promokodus.com/ua/campaigns/csgochicken
301 Moved Permanently 178 B URL HTTP/1.1 promokodus.com/ua/campaigns/csgochicken
IP
ASN #42745 Safe Value Limited
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET /ua/campaigns/csgochicken HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 15 Jan 2023 02:07:22 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Set-Cookie: __lhash_=977da90e391a8423efa81a3796522149; Max-Age=604800; Path=/
Location: https://promokodus.com/ua/campaigns/csgochicken
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0643dc6b6fed33b3537160b6bb77bcbf
aa43bd1fbb30d2219f3285c1ee4991ffb33562c5
f137438e30e0d69cba77ca2eb736687873e4a9c06cf88d23c6d55ea930fde09f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F137438E30E0D69CBA77CA2EB736687873E4A9C06CF88D23C6D55EA930FDE09F"
Last-Modified: Sat, 14 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8074
Expires: Sun, 15 Jan 2023 04:21:56 GMT
Date: Sun, 15 Jan 2023 02:07:22 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7706
Expires: Sun, 15 Jan 2023 04:15:48 GMT
Date: Sun, 15 Jan 2023 02:07:22 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 15 Jan 2023 01:42:04 GMT
content-type: application/json
age: 1518
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7bd85a261739c122eefb74ffddaec99
e2e059b0740592e8591d432249aafe5fcb8af23c
71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9021
Expires: Sun, 15 Jan 2023 04:37:43 GMT
Date: Sun, 15 Jan 2023 02:07:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lZK3YEyqSBilYTC+pBeV0KbS+9n87bIy2CAjuIkmDX9HKQ5/Yu3+pDHGhvT3YnGZ9tDtgjFA2YA=
x-amz-request-id: YQA9KE2VVJFS6HCF
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 15 Jan 2023 01:43:57 GMT
age: 1405
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 343d7a0311050198beddac968f8cd54e
3f03b3686e84472cb1c2bddd7da2cbfc0b7b7099
1c5b1a9081a27175495fe065aa1a023579908223b457ac3d3bccdf31bacc4567
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C5B1A9081A27175495FE065AA1A023579908223B457AC3D3BCCDF31BACC4567"
Last-Modified: Sat, 14 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5630
Expires: Sun, 15 Jan 2023 03:41:12 GMT
Date: Sun, 15 Jan 2023 02:07:22 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:22 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 15 Jan 2023 01:33:45 GMT
age: 2018
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 547d080cdd736cd7d684b20842d062e3
faea805503cee5179d59142ddee002f55f4cda07
3fcf171584c4adcb87238c1cf7cf0b157c359349b207297a2cdcbcd0bb700b1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5526
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Last-Modified: Sun, 15 Jan 2023 00:35:17 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash c01ec61f7ca77158f474b3ab519c12fa
fc82ae0fcd73a83a980b75709a08e65239894e4a
f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6181
Cache-Control: max-age=117745
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Etag: "63c270a7-1d7"
Expires: Mon, 16 Jan 2023 10:49:48 GMT
Last-Modified: Sat, 14 Jan 2023 09:06:47 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2355f39a1dc25caf38b17b459838fac7
f1401578f39d47e02b875debe5be3c5aea2cd723
7226c496b32ec70ea48c5947f9835082eb4f282527a5a4376722160f8973ca8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7226C496B32EC70EA48C5947F9835082EB4F282527A5A4376722160F8973CA8F"
Last-Modified: Sat, 14 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15863
Expires: Sun, 15 Jan 2023 06:31:46 GMT
Date: Sun, 15 Jan 2023 02:07:23 GMT
Connection: keep-alive
promokodus.com/js/ads.js?id=c742d5e83c765f55ac37
200 OK 15 B URL HTTP/2 promokodus.com/js/ads.js?id=c742d5e83c765f55ac37
IP
ASN #42745 Safe Value Limited
File type ASCII text, with no line terminators
Hash c742d5e83c765f55ac37cf887c21cfc6
af6a050d602748f85108c666c4078b022b783b9a
d36cd50154599363c5dd2c5a1d0471391313b7e2b65b4df59d2324bde501e6a9
GET /js/ads.js?id=c742d5e83c765f55ac37 HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 15
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-f"
expires: Mon, 15 Jan 2024 01:55:16 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 547d080cdd736cd7d684b20842d062e3
faea805503cee5179d59142ddee002f55f4cda07
3fcf171584c4adcb87238c1cf7cf0b157c359349b207297a2cdcbcd0bb700b1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3705
Cache-Control: max-age=140120
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Etag: "63c2d1bb-117"
Expires: Mon, 16 Jan 2023 17:02:43 GMT
Last-Modified: Sat, 14 Jan 2023 16:00:59 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
af.click.ru/af.js?id=10411
200 OK 1.4 kB URL HTTP/1.1 af.click.ru/af.js?id=10411
IP
ASN #20655 e-Style ISP LLC
Hash 0bde60dd715dfde94dd691e60949fb48
791b6f774ace84a286929a2a2cdd00993a260434
7671fb6e4adad197533064c1549d7f4394929f6b8b86e6efed24a0dd4d6ed0be
GET /af.js?id=10411 HTTP/1.1
Host: af.click.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 15 Jan 2023 02:07:23 GMT
Content-Type: application/javascript
Content-Length: 1436
Last-Modified: Fri, 18 Nov 2022 09:50:15 GMT
Connection: keep-alive
ETag: "63775557-59c"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e804586be26c88b95d554afe0ef24d5c
6f99b1fe2330c4661608f17819a4490a92ca296c
38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-MMNPWCC
200 OK 54 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MMNPWCC
IP
File type Unicode text, UTF-8 text, with very long lines (19117)
Hash 086854cf15653cad7f2de122e46d0f2a
8689e96bfb9fe8953d3ddda758666947b69cd7df
ca809adaebc88c9b4fa106975dc90be6cb9436a2d988fd6f4dd1b3cd3700cd2f
GET /gtm.js?id=GTM-MMNPWCC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 15 Jan 2023 02:07:23 GMT
expires: Sun, 15 Jan 2023 02:07:23 GMT
cache-control: private, max-age=900
last-modified: Sun, 15 Jan 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 54377
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Montserrat:wght@400;500;700&display=swap
200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css2?family=Montserrat:wght@400;500;700&display=swap
IP
Hash b83113b2c5ba8f91f03fb810b6608ce4
d2a3ab3a5b5e463fb4ee23cf73269fd11f64cc6c
f1f5f73aa7c949959272ebb3942866c8c8b55593071c7966e67430ad06e1f74e
GET /css2?family=Montserrat:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 02:07:23 GMT
date: Sun, 15 Jan 2023 02:07:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 07:08:09 GMT
expires: Sat, 13 Jan 2024 07:08:09 GMT
cache-control: public, max-age=31536000
age: 154754
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
promokodus.com/css/all.css?id=ccf3a44d1ec9af38379a
200 OK 57 kB URL HTTP/2 promokodus.com/css/all.css?id=ccf3a44d1ec9af38379a
IP
ASN #42745 Safe Value Limited
Hash 44d481cc2a072138869ff153dde2987c
65512a259d84d9da19f59e65d35a28a689410416
ed5bd363f781043565160f47ebc5bc1ebb7fc3cd06c5c80c17387d9d43b185ab
GET /css/all.css?id=ccf3a44d1ec9af38379a HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: text/css
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-31d30"
expires: Mon, 15 Jan 2024 01:46:11 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e804586be26c88b95d554afe0ef24d5c
6f99b1fe2330c4661608f17819a4490a92ca296c
38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
promokodus.com/img/logo-new-year.png
200 OK 12 kB URL HTTP/2 promokodus.com/img/logo-new-year.png
IP
ASN #42745 Safe Value Limited
File type PNG image data, 300 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 916b594054cbe5a69bfa573fa5ec8986
3dcfbc912c82af823b86f91bc6fa742122f102de
5e117db8bf39810d1918e6f8a63415e6fb3144086c50141d5902eedf2a2e5630
GET /img/logo-new-year.png HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/png
content-length: 12488
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-30c8"
expires: Mon, 15 Jan 2024 01:50:10 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 21276, version 1.0\012- data
Hash 59c9b83cc112cf7eeb3bf7a5e96b21fe
771790b776b5e1bc3039c337024e400974184208
a8447cdec51e85d9e93971a0d4a53bcf6085d70bf1d201662837d2fb953422c7
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21276
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 13:33:14 GMT
expires: Sat, 13 Jan 2024 13:33:14 GMT
cache-control: public, max-age=31536000
age: 131649
last-modified: Mon, 11 Jul 2022 19:01:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Jvd94T1kCMcpMnQPLRN5VQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4wJ/45fCB/fnt7IsWea4pfdatdw=
promokodus.com/img/sub-betweenl-img-new-new.png
200 OK 33 kB URL HTTP/2 promokodus.com/img/sub-betweenl-img-new-new.png
IP
ASN #42745 Safe Value Limited
File type PNG image data, 270 x 186, 8-bit/color RGBA, non-interlaced\012- data
Hash 50a27d05566895d5d280e41e5d04f4c8
c195b63b180e78695bfff0222f7de316cbcbcad8
54378707a92a46e8c6fb0a23b0a5dab6485f3a16d14bd27acb5349f3381c7bd5
GET /img/sub-betweenl-img-new-new.png HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/png
content-length: 32581
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-7f45"
expires: Mon, 15 Jan 2024 01:55:16 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/img/foot-smartleads.png
200 OK 12 kB URL HTTP/2 promokodus.com/img/foot-smartleads.png
IP
ASN #42745 Safe Value Limited
File type PNG image data, 540 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash a867bceba1fb81372381ebb3702011a7
a8ddc63d3c21156b8c1d537e37894c5c3c274cb0
9fdfd0bfb920a70b3a77f5b3184f39800017a27bbc5759f34e17caf366cd795a
GET /img/foot-smartleads.png HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/png
content-length: 11797
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-2e15"
expires: Mon, 15 Jan 2024 02:05:04 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/img/corner.png
200 OK 1.4 kB URL HTTP/2 promokodus.com/img/corner.png
IP
ASN #42745 Safe Value Limited
File type PNG image data, 17 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 1694460cc33ab42c95596662cae20141
912b0b39954381fcb29aa501f1779375275955bf
fc129cc23a2af0c1586b4462337e55d5378badf44183e9ae8519c9cfbed4e2bb
GET /img/corner.png HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/css/all.css?id=ccf3a44d1ec9af38379a
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/png
content-length: 1401
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-579"
expires: Mon, 15 Jan 2024 01:41:42 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/img/sub-betweenl-bg-new-new.jpg
200 OK 5.3 kB URL HTTP/2 promokodus.com/img/sub-betweenl-bg-new-new.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 866x111, components 3\012- data
Hash 1e4b7c8e3830161291345d754c8200ed
f5ed73661c3b2812dd83071346d7f8584b5c8455
f0a7d5c6a844616b94fb9eb6109c679eb21065ed84b45a078c9e1f11ab5b37b9
GET /img/sub-betweenl-bg-new-new.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/css/all.css?id=ccf3a44d1ec9af38379a
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/jpeg
content-length: 5338
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-14da"
expires: Mon, 15 Jan 2024 01:55:17 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 86 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash dad70fee0d733022f201eb1d0e019097
a89684dc7f9c41239a7438380743b3ea64970444
75929b7b5ec0184b4e41d8838bd67924012010d32562a1791f3b481d4aa4c825
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.256.0
x-jsd-version-type: version
etag: W/"34df3-XhWKv4kzpcRUd663DZfMTIIt72I"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 15 Jan 2023 02:07:23 GMT
age: 27716
x-served-by: cache-fra-eddf8230060-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 85672
X-Firefox-Spdy: h2
promokodus.com/fonts/icomoon.ttf?fwy2gd
200 OK 65 kB URL HTTP/2 promokodus.com/fonts/icomoon.ttf?fwy2gd
IP
ASN #42745 Safe Value Limited
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 7ce239b4f2a428600e8c7da11ad65b28
00dace70136525fc266d3ea0fbb9d57380f60c70
3707595f498f0ad64c30f74aab4522037ceab9118628b49a9bd17e5997c920f0
GET /fonts/icomoon.ttf?fwy2gd HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/css/all.css?id=ccf3a44d1ec9af38379a
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: application/octet-stream
content-length: 64860
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-fd5c"
expires: Mon, 15 Jan 2024 01:48:42 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP
Hash fff52c966e10298e12dff8e0832cc115
f315f1994e3104ef48f56061737c0abaef2f918b
51bff51c9c708b103338b7d7860f31bc5d6499491b360a053be899d281406689
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1462
Content-Type: application/ocsp-response
Etag: "129F9F4A9B95844703C5FFFBFDABB3858ABAA3A2"
Expires: Sun, 15 Jan 2023 13:00:00 UTC
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
Accept-Ranges: bytes
Date: Sun, 15 Jan 2023 02:07:23 GMT
Via: 1.1 varnish
Age: 799
X-Served-By: cache-bma1639-BMA
X-Cache: HIT
X-Cache-Hits: 1
X-Timer: S1673748444.915128,VS0,VE1
promokodus.com/img/favicon/favicon-16x16.png
200 OK 934 B URL HTTP/2 promokodus.com/img/favicon/favicon-16x16.png
IP
ASN #42745 Safe Value Limited
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash f4cb6f5bf66ab299033427a93619a1a2
f2a7226c26f628094f5ce83e1c5fa9b8c70ae72f
51b06005d8fe9e8aef6b9acdc5977aeb7cc508bb610129274f824226fc38df02
GET /img/favicon/favicon-16x16.png HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/png
content-length: 934
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-3a6"
expires: Mon, 15 Jan 2024 01:47:09 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/img/favicon/apple-touch-icon.png
200 OK 5.7 kB URL HTTP/2 promokodus.com/img/favicon/apple-touch-icon.png
IP
ASN #42745 Safe Value Limited
File type PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 5e888759861c698c9994d6b67dc604d8
2bddfeb16833e4ac7d1ab975478185ae0aa5e5d4
4d80a92802db8f7dbcf25da30c258e63d2be1e076ff8a20a07bea496cf3b20e8
GET /img/favicon/apple-touch-icon.png HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/png
content-length: 5679
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-162f"
expires: Mon, 15 Jan 2024 02:07:23 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash e414ac3131fec532b5bc225bcc8f5a33
b47583f16efa69ab63dceba3d9e348754570095d
b2bbf2d37ef038efb09d7064325b5fe4dda1e67c13a0c73649c191c2e77ab25f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 940
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 19 Jan 2023 01:24:25 GMT
ETag: "71dfcae812ea451587e369c6370bfe0f68053939"
Last-Modified: Sun, 15 Jan 2023 01:24:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 15 Jan 2023 02:07:24 GMT
Age: 2577
X-Served-By: cache-qpg1244-QPG, cache-bma1639-BMA
X-Cache: MISS, HIT
X-Cache-Hits: 0, 70
X-Timer: S1673748444.207808,VS0,VE0
promokodus.com/img/ajax-loader.gif
200 OK 1.4 kB URL HTTP/2 promokodus.com/img/ajax-loader.gif
IP
ASN #42745 Safe Value Limited
Hash b89a326131cd8b2afdc5250a2c8f2ee5
469a45c20a2f50767254631ef05750f5bc978a85
664c737143fef67d712f08534f38bd38d10962625fb14725b419e638a4a715a6
GET /img/ajax-loader.gif HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/gif
content-length: 723
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-2d3"
expires: Mon, 15 Jan 2024 02:06:37 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/img/stars_20_new.png
200 OK 2.0 kB URL HTTP/2 promokodus.com/img/stars_20_new.png
IP
ASN #42745 Safe Value Limited
Hash 2e716b9079ab76351111a832afe0fa22
cb8248cbca4343a1402082628fefa777c8771ebd
25ebb82902eb7c65864917ddd5f5358fc9298f17d69285c6a8ba58ea0770a690
GET /img/stars_20_new.png HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/png
content-length: 1413
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: "63bc2063-585"
expires: Mon, 15 Jan 2024 01:53:33 GMT
cache-control: max-age=31536000, public
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/10192.jpg
200 OK 6.3 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/10192.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 143x59, components 3\012- data
Hash b5c5b38da6ff13137baa158ceddbd918
2bfa02fc7e54a44769d4b1bb08c3ee660c40b181
cfda8913d84dc570941155e48cc9f485c223993ac82c6b5ce33a3e6d1cdfcf50
GET /pkd/uploads/campaigns/10192.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 6349
last-modified: Mon, 16 Aug 2021 09:09:17 GMT
etag: "611a2b3d-18cd"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zLnCPb%2FmpYsucrI4D1RaWefohmmnJVmI9gNkkelLICgNtfNiZt6PYS41Hqt62goNpLE6nESaCT0ZauhdYycU4KCcYq4Pl5JRdaXjZlMjfUqwA7hwqX6UpKLNo2I75vbLhsPJI1NZf6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789b0a8ecd90abfc-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/2364.jpg
200 OK 4.7 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/2364.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 143x59, components 3\012- data
Hash 2e006261a3c66d486dae388fc8f1736d
bb61097c1decd397302971af28484bb893fd101b
f00f98b65b933b4cfa7192605307b81c57212e47671059e794dac66bce791046
GET /pkd/uploads/campaigns/2364.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 4713
last-modified: Mon, 29 Oct 2018 07:54:16 GMT
etag: "5bd6bca8-1269"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S6GzA5w9s2EJxsEgwGkzMS0ZlTv%2BBwaYpe0H2vmCCv4Ed6mPJ6VTTmUDk9Dp0QZytIwbm%2FSFDzdp%2F2cZA8F9EgfQ79x7GKgPcqcSbR1qSDs1V8NfQvitP0dlOM8Aoo2EdBgXMUpcBCg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789b0a8f48bfac0b-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/2181.jpg
200 OK 5.7 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/2181.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 143x59, components 3\012- data
Hash 4443c66f052eeba8a823389bbcea35e7
09680128df62a513a20f725c5cccc003c79175f4
8e7ebc50e72031ca27cda5dd454d4ade40b6fea7661071e45f5bf916f3f83cbe
GET /pkd/uploads/campaigns/2181.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 5658
last-modified: Fri, 05 Jun 2020 10:58:53 GMT
etag: "5eda256d-161a"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Im2huPBVmmdstRcubjvnKT1JjK7BkGZ9r6SLYp04gTohPL4hAwMDVwWURcrLHWMNShC3IjrJg%2FpIFF5QNGd9io9%2Bwp0VaGGBuMh8Z5sf79wKwQYaXspG7HPwQ%2F2n088UjbbfrdN07jQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789afb170aa2ac0a-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/3293.jpg
200 OK 5.0 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/3293.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 143x59, components 3\012- data
Hash 01661af182e8615dcdd2d326fb150909
adc9ae7219c19cfe6fb21a5473f9625040a88b2b
747e07a8e326385c6a3d03d8bf3bea69b179e4690780a0907e79242569e2bfcc
GET /pkd/uploads/campaigns/3293.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 5047
last-modified: Mon, 29 Oct 2018 07:54:16 GMT
etag: "5bd6bca8-13b7"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9NjD%2FWbNlMIAlgm3kTV7ZsYAwUstVWSFkeoiD0Oa4ZnWgV07Aw1gRLhZwObVyWYij1ktO8LyR%2FRhGyPzOuS7QD2xTxEmcnAWgjAwfKrX8dbnA7F7kHWalkOzwgrijA3W%2FBR%2FQg5DeQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789b0a8f4d02abf6-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23420071/1?wmode=7&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&charset=utf-8&site-info=%7B%22%D0%91%D0%B0%D0%B7%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%BA%D0%B0%D1%82%D0%B5%D0%B3%D0%BE%D1%80%D0%B8%D0%B8%22%3A%7B%22%D0%9A%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B5%20%D0%B8%D0%B3%D1%80%D1%8B%22%3A%7B%22%D0%98%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%B2%D0%B0%D0%BB%D1%8E%D1%82%D0%B0%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BC%D0%B5%D1%82%D1%8B%22%3A%22CSGO%D0%A1hicken%22%7D%7D%2C%22%D0%9E%D1%84%D1%84%D0%B5%D1%80%D1%8B%22%3A%22CSGO%D0%A1hicken%22%2C%22%D0%9C%D0%B5%D1%82%D0%BA%D0%B8%22%3A%7B%22unsorted%22%3A%22direct%22%7D%2C%22%D0%9C%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F%22%3A%7B%22%D0%A1%20%D0%BC%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B5%D0%B9%22%3A%22CSGO%D0%A1hicken%22%7D%7D&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1264%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A467888713876%3Ahid%3A446471213%3Az%3A0%3Ai%3A20230115020724%3Aet%3A1673748444%3Ac%3A1%3Arn%3A505141235%3Arqn%3A1%3Au%3A1673748444956895697%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C110%2C382%2C0%2C365%2C0%2C%2C511%2C2%2C%2C%2C%2C1463%3Aco%3A0%3Ans%3A1673748442672%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673748444%3At%3A%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20%28%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD%29%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 981 B URL HTTP/2 mc.yandex.ru/watch/23420071/1?wmode=7&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&charset=utf-8&site-info=%7B%22%D0%91%D0%B0%D0%B7%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%BA%D0%B0%D1%82%D0%B5%D0%B3%D0%BE%D1%80%D0%B8%D0%B8%22%3A%7B%22%D0%9A%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B5%20%D0%B8%D0%B3%D1%80%D1%8B%22%3A%7B%22%D0%98%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%B2%D0%B0%D0%BB%D1%8E%D1%82%D0%B0%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BC%D0%B5%D1%82%D1%8B%22%3A%22CSGO%D0%A1hicken%22%7D%7D%2C%22%D0%9E%D1%84%D1%84%D0%B5%D1%80%D1%8B%22%3A%22CSGO%D0%A1hicken%22%2C%22%D0%9C%D0%B5%D1%82%D0%BA%D0%B8%22%3A%7B%22unsorted%22%3A%22direct%22%7D%2C%22%D0%9C%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F%22%3A%7B%22%D0%A1%20%D0%BC%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B5%D0%B9%22%3A%22CSGO%D0%A1hicken%22%7D%7D&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1264%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A467888713876%3Ahid%3A446471213%3Az%3A0%3Ai%3A20230115020724%3Aet%3A1673748444%3Ac%3A1%3Arn%3A505141235%3Arqn%3A1%3Au%3A1673748444956895697%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C110%2C382%2C0%2C365%2C0%2C%2C511%2C2%2C%2C%2C%2C1463%3Aco%3A0%3Ans%3A1673748442672%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673748444%3At%3A%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20%28%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD%29%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
Hash 600df7c7c9a24c1bc7716caa2e9c9b7f
6fecc50d5e6613eb20349a071574ffbc49084620
a93fd249cab69a233a466fed2538d6eb89c0efcbce626d7e8b1e3d53b510e418
GET /watch/23420071/1?wmode=7&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&charset=utf-8&site-info=%7B%22%D0%91%D0%B0%D0%B7%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%BA%D0%B0%D1%82%D0%B5%D0%B3%D0%BE%D1%80%D0%B8%D0%B8%22%3A%7B%22%D0%9A%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B5%20%D0%B8%D0%B3%D1%80%D1%8B%22%3A%7B%22%D0%98%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%B2%D0%B0%D0%BB%D1%8E%D1%82%D0%B0%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BC%D0%B5%D1%82%D1%8B%22%3A%22CSGO%D0%A1hicken%22%7D%7D%2C%22%D0%9E%D1%84%D1%84%D0%B5%D1%80%D1%8B%22%3A%22CSGO%D0%A1hicken%22%2C%22%D0%9C%D0%B5%D1%82%D0%BA%D0%B8%22%3A%7B%22unsorted%22%3A%22direct%22%7D%2C%22%D0%9C%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F%22%3A%7B%22%D0%A1%20%D0%BC%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B5%D0%B9%22%3A%22CSGO%D0%A1hicken%22%7D%7D&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1264%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A467888713876%3Ahid%3A446471213%3Az%3A0%3Ai%3A20230115020724%3Aet%3A1673748444%3Ac%3A1%3Arn%3A505141235%3Arqn%3A1%3Au%3A1673748444956895697%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C110%2C382%2C0%2C365%2C0%2C%2C511%2C2%2C%2C%2C%2C1463%3Aco%3A0%3Ans%3A1673748442672%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673748444%3At%3A%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20%28%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD%29%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promokodus.com
Referer: https://promokodus.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 435
date: Sun, 15 Jan 2023 02:07:24 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promokodus.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 15-Jan-2023 02:07:24 GMT
last-modified: Sun, 15-Jan-2023 02:07:24 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/3297.jpg
200 OK 8.5 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/3297.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 143x59, components 3\012- data
Hash f7d605ad5bab1d65abe00d6d37cae8b7
aa96368c49ecc1eed8a7e471c88fa561e4c9f0c5
8683810ef521065b2554ca9a34a481fd995961cdfd1c3ecfb961174764d8f9df
GET /pkd/uploads/campaigns/3297.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 8452
last-modified: Wed, 07 Aug 2019 08:11:21 GMT
etag: "5d4a87a9-2104"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KOExjSLztKJmBziS1h2jb0YOuM0jYFDj%2B9mbvG8NsdrfNQKCngqWaDsJWSX2g3I13HY%2B5yeRhQQKKaxHAZZgWj1uRY3nBLqN57n1t4VrvJF9BYKBlgPS6fBWUlJwP2eemBA7kViupWI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789b0a8f4df0abfc-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/4138.jpg
200 OK 5.7 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/4138.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 143x59, components 3\012- data
Hash cd0a8ffa7743cd55ac1e257500795cf3
cf6ef57266694f213a7a677839d31bea120b1dd8
c6fca515f6c915b3c303973615ea4a3446ff14a628cbd7f71be734210c91fb56
GET /pkd/uploads/campaigns/4138.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 5697
last-modified: Tue, 22 Oct 2019 09:31:34 GMT
etag: "5daecc76-1641"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DutazvqX2TBHLP%2F4wlU0URSQTO1pBaCr7i93ThQ9wBpvIdmgxcqXPyLjDyR6NR6rwcy9FP1sgg6PF1mRaIml4CPT7EnTeLNVJxLvavX1o5zhQl8DNnoEJfqBKZQJDVYZxJrDRcogjCI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789b0a8f4d25ac05-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/2684.jpg
200 OK 5.0 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/2684.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 143x59, components 3\012- data
Hash ec9b5c77e6f3ef8b286856197610ce16
1074013c9c15cbe49c6ef8f74b4994b5fc617d59
87ec6c3d67f30e5cf834816800ba08dc37fdc1b0f2b88acba56a1e49ab03211c
GET /pkd/uploads/campaigns/2684.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 4969
last-modified: Mon, 29 Oct 2018 07:54:16 GMT
etag: "5bd6bca8-1369"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bx67LaQHWbUDq5n2bQ72ML%2BQuqux1%2BqvpeeNLU4iIb808qsPf%2BBrok2ZXGdBQKkDRAnh76Kma3OQPMe2stqq7YBZiZhgIPV2mizF%2BouAKS4DYVXXbLVhhU0v24dZfDTEFWWPmO%2FnTzE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789b0a8f49d8abff-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
promokodus.com/pkd/uploads/campaigns/3452.jpg
200 OK 6.5 kB URL HTTP/2 promokodus.com/pkd/uploads/campaigns/3452.jpg
IP
ASN #42745 Safe Value Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", progressive, precision 8, 143x59, components 3\012- data
Hash 2701a7470825a440f08382e4eedde963
5ca5c6a0383c3711080f34c46e8315d90c65caeb
16ec574129734e2c834b7eebe16ee13d09f02ac1758d008e11e7f993468d7c54
GET /pkd/uploads/campaigns/3452.jpg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; _ym_uid=1673748444956895697; _ym_d=1673748444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/jpeg
content-length: 6532
last-modified: Tue, 14 May 2019 11:54:27 GMT
etag: "5cdaac73-1984"
cache-control: max-age=2678400, s-maxage=10
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ISPTqyWuwTvHsIG8QHmSyFt0qXAZS4aZQ%2B1g3XZya1HkiJTfD32Pi33vH2%2F9%2BcHxnLa6LDdu6FYdK5Da0Wr7L5nXZuf4Uwtae2Xe3xF%2FiTcZOB0whke1ePhgmJbBXgupePYbUg7FpHg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 789b0a8f4ffdabf3-KLD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 15 Jan 2023 02:07:24 GMT
access-control-allow-origin: *
etag: "63bfb9f8-2b"
expires: Sun, 15 Jan 2023 03:07:24 GMT
accept-ranges: bytes
last-modified: Thu, 12 Jan 2023 10:42:48 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 15 Jan 2023 00:41:07 GMT
expires: Sun, 15 Jan 2023 02:41:07 GMT
cache-control: public, max-age=7200
age: 5177
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 512a411e82e4e21871d1fd259b40a9ad
e516791a5247c69c784062033f5b7530e186c7fc
c3d2c64cb0af503c82b9c24132f2cf68e7de60e5cdbee2bc723fabcfa9fee8fb
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1459
Server: nginx
Content-Type: application/ocsp-response
Expires: Wed, 18 Jan 2023 23:26:38 GMT
ETag: "e516791a5247c69c784062033f5b7530e186c7fc"
Last-Modified: Sat, 14 Jan 2023 23:26:39 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 15 Jan 2023 02:07:24 GMT
Age: 3247
X-Served-By: cache-qpg1229-QPG, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 45
X-Timer: S1673748444.480515,VS0,VE0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f8ae4ab9ee17e2598e9299bdc0f44c0
ab4c7d1750edf513359218ab6d0b81cdd4dcb90c
75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&gjid=354720514&_gid=1384679414.1673748445&_u=YEBAAEAAAAAAACAAI~&z=578562870
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&gjid=354720514&_gid=1384679414.1673748445&_u=YEBAAEAAAAAAACAAI~&z=578562870
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&gjid=354720514&_gid=1384679414.1673748445&_u=YEBAAEAAAAAAACAAI~&z=578562870 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://promokodus.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 15 Jan 2023 02:07:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vk.com/js/api/openapi.js
200 OK 23 kB IP
File type ASCII text, with very long lines (3849)
Hash 6b56e2aa629cc5f334bba9e200af3bfe
1e99707868f45c499400d95e75348c3d7b7686f5
7cb4aa1277e9f29f5c6d21c642b7c08cfce199332e30395c20995847a0db3fab
GET /js/api/openapi.js HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 23318
last-modified: Fri, 02 Dec 2022 07:14:40 GMT
etag: "6389a5e0-5b16"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e6c8f8a0e3ef850c66d344a842dfa3c3
c8475fa1d4d3d8ca3394272ade4c97c6bab3a286
58226f2841670d93086aa4dc60373f7770bfbcc11760cacd7691299b6c403efa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2f8ae4ab9ee17e2598e9299bdc0f44c0
ab4c7d1750edf513359218ab6d0b81cdd4dcb90c
75e680ab62ee77f0811fdb770d1c913dd41a911e7efb4ca99bc4cfe7fcb432c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4dc72ba06ace9ad5795c9de974b66afa
d56fbd77e052b69ce1eaf5e43d24596d162c45fa
f8986ca3bd2b5c850b42dc287b7ea42b02eb8dee4943344ade7a03946d6f7325
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&_u=YEBAAEAAAAAAACAAI~&z=234065895
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&_u=YEBAAEAAAAAAACAAI~&z=234065895
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&_u=YEBAAEAAAAAAACAAI~&z=234065895 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 15 Jan 2023 02:07:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vk.com/images/upload.gif
200 OK 230 B IP
File type GIF image data, version 89a, 32 x 8\012- data
Hash 59cd625f8c2ce03663123d59416378a1
b8d103133aadcdbe532e5642ddce9159b7385e4e
0d7e358637c1b1caa66949aefc529c1e4488923f99e499d6be09eb8cdd0b4202
GET /images/upload.gif HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: image/gif
content-length: 230
last-modified: Tue, 22 Sep 2020 20:30:00 GMT
etag: "5f6a5ec8-e6"
expires: Sun, 22 Jan 2023 02:07:24 GMT
cache-control: max-age=604800
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&_u=YEBAAEAAAAAAACAAI~&z=234065895
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&_u=YEBAAEAAAAAAACAAI~&z=234065895
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-89000308-1&cid=937705418.1673748445&jid=1708562183&_u=YEBAAEAAAAAAACAAI~&z=234065895 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 15 Jan 2023 02:07:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vk.com/widget_community.php?app=0&width=252px&_ver=1&gid=64123774&mode=1&color1=FFFFFF&color2=2B587A&color3=5B7FA6&class_name=&no_cover=1&height=300&url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&referrer=&title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&185b32e76fd
200 OK 12 kB URL HTTP/2 vk.com/widget_community.php?app=0&width=252px&_ver=1&gid=64123774&mode=1&color1=FFFFFF&color2=2B587A&color3=5B7FA6&class_name=&no_cover=1&height=300&url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&referrer=&title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&185b32e76fd
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (19428)
Hash 72245dd660e56ea464515752bc1520e7
3774fd79448e325494bedbc6fdcc6ba9b950f451
b9e37fc53d4b68c40ada15afab17d16232894e7223ecd3ec5836b7a503ac99e6
GET /widget_community.php?app=0&width=252px&_ver=1&gid=64123774&mode=1&color1=FFFFFF&color2=2B587A&color3=5B7FA6&class_name=&no_cover=1&height=300&url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&referrer=&title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&185b32e76fd HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/html; charset=windows-1251
content-length: 12427
x-powered-by: KPHP/7.4.113066
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Mon, 08 Jan 2024 02:34:09 GMT; path=/; domain=.vk.com
remixstlid=9073717646488325665_wW1LpVtvwWFnkgE430XpgEJZ47pe43noGXvDzDA0a4X; expires=Mon, 15 Jan 2024 02:07:24 GMT; path=/; domain=.vk.com; secure
remixstid=76121144_Sx2WL1lhw8zYkpzZGGMT4NWSAMUbPzZyl8hy41edIuc; expires=Mon, 08 Jan 2024 02:37:25 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-security-policy: default-src * data: blob: about: vkcalls:;script-src 'self' https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://*.mail.ru https://r.mradx.net https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://www.instagram.com https://connect.facebook.net https://telegram.org https://*.yandex.ru https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.vkpartner.ru https://*.moatads.com https://*.adlooxtracking.ru https://*.serving-sys.ru https://*.weborama-tech.ru https://*.gstatic.com https://*.google.ru https://securepubads.g.doubleclick.net https://cdn.ampproject.org https://www.googletagmanager.com https://googletagmanager.com https://*.vk-cdn.net https://*.hit.gemius.pl https://yastatic.net https://analytics.tiktok.com 'unsafe-inline' 'unsafe-eval' blob:;style-src https://vk.com https://*.vk.com https://vk.ru https://*.vk.ru https://static.vk.me https://r.mradx.net https://ton.twimg.com https://tagmanager.google.com https://platform.twitter.com https://*.googleapis.com 'self' 'unsafe-inline'
x-xss-protection: 1; report=/xss_reports
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5ac0e204e812ce8905ac046581ff4e95
c0322d4ecff9356cca1a8e55d62e8d2f9540eca7
de65a926e0a1ce8b9724754564cef8e4bbe7709cef911e5dbd30db03211e6673
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e6c8f8a0e3ef850c66d344a842dfa3c3
c8475fa1d4d3d8ca3394272ade4c97c6bab3a286
58226f2841670d93086aa4dc60373f7770bfbcc11760cacd7691299b6c403efa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 02:07:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vk.com/js/al/lite.js?107
200 OK 62 kB IP
File type ISO-8859 text, with very long lines (2839)
Hash ca890a09afff42cfde34eab6ea9d9147
35039b0193e7aef4328f3b29c02cbd293ea0b6af
7c67a1a576c53e0efa82b91074c8d585c9c40a40b167f3e22d7e3f2e1e40aeac
GET /js/al/lite.js?107 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=252px&_ver=1&gid=64123774&mode=1&color1=FFFFFF&color2=2B587A&color3=5B7FA6&class_name=&no_cover=1&height=300&url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&referrer=&title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&185b32e76fd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 61882
last-modified: Fri, 23 Dec 2022 21:43:15 GMT
etag: "63a620f3-f1ba"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
vk.com/js/lang3_0.js?27895807
200 OK 23 kB URL HTTP/2 vk.com/js/lang3_0.js?27895807
IP
File type ISO-8859 text, with very long lines (55073), with LF, NEL line terminators
Hash 7d949d5b67d10c4aaf1f552dc8b3701a
5dc5cca60f52b44fdeda1d877ce7ccc268c2ebf8
8b2c013c618a9c659e0d17448fdb528fcfd7d4cd9eeceb028fe287ccdd7dcc87
GET /js/lang3_0.js?27895807 HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=252px&_ver=1&gid=64123774&mode=1&color1=FFFFFF&color2=2B587A&color3=5B7FA6&class_name=&no_cover=1&height=300&url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&referrer=&title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&185b32e76fd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/javascript; charset=windows-1251
content-length: 23087
x-powered-by: KPHP/7.4.113066
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Sat, 13 Jan 2024 02:03:46 GMT; path=/; domain=.vk.com
remixstlid=9111013080902633022_YwjCANxs7DM2mj9QahjTAJpFSRZImzvYalOXX9RAFVg; expires=Mon, 15 Jan 2024 02:07:24 GMT; path=/; domain=.vk.com; secure
cache-control: max-age=345600
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
vk.com/js/loader_nav208015241563_3.js
200 OK 53 kB URL HTTP/2 vk.com/js/loader_nav208015241563_3.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash cf97690f1e8a079f9b1dad2095b8156d
2553e40a0c72771b022c59da251313da805a765c
8805a050a4ff3ef9a972eb9b74645d77cf3a07d3c362fdba9790d62dd16dc743
GET /js/loader_nav208015241563_3.js HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=252px&_ver=1&gid=64123774&mode=1&color1=FFFFFF&color2=2B587A&color3=5B7FA6&class_name=&no_cover=1&height=300&url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&referrer=&title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&185b32e76fd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/javascript; charset=windows-1251
content-length: 53230
x-powered-by: KPHP/7.4.113066
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Sun, 14 Jan 2024 01:52:37 GMT; path=/; domain=.vk.com
remixstlid=9105805793833473147_dB6PXtCYkrUcBSzu1ATeIKx9kUps1JYjByZTjPUbuA8; expires=Mon, 15 Jan 2024 02:07:24 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/lite.ec3d5a603da0fd384ead.css
200 OK 36 kB URL HTTP/2 st.vk.com/css/al/lite.ec3d5a603da0fd384ead.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash f7251804dd69d34caf73798651094a51
6b47aad4b1e2149d6abf5f4fd37402903e071af2
84c1582efdd32a20f965b0c406e1e97c6416e100865572ef448e9534cdf40db0
GET /css/al/lite.ec3d5a603da0fd384ead.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/css
content-length: 36123
last-modified: Fri, 23 Dec 2022 20:21:28 GMT
etag: "63a60dc8-8d1b"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/js/api/xdm.js?9
200 OK 2.8 kB URL HTTP/2 st.vk.com/js/api/xdm.js?9
IP
Hash 3621f21a6215d1660754d2a2d1947af5
6480e04e1e4a82bf63c1322fe17dbff2037f3e06
3ffe8143f00123797a9a41d9444fce19a8935e6f34378293cb22b8b0705df6ea
GET /js/api/xdm.js?9 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 2846
last-modified: Tue, 22 Sep 2020 20:30:00 GMT
etag: "5f6a5ec8-b1e"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/ui_common.8281c3bfeaa968f4103e.css
200 OK 15 kB URL HTTP/2 st.vk.com/css/al/ui_common.8281c3bfeaa968f4103e.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 44a4e102eaa263773b94074026bcd0b6
bd30c6571989cd7121a88b1a57b3c576ed669514
42703392d13f494613302a82ebd61e2f31b0311f7edc80eb8e293e23f574d266
GET /css/al/ui_common.8281c3bfeaa968f4103e.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/css
content-length: 15155
last-modified: Thu, 22 Dec 2022 12:55:20 GMT
etag: "63a453b8-3b33"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/polyfills.b6ae7f912e96b1b9b2e6.js?16736cbf2fefa76c691b
200 OK 26 kB URL HTTP/2 st.vk.com/dist/polyfills.b6ae7f912e96b1b9b2e6.js?16736cbf2fefa76c691b
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65444)
Hash 85cd4910ea397ac3854d46c9e29b58ab
68f497c20aba46eb2280e81774b768f81912096d
83ac1c902a42a9ecb5105e803b792e7aa1f08792c62081c76a445307b80b0583
GET /dist/polyfills.b6ae7f912e96b1b9b2e6.js?16736cbf2fefa76c691b HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 25653
last-modified: Mon, 09 Jan 2023 13:27:22 GMT
etag: "63bc163a-6435"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/react.6d787991b51243317269.js?7b70f1fc7bd62899ef37
200 OK 44 kB URL HTTP/2 st.vk.com/dist/react.6d787991b51243317269.js?7b70f1fc7bd62899ef37
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65449)
Hash 8d6ab054b91c1fdf73e251314677b689
40e5043d15cacc381cbae77ee0f22f94b562097a
fc97c0b1d58d2c32abacbd559120088ac47b59dcc218da80d28ee4814abb9cd7
GET /dist/react.6d787991b51243317269.js?7b70f1fc7bd62899ef37 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 43811
last-modified: Tue, 29 Nov 2022 04:27:50 GMT
etag: "63858a46-ab23"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/palette.ec9a0e2eb705241645ae.js?55e4c76389216d5357aa
200 OK 24 kB URL HTTP/2 st.vk.com/dist/palette.ec9a0e2eb705241645ae.js?55e4c76389216d5357aa
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Hash d8444751a889e34b6067143c4271008f
355b13740ed5a4cf6abea73791c35fd00ec97839
6805de3f50f2cb7ec618db610a1526ecd42a71fdf8247fc38ec7ada6b3430fe0
GET /dist/palette.ec9a0e2eb705241645ae.js?55e4c76389216d5357aa HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 24328
last-modified: Tue, 20 Dec 2022 15:41:38 GMT
etag: "63a1d7b2-5f08"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/vkcom-kit.e125d28428d997e110e7.css
200 OK 2.9 kB URL HTTP/2 st.vk.com/dist/vkcom-kit.e125d28428d997e110e7.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (3560)
Hash 6dcf5ef62f5af6d307f795100da25b3f
99174269810aca9de0bf101a93adfeddb868e058
c10bd62d241c1c00901e90367a817ad902b500ae4c7587fe432e24325391b70b
GET /dist/vkcom-kit.e125d28428d997e110e7.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/css
content-length: 2931
last-modified: Tue, 20 Dec 2022 15:41:38 GMT
etag: "63a1d7b2-b73"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/vkcom-kit.5cb06410d171fa6f81c4.js?
200 OK 8.2 kB URL HTTP/2 st.vk.com/dist/vkcom-kit.5cb06410d171fa6f81c4.js?
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (34758), with no line terminators
Hash c2956b00e9faaa119a4282ec55aefc09
b4c3e53b57598ca25325dff335dccb9f4e74617f
c6805a57c88b30e4427aac3843de586450214acbf6a6d0e231556b31dac656e3
GET /dist/vkcom-kit.5cb06410d171fa6f81c4.js? HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 8165
last-modified: Tue, 20 Dec 2022 15:41:38 GMT
etag: "63a1d7b2-1fe5"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/audioplayer.64c4e89f24aa7692910c.js?3053046a3e673768c3d3046
200 OK 41 kB URL HTTP/2 st.vk.com/dist/audioplayer.64c4e89f24aa7692910c.js?3053046a3e673768c3d3046
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 8976ce87661c45030deadce072e8e405
b2f61e96261e6a5f4ffca531bb81923472557519
cd05d7f9e43d4bcf3c529b2e8ea251d315d934c91c96293b59b777267a67080c
GET /dist/audioplayer.64c4e89f24aa7692910c.js?3053046a3e673768c3d3046 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 40905
last-modified: Fri, 13 Jan 2023 11:29:19 GMT
etag: "63c1408f-9fc9"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/audioplayer.31d5ccb35456096fe8cb.js?043d557ff9e139c8f2f2608bb528b7c8
2.1 kB URL st.vk.com/dist/web/audioplayer.31d5ccb35456096fe8cb.js?043d557ff9e139c8f2f2608bb528b7c8
IP
Hash 6057e04aeb1868483b01a5a3dd9018bf
58a0fb6c5d4a5b040ede28f40ebae41f4a97c66c
6b1c1e31f9a55ea048678b79efb5266799e9618e92bea314e9e94b72650773f9
GET /dist/web/audioplayer.31d5ccb35456096fe8cb.js?043d557ff9e139c8f2f2608bb528b7c8 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
st.vk.com/css/al/widget_community.ff310e3cd9980cd1f6f5.css
200 OK 3.6 kB URL HTTP/2 st.vk.com/css/al/widget_community.ff310e3cd9980cd1f6f5.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (21128)
Hash 368f6e137a7e80f7a57aeaaa6b621f02
5bf2190b5e721e31d40b393864cc19f796aa81d8
b3bf366f14469d17dd040d4d21b70c8a33defda76f434323f3a7514d2f7cbc51
GET /css/al/widget_community.ff310e3cd9980cd1f6f5.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/css
content-length: 3640
last-modified: Mon, 19 Dec 2022 07:53:28 GMT
etag: "63a01878-e38"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/web/likes.989f4d816b0dd3900e49.js?84b1d27a2d84a1447a8b5f63c65b3b99
200 OK 7.2 kB URL HTTP/2 st.vk.com/dist/web/likes.989f4d816b0dd3900e49.js?84b1d27a2d84a1447a8b5f63c65b3b99
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (19021), with no line terminators
Hash 62a8c3fa22df7452927a6816d459881c
b17fd2a0a138299dc7e107baa3444c943baab226
9ffd7a6d93b41de52c9181d0e2a6409c46c2d5e838d4d61630b689333c902652
GET /dist/web/likes.989f4d816b0dd3900e49.js?84b1d27a2d84a1447a8b5f63c65b3b99 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 7173
last-modified: Tue, 20 Dec 2022 11:12:56 GMT
etag: "63a198b8-1c05"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/base.6d4a87580f5267bf2b33.css
200 OK 19 kB URL HTTP/2 st.vk.com/css/al/base.6d4a87580f5267bf2b33.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Hash 6d01d8e9cd3bc238992c8c89723ffd10
fe7fbed3bb95a68b0259c5dd8e342db320c393e6
9eda27c747738c33794ccf90579d085b118cef216a1227c8024a24b1c4fcdb9f
GET /css/al/base.6d4a87580f5267bf2b33.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/css
content-length: 19299
last-modified: Fri, 16 Dec 2022 10:26:05 GMT
etag: "639c47bd-4b63"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/css/al/fonts_cnt.7809321e6a2c5f3e361d.css
200 OK 254 kB URL HTTP/2 st.vk.com/css/al/fonts_cnt.7809321e6a2c5f3e361d.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Size 254 kB (254075 bytes)
Hash 67419045730311e4456af7b82d4b75b3
eaf5bcc40c7a55dfcf104cf7ead2cb7508d4b3bf
5c585b4675e44bbabb0922c0574c6bd142a169901681287c29e8be54f5f5949a
GET /css/al/fonts_cnt.7809321e6a2c5f3e361d.css HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: text/css
content-length: 254075
last-modified: Wed, 14 Dec 2022 10:58:48 GMT
etag: "6399ac68-3e07b"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/api/widgets/community.js?1
200 OK 356 kB URL HTTP/2 st.vk.com/dist/api/widgets/community.js?1
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65441)
Size 356 kB (355560 bytes)
Hash 9162fbec410f64bcef88f0d4b33e7568
c3829e3aa4f7c0ba4ba4670b9b519772969c3864
8996974fbd785ccc5543b520f1c40774c493bbda7ea7d7b23f5d3f298603cb3c
GET /dist/api/widgets/community.js?1 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 355560
last-modified: Fri, 13 Jan 2023 09:23:17 GMT
etag: "63c12305-56ce8"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6148
Expires: Sun, 15 Jan 2023 03:49:53 GMT
Date: Sun, 15 Jan 2023 02:07:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6148
Expires: Sun, 15 Jan 2023 03:49:53 GMT
Date: Sun, 15 Jan 2023 02:07:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 256e39696ba05f2324bbc49b2a396115
e1cf8b15abd0a20eb1218be517c03459514a59e0
d576a66e6b39751bdbc7b662454d37866b75efef1aa51761daba61783d755bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D576A66E6B39751BDBC7B662454D37866B75EFEF1AA51761DABA61783D755BC9"
Last-Modified: Thu, 12 Jan 2023 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6148
Expires: Sun, 15 Jan 2023 03:49:53 GMT
Date: Sun, 15 Jan 2023 02:07:25 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 12:46:14 GMT
age: 48071
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c609c89120eef87bbdd0d8ee5ee18f9
be8e369be0ccc707b904546798aacc9afe413cfa
feaa9f41b45aaa71d87008fe3112bc09e41cf6c2c500b4bc1adc125c7c82eee1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77d2ca2b-548c-4f63-b8a5-e55b6e92d5e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4981
x-amzn-requestid: b38d8240-7f85-4fd6-845b-54ddc6da7521
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ewH9tHxWoAMFTQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c32057-657c5e342a66713b0f5f8f0b;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XFRrdpdDYEyYq9lFI99gf2mrKB2VRbNmAwbMN9c3wJlbBbc9UTTiaQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 21:51:43 GMT
age: 15342
etag: "be8e369be0ccc707b904546798aacc9afe413cfa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 74ac30be02dee9dcfeee79a7dc54edff
1368d81de22ea2e4054a3e1a8f01ef337c63e35b
8abc2f276906dfb9ce75c2526d2c2cfa6aea6dbe13f4046de1040cd611cbbc1f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3456fd70-5207-41e6-abed-adbc381fd7a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9801
x-amzn-requestid: 39d84a20-55f7-4b7c-abc4-9ac1ff100da9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqSkoGCZoAMF1zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0caea-4f7a1cf676335cc83018dc51;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 03:07:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7sYXKj0q744Ymp2GERcHWCIbSMBl0wUnJkV6abo2tv-7EQGwKoKv8g==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 03:30:06 GMT
age: 81439
etag: "1368d81de22ea2e4054a3e1a8f01ef337c63e35b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cf5b0eb-b905-43ce-8a28-48297c75e980.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cf5b0eb-b905-43ce-8a28-48297c75e980.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a1c6332b225de08d58bb9cb44f09917
c0d28fb2b2fd6d55cb4c0831a3a08b95b3f7455c
4716dff7ee5c34d5e4ab214571a03b60026d7a69b25cb838f8b6a1fb01f44f02
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2cf5b0eb-b905-43ce-8a28-48297c75e980.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3777
x-amzn-requestid: aee3b367-d5d1-46da-9aa3-89a6c8d4cab1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ertWFHw8oAMF76A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c15c26-2b00da01705c5717434ac1d3;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 13:27:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lajUfG_N7T3COcN8a94Oa8CRpKnVF4iPRI8ok9sy1hZLFM8EMwScTw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 18:55:01 GMT
age: 25944
etag: "c0d28fb2b2fd6d55cb4c0831a3a08b95b3f7455c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f82c507da28e1b4557ea7f2bdf0f7fc
4be269ad35497a42bf7fce03d711ddf9496abbb4
f51879b87cb99b4883f320fe4abe44032968c42e32b88dc5f788b40ddc6494db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10558
x-amzn-requestid: 46ac11b3-d99b-4dbf-bc92-8ad5d6664669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enjB8Hb1oAMF3xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bfb20c-2e6a19716318b0650102ba96;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 07:09:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: h3fHTYrXaZWIrm-iiwfejtgOg-rVCgqF7brXVmVbwLY9t1KgPHXwCg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 07:17:31 GMT
age: 67794
etag: "4be269ad35497a42bf7fce03d711ddf9496abbb4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90fc5463f271bab652af099cb526f189
805c27d8f82a5eb6583814313c36f5e7699408e5
749dca33aa337b494fb113896bf035bc9dcb17068ecffdf30fc5ac85a4ac5185
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c678ae9-1df5-47c4-bbe3-ec12e97322d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5495
x-amzn-requestid: d76b8f1d-37a2-47ac-9acf-1b0a44a4a5fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eqsroF62IAMF-mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0f4b0-67700bfd11f1ad5d0aaab92d;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 06:05:36 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i1qN9bIaz5ekgkM81KehmDDQpzBULDfPkp-fjEOHiZxFVogDBOIGzg==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 14:12:39 GMT
age: 42886
etag: "805c27d8f82a5eb6583814313c36f5e7699408e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
vk.com/emoji/e/f09f9889.png
200 OK 573 B URL HTTP/2 vk.com/emoji/e/f09f9889.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 37cf59cfb55ebf00200b81c5c15bf906
04b25ea5e3e79b2dd28176fd7c57712587225fd1
f9e92fa85db42df8243730fcad8548e920a5136388eaaa675410379b362db3ef
GET /emoji/e/f09f9889.png HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/widget_community.php?app=0&width=252px&_ver=1&gid=64123774&mode=1&color1=FFFFFF&color2=2B587A&color3=5B7FA6&class_name=&no_cover=1&height=300&url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&referrer=&title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&185b32e76fd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:25 GMT
content-type: image/png
content-length: 573
last-modified: Tue, 21 Apr 2020 20:19:40 GMT
etag: "5e9f555c-23d"
expires: Sun, 22 Jan 2023 02:07:25 GMT
cache-control: max-age=604800
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash f8c6974c08c066c1d0622c38e0c6124d
faf1c4c02d3f7c2cafef82a66ce2c7769868089d
d472d6c792d937f462516b0fcc67b1eebcb8c00e2bd5a9be78e5ee161fe196b5
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1459
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 19 Jan 2023 01:32:50 GMT
ETag: "faf1c4c02d3f7c2cafef82a66ce2c7769868089d"
Last-Modified: Sun, 15 Jan 2023 01:32:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 15 Jan 2023 02:07:25 GMT
Age: 2073
X-Served-By: cache-qpg1271-QPG, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 2, 16
X-Timer: S1673748446.568534,VS0,VE0
sun9-79.userapi.com/s/v1/ig2/54JWpCqG23jLrKQ5pL9IOWlOcZq2ChhZK7d_eK6imstb3k951Tm1-4_ihSnzUvfwa-zC1oImUdRyXANwK0doAtLK.jpg?size=50x50&quality=95&crop=60,0,2444,2444&ava=1
200 OK 2.4 kB URL HTTP/2 sun9-79.userapi.com/s/v1/ig2/54JWpCqG23jLrKQ5pL9IOWlOcZq2ChhZK7d_eK6imstb3k951Tm1-4_ihSnzUvfwa-zC1oImUdRyXANwK0doAtLK.jpg?size=50x50&quality=95&crop=60,0,2444,2444&ava=1
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 059b3c39866d8077a61f3a8fcaf41451
fbc3d496f2eecbbfc86e40675eefa9273e75fc88
ce9549862f321c77f8f9e5eee01ae8592b70ece65cdf0fdf92db933638bac0e8
GET /s/v1/ig2/54JWpCqG23jLrKQ5pL9IOWlOcZq2ChhZK7d_eK6imstb3k951Tm1-4_ihSnzUvfwa-zC1oImUdRyXANwK0doAtLK.jpg?size=50x50&quality=95&crop=60,0,2444,2444&ava=1 HTTP/1.1
Host: sun9-79.userapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:25 GMT
content-type: image/jpeg
content-length: 2420
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
x-imp: 838722
expires: Tue, 14 Feb 2023 02:07:25 GMT
cache-control: max-age=2592000
x-frontend: front806207
access-control-expose-headers: X-Frontend
strict-transport-security: max-age=15768000
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-headers: X-Quic
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 29dfe72096bcfa6af40e5b73f6fcacd3
da55a0f414fa90ab5e1a962800580ed8392f1944
fbc9e640a851afcd147f0dbcdd1e3094888a48459616bf9c3bb8339f00c3570c
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 939
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 19 Jan 2023 00:00:46 GMT
ETag: "da55a0f414fa90ab5e1a962800580ed8392f1944"
Last-Modified: Sun, 15 Jan 2023 00:00:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 15 Jan 2023 02:07:25 GMT
Age: 236
X-Served-By: cache-qpg1272-QPG, cache-bma1639-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 1, 7
X-Timer: S1673748446.679784,VS0,VE0
top-fwz1.mail.ru/counter?js=13;id=2685520;u=https%3A//promokodus.com/ua/campaigns/csgochicken;st=1673748445823;pid=0;title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5;s=1280*1024;vp=252*161;touch=0;hds=1;frame=1;flash=;sid=3789b4045b89fb34;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1673748446199%3A1673748446202%3A0%3A184597f211c749db5ec4f033f01ecb60;visible=true;_=0.5560400997160602
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=2685520;u=https%3A//promokodus.com/ua/campaigns/csgochicken;st=1673748445823;pid=0;title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5;s=1280*1024;vp=252*161;touch=0;hds=1;frame=1;flash=;sid=3789b4045b89fb34;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1673748446199%3A1673748446202%3A0%3A184597f211c749db5ec4f033f01ecb60;visible=true;_=0.5560400997160602
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=2685520;u=https%3A//promokodus.com/ua/campaigns/csgochicken;st=1673748445823;pid=0;title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5;s=1280*1024;vp=252*161;touch=0;hds=1;frame=1;flash=;sid=3789b4045b89fb34;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1673748446199%3A1673748446202%3A0%3A184597f211c749db5ec4f033f01ecb60;visible=true;_=0.5560400997160602 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Sun, 15 Jan 2023 02:07:25 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=2685520;u=https%3A//promokodus.com/ua/campaigns/csgochicken;st=1673748445823;pid=0;title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5;s=1280*1024;vp=252*161;touch=0;hds=1;frame=1;flash=;sid=3789b4045b89fb34;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1673748446199%3A1673748446202%3A0%3A184597f211c749db5ec4f033f01ecb60;visible=true;_=0.5560400997160602
set-cookie: FTID=1RMYgQ0tkIIF:1673748445:2685520:::; path=/; expires=Tue, 16-Jan-24 02:07:25 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=2685520;u=https%3A//promokodus.com/ua/campaigns/csgochicken;st=1673748445823;pid=0;title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5;s=1280*1024;vp=252*161;touch=0;hds=1;frame=1;flash=;sid=3789b4045b89fb34;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1673748446199%3A1673748446202%3A0%3A184597f211c749db5ec4f033f01ecb60;visible=true;_=0.5560400997160602
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=2685520;u=https%3A//promokodus.com/ua/campaigns/csgochicken;st=1673748445823;pid=0;title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5;s=1280*1024;vp=252*161;touch=0;hds=1;frame=1;flash=;sid=3789b4045b89fb34;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1673748446199%3A1673748446202%3A0%3A184597f211c749db5ec4f033f01ecb60;visible=true;_=0.5560400997160602
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=2685520;u=https%3A//promokodus.com/ua/campaigns/csgochicken;st=1673748445823;pid=0;title=%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5;s=1280*1024;vp=252*161;touch=0;hds=1;frame=1;flash=;sid=3789b4045b89fb34;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1673748446199%3A1673748446202%3A0%3A184597f211c749db5ec4f033f01ecb60;visible=true;_=0.5560400997160602 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vk.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:25 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1673748445:2685520:::; path=/; expires=Tue, 16-Jan-24 02:07:25 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=1&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=413062210&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1673748448%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020727%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748448&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=1&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=413062210&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1673748448%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020727%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748448&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/23420071?wmode=0&wv-part=1&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=413062210&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1673748448%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020727%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748448&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 194149
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 15 Jan 2023 02:07:27 GMT
access-control-allow-origin: https://promokodus.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 15-Jan-2023 02:07:27 GMT
last-modified: Sun, 15-Jan-2023 02:07:27 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=1&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=960971398&wv-type=3&browser-info=we%3A1%3Aet%3A1673748448%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020728%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748448&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=1&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=960971398&wv-type=3&browser-info=we%3A1%3Aet%3A1673748448%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020728%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748448&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/23420071?wmode=0&wv-part=1&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=960971398&wv-type=3&browser-info=we%3A1%3Aet%3A1673748448%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020728%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748448&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 54
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 15 Jan 2023 02:07:28 GMT
access-control-allow-origin: https://promokodus.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 15-Jan-2023 02:07:28 GMT
last-modified: Sun, 15-Jan-2023 02:07:28 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 14 kB URL HTTP/2 top-fwz1.mail.ru/js/code.js
IP
Hash 7667e8a285aa4ddc46a20bac4c8de46b
26ba38c826582469c12b21e3d8688561b8351c13
b708b29c1089320bf76a06381ca5af4f37678184f9afbefc3e68e4c58394beb6
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:25 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 13:29:54 GMT
set-cookie: FTID=1RMYgQ0tkIIF:1673748445:0:::; path=/; expires=Tue, 16-Jan-24 02:07:25 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"63beb9d2-85cc"
expires: Sun, 15 Jan 2023 03:07:25 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=530433624&wv-type=3&browser-info=we%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=530433624&wv-type=3&browser-info=we%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/23420071?wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=530433624&wv-type=3&browser-info=we%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 15 Jan 2023 02:07:31 GMT
access-control-allow-origin: https://promokodus.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 15-Jan-2023 02:07:31 GMT
last-modified: Sun, 15-Jan-2023 02:07:31 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=1046789563&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/23420071?wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=1046789563&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/23420071?wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=1046789563&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 15 Jan 2023 02:07:31 GMT
access-control-allow-origin: https://promokodus.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 15-Jan-2023 02:07:31 GMT
last-modified: Sun, 15-Jan-2023 02:07:31 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/23420071?wv-check=51359&wv-type=0&wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=66037806&browser-info=we%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/23420071?wv-check=51359&wv-type=0&wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=66037806&browser-info=we%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/23420071?wv-check=51359&wv-type=0&wmode=0&wv-part=2&wv-hit=446471213&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&rn=66037806&browser-info=we%3A1%3Aet%3A1673748452%3Aw%3A1268x939%3Av%3A953%3Az%3A0%3Ai%3A20230115020731%3Au%3A1673748444956895697%3Avf%3A14qzoz81s4a176hik6jd9j%3Ast%3A1673748452&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 12
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sun, 15 Jan 2023 02:07:31 GMT
access-control-allow-origin: https://promokodus.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 15-Jan-2023 02:07:31 GMT
last-modified: Sun, 15-Jan-2023 02:07:31 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/ua.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/ua.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/ua.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-30e"
expires: Mon, 15 Jan 2024 01:55:16 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/by.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/by.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/by.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-1fc3"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
st.vk.com/dist/web/ui_common.ad48c0d2e98f601731cc.js?0060f6bfb3415fff6bbbac8162a454b5
200 OK 0 B URL HTTP/2 st.vk.com/dist/web/ui_common.ad48c0d2e98f601731cc.js?0060f6bfb3415fff6bbbac8162a454b5
IP
GET /dist/web/ui_common.ad48c0d2e98f601731cc.js?0060f6bfb3415fff6bbbac8162a454b5 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 21743
last-modified: Fri, 23 Dec 2022 20:24:56 GMT
etag: "63a60e98-54ef"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/ru.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/ru.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/ru.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-37c"
expires: Mon, 15 Jan 2024 01:55:16 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/ge.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/ge.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/ge.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-bc5"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/ua/campaigns/csgochicken
200 OK 0 B URL HTTP/2 promokodus.com/ua/campaigns/csgochicken
IP
ASN #42745 Safe Value Limited
GET /ua/campaigns/csgochicken HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: __lhash_=977da90e391a8423efa81a3796522149; Max-Age=604800; Path=/
XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; expires=Tue, 17-Jan-2023 14:07:23 GMT; path=/; secure; samesite=none
core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D; expires=Tue, 17-Jan-2023 14:07:23 GMT; path=/; secure; samesite=none
x-frame-options: DENY, SAMEORIGIN
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: nosniff, nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/am.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/am.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/am.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-35d"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/ab.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/ab.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/ab.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-13d3"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/page.js
IP
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 3097
etag: W/"c04-5f1f2ae2e431b"
last-modified: Wed, 11 Jan 2023 01:11:30 GMT
vary: Accept-Encoding
via: e3s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 789b0ebb7e5e2e0c-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/kg.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/kg.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/kg.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-1ec6"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/az.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/az.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/az.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-75b"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/tm.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/tm.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/tm.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-1a9a"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/tj.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/tj.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/tj.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-17ce"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/23420071?wmode=7&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&charset=utf-8&site-info=%7B%22%D0%91%D0%B0%D0%B7%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%BA%D0%B0%D1%82%D0%B5%D0%B3%D0%BE%D1%80%D0%B8%D0%B8%22%3A%7B%22%D0%9A%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B5%20%D0%B8%D0%B3%D1%80%D1%8B%22%3A%7B%22%D0%98%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%B2%D0%B0%D0%BB%D1%8E%D1%82%D0%B0%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BC%D0%B5%D1%82%D1%8B%22%3A%22CSGO%D0%A1hicken%22%7D%7D%2C%22%D0%9E%D1%84%D1%84%D0%B5%D1%80%D1%8B%22%3A%22CSGO%D0%A1hicken%22%2C%22%D0%9C%D0%B5%D1%82%D0%BA%D0%B8%22%3A%7B%22unsorted%22%3A%22direct%22%7D%2C%22%D0%9C%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F%22%3A%7B%22%D0%A1%20%D0%BC%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B5%D0%B9%22%3A%22CSGO%D0%A1hicken%22%7D%7D&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1264%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A467888713876%3Ahid%3A446471213%3Az%3A0%3Ai%3A20230115020724%3Aet%3A1673748444%3Ac%3A1%3Arn%3A505141235%3Arqn%3A1%3Au%3A1673748444956895697%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C110%2C382%2C0%2C365%2C0%2C%2C511%2C2%2C%2C%2C%2C1463%3Aco%3A0%3Ans%3A1673748442672%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673748444%3At%3A%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/23420071?wmode=7&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&charset=utf-8&site-info=%7B%22%D0%91%D0%B0%D0%B7%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%BA%D0%B0%D1%82%D0%B5%D0%B3%D0%BE%D1%80%D0%B8%D0%B8%22%3A%7B%22%D0%9A%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B5%20%D0%B8%D0%B3%D1%80%D1%8B%22%3A%7B%22%D0%98%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%B2%D0%B0%D0%BB%D1%8E%D1%82%D0%B0%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BC%D0%B5%D1%82%D1%8B%22%3A%22CSGO%D0%A1hicken%22%7D%7D%2C%22%D0%9E%D1%84%D1%84%D0%B5%D1%80%D1%8B%22%3A%22CSGO%D0%A1hicken%22%2C%22%D0%9C%D0%B5%D1%82%D0%BA%D0%B8%22%3A%7B%22unsorted%22%3A%22direct%22%7D%2C%22%D0%9C%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F%22%3A%7B%22%D0%A1%20%D0%BC%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B5%D0%B9%22%3A%22CSGO%D0%A1hicken%22%7D%7D&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1264%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A467888713876%3Ahid%3A446471213%3Az%3A0%3Ai%3A20230115020724%3Aet%3A1673748444%3Ac%3A1%3Arn%3A505141235%3Arqn%3A1%3Au%3A1673748444956895697%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C110%2C382%2C0%2C365%2C0%2C%2C511%2C2%2C%2C%2C%2C1463%3Aco%3A0%3Ans%3A1673748442672%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673748444%3At%3A%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/23420071?wmode=7&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&charset=utf-8&site-info=%7B%22%D0%91%D0%B0%D0%B7%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%BA%D0%B0%D1%82%D0%B5%D0%B3%D0%BE%D1%80%D0%B8%D0%B8%22%3A%7B%22%D0%9A%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B5%20%D0%B8%D0%B3%D1%80%D1%8B%22%3A%7B%22%D0%98%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%B2%D0%B0%D0%BB%D1%8E%D1%82%D0%B0%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BC%D0%B5%D1%82%D1%8B%22%3A%22CSGO%D0%A1hicken%22%7D%7D%2C%22%D0%9E%D1%84%D1%84%D0%B5%D1%80%D1%8B%22%3A%22CSGO%D0%A1hicken%22%2C%22%D0%9C%D0%B5%D1%82%D0%BA%D0%B8%22%3A%7B%22unsorted%22%3A%22direct%22%7D%2C%22%D0%9C%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F%22%3A%7B%22%D0%A1%20%D0%BC%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B5%D0%B9%22%3A%22CSGO%D0%A1hicken%22%7D%7D&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1264%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A467888713876%3Ahid%3A446471213%3Az%3A0%3Ai%3A20230115020724%3Aet%3A1673748444%3Ac%3A1%3Arn%3A505141235%3Arqn%3A1%3Au%3A1673748444956895697%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C110%2C382%2C0%2C365%2C0%2C%2C511%2C2%2C%2C%2C%2C1463%3Aco%3A0%3Ans%3A1673748442672%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673748444%3At%3A%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20(%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD)%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promokodus.com
Connection: keep-alive
Referer: https://promokodus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/23420071/1?wmode=7&page-url=https%3A%2F%2Fpromokodus.com%2Fua%2Fcampaigns%2Fcsgochicken&charset=utf-8&site-info=%7B%22%D0%91%D0%B0%D0%B7%D0%BE%D0%B2%D1%8B%D0%B5%20%D0%BA%D0%B0%D1%82%D0%B5%D0%B3%D0%BE%D1%80%D0%B8%D0%B8%22%3A%7B%22%D0%9A%D0%BE%D0%BC%D0%BF%D1%8C%D1%8E%D1%82%D0%B5%D1%80%D0%BD%D1%8B%D0%B5%20%D0%B8%D0%B3%D1%80%D1%8B%22%3A%7B%22%D0%98%D0%B3%D1%80%D0%BE%D0%B2%D0%B0%D1%8F%20%D0%B2%D0%B0%D0%BB%D1%8E%D1%82%D0%B0%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BC%D0%B5%D1%82%D1%8B%22%3A%22CSGO%D0%A1hicken%22%7D%7D%2C%22%D0%9E%D1%84%D1%84%D0%B5%D1%80%D1%8B%22%3A%22CSGO%D0%A1hicken%22%2C%22%D0%9C%D0%B5%D1%82%D0%BA%D0%B8%22%3A%7B%22unsorted%22%3A%22direct%22%7D%2C%22%D0%9C%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D1%8F%22%3A%7B%22%D0%A1%20%D0%BC%D0%BE%D0%BD%D0%B5%D1%82%D0%B8%D0%B7%D0%B0%D1%86%D0%B8%D0%B5%D0%B9%22%3A%22CSGO%D0%A1hicken%22%7D%7D&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A1264%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A953%3Acn%3A1%3Adp%3A0%3Als%3A467888713876%3Ahid%3A446471213%3Az%3A0%3Ai%3A20230115020724%3Aet%3A1673748444%3Ac%3A1%3Arn%3A505141235%3Arqn%3A1%3Au%3A1673748444956895697%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C110%2C382%2C0%2C365%2C0%2C%2C511%2C2%2C%2C%2C%2C1463%3Aco%3A0%3Ans%3A1673748442672%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1673748444%3At%3A%D0%9F%D1%80%D0%BE%D0%BC%D0%BE%D0%BA%D0%BE%D0%B4%D1%8B%20CS%3AGO%20Chicken%20%28%D0%9A%D0%A1%3A%D0%93%D0%9E%20%D0%A7%D0%B8%D0%BA%D0%B5%D0%BD%29%20%D0%B7%D0%B0%20%D1%8F%D0%BD%D0%B2%D0%B0%D1%80%D1%8C%202023%20%D0%B2%20%D0%A3%D0%BA%D1%80%D0%B0%D0%B8%D0%BD%D0%B5&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sun, 15 Jan 2023 02:07:24 GMT
access-control-allow-origin: https://promokodus.com
set-cookie: yabs-sid=47036981673748444; Path=/; SameSite=None; Secure
i=rW/trSYXms+24O+2ImbWIiIFcmvPzdxwd/1IUhs6P2Edp+TrbjzzLKwWf7IcA5efe3iDILGycG1JcE/DJb3dNqw1UgA=; Expires=Wed, 12-Jan-2033 02:07:21 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1045984441673748444; Expires=Mon, 15-Jan-2024 02:07:24 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1045984441673748444; Expires=Mon, 15-Jan-2024 02:07:24 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1705284444.yc.1673748444#1705284444.yrts.1673748444#1705284444.yrtsi.1673748444; Expires=Mon, 15-Jan-2024 02:07:24 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sun, 15-Jan-2023 02:07:24 GMT
last-modified: Sun, 15-Jan-2023 02:07:24 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
st.vk.com/dist/vkui.9ce756e79bcf283a954f.js?6052c13656692e1af20a
200 OK 0 B URL HTTP/2 st.vk.com/dist/vkui.9ce756e79bcf283a954f.js?6052c13656692e1af20a
IP
GET /dist/vkui.9ce756e79bcf283a954f.js?6052c13656692e1af20a HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 79714
last-modified: Wed, 11 Jan 2023 11:06:44 GMT
etag: "63be9844-13762"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
st.vk.com/dist/common.89cc6c4fb97c4d845eb4.js?30559689ff82d1ba2722187
200 OK 0 B URL HTTP/2 st.vk.com/dist/common.89cc6c4fb97c4d845eb4.js?30559689ff82d1ba2722187
IP
GET /dist/common.89cc6c4fb97c4d845eb4.js?30559689ff82d1ba2722187 HTTP/1.1
Host: st.vk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: kittenx
date: Sun, 15 Jan 2023 02:07:24 GMT
content-type: application/x-javascript
content-length: 316938
last-modified: Fri, 13 Jan 2023 14:57:44 GMT
etag: "63c17168-4d60a"
content-encoding: br
expires: Thu, 19 Jan 2023 02:07:24 GMT
cache-control: max-age=345600
x-frontend: front512004
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/kz.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/kz.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/kz.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-75be"
expires: Mon, 15 Jan 2024 01:51:34 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/js/all.js?id=96552b7cc7371b807952
200 OK 0 B URL HTTP/2 promokodus.com/js/all.js?id=96552b7cc7371b807952
IP
ASN #42745 Safe Value Limited
GET /js/all.js?id=96552b7cc7371b807952 HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-3a37b"
expires: Mon, 15 Jan 2024 01:48:37 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/uz.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/uz.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/uz.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-1bd7"
expires: Mon, 15 Jan 2024 02:01:03 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
promokodus.com/img/flags/svg/md.svg
200 OK 0 B URL HTTP/2 promokodus.com/img/flags/svg/md.svg
IP
ASN #42745 Safe Value Limited
GET /img/flags/svg/md.svg HTTP/1.1
Host: promokodus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promokodus.com/ua/campaigns/csgochicken
Cookie: __lhash_=977da90e391a8423efa81a3796522149; XSRF-TOKEN=eyJpdiI6IkQvTGl3Ty8vVTVNL3dJeFp1bUJiT0E9PSIsInZhbHVlIjoiZndPNTNUVEd5bzZWb3Nqdnd5L0Q3MG00NDlpd1Q1U0tURUd3UDQzM0c0andJelBwUFNuOERBZ0J2QzVUUUV0bmdUdXIwdzIxOTNKV05zZGZReHJwbUNpYVdiY1NiTTJJWFNzRFZWUUdIZjdkYkRxZkU4VWF6dWpBTGh4SEswY24iLCJtYWMiOiI2MTMyMzZmOTQ2ZDg2NTZhNmFjMThmOGQ2Y2Q4NGJmNGI1N2Q4OTA1NWM5ZDczNmE4ZjRmMzkyZGFjN2Q3Mjg0IiwidGFnIjoiIn0%3D; core_session=eyJpdiI6ImlIZHgzWWZiM3daUEZNRStDbVg4NFE9PSIsInZhbHVlIjoicXdmK0xEQ0xVa1o4SjlGK2ZxeVdEMEVzbmdDcGJYU2FGTlRBak1iZTdQT05kV2drN3FuVFh6ZGNjcjRqN0FHR094b1ZnZUhpWWhKR3J1ajFvQmFWODVxWCswS0NQaW5Za3hGbFhUNHVIWlMvamtidzJSS0xzOFhOcjJvQjlIc2giLCJtYWMiOiJjMmNmZWU0NzZjZDVjMGVkZWM0NDMxYzRiYzJhYTUxNDgyZTE4YzU5OGEzOThlMTRlZGViOTE2YWY2ODNkN2ExIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 02:07:23 GMT
content-type: image/svg+xml
last-modified: Mon, 09 Jan 2023 14:10:43 GMT
etag: W/"63bc2063-3bea"
expires: Mon, 15 Jan 2024 02:05:04 GMT
cache-control: max-age=31536000, public
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
193.233.15.45
151.101.1.229
93.184.220.29
23.36.77.32
104.22.70.197