urlquery - report: championtest.com/betting-survey.html

Scan Date	Severity	Indicator	Comment
2022-12-04	2	datatechonert.com	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-02-06 18:12:04 +0000	0 - 0 - 1	plumplaser.com/trck/?_subid=3j492fk67rb9v&sou (...)	188.114.96.1
2023-02-06 18:11:42 +0000	0 - 0 - 1	plumplaser.com/trck/?_subid=36npobb67rb9t&sou (...)	188.114.96.1
2023-02-06 17:09:57 +0000	0 - 0 - 0	www.ebook-converter.com/210-how-convert-vbk-t (...)	188.114.96.1
2023-02-06 16:58:39 +0000	0 - 0 - 3	tonyevers.com	188.114.96.1
2023-02-06 16:56:56 +0000	0 - 0 - 2	www.hovac.lol/baguettes/IridiumGhost.zip	188.114.96.1

Date	UQ / IDS / BL	URL	IP
2023-02-06 18:20:34 +0000	0 - 0 - 1	ultrawidesnowboards.com/url?link=https://noti (...)	104.21.15.123
2023-02-06 18:18:02 +0000	0 - 1 - 1	cdn.discordapp.com/attachments/10073004678203 (...)	162.159.130.233
2023-02-06 18:18:00 +0000	0 - 1 - 1	cdn.discordapp.com/attachments/10017951037923 (...)	162.159.133.233
2023-02-06 18:17:57 +0000	0 - 1 - 1	cdn.discordapp.com/attachments/10139227922044 (...)	162.159.135.233
2023-02-06 18:17:49 +0000	0 - 0 - 1	cdn.discordapp.com/attachments/10373712132170 (...)	162.159.130.233

Date	UQ / IDS / BL	URL	IP
2023-01-31 06:39:08 +0000	0 - 0 - 2	championtest.com/betting-survey.html	188.114.96.1
2023-01-30 15:31:44 +0000	0 - 0 - 2	championtest.com/betting-survey.html	104.21.21.52
2023-01-27 04:56:41 +0000	0 - 0 - 2	championtest.com/betting-survey.html	188.114.96.1
2023-01-26 11:01:32 +0000	0 - 0 - 2	8if.championtest.com/betting-survey.html	172.67.196.109
2023-01-26 06:48:00 +0000	0 - 0 - 2	championtest.com/betting-survey.html	188.114.96.1

Date	UQ / IDS / BL	URL	IP
2023-02-04 19:09:06 +0000	0 - 2 - 2	manylucksurvey.top/betting-survey.html?z=4534 (...)	104.21.44.8
2023-02-01 23:47:24 +0000	0 - 1 - 2	urechar.com/4/4056701/	139.45.197.238
2023-02-01 22:10:04 +0000	0 - 1 - 3	rouonixon.com/4/5553043/	139.45.197.238
2023-02-01 21:04:07 +0000	0 - 0 - 5	photo.inf2u.com/yTy6nsm	162.249.5.227
2023-01-31 05:00:18 +0000	0 - 1 - 4	rouonixon.com/4/4425070/	139.45.197.238

Request	Response
GET /betting-survey.html HTTP/1.1 Host: championtest.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: championtest.com/betting-survey.html FQDN: championtest.com IP: 188.114.96.1 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 188.114.96.1 HTTP/1.1 301 Moved Permanently Date: Sun, 04 Dec 2022 16:06:47 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 04 Dec 2022 17:06:47 GMT Location: https://championtest.com/betting-survey.html Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VJMMWyQEioP6S%2B48KDXvv5h6ayVF3exxZM54tGDrMJ5JMt1vX2VNy8ig6kV3m%2FFOTbcBJalMN7JBMJtuwd9HYvwy0ClnZmgEn%2B5wsShp5yeqIyx7BLQh4MnUMJGsqhSJh0mM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 7745ca902eb20b69-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12593 Expires: Sun, 04 Dec 2022 19:36:40 GMT Date: Sun, 04 Dec 2022 16:06:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cfec3d7283a9b66d2be426ce54d210f3 Sha1: 808c1feb1ba918951d1928c1f6bfc0c253262774 Sha256: 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5082 Cache-Control: 'max-age=158059' Date: Sun, 04 Dec 2022 16:06:47 GMT Etag: "638c76f5-1d7" Last-Modified: Sun, 04 Dec 2022 14:42:05 GMT Server: ECS (ska/F71D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fb2c0697c6d9a96a5411dd2952947458 Sha1: 79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4 Sha256: 3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sun, 04 Dec 2022 15:18:24 GMT cache-control: public,max-age=3600 age: 2903 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2993 Expires: Sun, 04 Dec 2022 16:56:40 GMT Date: Sun, 04 Dec 2022 16:06:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 1ea206ac3c440825741687351f8c6e4e Sha1: 2f38dafd8c43dcce2411a0590bc5c02cd6286735 Sha256: 7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: R7FQ+ehauBJu0y7XJOakNjJfeO8ekp+CmI0DN3xwWZPrwEt5mA7uHxB0CiihYYaciuDTbyFkQ3ySKA8aznssww== x-amz-request-id: FQRX2XPRW9DA6HH9 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 04 Dec 2022 15:47:02 GMT age: 1185 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 10c83d66743e27d384f95f9756dcaf53b7097f518392f2fb5c345ee8c39824ca 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6539 Cache-Control: max-age=111695 Date: Sun, 04 Dec 2022 16:06:47 GMT Etag: "638bbd5b-116" Expires: Mon, 05 Dec 2022 23:08:22 GMT Last-Modified: Sat, 03 Dec 2022 21:19:23 GMT Server: ECS (amb/6BBC) X-Cache: HIT Content-Length: 278 --- Additional Info --- Magic: data Size: 278 Md5: 459a62a4b092d092cb80e77368e38a9c Sha1: 3fba9028713a0b3bb39b1d7a362acf3db7d6bb99 Sha256: 10c83d66743e27d384f95f9756dcaf53b7097f518392f2fb5c345ee8c39824ca
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sun, 04 Dec 2022 16:06:47 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /betting-survey.html HTTP/1.1 Host: championtest.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: championtest.com/betting-survey.html FQDN: championtest.com IP: 188.114.97.1 HASH: f471a31ddde75dd509d08f4b158b2a05b05b272e8473a6afa3eeac4b915f5613 188.114.97.1 HTTP/2 200 OK content-type: text/html date: Sun, 04 Dec 2022 16:06:47 GMT last-modified: Fri, 02 Dec 2022 12:06:56 GMT vary: Accept-Encoding cache-control: max-age=1800 cf-cache-status: REVALIDATED report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U8Mt35StFMQkO6V7IvTF2Z6UHvN7pp108%2B8Y7Bj%2BA6aoGb8vW%2BeIkZMq49QCMl9Xn32yqIXisMqEMbNwJXkUHljRcIRuPzBMqK6OjVi2MysYwy0MQQyuuwhbsxXT6Pw8YtNG"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 7745ca924a9bb50b-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1579) Size: 2212 Md5: f0a57cff9b82ea50ebfc9528cf106cbf Sha1: 3c709638acd9161b43f4d2fe9182fd6b8d1386c1 Sha256: f471a31ddde75dd509d08f4b158b2a05b05b272e8473a6afa3eeac4b915f5613
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 18d3562684c32ed7b8d7cf02c853d8f1f08bf1074151891d9b756d14fdddfa1f 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "18D3562684C32ED7B8D7CF02C853D8F1F08BF1074151891D9B756D14FDDDFA1F" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15796 Expires: Sun, 04 Dec 2022 20:30:03 GMT Date: Sun, 04 Dec 2022 16:06:47 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: feada0c59c0eaab85490c6c8a7bcdd19 Sha1: 067889598d6125a945f0f7815a03328b62e9d139 Sha256: 18d3562684c32ed7b8d7cf02c853d8f1f08bf1074151891d9b756d14fdddfa1f
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sun, 04 Dec 2022 15:08:58 GMT cache-control: public,max-age=3600 age: 3469 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /gid.js HTTP/1.1 Host: my.rtmark.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: my.rtmark.net/gid.js FQDN: my.rtmark.net IP: 139.45.195.8 HASH: 6ac396220780636043ee845608a2c2cdd8618716841718becae95235978a4866 139.45.195.8 HTTP/2 200 OK content-type: application/json; charset=utf-8 server: nginx date: Sun, 04 Dec 2022 16:06:48 GMT content-length: 65 access-control-allow-origin: https://championtest.com access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token access-control-expose-headers: Authorization access-control-allow-credentials: true set-cookie: ID=40c585a527c94d4794bd572570b4f866; expires=Mon, 04 Dec 2023 16:06:48 GMT; secure; SameSite=None strict-transport-security: max-age=1 x-content-type-options: nosniff timing-allow-origin: , X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text Size: 65 Md5: 76f1961a5fcffb885c237ab1234360d2 Sha1: cd40272761a35e77699ae24ce98ed0b765f8b1a7 Sha256: 6ac396220780636043ee845608a2c2cdd8618716841718becae95235978a4866
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 02df2293bba89b1251e3dc7e75df671314cab849e0bc367507cdc10b35dbb4aa 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 345 ETag: "02DF2293BBA89B1251E3DC7E75DF671314CAB849E0BC367507CDC10B35DBB4AA" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17778 Expires: Sun, 04 Dec 2022 21:03:06 GMT Date: Sun, 04 Dec 2022 16:06:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 345 Md5: bab3e161e3f3854daf7dc364769decd5 Sha1: 48869547ffc9c4481f49a32528f2bbe9d7038bf0 Sha256: 02df2293bba89b1251e3dc7e75df671314cab849e0bc367507cdc10b35dbb4aa
POST / HTTP/1.1 Host: e1.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: e1.o.lencr.org/ FQDN: e1.o.lencr.org IP: 23.36.77.32 HASH: 02df2293bba89b1251e3dc7e75df671314cab849e0bc367507cdc10b35dbb4aa 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 345 ETag: "02DF2293BBA89B1251E3DC7E75DF671314CAB849E0BC367507CDC10B35DBB4AA" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17778 Expires: Sun, 04 Dec 2022 21:03:06 GMT Date: Sun, 04 Dec 2022 16:06:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 345 Md5: bab3e161e3f3854daf7dc364769decd5 Sha1: 48869547ffc9c4481f49a32528f2bbe9d7038bf0 Sha256: 02df2293bba89b1251e3dc7e75df671314cab849e0bc367507cdc10b35dbb4aa
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 5062 Cache-Control: 'max-age=158059' Date: Sun, 04 Dec 2022 16:06:48 GMT Etag: "638c632b-1d7" Last-Modified: Sun, 04 Dec 2022 14:42:26 GMT Server: ECS (ska/F71D) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 31b129c94a90b1e695b21395cb54e378 Sha1: a3cae46b48d469cc61ab0581303bcd5f5b654db9 Sha256: fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a2e6fe60dad375d5fd5ba0ab7b8bdb94a9f37d4658df046eb07a38decd8da38b 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A2E6FE60DAD375D5FD5BA0AB7B8BDB94A9F37D4658DF046EB07A38DECD8DA38B" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3808 Expires: Sun, 04 Dec 2022 17:10:16 GMT Date: Sun, 04 Dec 2022 16:06:48 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 56f234815fb6425bd80a0a918263e36a Sha1: d816e6c172bb82672bef527f906c60fc6a3e55a0 Sha256: a2e6fe60dad375d5fd5ba0ab7b8bdb94a9f37d4658df046eb07a38decd8da38b
GET /contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png HTTP/1.1 Host: pulsersurvey.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a8 (...) FQDN: pulsersurvey.com IP: 139.45.197.151 HASH: 70eba3a4b499c4ffe4a8e62461c1b8581a9dd904f14b5742b48632dbebdd30a6 139.45.197.151 HTTP/2 200 OK content-type: image/png server: nginx date: Sun, 04 Dec 2022 16:06:48 GMT content-length: 10580 last-modified: Thu, 21 Jan 2021 09:10:34 GMT vary: Accept-Encoding etag: "6009450a-2954" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS, HEAD access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 140 x 140, 8-bit/color RGB, non-interlaced\012- data Size: 10580 Md5: 0fb5a0eccfe6fe27747ca4a84abb1c9b Sha1: f83ae7f2c746872a9ba9da626928946e3b6de28d Sha256: 70eba3a4b499c4ffe4a8e62461c1b8581a9dd904f14b5742b48632dbebdd30a6
POST /gseccovsslca2018 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 79 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/gseccovsslca2018 FQDN: ocsp.globalsign.com IP: 104.18.21.226 HASH: 9a21f310d7382d824db60bedd76a75973fa352afe5c942f03c0ab63158b58842 104.18.21.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 04 Dec 2022 16:06:48 GMT Content-Length: 937 Connection: keep-alive Expires: Thu, 08 Dec 2022 14:33:48 GMT ETag: "043aef7ed4f1c5d84a44e9ad8546f7f6ee392b30" Last-Modified: Sun, 04 Dec 2022 14:33:49 GMT Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 CF-Cache-Status: HIT Age: 2654 Accept-Ranges: bytes Vary: Accept-Encoding Server: cloudflare CF-RAY: 7745ca97c84c0afa-OSL --- Additional Info --- Magic: data Size: 937 Md5: 5a263c0b3ce5127415dda068d3577273 Sha1: 043aef7ed4f1c5d84a44e9ad8546f7f6ee392b30 Sha256: 9a21f310d7382d824db60bedd76a75973fa352afe5c942f03c0ab63158b58842
POST / HTTP/1.1 Host: ocsp.sectigo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sectigo.com/ FQDN: ocsp.sectigo.com IP: 104.18.32.68 HASH: 905ee9517e8597ac86e76b99b970f77a4fbb2500de30ef6efea97a4bbcea51d4 104.18.32.68 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 04 Dec 2022 16:06:48 GMT Content-Length: 471 Connection: keep-alive Last-Modified: Fri, 02 Dec 2022 13:33:18 GMT Expires: Fri, 09 Dec 2022 13:33:17 GMT Etag: "4348655937347ff19881acafd04b1277e017f19c" Cache-Control: max-age=422188,s-maxage=1800,public,no-transform,must-revalidate X-CCACDN-Proxy-ID: mcdpinlb3 X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 7745ca980f45b4f7-OSL --- Additional Info --- Magic: data Size: 471 Md5: 2a3e9c9270d5d1402700343b567d8e21 Sha1: 4348655937347ff19881acafd04b1277e017f19c Sha256: 905ee9517e8597ac86e76b99b970f77a4fbb2500de30ef6efea97a4bbcea51d4
GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: mc.yandex.ru/metrika/tag.js FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8 87.250.250.119 HTTP/2 200 OK content-type: application/javascript content-length: 73266 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: * etag: "6388ac0c-11e32" expires: Sun, 04 Dec 2022 17:06:48 GMT last-modified: Thu, 01 Dec 2022 16:28:44 GMT cache-control: max-age=3600 content-encoding: br strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 (with BOM) text, with very long lines (586) Size: 73266 Md5: a4567a1e52f99c2b3870f58375ec8cac Sha1: dbfc795e71fc19f7e45e8637abc4ac770f639a48 Sha256: 2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1 Host: datatechonert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain;charset=UTF-8 Content-Length: 904 Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-8 (...) FQDN: datatechonert.com IP: 139.45.195.253 HASH: 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed 139.45.195.253 HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: nginx/1.19.10 Date: Sun, 04 Dec 2022 16:06:48 GMT Content-Length: 12 Connection: keep-alive Access-Control-Allow-Origin: https://championtest.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: adb4650bfc9d2a73d4dd69583b0ceb14 Sha1: 1ce399d6e936232aaf2192cd7903a279c5015f22 Sha256: 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed Alerts: Blocklists: - quad9: Sinkholed
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: Rqbkf/X9o0SuFaz4oLvGyA== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 52.13.69.101 HASH: 1be56a3a9a589658799ae0680a0d7b75aa934a3b163de266d1a76f03ed91969b 52.13.69.101 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: oTooUS4XvZ3EoIvCI5G5MCXnfZk= --- Additional Info --- Magic: data Size: 3458 Md5: c72766080b51b9d7ef0392e094552575 Sha1: 0762b1449fba05cc3d4fc9e5e53ce88fc12bc983 Sha256: 1be56a3a9a589658799ae0680a0d7b75aa934a3b163de266d1a76f03ed91969b
GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/metrika/advert.gif FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: * etag: "6388ac0c-2b" expires: Sun, 04 Dec 2022 17:06:48 GMT accept-ranges: bytes last-modified: Thu, 01 Dec 2022 16:28:44 GMT cache-control: max-age=3600 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: df3e567d6f16d040326c7a0ea29a4f41 Sha1: ea7df583983133b62712b5e73bffbcd45cc53736 Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A412945993%3Arqn%3A1%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C85%2C1%2C%2C0%2C%2C76%2C2%2C%2C%2C%2C238%3Aco%3A0%3Ans%3A1670170005327%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2 (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: c6205af9a90e6c097795f284db8e2d06cd069ee7cffcff1f187506af4bb5b8a4 87.250.250.119 HTTP/2 302 Found location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A412945993%3Arqn%3A1%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C85%2C1%2C%2C0%2C%2C76%2C2%2C%2C%2C%2C238%3Aco%3A0%3Ans%3A1670170005327%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: https://championtest.com set-cookie: yabs-sid=126257171670170008; Path=/; SameSite=None; Secure i=26Jbz9PgqL7U/hzWZzlW+elAghuNw/4YYiGNFCjzsoJGu8pNtgvO6/m25v9p3zfWkx1zRpc5GkexDndXSqAVPlihu+Y=; Expires=Wed, 01-Dec-2032 16:06:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None yandexuid=4402043581670170008; Expires=Mon, 04-Dec-2023 16:06:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure yuidss=4402043581670170008; Expires=Mon, 04-Dec-2023 16:06:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure ymex=1701706008.yc.1670170008#1701706008.yrts.1670170008#1701706008.yrtsi.1670170008; Expires=Mon, 04-Dec-2023 16:06:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 04-Dec-2022 16:06:48 GMT last-modified: Sun, 04-Dec-2022 16:06:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (400), with no line terminators Size: 400 Md5: a1695b46039e8a3d536d5845c277ea92 Sha1: d053f83602abd46a969cd6105bd9b32ae01cf450 Sha256: c6205af9a90e6c097795f284db8e2d06cd069ee7cffcff1f187506af4bb5b8a4
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A447194784%3Arqn%3A2%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C843%2C843%2C0%2C%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 44 Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fcha (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: https://championtest.com access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 04-Dec-2022 16:06:48 GMT last-modified: Sun, 04-Dec-2022 16:06:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: df3e567d6f16d040326c7a0ea29a4f41 Sha1: ea7df583983133b62712b5e73bffbcd45cc53736 Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A171677884%3Arqn%3A5%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 43 Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fcha (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: https://championtest.com access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 04-Dec-2022 16:06:48 GMT last-modified: Sun, 04-Dec-2022 16:06:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: df3e567d6f16d040326c7a0ea29a4f41 Sha1: ea7df583983133b62712b5e73bffbcd45cc53736 Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A10438116%3Arqn%3A4%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 37 Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fcha (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 53f1f2e3dfac5b7b5349a65dd66783626e9f2b994bc2c3cc1e6a1bfb9dc644f1 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: https://championtest.com access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 04-Dec-2022 16:06:48 GMT last-modified: Sun, 04-Dec-2022 16:06:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 4170 Md5: f0debe135a4bc6e52fa19592ca449dfc Sha1: 417b5ce8994722a1332568867d33ecc5e03fe167 Sha256: 53f1f2e3dfac5b7b5349a65dd66783626e9f2b994bc2c3cc1e6a1bfb9dc644f1
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A100181601%3Arqn%3A6%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 16 Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fcha (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: https://championtest.com access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 04-Dec-2022 16:06:48 GMT last-modified: Sun, 04-Dec-2022 16:06:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: df3e567d6f16d040326c7a0ea29a4f41 Sha1: ea7df583983133b62712b5e73bffbcd45cc53736 Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A474762079%3Arqn%3A3%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 16 Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fcha (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: https://championtest.com access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 04-Dec-2022 16:06:48 GMT last-modified: Sun, 04-Dec-2022 16:06:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: GIF image data, version 89a, 1 x 1\012- data Size: 43 Md5: df3e567d6f16d040326c7a0ea29a4f41 Sha1: ea7df583983133b62712b5e73bffbcd45cc53736 Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A752747786%3Arqn%3A7%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(2) HTTP/1.1 Host: mc.yandex.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded Content-Length: 50 Origin: https://championtest.com Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fcha (...) FQDN: mc.yandex.ru IP: 87.250.250.119 HASH: 7d84e0c4afe1d779104b204f023864a4cb5a6d851b42f10a8b5a1ef93f2a9e96 87.250.250.119 HTTP/2 200 OK content-type: image/gif content-length: 43 date: Sun, 04 Dec 2022 16:06:48 GMT access-control-allow-origin: https://championtest.com access-control-allow-credentials: true pragma: no-cache x-xss-protection: 1; mode=block expires: Sun, 04-Dec-2022 16:06:48 GMT last-modified: Sun, 04-Dec-2022 16:06:48 GMT cache-control: private, no-cache, no-store, must-revalidate, max-age=0 strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 20464 Md5: 8b03aab9fa39ac38838595de63e6c429 Sha1: e7de8350068653a6e8e1e41e46adeaf4000b3ed0 Sha256: 7d84e0c4afe1d779104b204f023864a4cb5a6d851b42f10a8b5a1ef93f2a9e96
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8608 Expires: Sun, 04 Dec 2022 18:30:17 GMT Date: Sun, 04 Dec 2022 16:06:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8608 Expires: Sun, 04 Dec 2022 18:30:17 GMT Date: Sun, 04 Dec 2022 16:06:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8608 Expires: Sun, 04 Dec 2022 18:30:17 GMT Date: Sun, 04 Dec 2022 16:06:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8608 Expires: Sun, 04 Dec 2022 18:30:17 GMT Date: Sun, 04 Dec 2022 16:06:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 16143 x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cdGyLGqmoAMFnaA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0 x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA== via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sun, 04 Dec 2022 05:55:20 GMT age: 36689 etag: "1d702df3a64258628f4124eafd580695f2d350af" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 16143 Md5: 14dcca2a9c4792d835ee709bcd947402 Sha1: 1d702df3a64258628f4124eafd580695f2d350af Sha256: da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8608 Expires: Sun, 04 Dec 2022 18:30:17 GMT Date: Sun, 04 Dec 2022 16:06:49 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 83e0936435ad95a15c9ec5ff9520f4fe Sha1: a8225ee0d8ae117f977f7ff817c342c62e91b5a9 Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8315 x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: clsAMGVboAMFfxg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg== via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:42:39 GMT age: 66250 etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8315 Md5: db1701b7b9d161a0c935bb6e10b17893 Sha1: 22a8c4bd58c729c1abcf794466e8f3231dfb034b Sha256: b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 59f0b19953b7a0169d82ba4032e04ed5d2da1f78be323134d7e6c1d31b65f1fe 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4666 x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: clr_-GiboAMFwww= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ== via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:44:01 GMT age: 66168 etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 10038 Md5: cc64331a911d2c1ffcc986545ddf309f Sha1: 7af29b908d10c5320c48c3f0f9dcabe0246b21ab Sha256: 59f0b19953b7a0169d82ba4032e04ed5d2da1f78be323134d7e6c1d31b65f1fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5681 x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cltXnEotIAMFqkA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: vNP2rQwmWTntetjJyjonO8N_YOBqvQuZUm42BWX7c1GoX7jASOIpCg== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:49:42 GMT age: 65827 etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5681 Md5: 43309032a892c486f9985ef520df696e Sha1: 36f4682ca6a33ff80ee02129c77e6f27e996ede0 Sha256: 24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b6f7a60be169a1a0e7e0391ee38d7005cfb864b4ab79b23275b2d8643cd95cdd 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11482 x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: clssNEeAoAMFh_g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA== via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 22:17:35 GMT age: 64154 etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 13879 Md5: 32b5c024c4bdacc051f3cb2f5451f61b Sha1: 676af7651318fce6d16078e497bdd25c852c1bed Sha256: b6f7a60be169a1a0e7e0391ee38d7005cfb864b4ab79b23275b2d8643cd95cdd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: c6aeebd7ab0e3fc50160a9a0ce872193b5b57de10ce107debcbc63c90b711d79 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10431 x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: clsCGEwxIAMF34g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: PQ7xh995cd1UVi3z42EVZGjQjHLLvtAP5BBC-xLEEGr4mEiXS6fC-w== via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Sat, 03 Dec 2022 21:47:06 GMT age: 65983 etag: "8637105f41058bc0d2b259d462b560881928adb6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 16607 Md5: 59c7ca1caf2a8b70652f30c62b089e36 Sha1: 96430835d2d572bf6f9ae9fa8f29355df2d1ac35 Sha256: c6aeebd7ab0e3fc50160a9a0ce872193b5b57de10ce107debcbc63c90b711d79
GET /stattag.js HTTP/1.1 Host: cdntechone.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdntechone.com/stattag.js FQDN: cdntechone.com IP: 172.67.149.153 172.67.149.153 HTTP/2 200 OK content-type: application/javascript date: Sun, 04 Dec 2022 16:06:48 GMT last-modified: Wed, 23 Nov 2022 15:07:35 GMT etag: W/"637e3737-3284" link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin cache-control: max-age=14400 cf-cache-status: HIT age: 6318 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d6Fty%2FfZhlUxJcUL9IAtQXT1%2BuP1t2v6ymWcdlcTKukFfBv0RRNhaCz4eL6G0r4dpCOwXfcIEymv0wRaF7NjiMfg8vvzKb84zHU9lJ%2BmWnVgl9%2FNnUUQlHPvM6LxVLbzQQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 7745ca967fc6b524-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12593 

                                        
                                            
Expires: Sun, 04 Dec 2022 19:36:40 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:47 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    cfec3d7283a9b66d2be426ce54d210f3

                                                Sha1:   808c1feb1ba918951d1928c1f6bfc0c253262774

                                                Sha256: 1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 04 Dec 2022 15:18:24 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 2903 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    14cd9a0afb6ba9a763651d5112760d1e

                                                Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

                                                Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.160.144.191

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
x-amz-id-2: R7FQ+ehauBJu0y7XJOakNjJfeO8ekp+CmI0DN3xwWZPrwEt5mA7uHxB0CiihYYaciuDTbyFkQ3ySKA8aznssww== 

                                        
                                            
x-amz-request-id: FQRX2XPRW9DA6HH9 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
content-length: 5348 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 04 Dec 2022 15:47:02 GMT 

                                        
                                            
age: 1185 

                                        
                                            
last-modified: Thu, 10 Nov 2022 09:21:27 GMT 

                                        
                                            
etag: "9ebddc2b260d081ebbefee47c037cb28" 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    9ebddc2b260d081ebbefee47c037cb28

                                                Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39

                                                Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sun, 04 Dec 2022 16:06:47 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "18D3562684C32ED7B8D7CF02C853D8F1F08BF1074151891D9B756D14FDDDFA1F" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=15796 

                                        
                                            
Expires: Sun, 04 Dec 2022 20:30:03 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:47 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    feada0c59c0eaab85490c6c8a7bcdd19

                                                Sha1:   067889598d6125a945f0f7815a03328b62e9d139

                                                Sha256: 18d3562684c32ed7b8d7cf02c853d8f1f08bf1074151891d9b756d14fdddfa1f

                                        
                                            GET /gid.js HTTP/1.1 

                                        
                                            
Host: my.rtmark.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json, text/plain, */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://championtest.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         139.45.195.8

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json; charset=utf-8

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
content-length: 65 

                                        
                                            
access-control-allow-origin: https://championtest.com 

                                        
                                            
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE 

                                        
                                            
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token 

                                        
                                            
access-control-expose-headers: Authorization 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
set-cookie: ID=40c585a527c94d4794bd572570b4f866; expires=Mon, 04 Dec 2023 16:06:48 GMT; secure; SameSite=None 

                                        
                                            
strict-transport-security: max-age=1 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
timing-allow-origin: *, * 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text

                                                Size:   65

                                                Md5:    76f1961a5fcffb885c237ab1234360d2

                                                Sha1:   cd40272761a35e77699ae24ce98ed0b765f8b1a7

                                                Sha256: 6ac396220780636043ee845608a2c2cdd8618716841718becae95235978a4866

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: e1.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 345 

                                        
                                            
ETag: "02DF2293BBA89B1251E3DC7E75DF671314CAB849E0BC367507CDC10B35DBB4AA" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=17778 

                                        
                                            
Expires: Sun, 04 Dec 2022 21:03:06 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   345

                                                Md5:    bab3e161e3f3854daf7dc364769decd5

                                                Sha1:   48869547ffc9c4481f49a32528f2bbe9d7038bf0

                                                Sha256: 02df2293bba89b1251e3dc7e75df671314cab849e0bc367507cdc10b35dbb4aa

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A2E6FE60DAD375D5FD5BA0AB7B8BDB94A9F37D4658DF046EB07A38DECD8DA38B" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=3808 

                                        
                                            
Expires: Sun, 04 Dec 2022 17:10:16 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    56f234815fb6425bd80a0a918263e36a

                                                Sha1:   d816e6c172bb82672bef527f906c60fc6a3e55a0

                                                Sha256: a2e6fe60dad375d5fd5ba0ab7b8bdb94a9f37d4658df046eb07a38decd8da38b

                                        
                                            POST /gseccovsslca2018 HTTP/1.1 

                                        
                                            
Host: ocsp.globalsign.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 79 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         104.18.21.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
Content-Length: 937 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Expires: Thu, 08 Dec 2022 14:33:48 GMT 

                                        
                                            
ETag: "043aef7ed4f1c5d84a44e9ad8546f7f6ee392b30" 

                                        
                                            
Last-Modified: Sun, 04 Dec 2022 14:33:49 GMT 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600 

                                        
                                            
CF-Cache-Status: HIT 

                                        
                                            
Age: 2654 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 7745ca97c84c0afa-OSL 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   937

                                                Md5:    5a263c0b3ce5127415dda068d3577273

                                                Sha1:   043aef7ed4f1c5d84a44e9ad8546f7f6ee392b30

                                                Sha256: 9a21f310d7382d824db60bedd76a75973fa352afe5c942f03c0ab63158b58842

                                        
                                            GET /metrika/tag.js HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         87.250.250.119

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
content-length: 73266 

                                        
                                            
date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
etag: "6388ac0c-11e32" 

                                        
                                            
expires: Sun, 04 Dec 2022 17:06:48 GMT 

                                        
                                            
last-modified: Thu, 01 Dec 2022 16:28:44 GMT 

                                        
                                            
cache-control: max-age=3600 

                                        
                                            
content-encoding: br 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (586)

                                                Size:   73266

                                                Md5:    a4567a1e52f99c2b3870f58375ec8cac

                                                Sha1:   dbfc795e71fc19f7e45e8637abc4ac770f639a48

                                                Sha256: 2b13b5716855040bd9a08972b0e61369e50c6daa402ed937e18f6795f82429c8

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: Rqbkf/X9o0SuFaz4oLvGyA== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         52.13.69.101

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: oTooUS4XvZ3EoIvCI5G5MCXnfZk= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   3458

                                                Md5:    c72766080b51b9d7ef0392e094552575

                                                Sha1:   0762b1449fba05cc3d4fc9e5e53ce88fc12bc983

                                                Sha256: 1be56a3a9a589658799ae0680a0d7b75aa934a3b163de266d1a76f03ed91969b

                                        
                                            GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A412945993%3Arqn%3A1%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C85%2C1%2C%2C0%2C%2C76%2C2%2C%2C%2C%2C238%3Aco%3A0%3Ans%3A1670170005327%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://championtest.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         87.250.250.119

                                        
                                            HTTP/2 302 Found

                                        

                                        
                                            
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A412945993%3Arqn%3A1%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C85%2C1%2C%2C0%2C%2C76%2C2%2C%2C%2C%2C238%3Aco%3A0%3Ans%3A1670170005327%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 

                                        
                                            
date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
access-control-allow-origin: https://championtest.com 

                                        
                                            
set-cookie: yabs-sid=126257171670170008; Path=/; SameSite=None; Secure
i=26Jbz9PgqL7U/hzWZzlW+elAghuNw/4YYiGNFCjzsoJGu8pNtgvO6/m25v9p3zfWkx1zRpc5GkexDndXSqAVPlihu+Y=; Expires=Wed, 01-Dec-2032 16:06:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=4402043581670170008; Expires=Mon, 04-Dec-2023 16:06:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4402043581670170008; Expires=Mon, 04-Dec-2023 16:06:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1701706008.yc.1670170008#1701706008.yrts.1670170008#1701706008.yrtsi.1670170008; Expires=Mon, 04-Dec-2023 16:06:48 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
pragma: no-cache 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
expires: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
last-modified: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
cache-control: private, no-cache, no-store, must-revalidate, max-age=0 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (400), with no line terminators

                                                Size:   400

                                                Md5:    a1695b46039e8a3d536d5845c277ea92

                                                Sha1:   d053f83602abd46a969cd6105bd9b32ae01cf450

                                                Sha256: c6205af9a90e6c097795f284db8e2d06cd069ee7cffcff1f187506af4bb5b8a4

                                        
                                            POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A171677884%3Arqn%3A5%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(2) HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/x-www-form-urlencoded 

                                        
                                            
Content-Length: 43 

                                        
                                            
Origin: https://championtest.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         87.250.250.119

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
content-length: 43 

                                        
                                            
date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
access-control-allow-origin: https://championtest.com 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
pragma: no-cache 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
expires: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
last-modified: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
cache-control: private, no-cache, no-store, must-revalidate, max-age=0 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   43

                                                Md5:    df3e567d6f16d040326c7a0ea29a4f41

                                                Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736

                                                Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

                                        
                                            POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A100181601%3Arqn%3A6%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(2) HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/x-www-form-urlencoded 

                                        
                                            
Content-Length: 16 

                                        
                                            
Origin: https://championtest.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         87.250.250.119

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
content-length: 43 

                                        
                                            
date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
access-control-allow-origin: https://championtest.com 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
pragma: no-cache 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
expires: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
last-modified: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
cache-control: private, no-cache, no-store, must-revalidate, max-age=0 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  GIF image data, version 89a, 1 x 1\012- data

                                                Size:   43

                                                Md5:    df3e567d6f16d040326c7a0ea29a4f41

                                                Sha1:   ea7df583983133b62712b5e73bffbcd45cc53736

                                                Sha256: 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

                                        
                                            POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1670170008_81dd9bd4668143a5193acd53ab4b035050fd5b8b779a6d5030c32073a99c2126&browser-info=ar%3A1%3Avf%3Aynz2f7f3y7l8rj188tipo%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A933%3Acn%3A1%3Adp%3A0%3Als%3A988580448224%3Ahid%3A688687354%3Az%3A0%3Ai%3A20221204160646%3Aet%3A1670170006%3Ac%3A1%3Arn%3A752747786%3Arqn%3A7%3Au%3A1670170006756873604%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670170005327%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670170006%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(2) HTTP/1.1 

                                        
                                            
Host: mc.yandex.ru

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/x-www-form-urlencoded 

                                        
                                            
Content-Length: 50 

                                        
                                            
Origin: https://championtest.com 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         87.250.250.119

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/gif

                                        

                                        
                                            
content-length: 43 

                                        
                                            
date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
access-control-allow-origin: https://championtest.com 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
pragma: no-cache 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
expires: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
last-modified: Sun, 04-Dec-2022 16:06:48 GMT 

                                        
                                            
cache-control: private, no-cache, no-store, must-revalidate, max-age=0 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   20464

                                                Md5:    8b03aab9fa39ac38838595de63e6c429

                                                Sha1:   e7de8350068653a6e8e1e41e46adeaf4000b3ed0

                                                Sha256: 7d84e0c4afe1d779104b204f023864a4cb5a6d851b42f10a8b5a1ef93f2a9e96

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8608 

                                        
                                            
Expires: Sun, 04 Dec 2022 18:30:17 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:49 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    83e0936435ad95a15c9ec5ff9520f4fe

                                                Sha1:   a8225ee0d8ae117f977f7ff817c342c62e91b5a9

                                                Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8608 

                                        
                                            
Expires: Sun, 04 Dec 2022 18:30:17 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:49 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    83e0936435ad95a15c9ec5ff9520f4fe

                                                Sha1:   a8225ee0d8ae117f977f7ff817c342c62e91b5a9

                                                Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7" 

                                        
                                            
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8608 

                                        
                                            
Expires: Sun, 04 Dec 2022 18:30:17 GMT 

                                        
                                            
Date: Sun, 04 Dec 2022 16:06:49 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    83e0936435ad95a15c9ec5ff9520f4fe

                                                Sha1:   a8225ee0d8ae117f977f7ff817c342c62e91b5a9

                                                Sha256: ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4666 

                                        
                                            
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: clr_-GiboAMFwww= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ== 

                                        
                                            
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 03 Dec 2022 21:44:01 GMT 

                                        
                                            
age: 66168 

                                        
                                            
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   10038

                                                Md5:    cc64331a911d2c1ffcc986545ddf309f

                                                Sha1:   7af29b908d10c5320c48c3f0f9dcabe0246b21ab

                                                Sha256: 59f0b19953b7a0169d82ba4032e04ed5d2da1f78be323134d7e6c1d31b65f1fe

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f00caab-057c-4cc2-a163-fd0bb4d0b5f7.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11482 

                                        
                                            
x-amzn-requestid: d1db05ab-bd5d-4ad4-96b4-8f439152e435 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: clssNEeAoAMFh_g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638bc181-0221c53842a2f5ef071e8071;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 03 Dec 2022 21:37:05 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: UZ5kblxfN8fkp55YeSpUA55GzDxZgsLpFZrYTsdJBihf53HLCN0hTA== 

                                        
                                            
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 03 Dec 2022 22:17:35 GMT 

                                        
                                            
age: 64154 

                                        
                                            
etag: "527220e4e8cd1065ce05fcd0694d0d703d817e2e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   13879

                                                Md5:    32b5c024c4bdacc051f3cb2f5451f61b

                                                Sha1:   676af7651318fce6d16078e497bdd25c852c1bed

                                                Sha256: b6f7a60be169a1a0e7e0391ee38d7005cfb864b4ab79b23275b2d8643cd95cdd

                                        
                                            GET /stattag.js HTTP/1.1 

                                        
                                            
Host: cdntechone.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         172.67.149.153

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript

                                        

                                        
                                            
date: Sun, 04 Dec 2022 16:06:48 GMT 

                                        
                                            
last-modified: Wed, 23 Nov 2022 15:07:35 GMT 

                                        
                                            
etag: W/"637e3737-3284" 

                                        
                                            
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin 

                                        
                                            
cache-control: max-age=14400 

                                        
                                            
cf-cache-status: HIT 

                                        
                                            
age: 6318 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d6Fty%2FfZhlUxJcUL9IAtQXT1%2BuP1t2v6ymWcdlcTKukFfBv0RRNhaCz4eL6G0r4dpCOwXfcIEymv0wRaF7NjiMfg8vvzKb84zHU9lJ%2BmWnVgl9%2FNnUUQlHPvM6LxVLbzQQ%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 7745ca967fc6b524-OSL 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	championtest.com/betting-survey.html
IP	188.114.96.1 (Colombia)
ASN	#13335 CLOUDFLARENET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-04 16:06:58 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 188.114.96.1

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: championtest.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (20)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (42)

Overview

Domain Summary (0)

No passive DNS data

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 188.114.96.1

Last 5 reports on ASN: CLOUDFLARENET

Last 5 reports on domain: championtest.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (20)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (42)

Network Intrusion Detection Systems