.98zm-1.84 4.48c0-1.67-1.12-2.9-2.54-2.9-1.44 0-2.65 1.22-2.65 2.9 0 1.66 1.21 2.86 2.65 2.86 1.43.01 2.54-1.2 2.54-2.86zm5.89-9.52V16h-2.09V2.03h2.09zm8.49 11.07l1.62 1.08c-.52.77-1.78 2.11-3.96 2.11-2.7 0-4.72-2.09-4.72-4.75 0-2.83 2.03-4.75 4.48-4.75 2.47 0 3.67 1.96 4.07 3.02l.22.54-6.36 2.63c.49.95 1.24 1.44 2.3 1.44 1.07 0 1.81-.53 2.35-1.32zm-4.99-1.71l4.25-1.76c-.23-.59-.94-1.01-1.76-1.01-1.06 0-2.54.93-2.49 2.77z"></path><path d="M0 0h62v24H0z" fill=none></path></svg></span></amp-fit-text></div><input id=paid0 name=a type=radio><input id=paid1 name=a type=radio><div class="pn abgf" id=spv5 style=position:absolute;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#fafafa;text-align:center><amp-fit-text class="fl i-amphtml-layout-responsive i-amphtml-layout-size-defined" height=250 i-amphtml-layout=responsive layout=responsive max-font-size=20 min-font-size=8 width=300><i-amphtml-sizer slot=i-amphtml-svc style=display:block;padding-top:83.3333%;></i-amphtml-sizer><div class=close id=od style=position:absolute;top:2px;color:#000;font-size:15px;line-height:15px;opacity:.5;height:15px;width:15px;user-select:none;cursor:pointer><label for=spr1><svg viewbox="0 0 24 24"><path class=native-arrow d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"></path></svg></label></div><div class=aoc style=margin-top:20px><label><div class="pd panel-row panel-buttons">Personalize ads on this site<label class="pt ptk" style=position:relative;display:inline-block;width:36px;height:14px;top:1px;margin-left:6px><input checked class=pcb style=opacity:0;width:0;height:0 type=checkbox><span class=ph style=position:absolute;cursor:pointer;inset:0;background-color:#dadce0;-webkit-transition:.4s;transition:.4s;border-radius:7px></span></label></div></label><label><a class=btn href=//support.google.com/ads/answer/10923348 id=lmb style="display:inline-block;border-radius:2px;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;box-shadow:0px 0px 2px rgba(0,0,0,.12),0px 1px 3px rgba(0,0,0,.26);cursor:pointer;font-size:.7em;margin:0 1px .4em 1px" target=_blank><span style="display:inline-block;padding:.5em .6em;line-height:1em">Learn more�<svg class=window-icon style=height:14px;width:14px;opacity:.4 viewbox="0 -2 24 24" xmlns=//www.w3.org/2000/svg><path d="M0 0h24v24H0V0z" fill=none></path><path d="M19 19H5V5h7V3H5c-1.11 0-2 .9-2 2v14c0 1.1.89 2 2 2h14c1.1 0 2-.9 2-2v-7h-2v7zM14 3v2h3.59l-9.83 9.83 1.41 1.41L19 6.41V10h2V3h-7z"></path></svg></span></a></label></div></amp-fit-text></div></form></div></div></div><div style="bottom:0;right:0;width:300px;height:250px;background:initial;position:absolute;max-width:100%;max-height:100%;pointer-events:none;image-rendering:-moz-crisp-edges;z-index:2147483647;background-image:url(&#39;data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACsAAAAWBAMAAACrl3iAAAAABlBMVEUAAAD+AciWmZzWAAAAAnRSTlMAApidrBQAAAB+SURBVBjTbVCJEcAwCMIN2H/axgc1bb3G6CmUAPyHZUBfdgBjynU8x8bJSIy6MyGZm5xu5nlmW9woVHBLCYq5lCicc+uGlBQ/xE1dgUiU1d/7lTctk5ysQnplEL5KQrkXS6kFSlvXK6VJLjTi5WD7EcX4PQZuB9m+eB4HN/MDE0YFnKtxEh0AAAAASUVORK5CYII=&#39;);"></div><amp-analytics class="i-amphtml-layout-fixed i-amphtml-layout-size-defined" i-amphtml-layout=fixed style=width:1px;height:1px; trigger=immediate><script type=application/json>{"transport": {"beacon": false, "xhrpost": false},"requests": {"visibility1": "https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstOMpqMkNtVhhO_yiPew6OJEiTXrc7HVFzAERgSsUajrna0caCr8Zq3mp3O3vKerUkWXDFgBq2w4OTAnbh8CoivlLWgHYAan1PLXRcx4tO9jI1yFdWYmPyuBwPkdStxhuc1oVQDoQ&sai=AMfl-YT9MpWoXq0Io33GJdlwUkNb8jDVxcksIsntNV4_W0DFmCLDs4d4z2qDsmI8F50Aor3q8NLYW6AH1x-xAsmQB0BYrTCA76gMEREusDaGGUz3YcBPlJRPP6mwvR1LklOmYueiSq833v0yk6EF0Nu1&sig=Cg0ArKJSzG9gc6ducqOfEAE&cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AYASAT&id=ampim&o=${elementX},${elementY}&d=${elementWidth},${elementHeight}&ss=${screenWidth},${screenHeight}&bs=${viewportWidth},${viewportHeight}&mcvt=${maxContinuousVisibleTime}&mtos=0,0,${maxContinuousVisibleTime},${maxContinuousVisibleTime},${maxContinuousVisibleTime}&tos=0,0,${totalVisibleTime},0,0&tfs=${firstSeenTime}&tls=${lastSeenTime}&g=${minVisiblePercentage}&h=${maxVisiblePercentage}&tt=${totalTime}&r=v&avms=ampa&uap=${uach(platform)}&uapv=${uach(platformVersion)}&uaa=${uach(architecture)}&uam=${uach(model)}&uafv=${uach(uaFullVersion)}&uab=${uach(bitness)}&uafvl=${uach(fullVersionList)}&uaw=${uach(wow64)}&adk=0"},"triggers": {"continuousVisible": {"on": "visible","request": ["visibility1"],"parentPostMessage": "impression-viewable","visibilitySpec": {"selector": ":root","visiblePercentageMin": 50,"continuousTimeMin": 1000}},"visibilityChanged": {"on": "visible","parentPostMessage": "visibility-changed-${intersectionRatio}","visibilitySpec": {"repeat": true,"selector": ":root","visiblePercentageThresholds": [[0,0],[0,5],[5,10],[10,15],[15,20],[20,25],[25,30],[30,35],[35,40],[40,45],[45,50],[50,55],[55,60],[60,65],[65,70],[70,75],[75,80],[80,85],[85,90],[90,95],[95,100],[100,100]]}},"iniLoad": {"on": "ini-load","parentPostMessage": "{\"c\":\"sfchannel2\",\"p\":\"{\\\"uid\\\":\\\"2\\\",\\\"width\\\":${scrollWidth},\\\"height\\\":${scrollHeight}}\",\"s\":\"creative_geometry_update\"}\n"}}}</script></amp-analytics><amp-analytics class="i-amphtml-layout-fixed i-amphtml-layout-size-defined" i-amphtml-layout=fixed style=width:1px;height:1px; trigger=immediate><script type=application/json>{"transport": {"beacon": true, "xhrpost": false},"requests": {"ampeos1": "https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstOMpqMkNtVhhO_yiPew6OJEiTXrc7HVFzAERgSsUajrna0caCr8Zq3mp3O3vKerUkWXDFgBq2w4OTAnbh8CoivlLWgHYAan1PLXRcx4tO9jI1yFdWYmPyuBwPkdStxhuc1oVQDoQ&sai=AMfl-YT9MpWoXq0Io33GJdlwUkNb8jDVxcksIsntNV4_W0DFmCLDs4d4z2qDsmI8F50Aor3q8NLYW6AH1x-xAsmQB0BYrTCA76gMEREusDaGGUz3YcBPlJRPP6mwvR1LklOmYueiSq833v0yk6EF0Nu1&sig=Cg0ArKJSzG9gc6ducqOfEAE&cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AYASAT&id=ampeos&o=${elementX},${elementY}&d=${elementWidth},${elementHeight}&ss=${screenWidth},${screenHeight}&bs=${viewportWidth},${viewportHeight}&mcvt=${maxContinuousVisibleTime}&mtos=0,0,${maxContinuousVisibleTime},${maxContinuousVisibleTime},${maxContinuousVisibleTime}&tos=0,0,${totalVisibleTime},0,0&tfs=${firstSeenTime}&tls=${lastSeenTime}&g=${minVisiblePercentage}&h=${maxVisiblePercentage}&pt=${pageLoadTime}&tt=${totalTime}&rpt=${navTiming(navigationStart,loadEventStart)}&rst=${navTiming(navigationStart)}&r=de&isd=${initialScrollDepth}&msd=${maxScrollDepth}&avms=ampa"},"triggers": {"endOfSession": {"on": "visible","request":["ampeos1"],"visibilitySpec": {"reportWhen": "documentExit","selector": ":root","visiblePercentageMin": 50}}}}</script></amp-analytics><amp-pixel allow-ssr-img class="i-amphtml-layout-fixed i-amphtml-layout-size-defined" i-amphtml-layout=fixed i-amphtml-ssr src="https://securepubads.g.doubleclick.net/pagead/adview?ai=CGIJiyiKmY6TDCf2RiM0Pivuo8A7F1NeCbqeswpDJENvZHhABILGfl5YBYMOEgICYGKABofOExijIAQLgAgCoAwHIAwiqBJQCT9BERJIH5S6cTfesG9L9C64GZSf5Yz8JGywQeCXPElmrF1U7bfkQkhkgWA2KBmTrm_9RMG7cVgQvZJ4LbmfOKCp_4-TfxwfY2umywisuFDt_11HRrdxN4bE-kFMrVzGGmNDVRD3zNetAsmE48pgHhLwxzzhwZttfFF_ZlQs4QFffTXnJ0i4KQ-tbIll0-AvIZ_XT8-zUhr4ChqoEJhxOOQDyYfqYdB0gtxk2ts4xSS63NwUtMZq-G4AyjGNaZygY9PDre5V51bNAfy4Ia0T5RyoC3TTDpLYP-cXMmCgZNQK9a3uQx1ee_tmAgH-WKwQLOX1-X0QLi6JOhLiFgL9TDgcWYFn2egfVExEwhMt6UK4RxjjiwAShyrSKnATgBAGSBQQIBBgBkgUECAUYBKAGAoAHoavVpQOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAfIHBBDT2w7SCBEIgOGAEBABGB0yAqoCOgKAQIAKA8gLAdgTCtAVAYAXAbIXHwodCAASFHB1Yi05NjY1MzUxNjEwMjg4MDE2GKrBiwE&amp;sigh=jGwaeV9esyM&amp;uach_m=[UACH]&amp;cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AYASAT" style=width:1px;height:1px;><img src="https://securepubads.g.doubleclick.net/pagead/adview?ai=CGIJiyiKmY6TDCf2RiM0Pivuo8A7F1NeCbqeswpDJENvZHhABILGfl5YBYMOEgICYGKABofOExijIAQLgAgCoAwHIAwiqBJQCT9BERJIH5S6cTfesG9L9C64GZSf5Yz8JGywQeCXPElmrF1U7bfkQkhkgWA2KBmTrm_9RMG7cVgQvZJ4LbmfOKCp_4-TfxwfY2umywisuFDt_11HRrdxN4bE-kFMrVzGGmNDVRD3zNetAsmE48pgHhLwxzzhwZttfFF_ZlQs4QFffTXnJ0i4KQ-tbIll0-AvIZ_XT8-zUhr4ChqoEJhxOOQDyYfqYdB0gtxk2ts4xSS63NwUtMZq-G4AyjGNaZygY9PDre5V51bNAfy4Ia0T5RyoC3TTDpLYP-cXMmCgZNQK9a3uQx1ee_tmAgH-WKwQLOX1-X0QLi6JOhLiFgL9TDgcWYFn2egfVExEwhMt6UK4RxjjiwAShyrSKnATgBAGSBQQIBBgBkgUECAUYBKAGAoAHoavVpQOoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAfVyRuoB6a-G9gHAfIHBBDT2w7SCBEIgOGAEBABGB0yAqoCOgKAQIAKA8gLAdgTCtAVAYAXAbIXHwodCAASFHB1Yi05NjY1MzUxNjEwMjg4MDE2GKrBiwE&amp;sigh=jGwaeV9esyM&amp;uach_m=[UACH]&amp;cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AYASAT"></amp-pixel><amp-ad-exit class=i-amphtml-layout-container i-amphtml-layout=container id=exit-api><script type=application/json>{"filters":{},"options":{"startTimingEvent":"navigationStart"},"targets":{"landingPage":{"behaviors":{"clickTarget":"_top"},"filters":[],"finalUrl":"https://mendedhearts.org/join-us-today/","trackingUrls":["https://googleads.g.doubleclick.net/aclk?sa=l\u0026ai=CyVUByiKmY6TDCf2RiM0Pivuo8A7F1NeCbqeswpDJENvZHhABILGfl5YBYMOEgICYGKABofOExijIAQLgAgCoAwHIAwiqBJcCT9BERJIH5S6cTfesG9L9C64GZSf5Yz8JGywQeCXPElmrF1U7bfkQkhkgWA2KBmTrm_9RMG7cVgQvZJ4LbmfOKCp_4-TfxwfY2umywisuFDt_11HRrdxN4bE-kFMrVzGGmNDVRD3zNetAsmE48pgHhLwxzzhwZttfFF_ZlQs4QFffTXnJ0i4KQ-tbIll0-AvIZ_XT8-zUhr4ChqoEJhxOOQDyYfqYdB0gtxk2ts4xSS63NwUtMZq-G4AyjGNaZygY9PDre5V51bNAfy4Ia0T5RyoC3TTDpLYP-cXMmCgZdwCM-dgIGSMrINwUYgsDyQz16x2-pQwrgSZHr6BVC0Unm8eyd3fu1uIfc9HASOJWSA-8AExXVeTxwAShyrSKnATgBAGgBgKAB6Gr1aUDqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHpKOxAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgH_56xAqgH35-xAtgHAdIIEQiA4YAQEAEYHTICqgI6AoBAsQkJdXqKp0RzeIAKA5gLAcgLAbgMAdgTCtAVAfgWAYAXAQ\u0026ae=1\u0026num=1\u0026cid=CAQSTADq26N99jvzcn_LXsu-lV4yHpOj0FHRl2CjdiZnQ1LzGZQ_4-sF-zA0mBtnFCyKWt_wmliKXNf32XI7vwPZGMYD_eVCQYatpVZ4s1AYASAT\u0026sig=AOD64_2WuL7MWDhcKxdn3ODNNntH_RASuQ\u0026client=ca-pub-9665351610288016\u0026nb=_googClickLocation\u0026nx=CLICK_X\u0026ny=CLICK_Y\u0026act=1\u0026ri=1\u0026uap=UACH(platform)\u0026uapv=UACH(platformVersion)\u0026uaa=UACH(architecture)\u0026uam=UACH(model)\u0026uafv=UACH(uaFullVersion)\u0026uab=UACH(bitness)\u0026uaw=UACH(wow64)\u0026uafvl=UACH(fullVersionList)\u0026adurl=https://mendedhearts.org/join-us-today/"],"vars":{"_googClickLocation":{"defaultValue":"","iframeTransportSignal":""}}}}}</script></amp-ad-exit></body></html>
#3 JavaScript::Write (size: 50) - SHA256: a2b051fa7d206df6e4eeee27678781de0752c1ac7adcfd359c1a2fc7ff507449
< script src = "/widget/betslip/betslip.js" > < /script>
#4 JavaScript::Write (size: 929) - SHA256: ea6d704a5cef9a63641dad83fcf49ec6a234e82032ebae75dff95bf51f44ba8e
< iframe width = "300"
height = "250"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
allowfullscreen = "true"
style = "border: medium none; padding: 0; margin: 0;  sandbox="
allow - scripts allow - forms allow - popups allow - popups - to - escape - sandbox allow - pointer - lock allow - same - origin " id="
63 a622c8e7fe5 " frameborder="
0 " src="
https: //onclickperformance.com/ad/display.php?stamat=m%257C%252C0ojE-93KqB1dAN0dEdHP3xP.693%252CZMkKdRAQlkuDbgTABrav5L9_1jlobtDkn28cEY43aSTcyA9JwjhqtzzzOC3eAE3FpKneVYBF-VhDnrN5aD0gHtn1L4ivXpjyNucx1bciLOk%252C&cbpage=https://technicalatg.com/?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0=&cbur=0.4209785927537374&cbtitle=S%26P%E2%80%99s%20global%20reinsurance%20outlook%20is%20negative%2C%20but%20a%20turnaround%20is%20near&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=" scrolling="no"></iframe>
#5 JavaScript::Write (size: 695) - SHA256: 019dd613bb7bb01b1f467516366e8d4ecbcf223887fd82a558bb3b76dbe31ea4
< a href = "https://onclickperformance.com/do/c.php?stamat=m%257C%252C%252Cg3d7d2M2oGU3BE9GH0dEdHP3xP.74a%252Cwn9xyF5OVqJIIZSsAee6n7UU2PqQ5-JJzu5YtFZ7DyM9cUPxfHpCRUf4VV5s_r7rT3YZvYdiTeVjO2LY91_1gcOETlNsaOJOKpXOIKKqHNx5NH7ltRSVF2JJ6TKPyCxSHyyNaNzAkiW2PS8djeBEqlD3URJasYISEWiZ8S9zqSdRqQa4Cm10cOFlRuFPQ4tLQKxR4fwrENNgksFBw9Up83uO1SnGS7OMHzyIgTX-R9h-bnyJfaGC9Z6P6zy8sfdD6dz4nuQoG_yMeJyhQ8dJF9cQwIY9eN5lBXbskdv9g3vIUv2vrMG4Y4iHBGS3mKAEz_4FFlf97xkJzwGNZFzpxAaAe-Z19NDvS3ddrbJd4MPszdk1ylwdysSZmD0CUWRM3G3dlCkDBLGJUNu4w3nN45lpfw0V-KNQECDyFjF2s2Q%252C"
target = "_blank" > < img border = "0"
src = "https://crrepo.com/extban/261160620/creatives/23276906/746a681c008e9512034507041aa6f3f3_8707.gif"
width = "100%" / > < /a>
#6 JavaScript::Write (size: 931) - SHA256: eaa5c8da5af253d94279db818659f66dfad3eeecd08e5cf60836c6703b0e0812
< iframe width = "300"
height = "250"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
allowfullscreen = "true"
style = "border: medium none; padding: 0; margin: 0;  sandbox="
allow - scripts allow - forms allow - popups allow - popups - to - escape - sandbox allow - pointer - lock allow - same - origin " id="
63 a622c9178f5 " frameborder="
0 " src="
https: //onclickperformance.com/ad/display.php?stamat=m%257C%252CUojKWIherB1dAN0dEdHP3xP.6a5%252CZMkKdRAQlkuDbgTABrav5JLVNb2ylXxn3-5BgzgSv_fKNpvw6Yjqg_tQQTfoo5tSpTebqCxgqQveQ6sFry-1SSgPPv2AAgJVzGQjP_o91mw%252C&cbpage=https://technicalatg.com/?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0=&cbur=0.013581384052507972&cbtitle=S%26P%E2%80%99s%20global%20reinsurance%20outlook%20is%20negative%2C%20but%20a%20turnaround%20is%20near&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=" scrolling="no"></iframe>
#7 JavaScript::Write (size: 695) - SHA256: 9b19f49c92b4f331d0ffa45220ade8a76a79522d11bf675066a6346df8af2cc9
< a href = "https://onclickperformance.com/do/c.php?stamat=m%257C%252C%252CQiejo2FWoGU3BE9GH0dEdHP3xP.6f9%252CQppzdPxjQ7tpqLSwbGfAkgbItBbJwzlzaYhqnR9FAvylKY4mPOPtLNJmRIH1YEaduTLdv2A5dZsRCWL5J98eeTB-XfZJvO_fkmv1hDdZbYFwiGiMNxhuzd9H_ieTM4bG70OR0zmzWFWMeu1HBy8H0LgoIIKNtvbcwsHCJi-ZcFB9bgVn3iRNHs4iOJyiWSFFrr3gmVlynD0jVNXT58Z2tkkID0qNCtAcMbvxAODi1J83kNXOTYVOYxazURYTui9t_ssc0_MqbY4VHvP5UpQQbdAYSSjNeQL2QSaIfSbFJBk5u6PhqSPsyMK_g5JYWQkkkWJgoh6y1SDrqvTjGKKdaVXUrXUQBy5jh29s5fHaUBuFQiYfpTqcuUIcJexKVOEe4kjn70grHEVBnc8TATS43tAk4KWZu0VK86Rg0MxO01w%252C"
target = "_blank" > < img border = "0"
src = "https://crrepo.com/extban/261160620/creatives/23276894/54db327e1998eb469be2be3c96dfa739_5143.gif"
width = "100%" / > < /a>
#8 JavaScript::Write (size: 930) - SHA256: 4a36566f6318d7f8ac19716f09ea904611c124b5a631e3c77c3a80585976c92d
< iframe width = "300"
height = "250"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
allowfullscreen = "true"
style = "border: medium none; padding: 0; margin: 0;  sandbox="
allow - scripts allow - forms allow - popups allow - popups - to - escape - sandbox allow - pointer - lock allow - same - origin " id="
63 a622c8a0739 " frameborder="
0 " src="
https: //onclickperformance.com/ad/display.php?stamat=m%257C%252CQo2Z_N2ZrB1dAN0dEdHP3xP.8a1%252CZMkKdRAQlkuDbgTABrav5Mi2N31sYee8WeOrF5MV7i5Osp7Z26FpAHNb2zXe3CfOKhBnxGfaGbYSWS2j-efgnPIQQKndta3iOgFRolVav9g%252C&cbpage=https://technicalatg.com/?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0=&cbur=0.21770163609912807&cbtitle=S%26P%E2%80%99s%20global%20reinsurance%20outlook%20is%20negative%2C%20but%20a%20turnaround%20is%20near&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=" scrolling="no"></iframe>
#9 JavaScript::Write (size: 929) - SHA256: ab23a67f04870dfe700587e4996fdf700997f636866f9b63b182db0b090a732e
< iframe width = "300"
height = "250"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
allowfullscreen = "true"
style = "border: medium none; padding: 0; margin: 0;  sandbox="
allow - scripts allow - forms allow - popups allow - popups - to - escape - sandbox allow - pointer - lock allow - same - origin " id="
63 a622c8c459e " frameborder="
0 " src="
https: //onclickperformance.com/ad/display.php?stamat=m%257C%252CoYhLq9idrB1dAN0dEdHP3xP.8f7%252CZMkKdRAQlkuDbgTABrav5GZB3XZh4j_gCV7eI0f4I8mZCBlRLcizPzLJ2ZL2ehzz2LhlLfGT2-ovz1gCrMAyD77oAyLlHrPrrsXRGu5PxXE%252C&cbpage=https://technicalatg.com/?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0=&cbur=0.4497630633972656&cbtitle=S%26P%E2%80%99s%20global%20reinsurance%20outlook%20is%20negative%2C%20but%20a%20turnaround%20is%20near&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=" scrolling="no"></iframe>
#10 JavaScript::Write (size: 695) - SHA256: 8800f9be21dc97e3414ef17361df57d9599faafd37135220ea24890fd925ab05
< a href = "https://onclickperformance.com/do/c.php?stamat=m%257C%252C%252CAhEq93Z_oGU3BE9GH0dEdHP3xP.a92%252CxBXRRuxr1OMIR3r06csvZcWOHhKt67k5jJX_rQpE0D1zNj3lD0B6n5mxF6XfKN2pc-ZyAA1iT9Eimwn5PM6BqS0qTG9eozuPNmTS4rbYa5-i7MRTubxDoqOK7UueR4UDkOJ-yXMBFjN1YpbS_wClcnjvyrEutSn0hzAjqo9ReWrp891fdmi7rz2sGKoFUaSm1JlxZfVCRKIYfEIgkZNcnnPeZlDElzK-8ganhYBqAs8a_2unePRT-YMXqPf4zIMhUGF89YFKSLaqWobUvVVXYoEh21iKxl6QjDXjFWukXwiamm0F_FVFilsXSOpQv8zWNI-M1_ZxUf-oCLnqCEtn9ZBp8x00g6m-xbHsotFxeVCatUgvyG3YxATKUIaNHVAU1voVF2pgY2TymGMWL6vudiw3yKXsj3rtq4a7ZuT61iM%252C"
target = "_blank" > < img border = "0"
src = "https://crrepo.com/extban/276949620/creatives/23424454/4fa93450f320f71e6e696e09a91813a7_1386.jpg"
width = "100%" / > < /a>


HTTP Transactions (129)


Request Response
                                        
                                            GET /?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0= HTTP/1.1 
Host: technicalatg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             104.21.70.184
HTTP/1.1 301 Moved Permanently
                                            
Date: Fri, 23 Dec 2022 21:51:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 23 Dec 2022 22:51:03 GMT
Location: https://technicalatg.com/?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0=
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UoKocBup%2BCDN16RrNj6GUy0xvRXOPMbWaoP848O3WnO5B8a9UWKSCWkREM280UByPwLEUDaBcOH7sPB7Kmr1cClV1c1xsdLGVhT8rjj0DsS3vZIvW2dUePcFc75e%2FtZl%2BF5x"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77e450fd1c071c0a-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "DC5291C136B0B81621A02679A31F6B7C852E2803429D54C2A9AFCC8EDF031328"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20748
Expires: Sat, 24 Dec 2022 03:36:51 GMT
Date: Fri, 23 Dec 2022 21:51:03 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2867
Expires: Fri, 23 Dec 2022 22:38:50 GMT
Date: Fri, 23 Dec 2022 21:51:03 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 23 Dec 2022 21:46:11 GMT
age: 292
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "BE30540F2E06A3565C9B38BDBB9691F707D692B196BDCEF5D671708AA9609795"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4393
Expires: Fri, 23 Dec 2022 23:04:16 GMT
Date: Fri, 23 Dec 2022 21:51:03 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: SBzSEeyPRmuFDGXMXrMPAoHUHw4I0p+nsgmllesWDVb6Je9VAE6fciGqP5gtAo3TSTPcLZtlr9A=
x-amz-request-id: KMGXJCB154YAAH40
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 23 Dec 2022 20:54:12 GMT
age: 3411
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Fri, 23 Dec 2022 21:51:03 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 344
ETag: "063118D94ABD840C23C8E770AC9CAA86CEE88D940B66E255C6027F7555020C38"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 24 Dec 2022 03:51:03 GMT
Date: Fri, 23 Dec 2022 21:51:03 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 23 Dec 2022 21:08:02 GMT
age: 2581
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4083
Cache-Control: max-age=131026
Date: Fri, 23 Dec 2022 21:51:04 GMT
Etag: "63a56fa7-1d7"
Expires: Sun, 25 Dec 2022 10:14:50 GMT
Last-Modified: Fri, 23 Dec 2022 09:06:47 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 344
ETag: "063118D94ABD840C23C8E770AC9CAA86CEE88D940B66E255C6027F7555020C38"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Sat, 24 Dec 2022 03:51:03 GMT
Date: Fri, 23 Dec 2022 21:51:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3019
Cache-Control: max-age=122447
Date: Fri, 23 Dec 2022 21:51:04 GMT
Etag: "63a5524c-118"
Expires: Sun, 25 Dec 2022 07:51:51 GMT
Last-Modified: Fri, 23 Dec 2022 07:01:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3019
Cache-Control: max-age=122447
Date: Fri, 23 Dec 2022 21:51:04 GMT
Etag: "63a5524c-118"
Expires: Sun, 25 Dec 2022 07:51:51 GMT
Last-Modified: Fri, 23 Dec 2022 07:01:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4wFeLxqT69fAs+4lWqIsPw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.164.186.39
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /GNW3ohtzMDg/zWa/RDrDo9M9tM=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3019
Cache-Control: max-age=122447
Date: Fri, 23 Dec 2022 21:51:04 GMT
Etag: "63a5524c-118"
Expires: Sun, 25 Dec 2022 07:51:51 GMT
Last-Modified: Fri, 23 Dec 2022 07:01:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 23 Dec 2022 11:16:39 GMT
Expires: Fri, 30 Dec 2022 11:16:38 GMT
Etag: "1dda822356eb279b07d20a5f46173dfa70fb3ef6"
Cache-Control: max-age=566133,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77e4510559e9b505-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 23 Dec 2022 11:16:39 GMT
Expires: Fri, 30 Dec 2022 11:16:38 GMT
Etag: "1dda822356eb279b07d20a5f46173dfa70fb3ef6"
Cache-Control: max-age=566133,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77e45106ab41b505-OSL

                                        
                                            GET /jquery-1.11.2.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             69.16.175.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:05 GMT
content-encoding: gzip
content-length: 33262
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-176bb"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CNnhmJ0GEocBCiQxNDg0OWFiYi0yOWE2LTQwOTAtOTI1Yy0xNzJjNTViY2JlMDEQ+OiCoKvU+wIaBgjJxZidBiIMOTEuOTAuNDIuMTU0KO2OATADOARCFlRMU19BRVNfMTI4X0dDTV9TSEEyNTZaIGM3ZDJiNGM0ODRhNDEzZTE5MWRlNmFjZmYyZGIyMDA5GiwIARIkNjRiNjQxY2ItYmY5NC00N2NmLTlkZDQtOWQ1MDJjZTBhYjRjGO6DAiIYCAISFGNkczI2NC5zazEuaHdjZG4ubmV0.ZBW1uJswxPj0q5dqq3VNCFKAsW0Hz4WiLpRXZ41l5OU=
x-hw: 1671832265.dop066.sk1.t,1671832265.cds240.sk1.hn,1671832265.cds264.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32047)
Size:   33262
Md5:    b63c8cb1c4a495ed04e735d25beabd78
Sha1:   0ae68f1c55c227331286ad94403122a5ab4526e1
Sha256: 26ea04aa9c41767051276b819a4aa8c6aa337df4da89872d021862312d478d39
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /font-awesome/4.2.0/css/font-awesome.min.css HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             188.114.98.234
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:04 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 718, 718
last-modified: Mon, 25 Jan 2021 22:04:53 GMT
cdn-cachedat: 2021-04-23 05:21:01
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 247af5253dedb1b0bd0d1e5b53c5e898
cdn-cache: HIT
cf-cache-status: HIT
age: 19942567
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77e451055cc21c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21822)
Size:   55185
Md5:    1cd217b3732e7e48a013a823c52ecf84
Sha1:   3da496eae4df30665d51b38124c4e35aaec92310
Sha256: 5c82fde82c0d27ebc31cf495efbb61f75cc9f559d095bf69eb9dea227b200e93
                                        
                                            GET /tag/js/gpt.js HTTP/1.1 
Host: securepubads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.34
HTTP/2 200 OK
content-type: text/javascript
                                            
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27542
date: Fri, 23 Dec 2022 21:51:05 GMT
expires: Fri, 23 Dec 2022 21:51:05 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1430 / 952 of 1000 / last-modified: 1670587517"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   44531
Md5:    86a5b9200fd7d33ed5b35907f32fbfca
Sha1:   edc54c194fc9fd100643b4f27cb136ece59f5a39
Sha256: 7951529f0208cca49781bd1e6796338472858d4870d715b27b7a7e1ed9edba68
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 344
ETag: "D02E173CCDDD581B8ECD4505BBD5773E05487F7038512C08A8146894767AF97D"
Last-Modified: Wed, 21 Dec 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2965
Expires: Fri, 23 Dec 2022 22:40:30 GMT
Date: Fri, 23 Dec 2022 21:51:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 344
ETag: "D02E173CCDDD581B8ECD4505BBD5773E05487F7038512C08A8146894767AF97D"
Last-Modified: Wed, 21 Dec 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2965
Expires: Fri, 23 Dec 2022 22:40:30 GMT
Date: Fri, 23 Dec 2022 21:51:05 GMT
Connection: keep-alive

                                        
                                            GET /?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0= HTTP/1.1 
Host: technicalatg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             104.21.70.184
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 23 Dec 2022 21:51:04 GMT
link: <https://technicalatg.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,User-Agent,User-Agent
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HFkel2SQluHMGokKYLL60SDexyoS%2FgnIg5NgPmK0Wl66lnVTSoPod8cg8f6InMFxHufSgpNER%2BX%2BZJZMuQqxM5QFA8KSjjvbiS3tlYnNF6%2BJ5Xdubx9FSwMTh2TkkmODpBcu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e451005f00b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4212), with CRLF, LF line terminators
Size:   15172
Md5:    4e1da1904945e018d8d25b8d6805b5b1
Sha1:   b312fabc8febae66f9943fb418b3f8fa4b205b02
Sha256: 90dd33b4bbf6a11130cab830aae90777223a891bac8e524ff850a72a8ea868bf
                                        
                                            GET /extban/276949620/creatives/23424454/4fa93450f320f71e6e696e09a91813a7_1386.jpg HTTP/1.1 
Host: crrepo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onclickperformance.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.235.114
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Fri, 23 Dec 2022 21:51:04 GMT
last-modified: Fri, 25 Feb 2022 17:45:53 GMT
etag: W/"621915d1-48de"
via: 1.1 google
cache-control: max-age=14400
cf-cache-status: HIT
age: 6889
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3CE7gEIeuyHBzdhgSlLoUae1KaUK4Oh%2BFFW7YJC1WC02POyOXGHDqRcGIbO3%2BEEBBY%2BnHg85FTt8pcM975PSCAOFQiIwgy8GpXK%2Fl9jTIcdqqMnnLQgYfli896se"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e451081dc623e7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x250, components 3\012- data
Size:   138666
Md5:    ba655e5e2c13f87a209a4cf15c25e23e
Sha1:   272fe34fb5b9788cecb28ca9d1d0cca01b37d6b3
Sha256: 6a6cfd0aa61a1960896f88eb366cb7457840cb6b1e03be079cb965bd63056196
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7992
Expires: Sat, 24 Dec 2022 00:04:17 GMT
Date: Fri, 23 Dec 2022 21:51:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7992
Expires: Sat, 24 Dec 2022 00:04:17 GMT
Date: Fri, 23 Dec 2022 21:51:05 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7992
Expires: Sat, 24 Dec 2022 00:04:17 GMT
Date: Fri, 23 Dec 2022 21:51:05 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9bbf0437-e3f8-4c0c-ac43-11a9d84659cb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4576
x-amzn-requestid: 81468234-ef31-40ad-b003-2d22e8fd2ef8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnpAGi8oAMFXBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61fd3-0ddf619f2677a5a134334202;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:38:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: k0iAdchmYKi0_s5TLmEUA6zgrkAwv5VOylgHbHt0vnnMfwJHpvUuGg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:45:56 GMT
etag: "c27aa6c638e130063905e556d5d2213dcadb690f"
age: 309
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4576
Md5:    b92387330acabeb3e5475a52f789314e
Sha1:   c27aa6c638e130063905e556d5d2213dcadb690f
Sha256: b67e7688d3ed7d4a7aaa9bae8c083f296ed9f52986e8bddbcc93ac13ae02a6af
                                        
                                            GET /scripts/technicalatg.com/banner/display.js HTTP/1.1 
Host: cdn.pubxmedia.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.87.81
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 23 Dec 2022 21:51:05 GMT
cf-bgj: minify
cache-control: public, max-age=604800
expires: Fri, 30 Dec 2022 10:23:30 GMT
last-modified: Sun, 27 Nov 2022 20:07:54 GMT
vary: Accept-Encoding,User-Agent
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 41255
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EryhdK9OpT2NyFFfvDctlXI4NWcVfdeCqzRc5q2VpbHbP7%2FYsKLv0zz%2BmsPINEtp%2FLZN%2FHXd0RsgG2vkslW3DCqApFH5ILQZgE8WF%2FnZjk6tP06aGihhaESW70ZtS%2F1mgbU%2Fig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e4510a8b10b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7482), with no line terminators
Size:   12809
Md5:    b7246f4a131b396ef696e612a1058ece
Sha1:   ee8a80ee1e76ff9ab6ae241b8aa69adbe8dcfd2d
Sha256: 1b33df21895ef796024d09e0c5c3c818a62ff1ef142523575e13e238c66f0600
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b796350-ff1b-4da6-91c7-f598bab0dde2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9343
x-amzn-requestid: 2720f2c1-7d46-4a81-b570-f63490384967
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnqZGyDIAMF4Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61fdb-79c3107c2c0465885bd76558;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __u_FxIZqX0xmVm_8zpvS4XqqtDvdiuvhNGV8LOpcY3fZ0omwFQG_Q==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:46:05 GMT
etag: "8656fddf2a13fff129a073fc85c8197c78ffaaed"
age: 300
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9343
Md5:    42578645a06eaf381fd25ddc41b91820
Sha1:   8656fddf2a13fff129a073fc85c8197c78ffaaed
Sha256: f1afcf62cbe9ce3a786f2f38a851781450fe52ce8f367d30fc31c31977624379
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b7298a2-2f41-4b7e-a1c6-2819da4067a7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12686
x-amzn-requestid: 5ff517eb-a8ea-4051-9277-7730c04003d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhyVlH_toAMF-QA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3ca89-197af9f660f57fd11e178cd6;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 03:10:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: niapAUk39VyD6tjbfb91o8MoKBAEVV97AVmVIbC9qKRR_S8HbraMCQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 04:07:49 GMT
age: 63796
etag: "86b6a457d2eefd5104561d15a9557441f10804f2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12686
Md5:    50705ab69dfed4f096be357417729ea6
Sha1:   86b6a457d2eefd5104561d15a9557441f10804f2
Sha256: 30cc593e7bf3cf1af8977f7c7a22c12f5c4e859c55a4efffcd504b7e56c74dbf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ebee3d-1399-4100-87ce-23d8990b97d2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7478
x-amzn-requestid: b9f7f6d8-fada-45fd-80a7-3ac122dae6fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnoYlEbVIAMF_lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a62103-15601045320b166c295d24d2;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:43:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZhfcPqJ8RN-si9JrtR_1eTK_ipOrXOgs7CusvSevQSfpSOoVB5Hm7Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:48:09 GMT
age: 176
etag: "d28362f2babfde4ca02f309b80be75bfc520de9a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7478
Md5:    33d7fa2f0af62e65eb23c36297749038
Sha1:   d28362f2babfde4ca02f309b80be75bfc520de9a
Sha256: 070da72e06d4492a954b130ff6bef5ca5fd625f0fcfee81e801ef26a03d07e2f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d8a813d-10ee-4216-bb6b-8bcd1d8141e4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7669
x-amzn-requestid: 4b35e79d-21c8-48d7-b11b-44bd820e29d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnROG4UoAMFZdA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f3a-765739ad7e9063781ccb12b2;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:35:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lhQA2yVBNtJ04goTms0KXhX6Q4v86TEe4EUioQs3eJzzMsCxbVmykw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:39:58 GMT
age: 667
etag: "ab36c9309ce13b2a3d075461c2445f76bfc582aa"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7669
Md5:    6d90b80ebad103c48c3043c8d5e4c3ca
Sha1:   ab36c9309ce13b2a3d075461c2445f76bfc582aa
Sha256: 2287a6db0a6a58c570930c1f94c3b36d7acf383b26cdfa42261eb254598fa7c2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /adsid/integrator.js?domain=technicalatg.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.98
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 23 Dec 2022 21:51:05 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            GET /adsid/integrator.js?domain=technicalatg.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.66
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 23 Dec 2022 21:51:05 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   100
Md5:    917951a58be8c6c6f3680159550ba3c2
Sha1:   21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
Sha256: cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /safeframe/1-0-40/html/container.html HTTP/1.1 
Host: 9d4b7fe87bbcd6ad20655abb9a7327dd.safeframe.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.97
HTTP/2 200 OK
content-type: text/html
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 2653
date: Fri, 23 Dec 2022 21:51:06 GMT
expires: Sat, 23 Dec 2023 21:51:06 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 03 Nov 2022 19:10:08 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5657)
Size:   2653
Md5:    e8ee9c011ff8e1f464e74c37113119ee
Sha1:   64ad72134ea05877de0f2b6503f5c0d8c3f78197
Sha256: 09e42988871806c7f0a897bda7bc4247f47f4d8590749eaa245b8ff1fa907303
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D28CD4BB65D91AD4B545F16A8B38551C046B3A8CFEECA975E93A2587F06BEC99"
Last-Modified: Wed, 21 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13052
Expires: Sat, 24 Dec 2022 01:28:38 GMT
Date: Fri, 23 Dec 2022 21:51:06 GMT
Connection: keep-alive

                                        
                                            GET /be6c213e1e6a6a782e4f480f94d27a70/invoke.js HTTP/1.1 
Host: knewwholesomecharming.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             173.233.137.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.19.5
Date: Fri, 23 Dec 2022 21:51:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bd77b94aee3702a0a8bf397927d45ab8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26961), with no line terminators
Size:   9789
Md5:    8248b909aece2f382e7f2a5b8c7b5460
Sha1:   b65ce7a01d8416af275d0b9d5ad27efba59aa25e
Sha256: 92a151af8a05bddf7fbfbd450b5099836e5b3e3614110ed8bff54a10e056810f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gampad/cookie.js?domain=technicalatg.com&callback=_gfp_s_&client=ca-pub-4594086434938959&gpid_exp=1 HTTP/1.1 
Host: partner.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.226
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 23 Dec 2022 21:51:06 GMT
server: cafe
cache-control: private
content-length: 259
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (399), with no line terminators
Size:   259
Md5:    bd769b9452827a3b523b2d074bb02718
Sha1:   c37d37d5da9df49b461204344ac7b271c7797eec
Sha256: e2377885bfcf1f62bc66f3e445364744bda2461aa48c053fcc82e35acc5c45e3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /be6c213e1e6a6a782e4f480f94d27a70/invoke.js HTTP/1.1 
Host: knewwholesomecharming.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             173.233.137.52
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx/1.19.5
Date: Fri, 23 Dec 2022 21:51:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3c20581b888417dbdd39a24d07af4d73
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (26955), with no line terminators
Size:   9783
Md5:    b7b9b00736f4406dd6bd4764ab93d50f
Sha1:   853573aad85974f89332cddfa58a58f0ac99e0ea
Sha256: 082a704d70b209b27fdd3eb7ad4791fca70adebbf908b568b217711bb13602c7
                                        
                                            GET /bootstrap/3.3.4/css/bootstrap.min.css HTTP/1.1 
Host: maxcdn.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             188.114.98.234
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:04 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 617, 617
last-modified: Mon, 25 Jan 2021 22:03:58 GMT
cdn-cachedat: 2021-06-08 14:01:04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 33fc7f6c64f18e27ebb95ab9e21d92ab
cdn-cache: HIT
cf-cache-status: HIT
age: 17273784
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77e451055cbd1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65371)
Size:   22012
Md5:    7306142b9aaedfc8a07cc2671241c624
Sha1:   ab7ef0425b4935edc5f340c2c76fae67ddb29b9e
Sha256: e9528ce11675c1a9c26261d2a87e5dbb48b8b75363e03d249b0645b0884fc1c8
                                        
                                            GET /g.gif?v=ext&blog=197785918&post=0&tz=5.5&srv=technicalatg.com&j=1%3A11.6&host=technicalatg.com&ref=&fcp=1481&rand=0.8238755347989081 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             192.0.76.3
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Fri, 23 Dec 2022 21:51:06 GMT
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149162
Date: Fri, 23 Dec 2022 21:51:06 GMT
Etag: "63a5ad95-1d7"
Expires: Sun, 25 Dec 2022 15:17:08 GMT
Last-Modified: Fri, 23 Dec 2022 13:31:01 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: O1KzkGzBxn-gHqbthsSks8SrTSP4vR7Tt88FHNIB9C5G8GXn5u7NNQ==
Age: 6367

                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://technicalatg.com
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             18.195.193.92
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 23 Dec 2022 21:51:06 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: https://technicalatg.com
access-control-allow-credentials: true
set-cookie: uid_id2=2a343e97-20fc-4473-8057-ec74ddd322f5:1:1; expires=Mon, 20 Dec 2032 21:51:06 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    265218ae71d14448f23eebe542f12c96
Sha1:   5ba085b9cc38e6112e25d442567c19e28ce668ed
Sha256: 148dd429693dbc288be8cce6cb307f539405d1defae7ae42a1903b02b69b59f1

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149032
Date: Fri, 23 Dec 2022 21:51:06 GMT
Etag: "63a5ad95-1d7"
Expires: Sun, 25 Dec 2022 15:14:58 GMT
Last-Modified: Fri, 23 Dec 2022 13:31:01 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IOjFjVZA9QwXdnWhhDfTUtW6ln9etnQpMDhbTS7y7B9Jbb-kitQvxQ==
Age: 6237

                                        
                                            GET /stats HTTP/1.1 
Host: simplewebanalysis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://technicalatg.com
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             18.195.193.92
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Fri, 23 Dec 2022 21:51:06 GMT
content-length: 40
server: fasthttp
access-control-allow-origin: https://technicalatg.com
access-control-allow-credentials: true
set-cookie: uid_id2=00d4247f-c01f-4b76-aa0e-514f074b0d49:2:1; expires=Mon, 20 Dec 2032 21:51:06 GMT; secure; SameSite=None
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   40
Md5:    ef55bc127e91e6434788c430d12539cb
Sha1:   2bdffc315d7c152a0dddd4bc1c16112b879226cc
Sha256: 830b781e1a52f87d1aa2cab5a395eaa0a6e02a46e7c3578593e7d36816d7b8ca

Blocklists:
  - fortinet: Malware
                                        
                                            GET /getconfig/sodar?sv=200&tid=gda&tv=r20221207&st=env HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://technicalatg.com
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.98
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Fri, 23 Dec 2022 21:51:06 GMT
server: cafe
content-length: 11259
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (14914), with no line terminators
Size:   11259
Md5:    367a0073eb8b44e63f129a6f0b1f3af3
Sha1:   81feed77206f381c01a4a8024a050886129cf9ac
Sha256: 4d302db498da9c7048ea95f5752bdb67795d1f12d65707dcb90c17278a195fda
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://technicalatg.com/
Origin: https://technicalatg.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.98
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 23 Dec 2022 21:51:06 GMT
expires: Fri, 23 Dec 2022 21:51:06 GMT
cache-control: private, max-age=3600
etag: 10226388451529376406
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49501
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4885)
Size:   49501
Md5:    9c832c8e29977e766793fdca43a776c9
Sha1:   0083b77ada0529bc5b3b4b6d6d44cf631f9db855
Sha256: 1b9783b093ea5531ea07c52436a4f1c70a9f18b8778de62afa3a323a399013cc
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "FC23F91530B1C52D718AEB6831D5C87F2AD68954458B601C5844E4348F1D9233"
Last-Modified: Thu, 22 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8592
Expires: Sat, 24 Dec 2022 00:14:18 GMT
Date: Fri, 23 Dec 2022 21:51:06 GMT
Connection: keep-alive

                                        
                                            GET /watch.1483618054428.js?key=be6c213e1e6a6a782e4f480f94d27a70&kw=%5B%22s%22%2C%22p%E2%80%99s%22%2C%22global%22%2C%22reinsurance%22%2C%22outlook%22%2C%22is%22%2C%22negative%22%2C%22but%22%2C%22a%22%2C%22turnaround%22%2C%22is%22%2C%22near%22%5D&refer=https%3A%2F%2Ftechnicalatg.com%2F%3Fgo%3D869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0%3D&tz=0&dev=e&res=12.1055&uuid=2a343e97-20fc-4473-8057-ec74ddd322f5%3A1%3A1 HTTP/1.1 
Host: hundredscultureenjoyed.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://technicalatg.com
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             173.233.139.164
HTTP/1.1 307 Temporary Redirect
Content-Type: text/html
                                            
Server: nginx/1.19.5
Date: Fri, 23 Dec 2022 21:51:06 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://technicalatg.com
Access-Control-Allow-Origin: https://technicalatg.com
Access-Control-Allow-Credentials: true
Location: https://hundredscultureenjoyed.com/watch.1483618054428.js?key=be6c213e1e6a6a782e4f480f94d27a70&kw=%5B%22s%22%2C%22p%E2%80%99s%22%2C%22global%22%2C%22reinsurance%22%2C%22outlook%22%2C%22is%22%2C%22negative%22%2C%22but%22%2C%22a%22%2C%22turnaround%22%2C%22is%22%2C%22near%22%5D&refer=https%3A%2F%2Ftechnicalatg.com%2F%3Fgo%3D869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0%3D&tz=0&dev=e&res=12.1055&uuid=2a343e97-20fc-4473-8057-ec74ddd322f5%3A1%3A1&shu=1978f82430a8688a2d6d9f17b3df250e81dd1ee5adbd069948c83f39ca34a5475b9b54904f64652cdbbfa5ba87836179951c39bfb79b95e90ffe23e90e3c707d3f4ba52a96b61a3a511c29bfac978567a38a519320e667906610fe7ee30ffef88719eaee0106&pst=1671832326&rmtc=t
Set-Cookie: u_pl=17798884; expires=Sat, 24 Dec 2022 21:51:06 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.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.g9PhaodIHgWhWiLSzYe-_I8imzGxOdZnWqmjsdyUARs; expires=Fri, 23 Dec 2022 21:52:06 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 04148daec9f7ad16973c5af4d8b73f72
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /watch.1483618054428.js?key=be6c213e1e6a6a782e4f480f94d27a70&kw=%5B%22s%22%2C%22p%E2%80%99s%22%2C%22global%22%2C%22reinsurance%22%2C%22outlook%22%2C%22is%22%2C%22negative%22%2C%22but%22%2C%22a%22%2C%22turnaround%22%2C%22is%22%2C%22near%22%5D&refer=https%3A%2F%2Ftechnicalatg.com%2F%3Fgo%3D869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0%3D&tz=0&dev=e&res=12.1055&uuid=2a343e97-20fc-4473-8057-ec74ddd322f5%3A1%3A1&shu=1978f82430a8688a2d6d9f17b3df250e81dd1ee5adbd069948c83f39ca34a5475b9b54904f64652cdbbfa5ba87836179951c39bfb79b95e90ffe23e90e3c707d3f4ba52a96b61a3a511c29bfac978567a38a519320e667906610fe7ee30ffef88719eaee0106&pst=1671832326&rmtc=t HTTP/1.1 
Host: hundredscultureenjoyed.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://technicalatg.com
Referer: https://technicalatg.com/
Connection: keep-alive
Cookie: u_pl=17798884; ain=eyJhbGciOiJIUzI1NiJ9.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.g9PhaodIHgWhWiLSzYe-_I8imzGxOdZnWqmjsdyUARs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             173.233.139.164
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: nginx/1.19.5
Date: Fri, 23 Dec 2022 21:51:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://technicalatg.com
Access-Control-Allow-Origin: https://technicalatg.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=2a343e97-20fc-4473-8057-ec74ddd322f5:1:1; expires=Fri, 30 Dec 2022 21:51:07 GMT; secure; SameSite=None iprcb24c6e8ecd8d2db3c48f6aa3d7208a24=2717340; expires=Sat, 24 Dec 2022 23:51:07 GMT; secure; SameSite=None pdhtkv=true; expires=Sat, 24 Dec 2022 21:51:07 GMT; secure; SameSite=None uncs=1; expires=Sat, 24 Dec 2022 21:51:07 GMT; secure; SameSite=None pdhtkv5=true; expires=Sat, 24 Dec 2022 21:51:07 GMT; secure; SameSite=None uncs5=1; expires=Sat, 24 Dec 2022 21:51:07 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7867a92810ae7fe4233ac47537ca79ec
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with very long lines (602)
Size:   643
Md5:    9bc1f09db826b98fdde89b30d1442dfc
Sha1:   1b91902b8481aa2f4f5f692ec286a7b6616c02d9
Sha256: 344f3caf8ae7c809f0e25bd1e44839973a2e5f23b344b9ab6138726bd0855811

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7E6296B9361E4E0A290F2E9D30F4239B868761815C2EDD9A4C0652A755D50804"
Last-Modified: Thu, 22 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3218
Expires: Fri, 23 Dec 2022 22:44:45 GMT
Date: Fri, 23 Dec 2022 21:51:07 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "809E41A97E1B43FC6D795E5C481409C94D5002E8677F8F007D317817CB0DB616"
Last-Modified: Fri, 23 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21163
Expires: Sat, 24 Dec 2022 03:43:50 GMT
Date: Fri, 23 Dec 2022 21:51:07 GMT
Connection: keep-alive

                                        
                                            GET /AdServer/js/pwt/161673/7165/pwt.js HTTP/1.1 
Host: ads.pubmatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             23.38.200.201
HTTP/2 200 OK
content-type: application/javascript
                                            
last-modified: Fri, 23 Sep 2022 12:15:31 GMT
server: Apache
accept-ranges: bytes
content-encoding: gzip
p3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC", CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC"
content-length: 73257
cache-control: max-age=94093
expires: Sat, 24 Dec 2022 23:59:20 GMT
date: Fri, 23 Dec 2022 21:51:07 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   73257
Md5:    06cd2eddf805cce44a8cb5178e00d7de
Sha1:   4450e085f121f57255512d5f7c8d4bcffbf77bc5
Sha256: 8c41037c0b242f0fe65640486379d7f6cd91c55f8edd998ea285d8f994ec48f7
                                        
                                            GET /g/14649793/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTEwLzEwMTkyNC9lZTEyYTg5OGQ0ZTYwMjY5MzViMDg4NzU2NDRhOWNlNy5qcGVn.webp?v=1671832267-sHFQCzdGmr2ti6IPaBkDa7Q2R8kvpRr_qGXrzvg8QiI HTTP/1.1 
Host: s-img.adskeeper.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://technicalatg.com
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.153.20
HTTP/2 200 OK
content-type: image/webp
                                            
date: Fri, 23 Dec 2022 21:51:07 GMT
content-length: 13736
x-mg-request-uuid: 805039c9-a4a1-4b48-ad43-59cf9ea72a62
access-control-allow-origin: *
last-modified: Wed, 16 Nov 2022 15:37:33 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 44058
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e451184a43b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   14738
Md5:    a0788b087c3c256bcf34c54d47abc2e5
Sha1:   29030ea05946f3043a0ea6e08981a7a1e87f92af
Sha256: 8f8a9d683b84f4728d337eeb8d556ee3e1b8bbb852b7d34a662636d8eae06628
                                        
                                            GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17798884 HTTP/1.1 
Host: www.spikereekvelocity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             192.243.61.227
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: nginx/1.19.5
Date: Fri, 23 Dec 2022 21:51:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Sat, 24 Dec 2022 21:51:07 GMT ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjEyMjY2MCwiayI6Ijg2MzcwNWJjYmI0YjZhNTU0ZGRiMzU5NjY1Mzk1YTZmIiwic2lkIjoiMTc3OTg4ODQiLCJpc2lkIjoyLCJhc2lkIjoxLCJ6aWQiOjE0NjQxNSwicGlkIjo5NzI5OSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI4LCJwdCI6NCwicGsiOiJkeWZjMWswOSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly90ZWNobmljYWxhdGcuY29tLyJ9fQ.wTMFCftIcc5S5xog5fccm5pqFQYA2D5RQtVb4HytoQc; expires=Fri, 23 Dec 2022 21:52:07 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 92096700030c8cab98b8b62606680cea
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   1242
Md5:    1b996a02f2d14c67d1247f504ded45c1
Sha1:   7e5215d2ff9fea7255230172c8a535d338c9c951
Sha256: f196e05439b4275d03308a44fb7007c756bb7f22124f695c899f98453b2d049a

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /watch.860892642768?key=be6c213e1e6a6a782e4f480f94d27a70&kw=%5B%22s%22%2C%22p%E2%80%99s%22%2C%22global%22%2C%22reinsurance%22%2C%22outlook%22%2C%22is%22%2C%22negative%22%2C%22but%22%2C%22a%22%2C%22turnaround%22%2C%22is%22%2C%22near%22%5D&refer=https%3A%2F%2Ftechnicalatg.com%2F%3Fgo%3D869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0%3D&tz=0&dev=e&res=12.1055&uuid=00d4247f-c01f-4b76-aa0e-514f074b0d49%3A2%3A1 HTTP/1.1 
Host: shortssibilantcrept.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             173.233.139.164
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Server: nginx/1.19.5
Date: Fri, 23 Dec 2022 21:51:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17798884; expires=Sat, 24 Dec 2022 21:51:07 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzc5ODg4NCwiayI6ImJlNmMyMTNlMWU2YTZhNzgyZTRmNDgwZjk0ZDI3YTcwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjU4NjAyLCJwaWQiOjIxNTYzNSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjo1LCJwdCI6NCwicGsiOiJoZG5tMnFnaWciLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly90ZWNobmljYWxhdGcuY29tLz9nbz04Njk5OTdjMThiNWQxMzM4ZmQ3Y2E4MjgyZjQzN3dBcGJzQ2FkZkVlRmxnaUhuaWtPSFF5T0RBd1lpOXJPVUZQZVdGdWJ6Z3ZVMmxTYW5keFVWVlFiSGhpZGt4TVRISjZTbThyTldwbFJUMD0ifX0.g9PhaodIHgWhWiLSzYe-_I8imzGxOdZnWqmjsdyUARs; expires=Fri, 23 Dec 2022 21:52:07 GMT; secure; SameSite=None uid_id2=00d4247f-c01f-4b76-aa0e-514f074b0d49:2:1; expires=Fri, 30 Dec 2022 21:51:07 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3e5ec1a8a00616004d0f80ee97e8ac4d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (705)
Size:   1350
Md5:    adc863a40487c136e108cac949940cd4
Sha1:   9c3838c7e71555674bf7e48472c1dc1c5a668ef5
Sha256: 37bb5d45e221e96b6958d0816226c3eaf3a141b85b9794ab0ca71ef37154298f

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /dyfc1k09?shu=bd1759e18f9d978f0f5377a2f273ba03aabdc23d679931abb42a52d4d57c2a2cda4095f70376ef64524ea37e2b19221f2746f357ffe992b11759c7c67dcd7ef93d38ee8162b3122fc2e0b51b653ff9dd5fff3e&pst=1671832327&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Ftechnicalatg.com%2F&psid=17798884 HTTP/1.1 
Host: www.spikereekvelocity.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spikereekvelocity.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjEyMjY2MCwiayI6Ijg2MzcwNWJjYmI0YjZhNTU0ZGRiMzU5NjY1Mzk1YTZmIiwic2lkIjoiMTc3OTg4ODQiLCJpc2lkIjoyLCJhc2lkIjoxLCJ6aWQiOjE0NjQxNSwicGlkIjo5NzI5OSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI4LCJwdCI6NCwicGsiOiJkeWZjMWswOSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly90ZWNobmljYWxhdGcuY29tLyJ9fQ.wTMFCftIcc5S5xog5fccm5pqFQYA2D5RQtVb4HytoQc; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

                                        
                                             192.243.61.227
HTTP/1.1 302 Found
Content-Type: text/html
                                            
Server: nginx/1.19.5
Date: Fri, 23 Dec 2022 21:51:08 GMT
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=16122660
Set-Cookie: pdhtkv=true; expires=Sat, 24 Dec 2022 21:51:08 GMT uncs=1; expires=Sat, 24 Dec 2022 21:51:08 GMT pdhtkv28=true; expires=Sat, 24 Dec 2022 21:51:08 GMT uncs28=1; expires=Sat, 24 Dec 2022 21:51:08 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b34e9d15ce1c841bbbf811fb9e7ae4ab
Strict-Transport-Security: max-age=0; includeSubdomains


--- Additional Info ---
Magic:  data
Size:   6
Md5:    7d14c6d06a6075d413d43d381c992eba
Sha1:   49bdfc1145f7c7a7bf870f069b9d23a97966cb30
Sha256: f48bd14f1f30b485d99a2904d06cbd9fa03ccaa5779105a3d3cf963edb2ac385

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=16122660 HTTP/1.1 
Host: adserving.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             23.36.79.43
HTTP/2 307 Temporary Redirect
content-type: text/html
                                            
content-length: 0
location: https://www.unibet.nu/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 23 Dec 2022 21:51:08 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d; domain=.unibet.com; expires=Sun, 23-Dec-3021 21:51:08 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=21, origin; dur=56
X-Firefox-Spdy: h2

                                        
                                            GET /stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950 HTTP/1.1 
Host: www.unibet.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             85.184.96.0
HTTP/2 301 Moved Permanently
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
content-length: 0
location: https://www.unibet.nu:443/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950
set-cookie: JSESSIONID=node0mau6vkou5av0le1tf9x2o7st983925.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict __ucbt=node0mau6vkou5av0le1tf9x2o7st9; Path=/; Domain=.unibet.nu; Expires=Sun, 22-Dec-2024 21:51:08 GMT; Max-Age=63072000; Secure; SameSite=None uniattr=ST.0.T; Path=/; Domain=.unibet.nu; Expires=Sun, 22-Dec-2024 21:51:08 GMT; Max-Age=63072000; Secure; SameSite=None uniattr_ref="https://www.spikereekvelocity.com/"; Path=/; Domain=.unibet.nu; Expires=Sun, 22-Dec-2024 21:51:08 GMT; Max-Age=63072000; Secure; SameSite=None UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None affid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None netwid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None CLAIM_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None campaignId=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None affiliateId=1; Path=/; Domain=.unibet.nu; Secure; SameSite=None B-TAG=127656177_C2BF297BC7524041A0621152B32EA8DE; Path=/; Domain=.unibet.nu; Secure; SameSite=None REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None BID=37950; Path=/; Domain=.unibet.nu; Secure; SameSite=None PID=68246908; Path=/; Domain=.unibet.nu; Secure; SameSite=None CHID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None REFERER=https%3A%2F%2Fwww.spikereekvelocity.com%2F; Path=/; Domain=.unibet.nu; Secure; SameSite=None UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None BOCAID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None PRODUCT_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C2BF297BC7524041A0621152B32EA8DE%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; Path=/; Domain=.unibet.nu; Secure; SameSite=None AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None campaignId=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None clientId=polopoly_desktop; Domain=www.unibet.nu; Path=/; SameSite=None; Secure
referer: https://www.spikereekvelocity.com/
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Fri, 23 Dec 2022 21:51:08 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2

                                        
                                            GET /stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&sref=ADST&ADST=16122660&affiliateId=1&pid=68246908&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950 HTTP/1.1 
Host: www.unibet.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Cookie: __ucbt=node0mau6vkou5av0le1tf9x2o7st9; uniattr=ST.0.T; uniattr_ref="https://www.spikereekvelocity.com/"; affiliateId=1; B-TAG=127656177_C2BF297BC7524041A0621152B32EA8DE; BID=37950; PID=68246908; REFERER=https%3A%2F%2Fwww.spikereekvelocity.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_C2BF297BC7524041A0621152B32EA8DE%26sref%3DADST%26ADST%3D16122660%26affiliateId%3D1%26pid%3D68246908%26bid%3D37950; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             85.184.96.0
HTTP/2 301 Moved Permanently
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
content-length: 0
location: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Fri, 23 Dec 2022 21:51:08 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "700D6AF661E018CFA6C535034BB070250CC81C663863DDD464AC672E326AD6BD"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2584
Expires: Fri, 23 Dec 2022 22:34:12 GMT
Date: Fri, 23 Dec 2022 21:51:08 GMT
Connection: keep-alive

                                        
                                            GET /nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908 HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: 3j1KK5ReHy/6ckOVwt+Uag==
last-modified: Mon, 21 Nov 2022 12:34:11 GMT
x-ms-request-id: 2aa5be0d-c01e-0043-6918-17f45e000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e4511edabb1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2468)
Size:   6814
Md5:    4ba67cf7931953e89765b0e96865ec54
Sha1:   a27fa4a64e04f073204763b499c8c5b58bd4a3d8
Sha256: d6dedf8693aeaa54dd481bf2eccac77dee9f8b60a0e32144e76c18909700ad35
                                        
                                            GET /nu/pop/sportsbook/multisports/unibet-logo.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: cw5jdwcrd9gLyjDZb7Y7Jw==
last-modified: Mon, 21 Nov 2022 12:34:12 GMT
etag: W/"0x8DACBBCB2079DB0"
x-ms-request-id: 24a2aae3-d01e-004f-0203-036356000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed221bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (3207), with no line terminators
Size:   1470
Md5:    efe27aa19439babd7d191bb7b0425ef9
Sha1:   990ebd59cbb71f37bb8589f09571552fb24d09af
Sha256: 62b97edb9f7db3c171d538c68983747b25c2491af046b8211aa0b6d90e22a60a
                                        
                                            GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.138
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Dec 2022 17:25:38 GMT
expires: Wed, 20 Dec 2023 17:25:38 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
age: 275130
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30399
Md5:    0f83cadc148d2ad7e53c91f6c4ee05bb
Sha1:   90035c5fffedf4b0f099465f6b929a030b46c92b
Sha256: 3f59aa77bbbed7760a9968af27d3c19ffddda021c948edf0bf0c0f828dd308ae
                                        
                                            GET /unibet/bannerflow/scripts/master_tag.js HTTP/1.1 
Host: a1s-cdn.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             85.184.96.5
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
content-length: 956
last-modified: Mon, 25 Apr 2022 12:19:34 GMT
etag: "3bc-5dd7996cc0ce1"
cache-control: max-age=1800, public, must-revalidate
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s-cdn.unibet.com; Path=/; SameSite=None; Secure
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   956
Md5:    fd48e87ecd4d06d9c5df490b91dc813e
Sha1:   a65a437db44444634e4f41732c590c1d14433b3f
Sha256: 2f786ae3f4577ed970f60aa7a9edf726300a740fdb360a8364db7ff4b7ca8e47
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1738
Cache-Control: max-age=139478
Date: Fri, 23 Dec 2022 21:51:09 GMT
Etag: "63a599d9-117"
Expires: Sun, 25 Dec 2022 12:35:47 GMT
Last-Modified: Fri, 23 Dec 2022 12:06:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /nu/pop/sportsbook/multisports/1-main.js HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: BPxI3njL/F0VV+nfOZx3Mw==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: W/"0x8DACBBCB50B45F5"
x-ms-request-id: 10dfb792-f01e-0077-0703-03c796000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120dd191bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 text
Size:   1974
Md5:    6fd52cdb19ee4ca282bccfa2f377ee1c
Sha1:   c5bcf25fc6224758d73c434b91ae1fcaa149d7bd
Sha256: 9eec48eac85531879af9b778c140a25ecf2e441f9d57d35e1adac15dd78fdb51
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1738
Cache-Control: max-age=139478
Date: Fri, 23 Dec 2022 21:51:09 GMT
Etag: "63a599d9-117"
Expires: Sun, 25 Dec 2022 12:35:47 GMT
Last-Modified: Fri, 23 Dec 2022 12:06:49 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /nu/pop/sportsbook/multisports/gambling-commission.png HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 404 Not Found
content-type: application/xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
x-ms-request-id: 3d3f3535-d01e-003d-2e18-176419000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 77
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed2f1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Size:   98626
Md5:    c07662eb505cb9ca6eeaa380fd036e17
Sha1:   268dd6d9d748016258022b117b127e1316b889b3
Sha256: 46e4be55f8e3a00d8181f1d767333e88b880db7aab0f57caeb5155ac6e113459
                                        
                                            GET /css?family=Roboto:300,400,500 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Dec 2022 21:51:08 GMT
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   11568
Md5:    23fd24afac374c2c4a603f486cf62a12
Sha1:   9b04ae752fbb43addfeed33b6b918e02428cfe1e
Sha256: 17fd11d3d0aa646bd421afca609e7161ce7f3a337f5355ab962344944bc9415d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression, from Unix\012- data
Size:   2934
Md5:    a81de24689a4e2d263ee4630d932b384
Sha1:   37ee2545ec03f2a29780a9d09f5134a8b2b2e159
Sha256: 8bda046b41cb7e7eef5b56c9e7f164ebe406b0551acb59c073453531e7789a0f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /nu/pop/sportsbook/multisports/app-sports-icon.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: Lm+dv7pV36kTdto2PoEyYQ==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: W/"0x8DACBBCB4BDF480"
x-ms-request-id: 88d0ed69-201e-0074-2803-0326f2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed241bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (15888), with no line terminators
Size:   10306
Md5:    cc9b904f468d616f4d69c7d43663ced1
Sha1:   b4fd14c74e73f902c66c6ef82623c89ccbfe6e80
Sha256: 105c6ad0e7bc7844064d3b86fa37d7459baa82b63bbfc941ee80320f8c660bad
                                        
                                            GET /widget/betslip/betslip.js HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
cache-control: public, max-age=900, immutable
content-md5: V3DcYDl/+4NNEoCqe8670A==
last-modified: Tue, 15 Jan 2019 09:54:22 GMT
etag: W/"0x8D67ACF6D112CB5"
x-ms-request-id: 556a432d-701e-0079-3f03-03ee26000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393530
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e451220e481bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (693)
Size:   78334
Md5:    1eeb1f1e63e3e77864cd57300545b6dc
Sha1:   2674115cf0efcf0921db8e4dd06bcec357a3ad85
Sha256: 37ff892f03be193197723d1d0cd2c24c32449447d229f25d1a9a25780b8aff57
                                        
                                            GET /orval/tracking/lastclick.min.js HTTP/1.1 
Host: a1s.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                        
                                             85.184.96.5
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
vary: Accept-Encoding
last-modified: Fri, 05 Aug 2022 12:55:42 GMT
etag: W/"705-5e57dfbd5830d"
cache-control: max-age=1800, public, must-revalidate
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s.unibet.com; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   16558
Md5:    eec4f89a7e8f59d9f82a053ceb92e571
Sha1:   4c68233736165e4bb7b261b5f263b736a4d29b76
Sha256: 1c39eed36bff4debd2edd699dd535fb49c625b1f077ed81c7847e90bfb714ac7
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Dec 2022 19:33:56 GMT
expires: Thu, 21 Dec 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 181033
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Dec 2022 19:34:15 GMT
expires: Thu, 21 Dec 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 181014
last-modified: Wed, 11 May 2022 19:24:56 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Size:   15740
Md5:    b9c29351c46f3e8c8631c4002457f48a
Sha1:   e57e59c5780995ff2937ab2b511a769212974a87
Sha256: f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
                                        
                                            GET /releases/v5.7.1/css/all.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             172.64.133.15
HTTP/2 200 OK
content-type: text/css
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
x-amz-id-2: bDlIamUY1QfJPc4QlUBnXFv1f1qQDGvTvEH6wm5EFeK9XBcJboUVX25kNqwZs6Ih/vyIsNf6eIM=
x-amz-request-id: 39MR148XF08XCMJM
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:37 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2363885
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lCLjt63icsTsHcNDdn0B7SOtz9DYo9wp%2BPjCJPREcl5vVxOVEi2OLMx8XrYzj014%2FKEmI%2FWvPAuzRugSdiCr%2FhBGGX%2BRUzVztZROKax%2FFFqP3qMIKp%2Bz8wn%2FSJD%2BQK%2BMzWm3%2FXTk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e45121af0b8e14-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (54456), with no line terminators
Size:   92610
Md5:    51ded7fefbd538dbb402abaf9716a3bf
Sha1:   9de9ef6cb410019e6faf2d64019565fe4cd08033
Sha256: a6061153458d0c72125d2f5428037a8a3ccf9f8aca389087727ffd1a4c19b643
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5220
Cache-Control: max-age=135738
Date: Fri, 23 Dec 2022 21:51:09 GMT
Etag: "63a57da3-117"
Expires: Sun, 25 Dec 2022 11:33:27 GMT
Last-Modified: Fri, 23 Dec 2022 10:06:27 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 23 Dec 2022 21:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pages/data-scripts/0012/9242/site/welcome.unibet.com.json?t=1 HTTP/1.1 
Host: script.crazyegg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.19.148.8
HTTP/2 200 OK
content-type: application/json
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
content-length: 364
access-control-expose-headers: CE-Version
ce-version: 11.5.16
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Fri, 23 Dec 2022 07:03:24 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 53265
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e4512398cbb511-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (704), with no line terminators
Size:   364
Md5:    afffe34fd4849d30cafa1a035be611f1
Sha1:   5b2995e2a6edee07a71eb0d52e499506e2e36d06
Sha256: a68f962accc8a94c96b2e9d905d2e922413992da2c51158a560805d4c6e9916b
                                        
                                            GET /nu/pop/sportsbook/multisports/icon-expert.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: Z4302O+bSqlX5UM92U+35A==
last-modified: Mon, 21 Nov 2022 12:34:15 GMT
etag: W/"0x8DACBBCB3A5CF50"
x-ms-request-id: cd88faad-301e-0047-5503-037959000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393528
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed2d1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (966), with no line terminators
Size:   525
Md5:    6ba4cd6c7b606963e92ea9fabc0ef79a
Sha1:   24fb38fe991c00692ce1fc741efa5213e64a66ce
Sha256: 1e4ace86882c3a6b91101e77bfcaaae377b30c139bc850984438b7873bd555fa
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1228
Cache-Control: max-age=117380
Date: Fri, 23 Dec 2022 21:51:09 GMT
Etag: "63a54585-1d7"
Expires: Sun, 25 Dec 2022 06:27:29 GMT
Last-Modified: Fri, 23 Dec 2022 06:07:01 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   1074
Md5:    42bb2e59ca409aa68c6b1d265f900956
Sha1:   9478bcfd47468102090016af080215d152fabcd4
Sha256: 2ee45e47b635c6af0cc60ac06891f519427a064eaad8f64b8059784afc71c24f
                                        
                                            GET /bounce?%2Fseg%3Fadd%3D9755599 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.89.210.82
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx/1.21.3
Date: Fri, 23 Dec 2022 21:51:09 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: ac90ace4-38e2-4dec-889f-1fb1b803eb3f
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C%<LkLd#!@wnf-Te9(>wL5L!!'*4$Rz0k; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 23-Mar-2023 21:51:09 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 952.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=F431E3BC5593E3887F000101%40AdobeOrg&d_nsid=0&ts=1671832267923 HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             52.18.15.195
HTTP/1.1 200 OK
Content-Type: application/json;charset=utf-8
                                            
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://welcome.unibet.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-2-v045-0687cfe76.edge-irl1.demdex.com 1 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=82859083580849043272980598409460810411; Max-Age=15552000; Expires=Wed, 21 Jun 2023 21:51:09 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: XKruUWdtS+E=
Content-Length: 498
Connection: keep-alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (791), with no line terminators
Size:   498
Md5:    e8569e0aec0cfda120f0a495b1ea3810
Sha1:   015755b4bde86facaa542304dbb92ee58452c133
Sha256: a049e818c42f8e20afd1851164a2615076c946d5477234af7c00c9ade06edffd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5197
Cache-Control: max-age=147262
Date: Fri, 23 Dec 2022 21:51:09 GMT
Etag: "63a5aabe-116"
Expires: Sun, 25 Dec 2022 14:45:31 GMT
Last-Modified: Fri, 23 Dec 2022 13:18:54 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5197
Cache-Control: max-age=147262
Date: Fri, 23 Dec 2022 21:51:09 GMT
Etag: "63a5aabe-116"
Expires: Sun, 25 Dec 2022 14:45:31 GMT
Last-Modified: Fri, 23 Dec 2022 13:18:54 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /pages/scripts/0012/9242.js?464397 HTTP/1.1 
Host: script.crazyegg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.19.148.8
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
access-control-allow-origin: *
access-control-expose-headers: CE-Version
ce-version: 11.5.16
cache-control: public, max-age=300, s-maxage=1209600
cf-bgj: minify
cf-polished: origSize=6088
last-modified: Fri, 23 Dec 2022 07:03:23 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 53266
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e4512378a6b511-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2682
Md5:    54002b7f5b705b9f3dd37677ece53870
Sha1:   a5924e8b197450a8af834b5cabdac70c6a8d807d
Sha256: f135ba5b677920f30b8f0849d2c82ac457f5e1996d7fed50c14de5717256da21
                                        
                                            GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&mid=82831666824476242202978000307032882992&ts=1671832268141 HTTP/1.1 
Host: unibetlondonltd.d3.sc.omtrdc.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             15.188.95.229
HTTP/2 200 OK
content-type: application/x-javascript;charset=utf-8
                                            
access-control-allow-origin: https://welcome.unibet.com
access-control-allow-credentials: true
date: Fri, 23 Dec 2022 21:51:09 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            GET /dest5.html?d_nsid=0 HTTP/1.1 
Host: unibet.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             52.213.181.195
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                            
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
date: Fri, 23 Dec 2022 21:51:09 GMT
DCS: dcscanary-prod-irl1-1-v052-0f73f706c.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 09:00:43 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: Pm2QRmNXQgw=
transfer-encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Size:   2791
Md5:    ccbdcb1e84c241950763ec4cd516cdfc
Sha1:   55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
Sha256: de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=142065
Date: Fri, 23 Dec 2022 21:51:09 GMT
Etag: "63a5aabe-116"
Expires: Sun, 25 Dec 2022 13:18:54 GMT
Last-Modified: Fri, 23 Dec 2022 13:18:54 GMT
Server: nginx
Content-Length: 278

                                        
                                            GET /b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s9238699595636?AQB=1&ndh=1&pf=1&t=23%2F11%2F2022%2021%3A51%3A8%205%200&mid=82831666824476242202978000307032882992&aamlh=6&ce=UTF-8&pageName=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&g=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950%26btag%3D127656177_C2BF297BC7524041A0621152B32EA8DE%26bid%3D37950%26campaignId%3D2799402%26pid%3D68246908&r=https%3A%2F%2Fwww.spikereekvelocity.com%2F&cc=GBP&ch=bf_landingpage&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A68246908-37950%26btag%3D127656177_C2BF297BC7524041A0621152B32EA8DE%26bid%3D37950%26campaignId%3D2799402%26pid%3D68246908&v1=welcome.unibet.com%3A%3A%3Adesktop%3Anu%3Apop%3Asportsbook%3Amultisports%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.com&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=9%3A51%20PM%7CFriday&v6=9%3A51%20PM%7CFriday&v11=GBP&c14=New&v14=New&c16=1671832268&v21=Not%20Logged-In&c73=unibet&v120=popunder&v121=1%3A127656177%3A68246908-37950&v122=NONE&v124=2799402&v125=127656177_C2BF297BC7524041A0621152B32EA8DE&v126=68246908&v127=37950&v134=1671832267&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1 HTTP/1.1 
Host: unibetlondonltd.d3.sc.omtrdc.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             15.188.95.229
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                            
access-control-allow-origin: *
date: Fri, 23 Dec 2022 21:51:09 GMT
expires: Thu, 22 Dec 2022 21:51:09 GMT
last-modified: Sat, 24 Dec 2022 21:51:09 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3590232461495304192-4619788279378216687
vary: *
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 2 x 2\012- data
Size:   43
Md5:    ad480fd0732d0f6f1a8b06359e3a42bb
Sha1:   a544538683a2dfe574eeb2e358ac8fcc78289d50
Sha256: a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             54.230.245.110
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 23 Dec 2022 21:51:10 GMT
Last-Modified: Fri, 23 Dec 2022 21:13:18 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: es4n4gfq2BAtjJbjb_q2ksaOVQIdYpFnF-tUcV1h3zGZZY3ABeparA==
Age: 2272

                                        
                                            GET /cm/dd?d_uuid=82859083580849043272980598409460810411 HTTP/1.1 
Host: cm.everesttech.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.171.1.252
HTTP/1.1 302
                                            
Date: Fri, 23 Dec 2022 21:51:10 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y6YizgAAALiWSgNn; Domain=.everesttech.net; Expires=Sat, 23-Dec-2023 21:51:10 GMT; Path=/ everest_session_v2=Y6YizgAAALiWSwNn; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y6YizgAAALiWSgNn
Server: AMO-cookiemap/1.1

                                        
                                            GET /ibs:dpid=411&dpuuid=Y6YizgAAALiWSgNn HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.18.15.195
HTTP/1.1 302 Found
                                            
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0f9127447.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y6YizgAAALiWSgNn
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=66521910757190045960499060550750915726; Max-Age=15552000; Expires=Wed, 21 Jun 2023 21:51:10 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: 6I/NPwgDTiQ=
Content-Length: 0
Connection: keep-alive

                                        
                                            GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y6YizgAAALiWSgNn HTTP/1.1 
Host: dpm.demdex.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             52.18.15.195
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
DCS: dcs-prod-irl1-2-v045-0665c523e.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: p+0b/4fjTR0=
Content-Length: 59
Connection: keep-alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   59
Md5:    1251cd5e5c2def4c046309375f87c1c1
Sha1:   e02d6b0c6a5c495c15985e2832e335eda8528c80
Sha256: 4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
                                        
                                            GET /nu/pop/sportsbook/multisports/read_json.js HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: rGS1nJi75Qz2m2yY+jlYXA==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: W/"0x8DACBBCB5157DAD"
x-ms-request-id: 88d0ed66-201e-0074-2503-0326f2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120dd1d1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/icon-trust.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: 9k4H3E55HXB5I94VinrUOQ==
last-modified: Mon, 21 Nov 2022 12:34:15 GMT
etag: W/"0x8DACBBCB39EA46F"
x-ms-request-id: a11628c9-801e-0042-7503-03ab82000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393528
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed2b1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/google-play-ro.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: 2fR27yW0b9kBp/ebW9u59A==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: W/"0x8DACBBCB4CC7156"
x-ms-request-id: 4fc06b4d-901e-004e-1803-033c8a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed2a1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /ad/display.php?stamat=m%257C%252CQo2Z_N2ZrB1dAN0dEdHP3xP.8a1%252CZMkKdRAQlkuDbgTABrav5Mi2N31sYee8WeOrF5MV7i5Osp7Z26FpAHNb2zXe3CfOKhBnxGfaGbYSWS2j-efgnPIQQKndta3iOgFRolVav9g%252C&cbpage=https://technicalatg.com/?go=869997c18b5d1338fd7ca8282f437wApbsCadfEeFlgiHnikOHQyODAwYi9rOUFPeWFubzgvU2lSandxUVVQbHhidkxMTHJ6Sm8rNWplRT0=&cbur=0.21770163609912807&cbtitle=S%26P%E2%80%99s%20global%20reinsurance%20outlook%20is%20negative%2C%20but%20a%20turnaround%20is%20near&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref= HTTP/1.1 
Host: onclickperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             35.190.55.95
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
server: openresty
date: Fri, 23 Dec 2022 21:51:04 GMT
access-control-allow-origin: *
link: <//onclickperformance.com>; rel=dns-prefetch,<//onclickperformance.com>; rel=preconnect,<//trck.wargaming.net>; rel=dns-prefetch,<//trck.wargaming.net>; rel=preconnect
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg HTTP/1.1 
Host: cdn.bannerflow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.16.174.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
cache-control: public,max-age=604800
content-md5: FAAw5O0EvruykoHDQoRDMA==
last-modified: Fri, 27 Nov 2020 14:00:02 GMT
etag: W/"0x8D892DCBC6EB927"
x-ms-request-id: 0c05a17a-201e-0074-2dff-f626f2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 387
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45125cdc50b02-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /a/display.php?r=5070395 HTTP/1.1 
Host: onclickperformance.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             35.190.55.95
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: openresty
date: Fri, 23 Dec 2022 21:51:04 GMT
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no HTTP/1.1 
Host: bannerflow-feed-builder.azurewebsites.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             104.40.147.180
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-expose-headers: Request-Context
cache-control: no-cache
content-encoding: gzip
expires: -1
pragma: no-cache
set-cookie: ARRAffinity=5673035676d86e84e1020885961d5365422988ddd91ba9348b9a26a484558e53;Path=/;HttpOnly;Secure;Domain=bannerflow-feed-builder.azurewebsites.net ARRAffinitySameSite=5673035676d86e84e1020885961d5365422988ddd91ba9348b9a26a484558e53;Path=/;HttpOnly;SameSite=None;Secure;Domain=bannerflow-feed-builder.azurewebsites.net
vary: Accept-Encoding
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:f631c08e-9610-47b7-82c9-c925628cdde1
x-powered-by: ASP.NET
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/utv-logo.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: QazcDvviTF55mXL/M8kCWQ==
last-modified: Mon, 21 Nov 2022 12:34:12 GMT
etag: W/"0x8DACBBCB1D5BF7A"
x-ms-request-id: 5d879bd0-f01e-002a-0703-03cd12000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed231bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/icon-sports.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: Kch+tYuo05USS5JaESq1rA==
last-modified: Mon, 21 Nov 2022 12:34:15 GMT
etag: W/"0x8DACBBCB3E60357"
x-ms-request-id: 16b99321-701e-000b-6a03-03e969000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393528
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed2e1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /e-202251.js HTTP/1.1 
Host: stats.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://technicalatg.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.0.76.3
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Fri, 23 Dec 2022 21:51:05 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Sun, 10 Dec 2023 23:28:49 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/favicon.ico HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/x-icon
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
cache-control: public, max-age=900, immutable
content-md5: rS2fRBxmkqgGx7Qnuz5TbQ==
last-modified: Mon, 21 Nov 2022 12:34:11 GMT
etag: W/"0x8DACBBCB155306D"
x-ms-request-id: ef96856b-501e-0041-3303-034ae6000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393527
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e451234f571bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/app-store-ro.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: epgiRapjJpA7DniTiF5C+w==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: W/"0x8DACBBCB4C5466A"
x-ms-request-id: 0b580569-d01e-0060-1f03-036e9d000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed251bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg HTTP/1.1 
Host: cdn.bannerflow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.16.174.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
cache-control: public,max-age=604800
content-md5: DtBEzXf8HuXNecd90Rx/1w==
last-modified: Fri, 27 Nov 2020 14:00:01 GMT
etag: W/"0x8D892DCBC244A27"
x-ms-request-id: f9c36029-201e-0105-665e-a57399000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 578
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45125bdb90b02-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/com-payments.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: vwb7ospRft2xzGDtJvR3WA==
last-modified: Mon, 21 Nov 2022 12:34:13 GMT
etag: W/"0x8DACBBCB22FE05F"
x-ms-request-id: bf5a1d34-901e-003c-5a03-033bc5000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120ed301bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg HTTP/1.1 
Host: cdn.bannerflow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.16.174.188
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Fri, 23 Dec 2022 21:51:09 GMT
cache-control: public,max-age=604800
content-md5: eFf1+jVlHZeVusUSI4yq9A==
last-modified: Mon, 07 Dec 2020 10:23:00 GMT
etag: W/"0x8D89A9A12E2A33B"
x-ms-request-id: aecbdf5c-c01e-0126-115e-a51c52000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 530
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45126fee10b02-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /nu/pop/sportsbook/multisports/1-styles.css HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:68246908-37950&btag=127656177_C2BF297BC7524041A0621152B32EA8DE&bid=37950&campaignId=2799402&pid=68246908
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a68246908%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1671832268307)%5c%2f%22%2c%22CookieTag%22%3a%223795068246908451240919C202212232151%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228599303904%7c1%22%7d%5d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             104.18.24.188
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
date: Fri, 23 Dec 2022 21:51:08 GMT
cache-control: public, max-age=900, immutable
content-md5: zXkBqwBMviPPaK5rBIapmA==
last-modified: Mon, 21 Nov 2022 12:34:11 GMT
etag: W/"0x8DACBBCB117460B"
x-ms-request-id: dbafa778-701e-0034-4703-0321ca000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 393529
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e45120dd181bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: