| trk.pssnmmzzv.click/0f617f2c-ba77-4676-9dd6-d86c126bdaef |  18.195.23.231 | 302 | 0 B |
URL HTTP/1.1trk.pssnmmzzv.click/0f617f2c-ba77-4676-9dd6-d86c126bdaef IP18.195.23.231:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | | | quad9 | Sinkholed | |
GET /0f617f2c-ba77-4676-9dd6-d86c126bdaef HTTP/1.1
Host: trk.pssnmmzzv.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Fri, 30 Dec 2022 00:09:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://gdasaasnt.com/link?z=5477635&var=&ymid=w9p1o7lg8otqughliqnag3mm
Pragma: no-cache
Set-Cookie: 0f617f2c-ba77-4676-9dd6-d86c126bdaef-v4=L_5w9eZOdJ7lwPw3Xz_jtJ9sw8zxYdp0pxAAYTFu1E0; Max-Age=86400; Expires=Sat, 31-Dec-2022 00:09:50 GMT; Domain=trk.pssnmmzzv.click; Path=/; HttpOnly
cc-v4=aRfA1ZMpMG5svTP%2F%2BjNZTfaymrjGPPEhHZB4NW7Nu6TWxW5%2F%2FmPrIgEKBjc5nMGAx5Gn599lyhjFgbectkc%2FfhkWS5u57eULfagfgziivZ4fuU2PMLKPa5Z74gXCX9P1sxyqMWNyXfsw1nxOLMEcCQ%3D%3D; Max-Age=31536000; Expires=Sat, 30-Dec-2023 00:09:50 GMT; Domain=trk.pssnmmzzv.click; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashcd2bda30513692aa11a672c6a599935d a944c3aa26b461063194a4bb95ce427d23a32d03 d975d1eab40c9fe4986ae0675d79e4f982eb9c0e2f503ca72b3bdf0ec9e7dfdc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D975D1EAB40C9FE4986AE0675D79E4F982EB9C0E2F503CA72B3BDF0EC9E7DFDC"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2595
Expires: Fri, 30 Dec 2022 00:53:05 GMT
Date: Fri, 30 Dec 2022 00:09:50 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash259d3eba2ac4ea32f0410a59bd01c18a ab02cd69e6c04e3842ad1778fb0daa6d0e86fddc 0d6ec941dac6d97a0b24c0cf00a5642a4edda68ae5ec8b3019d1ec05f40d2281
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D6EC941DAC6D97A0B24C0CF00A5642A4EDDA68AE5EC8B3019D1EC05F40D2281"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4610
Expires: Fri, 30 Dec 2022 01:26:40 GMT
Date: Fri, 30 Dec 2022 00:09:50 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 29 Dec 2022 23:46:53 GMT
content-type: application/json
age: 1377
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash07e619a5a572fa9bcb54fa70de27f0d4 c0499dcc7551831f517f189465812859d0f48ced 2213c856ce4dd64ebe28e4deff34d449b2c08be98565c0405427453ae948fa74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2213C856CE4DD64EBE28E4DEFF34D449B2C08BE98565C0405427453AE948FA74"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13430
Expires: Fri, 30 Dec 2022 03:53:40 GMT
Date: Fri, 30 Dec 2022 00:09:50 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb1fcd419a4245617397846e8d17233f6 2a037ce244587640b27ead9a0ec2af4f862d91b2 e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ShuQkBDXG8+K3xvfLjSvv3GF6i9XzsHDP+eKSOGcnwAmMOYLoV6QNlAjAke7t0cgrlDkl/Trgs0=
x-amz-request-id: 0B8YH7BR8QV2XYRG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 29 Dec 2022 23:56:48 GMT
age: 782
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 00:09:50 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash987457b1da7e880760f28e43566805c1 09bddc8a752ae32e06285432cf39b8ef81b847a8 dee22f097ba88794bea43cf16787ed389727453cb54309d5c4882aff0938a0c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DEE22F097BA88794BEA43CF16787ED389727453CB54309D5C4882AFF0938A0C2"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2534
Expires: Fri, 30 Dec 2022 00:52:04 GMT
Date: Fri, 30 Dec 2022 00:09:50 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 30 Dec 2022 00:08:08 GMT
age: 103
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ |  104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash8ca720003d6936139e0f9038f38c6b2f 608889df545dca484ec357dbdd9a6d2e2669cd35 d2078638655684965a12965bf29346008139e1cf2f5356c2c22a49d15006632f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 00:09:51 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 14:07:08 GMT
Expires: Thu, 05 Jan 2023 14:07:07 GMT
Etag: "608889df545dca484ec357dbdd9a6d2e2669cd35"
Cache-Control: max-age=568035,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78168c8e2d1bb517-OSL
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe50b40f2cdac574cf05b664ac8e3e75d 770f36f70a237be5b4c28fb6446c9adc9593f57d f0824eb99b1e632a2efc3f281748858de8ec75f62a00023e840e39c8606e07c9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F0824EB99B1E632A2EFC3F281748858DE8EC75F62A00023E840E39C8606E07C9"
Last-Modified: Tue, 27 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13719
Expires: Fri, 30 Dec 2022 03:58:30 GMT
Date: Fri, 30 Dec 2022 00:09:51 GMT
Connection: keep-alive
|
|
| datatechone.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f |  37.48.68.71 | 200 OK | 2 B |
URL HTTP/1.1datatechone.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f IP37.48.68.71:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 929
Origin: https://gdasaasnt.com
Connection: keep-alive
Referer: https://gdasaasnt.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 30 Dec 2022 00:09:51 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: https://gdasaasnt.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| my.rtmark.net/img.gif?f=merge&userId=4ce653d2b4a74fccb895925197e5e41c |  139.45.195.8 | 200 OK | 43 B |
URL HTTP/2my.rtmark.net/img.gif?f=merge&userId=4ce653d2b4a74fccb895925197e5e41c IP139.45.195.8:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=4ce653d2b4a74fccb895925197e5e41c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdasaasnt.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 00:09:51 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=4ce653d2b4a74fccb895925197e5e41c; expires=Sat, 30 Dec 2023 00:09:51 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| gdasaasnt.com/favicon.ico | 139.45.197.239 | 204 No Content | 0 B |
URL HTTP/2gdasaasnt.com/favicon.ico IP139.45.197.239:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /favicon.ico HTTP/1.1
Host: gdasaasnt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gdasaasnt.com/link?z=5477635&var=&ymid=w9p1o7lg8otqughliqnag3mm
Cookie: OAID=4ce653d2b4a74fccb895925197e5e41c; oaidts=1672358990; allcnt=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 30 Dec 2022 00:09:51 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash0a08dc71eb7ba3512abb4d29505eb034 e66404bda80b355bae30b0d4db3daa193a6e4276 357891f99263d30eaded85985217d9627cd60369ee8d01a7eacdb2d0f2d8b2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2786
Cache-Control: max-age=121402
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 00:09:51 GMT
Etag: "63ad58a7-1d7"
Expires: Sat, 31 Dec 2022 09:53:13 GMT
Last-Modified: Thu, 29 Dec 2022 09:06:47 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe02bb8c4ddee7dde8043d4e175667ae0 2213dfcf6ad792146c84fe51a2cb66ad0095ca55 6eaaffcbc58b3f4848a1de0e020bb214e5af1a8902326a035bcab02bd2e0cce5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6EAAFFCBC58B3F4848A1DE0E020BB214E5AF1A8902326A035BCAB02BD2E0CCE5"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4147
Expires: Fri, 30 Dec 2022 01:18:58 GMT
Date: Fri, 30 Dec 2022 00:09:51 GMT
Connection: keep-alive
|
|
| whoursie.com/?z=5477636&syncedCookie=true&rhd=false | 139.45.197.237 | 302 Found | 0 B |
URL HTTP/2whoursie.com/?z=5477636&syncedCookie=true&rhd=false IP139.45.197.237:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /?z=5477636&syncedCookie=true&rhd=false HTTP/1.1
Host: whoursie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 521
Origin: https://gdasaasnt.com
Connection: keep-alive
Referer: https://gdasaasnt.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 30 Dec 2022 00:09:51 GMT
content-length: 0
location: https://championtest.com/betting-survey.html?offer_id=2058&s=632482051647607368&z=5477636&var=&geo=NO&ipp=1&rdk=rk3
x-trace-id: 22af4980d83cedf55a4b35a2e7b17957
link: <https://championtest.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
access-control-allow-origin: https://gdasaasnt.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=fca43b6a777c47cab35265214ea23dbe; expires=Sat, 30 Dec 2023 00:09:51 GMT; path=/; secure; SameSite=None
oaidts=1672358991; expires=Sat, 30 Dec 2023 00:09:51 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.164.56.167 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.164.56.167:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CcVRdcRijmb6CGcxbrvGHg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wvSHrm1Z4qZj/s9K1CSCYGV0lhU=
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 4.9 kB |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash214e5d89e3e494873e7aab5d6a6bbbb0 6108f76593e97c1b712e06a292c27733d2dc3d21 70a1551948bf42c990732d4a5eb428daf5c01276b1cdaa7d7dfa89b305690f62
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F0824EB99B1E632A2EFC3F281748858DE8EC75F62A00023E840E39C8606E07C9"
Last-Modified: Tue, 27 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13719
Expires: Fri, 30 Dec 2022 03:58:30 GMT
Date: Fri, 30 Dec 2022 00:09:51 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 4.3 kB |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe03475e7854ce2dd99e2a1b710736215 fba124738f0f309bf9224ca6d87b2f7b339b1c41 df3211264e69963370ffe637bdb56e767226a3db8a7d7380b2c0f86beb4212bc
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B2A027D7BC1CC3762C6DF3A4B2DCA058BD46196A1194096B7CA38F114D698D6C"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4511
Expires: Fri, 30 Dec 2022 01:25:02 GMT
Date: Fri, 30 Dec 2022 00:09:51 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 345 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash29fbef0b14da54c5eb6b04110b747d76 a15bee296b09d19f27ac4cd0f2173eea5f9cd82d b2a027d7bc1cc3762c6df3a4b2dca058bd46196a1194096b7ca38f114d698d6c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B2A027D7BC1CC3762C6DF3A4B2DCA058BD46196A1194096B7CA38F114D698D6C"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4511
Expires: Fri, 30 Dec 2022 01:25:02 GMT
Date: Fri, 30 Dec 2022 00:09:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7707d5936a2bf543f44fb314ee42ceb5 d2ab25cf19c19e3144d666de8ec342930ef1d038 9b5b01790621fc20aa7e48875a1c20a03736a6936ed49076b7c5e32a09438f70
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B5B01790621FC20AA7E48875A1C20A03736A6936ED49076B7C5E32A09438F70"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4674
Expires: Fri, 30 Dec 2022 01:27:46 GMT
Date: Fri, 30 Dec 2022 00:09:52 GMT
Connection: keep-alive
|
|
| my.rtmark.net/gid.js | 139.45.195.8 | 200 OK | 65 B |
IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash23df9b2dd41b35fdf2be5aec5ca91f6a 64fb9f09efe4e6b1c69546a235192873a122a808 ddbbc80633e16e965135a3164ebd4a14873e877425af465ecc92e2d8d0e3b99b
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 00:09:52 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://championtest.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=98b3e63b9b424c048adc77fa62447fb4; expires=Sat, 30 Dec 2023 00:09:52 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png | 139.45.197.155 | 200 OK | 14 kB |
URL HTTP/2pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png IP139.45.197.155:0
Hash1807892ebb1cebe71cdabd69c0d8b198 f8b5ce5146f92a8172114753722e2cf5a709e8f9 9a2c0688f795f54d1cc959182c7c15d4239caa488ecc2448c3ac989b5f3e11d0
GET /contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png HTTP/1.1
Host: pulsersurvey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 00:09:52 GMT
content-type: image/png
content-length: 10580
last-modified: Thu, 21 Jan 2021 09:10:34 GMT
vary: Accept-Encoding
etag: "6009450a-2954"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8087d4ebf6736ed55e622ad6a36fdac1 6a8fbcd3963824d86a6d85dbc515378627c61251 66f2ef041aaeb3ddfee16a210fa58b604f8b44256b3b590549f5b1d40fe428f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "66F2EF041AAEB3DDFEE16A210FA58B604F8B44256B3B590549F5B1D40FE428F3"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14508
Expires: Fri, 30 Dec 2022 04:11:40 GMT
Date: Fri, 30 Dec 2022 00:09:52 GMT
Connection: keep-alive
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hashd16a197eb5296c3cb34d70d6857ad804 597ea850833d52e37fc1f39a65ade88c159d957b d4c2a6bb24ad17118a21586ba9af9c432d9f9b378a8fde33dd417014471494e7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 00:09:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 05:19:53 GMT
Expires: Thu, 05 Jan 2023 05:19:52 GMT
Etag: "597ea850833d52e37fc1f39a65ade88c159d957b"
Cache-Control: max-age=536399,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78168c953b52b517-OSL
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a | 139.45.195.253 | 200 OK | 12 B |
URL HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a IP139.45.195.253:0
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1017
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 30 Dec 2022 00:09:52 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://championtest.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| itcleffaom.com/rotate?zz=4326388;5592669;5592658;5592700;5592634;5592702&var=5477636&uid=98b3e63b9b424c048adc77fa62447fb4 | 139.45.197.237 | 200 OK | 5.1 kB |
URL HTTP/2itcleffaom.com/rotate?zz=4326388;5592669;5592658;5592700;5592634;5592702&var=5477636&uid=98b3e63b9b424c048adc77fa62447fb4 IP139.45.197.237:0
Hashe9135944ffdab88a64c5fa8700954269 44fbcbcdc7978fb69bf944fda6065ce5ef380f86 7293a7148a8f80010573e97e357281c3c46c8b2726297448339f9f00b6795b8a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /rotate?zz=4326388;5592669;5592658;5592700;5592634;5592702&var=5477636&uid=98b3e63b9b424c048adc77fa62447fb4 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 00:09:52 GMT
content-type: application/javascript
x-trace-id: 8d7bf8b7a7b44015c57cfb8f417c5b64
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://championtest.com
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=98b3e63b9b424c048adc77fa62447fb4; expires=Sat, 30 Dec 2023 00:09:52 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/tag.js |  77.88.21.119 | 200 OK | 76 kB |
URL HTTP/2mc.yandex.ru/metrika/tag.js IP77.88.21.119:0
File typeASCII text, with very long lines (511), with no line terminators Hashbf720954835f56094ee6c908da0a6822 4a1639fc039a21deeb05984bb8404a11bb205a30 1e1e787325b3a9b16f52952f1e15ed35ca92ad48915280d99fe8e7676b06f753
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73733
date: Fri, 30 Dec 2022 00:09:52 GMT
access-control-allow-origin: *
etag: "63933377-12005"
expires: Fri, 30 Dec 2022 01:09:52 GMT
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/advert.gif | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:52 GMT
access-control-allow-origin: *
etag: "63933377-2b"
expires: Fri, 30 Dec 2022 01:09:52 GMT
accept-ranges: bytes
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A274%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1044712189%3Arqn%3A1%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C76%2C0%2C%2C0%2C%2C89%2C2%2C%2C%2C%2C248%3Aco%3A0%3Ans%3A1672358985998%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 | 77.88.21.119 | 200 OK | 400 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A274%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1044712189%3Arqn%3A1%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C76%2C0%2C%2C0%2C%2C89%2C2%2C%2C%2C%2C248%3Aco%3A0%3Ans%3A1672358985998%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 IP77.88.21.119:0
File typeJSON data\012- , ASCII text, with very long lines (400), with no line terminators Hashbe8edc9e902a105f9026bb2a48e14aa8 f7a34e02fcc134e56db622b51671d764c55adc69 babb3abdef8856bb6ab23342d7e0c60a68946281dfbbbe0fbf727ebfd80389b9
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A274%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1044712189%3Arqn%3A1%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C76%2C0%2C%2C0%2C%2C89%2C2%2C%2C%2C%2C248%3Aco%3A0%3Ans%3A1672358985998%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Fri, 30 Dec 2022 00:09:52 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://championtest.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:52 GMT
last-modified: Fri, 30-Dec-2022 00:09:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A274%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1044712189%3Arqn%3A1%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C76%2C0%2C%2C0%2C%2C89%2C2%2C%2C%2C%2C248%3Aco%3A0%3Ans%3A1672358985998%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) | 77.88.21.119 | 302 Found | 1.7 kB |
URL HTTP/2mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A274%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1044712189%3Arqn%3A1%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C76%2C0%2C%2C0%2C%2C89%2C2%2C%2C%2C%2C248%3Aco%3A0%3Ans%3A1672358985998%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) IP77.88.21.119:0
Hash8627477888b9f7c741d8737177a87597 011747fe0c3eb5d30bfe13d1f8c690874cbdd95f dbe3dc6b3313c9154ac3464b15f050187356c2bd544c58aaa467e7255b611311
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A274%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1044712189%3Arqn%3A1%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C76%2C0%2C%2C0%2C%2C89%2C2%2C%2C%2C%2C248%3Aco%3A0%3Ans%3A1672358985998%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://championtest.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A274%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1044712189%3Arqn%3A1%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C76%2C0%2C%2C0%2C%2C89%2C2%2C%2C%2C%2C248%3Aco%3A0%3Ans%3A1672358985998%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Fri, 30 Dec 2022 00:09:52 GMT
access-control-allow-origin: https://championtest.com
set-cookie: yabs-sid=2399014131672358992; Path=/; SameSite=None; Secure
i=z/2hRY1TFAvQk59hvlKhXOlCqZpjH4oq9o1JlxpChkrCuWfUaWzXF4yPNalEEJgK3ZCz2fWZ2eUZokkpLlToBO5agNc=; Expires=Mon, 27-Dec-2032 00:09:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3629046121672358992; Expires=Sat, 30-Dec-2023 00:09:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3629046121672358992; Expires=Sat, 30-Dec-2023 00:09:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1703894992.yc.1672358992#1703894992.yrts.1672358992#1703894992.yrtsi.1672358992; Expires=Sat, 30-Dec-2023 00:09:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:52 GMT
last-modified: Fri, 30-Dec-2022 00:09:52 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash2783127a63c78cb5ac02e1a31631bfca a26af5a37bbb43d4258282640749ced026ba9560 cfe19d12b6070f9171129591b54bab634d5582e4d8d83e5c1fbe703d873b8366
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CFE19D12B6070F9171129591B54BAB634D5582E4D8D83E5C1FBE703D873B8366"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16440
Expires: Fri, 30 Dec 2022 04:43:52 GMT
Date: Fri, 30 Dec 2022 00:09:52 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F494a676a-db54-45e7-a2ef-f33e70eef1c7.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F494a676a-db54-45e7-a2ef-f33e70eef1c7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashaa84178e1bdd088bb49a5c3a51d6a9f3 9bd9f17b057b9cf44cf9c00c4410852cd0b271bc c53b3bdd11594feadf1f2d0ae09b3615965850f858c0e27305992102c51df365
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F494a676a-db54-45e7-a2ef-f33e70eef1c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6036
x-amzn-requestid: dd3a8928-b5e4-41e9-a2d4-4d53d34ed11a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZVKGLAoAMFVsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae08ed-7e97cd781cf1e1fb1cdf5739;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:38:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 9CwQAvJu0xbmEgbA9jgxGR6GV1hAW8UBrz2QBqnuCjfllHY_69H3kA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:03:15 GMT
age: 7597
etag: "9bd9f17b057b9cf44cf9c00c4410852cd0b271bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash51406d6bd4a7322a475fc2a98267154e 9fa03002aa1974d4a9557cedad8bd5d7fefa52ad a1858d9fd203972f0dc3fe97f36e07796b84f6e2851c9990d406f452793e3454
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4aacfdf9-29e5-4cca-88eb-1d7fb007e520.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11315
x-amzn-requestid: 77dd9348-e3a9-448e-8ae9-499d5d672a41
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d4GZpGTRIAMFTUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63acb770-7dec07d1447e6f10125b8b6f;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 21:38:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lfojNVZMHGD1YfOqiMgEwTOi_6uPqkVJ_gbQ0PKo5CLFycpcY89T1g==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 21:42:23 GMT
age: 8849
etag: "9fa03002aa1974d4a9557cedad8bd5d7fefa52ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693b81b6-399f-4e04-8c36-91e7c294e358.jpeg | 34.120.237.76 | 200 OK | 7.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693b81b6-399f-4e04-8c36-91e7c294e358.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash790b80f07301971184300a383d7bf189 288b17ba558694fd0546fa9399a90db81e461138 7e3a09ba6e295d690b1b3c0831614920025ff59001ee31700630a772c0178793
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F693b81b6-399f-4e04-8c36-91e7c294e358.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7569
x-amzn-requestid: 3bf89a71-679e-41d9-8171-120ace98ff1a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZmkFz7IAMFgwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae095d-165e127b010f5861658da5c1;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:40:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3AWWM_vVpWD0Y3Oc56MZbLFsDyiJEpeRN7xlnnRjb_7VS8RGftOuqA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:19:05 GMT
age: 6647
etag: "288b17ba558694fd0546fa9399a90db81e461138"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5684f9da-4da1-47fc-a5ba-8f30a894d588.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5684f9da-4da1-47fc-a5ba-8f30a894d588.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9ebe131c7787411178a93d045ba57b5a 40b601b6ad3a3d7738b5b55777981598f4dc0519 68ea133b346bd1f76cd7b4dcf5023d8f987935dff380bacec73dec957effb97e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5684f9da-4da1-47fc-a5ba-8f30a894d588.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11516
x-amzn-requestid: e4e9ceeb-b2e5-454f-9550-d412fc0be82a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7aRLGuqoAMF3JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0a6d-6ed43b46144121dc2dd7db2f;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:45:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0cLaSIiaQE4WUEG4mML3Nfad-lh-MWyzAQ1bb7XInUIx7Nm8D6rU_w==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:16:00 GMT
age: 6832
etag: "40b601b6ad3a3d7738b5b55777981598f4dc0519"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59a00921-670d-4d42-8d38-4adc489e84fc.webp | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59a00921-670d-4d42-8d38-4adc489e84fc.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha420fd559ef25d34ee67e7ad924754dc 8af81fc3bcd1447ad6318d6c0973c96cd0d274db b2fbf57e833264e53a22c4361a8e4a21d57886f7b419889bfdc15c0b46783da5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59a00921-670d-4d42-8d38-4adc489e84fc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8304
x-amzn-requestid: 838f55fc-3c1a-4145-8f73-77d309cdcd6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d1I3qFWgoAMFxmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab8830-2749fe63254d6fc92f2ac986;Sampled=0
x-amzn-remapped-date: Wed, 28 Dec 2022 00:05:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: B0BiItcr_8YrHZND4pzWr6B_cpuIgCAOSccip3KFBwrNAa9hqUj_zA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 05:56:55 GMT
age: 65577
etag: "8af81fc3bcd1447ad6318d6c0973c96cd0d274db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18854f68-aef9-4d81-b114-9ed2612bd9c9.jpeg | 34.120.237.76 | 200 OK | 5.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18854f68-aef9-4d81-b114-9ed2612bd9c9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2a59c2f624bc4bf589dc6c292bf5a719 9b26cec9f7ce4894be40eeee964fade97086c995 5d4fc20840862742744b702215e72ffb277f74d59b45150e35a264ac07851ccd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18854f68-aef9-4d81-b114-9ed2612bd9c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5021
x-amzn-requestid: b0feceb0-61bb-40db-8dfe-d60709b9f3b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7a4nHp0oAMF1yQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0b6a-2d51181035d281d843f415fc;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:49:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BhtCZYuhRBrwEPK0_sVHA0kTCjbhowPL00KB7JwaGP--djKO6Q5-iA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 23:06:37 GMT
age: 3795
etag: "9b26cec9f7ce4894be40eeee964fade97086c995"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1047574247%3Arqn%3A2%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1070%2C1070%2C0%2C%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%222058%22%2C%22userSurveyId%22%3A1509001%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1047574247%3Arqn%3A2%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1070%2C1070%2C0%2C%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%222058%22%2C%22userSurveyId%22%3A1509001%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonSurveyStart&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1047574247%3Arqn%3A2%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1070%2C1070%2C0%2C%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%222058%22%2C%22userSurveyId%22%3A1509001%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A248360610%3Arqn%3A3%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A248360610%3Arqn%3A3%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexCall&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A248360610%3Arqn%3A3%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A225142464%3Arqn%3A4%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A225142464%3Arqn%3A4%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonAdexLoad&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A225142464%3Arqn%3A4%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A82931731%3Arqn%3A5%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A82931731%3Arqn%3A5%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonUnique&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A82931731%3Arqn%3A5%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A525169112%3Arqn%3A6%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A525169112%3Arqn%3A6%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonStepChange&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A525169112%3Arqn%3A6%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A637474495%3Arqn%3A8%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A637474495%3Arqn%3A8%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A637474495%3Arqn%3A8%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1059345820%3Arqn%3A9%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22ipp%22%2C%22teenageExitDirection%22%3A%22ipp%22%2C%22mainExitPopunderDirection%22%3A%22ipp%22%2C%22teenageExitPopunderDirection%22%3A%22ipp%22%2C%22notUniqueExitDirection%22%3A%22ipp%22%2C%22autoExitStepDirection%22%3A%22ipp%22%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1059345820%3Arqn%3A9%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22ipp%22%2C%22teenageExitDirection%22%3A%22ipp%22%2C%22mainExitPopunderDirection%22%3A%22ipp%22%2C%22teenageExitPopunderDirection%22%3A%22ipp%22%2C%22notUniqueExitDirection%22%3A%22ipp%22%2C%22autoExitStepDirection%22%3A%22ipp%22%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A1059345820%3Arqn%3A9%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22ipp%22%2C%22teenageExitDirection%22%3A%22ipp%22%2C%22mainExitPopunderDirection%22%3A%22ipp%22%2C%22teenageExitPopunderDirection%22%3A%22ipp%22%2C%22notUniqueExitDirection%22%3A%22ipp%22%2C%22autoExitStepDirection%22%3A%22ipp%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A312988878%3Arqn%3A7%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A312988878%3Arqn%3A7%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fchampiontest.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fchampiontest.com%2Fbetting-survey.html%3Foffer_id%3D2058%26s%3D632482051647607368%26z%3D5477636%26var%3D%26geo%3DNO%26ipp%3D1%26rdk%3Drk3%26utm_medium%3D5477636%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1672358992_9877a9f704694a2d4c1730bd901ce0cd6cc008704bcc3c666caf4bd12b9ad930&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1656968061470%3Ahid%3A453623912%3Az%3A0%3Ai%3A20221230000947%3Aet%3A1672358987%3Ac%3A1%3Arn%3A312988878%3Arqn%3A7%3Au%3A1672358987871333799%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1672358985998%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672358987%3At%3ASports%20Pro%20Test&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 30 Dec 2022 00:09:53 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 30-Dec-2022 00:09:53 GMT
last-modified: Fri, 30-Dec-2022 00:09:53 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg | 34.120.237.76 | 200 OK | 4.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha9d1857128ab6a237e6854c7a3532b51 702ab1eb38be637f012e1454201b9a7561c29081 48fbf5b5aa1cf66fcdaafe68c72ac073d2ba9b6dedf76ebfaafdc88836fa0fde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 4833
x-amzn-requestid: 46ef49d7-dadb-4665-84bf-1c331ed8fce6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZU2E3IIAMFxAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae08eb-28af0ab9094d7c21560a60db;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: aiGabD98wdch1q-6CRt4VLbduBsZEJzkku8-bTyF102z9hCpgFhIXg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:02:31 GMT
etag: "702ab1eb38be637f012e1454201b9a7561c29081"
content-type: image/jpeg
age: 7648
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashc6acfe10ed31ed5dada9203370c7fc6f eecc136ee7d6062ff11d7b505452dc072edf97ed 51c97cdb9f34753107c4faf10e72091a19b72404aab29297132fb21a06d1610a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51C97CDB9F34753107C4FAF10E72091A19B72404AAB29297132FB21A06D1610A"
Last-Modified: Thu, 29 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=569
Expires: Fri, 30 Dec 2022 00:19:29 GMT
Date: Fri, 30 Dec 2022 00:10:00 GMT
Connection: keep-alive
|
|
| championtest.com/betting-survey.html?offer_id=2058&s=632482051647607368&z=5477636&var=&geo=NO&ipp=1&rdk=rk3 | 104.21.21.52 | 200 OK | 0 B |
URL HTTP/2championtest.com/betting-survey.html?offer_id=2058&s=632482051647607368&z=5477636&var=&geo=NO&ipp=1&rdk=rk3 IP104.21.21.52:0
GET /betting-survey.html?offer_id=2058&s=632482051647607368&z=5477636&var=&geo=NO&ipp=1&rdk=rk3 HTTP/1.1
Host: championtest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Dec 2022 00:09:51 GMT
content-type: text/html
last-modified: Wed, 21 Dec 2022 13:34:34 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FqGpWATNtEoMufq46Idbin94O0kifiHk9LWCPE81EVXKv1rzrFHTQQJO9JwVXbbwkX8LJVPEZMJXM58tw%2FOhic3AmRvBUtTlmT3QCHSUii7t9Dvz217T4yYYqfsW40caEvJ5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78168c90b90ab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdntechone.com/stattag.js |  188.114.97.1 | 200 OK | 0 B |
URL HTTP/2cdntechone.com/stattag.js IP188.114.97.1:0
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 30 Dec 2022 00:09:51 GMT
content-type: application/javascript
last-modified: Thu, 29 Dec 2022 16:01:22 GMT
etag: W/"63adb9d2-331f"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5788
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Onq7vJN6FYRkCWEEp%2FDS7c%2BmT%2BWEGV479BrcZPXMnR7nepbIZVq72%2FWotd9yn3HYHoM%2FnV8eJmKbdBCexQxu9i6bqjsUkxQId8qAPLtFIJ1PuBUgsWuV3CxPy2NeRcbAuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78168c931ab1b529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gdasaasnt.com/link?z=5477635&var=&ymid=w9p1o7lg8otqughliqnag3mm | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2gdasaasnt.com/link?z=5477635&var=&ymid=w9p1o7lg8otqughliqnag3mm IP139.45.197.239:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /link?z=5477635&var=&ymid=w9p1o7lg8otqughliqnag3mm HTTP/1.1
Host: gdasaasnt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 00:09:50 GMT
content-type: text/html; charset=utf8
x-trace-id: e4d5a2972ebc7742b1e670bd9e405337
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=4ce653d2b4a74fccb895925197e5e41c; expires=Sat, 30 Dec 2023 00:09:50 GMT; path=/; secure; SameSite=None
oaidts=1672358990; expires=Sat, 30 Dec 2023 00:09:50 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
allcnt=1; expires=Sat, 30 Dec 2023 00:09:50 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|