Overview

URLserviceclub.solutions/rd/c10393pzUZt3088185cpwt2698Bys600CbfE369
IP 20.13.26.77 (United States)
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-25 08:51:34 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (20)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-25 06:03:02 UTC 34.102.187.140
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-25 05:51:47 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.42.234.253
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-11-25 05:54:26 UTC 142.250.74.164
www.facebook.com (1) 99 2012-05-21 00:23:41 UTC 2021-06-08 06:38:51 UTC 157.240.200.35
serviceclub.solutions (2) 0 2022-07-22 16:09:31 UTC 2022-11-24 13:12:03 UTC 20.13.26.77 Unknown ranking
r3.o.lencr.org (5) 344 No data No data 23.36.76.226
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-11-25 05:54:34 UTC 142.250.74.3
ocsp2.globalsign.com (1) 1544 2012-05-23 18:10:04 UTC 2020-03-15 21:19:16 UTC 104.18.20.226
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-11-25 06:21:31 UTC 142.250.74.174
ocsp.pki.goog (8) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-11-25 06:34:38 UTC 142.250.74.168
bat.bing.com (3) 387 2014-04-08 09:23:16 UTC 2020-04-20 20:17:24 UTC 13.107.21.200
googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-11-25 07:09:51 UTC 142.250.74.130
connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2020-02-17 13:26:09 UTC 157.240.200.14
ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
owenfeel.com (1) 0 2022-04-05 12:21:46 UTC 2022-11-23 14:28:43 UTC 34.78.223.0 Unknown ranking
nationaltaxhelpline.co.uk (31) 0 2021-01-08 14:16:31 UTC 2022-11-09 11:24:06 UTC 109.203.126.150 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-25 2 serviceclub.solutions/rd/c10393pzUZt3088185cpwt2698Bys600CbfE369 Phishing
2022-11-25 2 serviceclub.solutions/track/c10393pzUZt3088185cpwt2698Bys600CbfE369 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 20.13.26.77
Date UQ / IDS / BL URL IP
2023-02-05 14:49:57 +0000 0 - 0 - 2 serviceclub.solutions/rd/c22160xPPFi287jURH11 (...) 20.13.26.77
2023-02-03 13:53:18 +0000 0 - 0 - 2 serviceclub.solutions/rd/u21933FYvDb2539494el (...) 20.13.26.77
2023-01-19 12:46:42 +0000 0 - 0 - 2 bestdealsnow.today/rd/c18351lcfyy5389115baqj4 (...) 20.13.26.77
2023-01-12 07:47:32 +0000 0 - 0 - 1 serviceclub.solutions/track/o17101TZBYj16dUOD (...) 20.13.26.77
2023-01-11 07:50:05 +0000 0 - 0 - 2 serviceclub.solutions/rd/c16925YADJD3088185Rg (...) 20.13.26.77


Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK
Date UQ / IDS / BL URL IP
2023-02-06 02:52:35 +0000 0 - 7 - 0 gamingfun.me/generator.php?id=5QJ311.rar 52.173.151.229
2023-02-06 02:40:47 +0000 3 - 5 - 1 packagesupportforusps.ddns.mobi/0e3b3742842d1 (...) 20.245.77.166
2023-02-06 02:27:42 +0000 0 - 0 - 1 6089317.com/ 13.75.94.98
2023-02-06 02:09:12 +0000 0 - 4 - 0 mail.grup-whatsapp-tante-viral18.duckdns.org/ (...) 20.97.8.25
2023-02-06 01:00:40 +0000 0 - 0 - 3 www.attacctinfo.com/elJ2MjVwK1hKMEpEUllwYmpBPT0/ 20.51.235.207


Last 5 reports on domain: serviceclub.solutions
Date UQ / IDS / BL URL IP
2023-02-05 14:49:57 +0000 0 - 0 - 2 serviceclub.solutions/rd/c22160xPPFi287jURH11 (...) 20.13.26.77
2023-02-03 13:53:18 +0000 0 - 0 - 2 serviceclub.solutions/rd/u21933FYvDb2539494el (...) 20.13.26.77
2023-01-12 07:47:32 +0000 0 - 0 - 1 serviceclub.solutions/track/o17101TZBYj16dUOD (...) 20.13.26.77
2023-01-11 07:50:05 +0000 0 - 0 - 2 serviceclub.solutions/rd/c16925YADJD3088185Rg (...) 20.13.26.77
2022-12-02 13:06:59 +0000 0 - 0 - 2 serviceclub.solutions/rd/c10393KFHvW3088185PU (...) 20.13.26.77


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-28 11:01:37 +0000 0 - 0 - 2 serviceclub.solutions/rd/c10785nUDQq718679Rum (...) 20.13.26.77
2022-11-28 08:13:25 +0000 0 - 0 - 2 serviceclub.solutions/rd/c8946mXLMV16Idyw2626 (...) 20.13.26.77
2022-11-27 03:31:11 +0000 0 - 0 - 2 serviceclub.solutions/rd/c10393NIXYO3288675yX (...) 20.13.26.77
2022-11-26 10:51:12 +0000 0 - 0 - 2 serviceclub.solutions/rd/c10471aqvlS3088185BI (...) 20.13.26.77
2022-11-26 07:41:06 +0000 0 - 0 - 2 serviceclub.solutions/rd/c10471CdHVH3088122Fc (...) 20.13.26.77

JavaScript

Executed Scripts (32)

Executed Evals (1)
#1 JavaScript::Eval (size: 14) - SHA256: 4fff201ce921e92b6204236706058575303bfbbdbb536dcc801202e74cb832bf
objinput_5_288

Executed Writes (0)


HTTP Transactions (73)


Request Response
                                        
                                            GET /rd/c10393pzUZt3088185cpwt2698Bys600CbfE369 HTTP/1.1 
Host: serviceclub.solutions
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         20.13.26.77
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Fri, 25 Nov 2022 08:51:22 GMT
Content-Length: 243


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   243
Md5:    45e3305389edc4d26f20f3ed270de653
Sha1:   7adeb5558d16808f2b60fee7258382fb86cd2d79
Sha256: ced6411122f104b7f8adbbe3cdf5f3d8cba7649a9576e292e77379214d51dd4b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13531
Expires: Fri, 25 Nov 2022 12:36:53 GMT
Date: Fri, 25 Nov 2022 08:51:22 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6374
Expires: Fri, 25 Nov 2022 10:37:37 GMT
Date: Fri, 25 Nov 2022 08:51:23 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5598
Cache-Control: 'max-age=158059'
Date: Fri, 25 Nov 2022 08:51:23 GMT
Last-Modified: Fri, 25 Nov 2022 07:18:05 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: uzd1DIRQyIfg+sYp7DjfhXLGMxGt4vBw0xQT1i5z5FMIpoDXeQkS32S9oxvSeSSGy5CrGLHD3TA=
x-amz-request-id: 2VDHT2HA11KNNQ09
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 08:40:44 GMT
age: 639
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 08:19:04 GMT
cache-control: public,max-age=3600
age: 1939
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /track/c10393pzUZt3088185cpwt2698Bys600CbfE369 HTTP/1.1 
Host: serviceclub.solutions
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://serviceclub.solutions/rd/c10393pzUZt3088185cpwt2698Bys600CbfE369
Upgrade-Insecure-Requests: 1

search
                                         20.13.26.77
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Location: https://owenfeel.com/?a=4762&oc=15503&c=42836&m=3&s1=9&s2=369-10393&s3=3088185-2698-600
Date: Fri, 25 Nov 2022 08:51:23 GMT
Content-Length: 134


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   134
Md5:    1dd384a690d6e72ab786f726327b4a21
Sha1:   621cb161b727a95625897d4ae2511b38f6b88229
Sha256: a82137493e6409f7fc51ed51a3adda33e4e42996b1346bd759bcacc0cf95a375

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 25 Nov 2022 08:51:23 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:23 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 29 Nov 2022 06:07:04 GMT
ETag: "5bd1d544496e29553df8dde608caa24fbd6bc69d"
Last-Modified: Fri, 25 Nov 2022 06:07:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 4
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f92466a8e60b55-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    9ff8f01d4c104e28a3167fb7311f9f6e
Sha1:   5bd1d544496e29553df8dde608caa24fbd6bc69d
Sha256: b9f66797a4c815d73185dd604ad701d7a1f342eb38dabc18c29aa492840e6d07
                                        
                                            GET /?a=4762&oc=15503&c=42836&m=3&s1=9&s2=369-10393&s3=3088185-2698-600 HTTP/1.1 
Host: owenfeel.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serviceclub.solutions/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         34.78.223.0
HTTP/1.1 302 Found
content-type: text/html; charset=utf-8
                                        
date: Fri, 25 Nov 2022 08:51:23 GMT
content-length: 224
cache-control: private
location: https://nationaltaxhelpline.co.uk/claim-now-af1?src=lola&utm_affid=15451-279721466&utm_clickid=4762
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: sl=ywPf8UJDwPIFiWD0Iib9o4vhzdu3oSwSipwbzBbfMtH87KvaI+kEkw==; domain=.owenfeel.com; path=/; HttpOnly tym=r1CgD2xf+7VsEAuVViS4/Yvhzdu3oSwSipwbzBbfMtH87KvaI+kEkw==; domain=.owenfeel.com; expires=Mon, 25-Nov-2024 08:51:23 GMT; path=/; HttpOnly c15451=ywPf8UJDwPKI2fEo6iNKrSuS47kRRrukwHHsIy+r+2xmlAatq512KA==; domain=.owenfeel.com; expires=Sun, 25-Dec-2022 08:51:23 GMT; path=/; HttpOnly


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   224
Md5:    997b45d8531387af276850cb09038efc
Sha1:   38b5a3d3e4d401f970244e61d3b7ecff460d878d
Sha256: 0eef2ae54fe29cfba86662b966065dba0f46aaf7f5cc9ce8916c80d1885481c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 08:11:11 GMT
cache-control: public,max-age=3600
age: 2412
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /claim-now-af1?src=lola&utm_affid=15451-279721466&utm_clickid=4762 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serviceclub.solutions/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         109.203.126.150
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 25 Nov 2022 08:51:23 GMT
Server: Apache
X-Redirect-By: WordPress
Location: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2784
Cache-Control: max-age=90110
Date: Fri, 25 Nov 2022 08:51:23 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 09:53:13 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rqHQRpGjIR8nvG6rjWpEkg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.42.234.253
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ER1tOfhmOB6nHkbUujYF2gvnNjI=

                                        
                                            GET /claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://serviceclub.solutions/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 25 Nov 2022 08:51:23 GMT
Server: Apache
Link: <https://nationaltaxhelpline.co.uk/wp-json/>; rel="https://api.w.org/", <https://nationaltaxhelpline.co.uk/wp-json/wp/v2/pages/290>; rel="alternate"; type="application/json", <https://nationaltaxhelpline.co.uk/?p=290>; rel=shortlink
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11342), with CRLF, LF line terminators
Size:   162463
Md5:    0e5f7aeaea74094998b0d01ade8eb5e9
Sha1:   6ed01d6bb820a7b3115b7fff0ceb24a912a97b37
Sha256: 3e0cff4d4e9de558f793d497229b1875ca937f1dd64de05192f5481f092da272
                                        
                                            GET /wp-content/uploads/oxygen/css/universal.css?cache=1627488822&ver=5.5.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Wed, 28 Jul 2021 16:13:42 GMT
Accept-Ranges: bytes
Content-Length: 71926
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (671), with CRLF, LF line terminators
Size:   71926
Md5:    2957a6a99202f2cd74f7e0d49f0060c1
Sha1:   09a5a92c65c022b49fe90ccfbb05371b94bee08c
Sha256: 3b1b0a1e4b93a6fb8e0c70be5895f9618a00fa82d3ac159f02288435cdd5659f
                                        
                                            GET /wp-content/plugins/oxygen/component-framework/oxygen.css?ver=3.5 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Mon, 07 Dec 2020 16:41:58 GMT
Accept-Ranges: bytes
Content-Length: 18827
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   18827
Md5:    c2f4377d09eb261c6e8090a56df140b7
Sha1:   4a916b0dd1e5a209af36610f88ddf8a7c9adadb4
Sha256: 9124a6fd00e218d97037cdcbc7ea4c40c73d95bd19da2a6a477789f1daa0bf7f
                                        
                                            GET /wp-content/uploads/oxygen/css/main-new-44.css?cache=1622037249&ver=5.5.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Wed, 26 May 2021 13:54:09 GMT
Accept-Ranges: bytes
Content-Length: 19741
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (19741), with no line terminators
Size:   19741
Md5:    bf0082b4e95b0693851b6b1c502e2a90
Sha1:   66b2ecfe941eb54dc828d005706d32a5aba7c6c1
Sha256: 4decac796c9dd538d4e9638142a57841de924e814ad9419eaef5dfce57041284
                                        
                                            GET /wp-content/plugins/oxygen/component-framework/vendor/aos/aos.css?ver=5.5.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Mon, 07 Dec 2020 16:41:58 GMT
Accept-Ranges: bytes
Content-Length: 26053
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (26053), with no line terminators
Size:   26053
Md5:    847da8fca8060ca1a70f976aab1210b9
Sha1:   0557d37454b67f42f2cb101e57e5070fb1193570
Sha256: 1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.5.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Mon, 02 Nov 2020 08:30:24 GMT
Accept-Ranges: bytes
Content-Length: 53907
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (27100)
Size:   53907
Md5:    2e7e1d1c1d4d446a1b6b63295757d859
Sha1:   27a1d9dcbdc4aff486016b5c9f3ece6ad0c028c1
Sha256: 8c626f0f9b5c109539b256b73e72c02b300a184f46b4535c2eb86599215c78af
                                        
                                            GET /wp-content/plugins/gravityforms/css/formreset.min.css?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Sun, 30 May 2021 21:31:26 GMT
Accept-Ranges: bytes
Content-Length: 4171
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  CSV text\012- , ASCII text, with CRLF line terminators
Size:   4171
Md5:    a5fd638404fd893572c60b190c469441
Sha1:   85d4b11a9459d9fb4fa9c38892181034284346a0
Sha256: 47bd43923be371a64d001da8e797a3ad92d730aa0b17b05de12ffe9d2976696a
                                        
                                            GET /wp-content/plugins/gravityforms/css/datepicker.min.css?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:14 GMT
Accept-Ranges: bytes
Content-Length: 5328
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5328), with no line terminators
Size:   5328
Md5:    9ef2fba4234dabbb37d442db6e1d747e
Sha1:   22095a22be67b7af907a8e11227a6ffd2f8b3fba
Sha256: e17a8838efc819e3009ce6af76552440d1a1ceb279dced3eeefec0b14922d10e
                                        
                                            GET /wp-content/plugins/gravityforms/css/formsmain.min.css?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Sun, 30 May 2021 21:26:47 GMT
Accept-Ranges: bytes
Content-Length: 89527
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1210), with CRLF line terminators
Size:   89527
Md5:    c23a736bdca9fe310bfaeaaaddf6042c
Sha1:   8cf255da80439e466c631b05d7bb0445cc47c2bb
Sha256: 2a8451f7a44eb61c7253efd65625d35e34f2f4f51f445943689eb948066df00f
                                        
                                            GET /wp-content/plugins/gravityforms/css/browsers.min.css?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:14 GMT
Accept-Ranges: bytes
Content-Length: 7288
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7288), with no line terminators
Size:   7288
Md5:    dd1ab0f6fc9aadb5b9b5394cf2bc9c14
Sha1:   fc18b9587b7b2d0628613139354caeb2d75d4b73
Sha256: 2e84eb055418b1d5b659bbc2e6022fe0ae37548287e6717e80cc13a2251e5abf
                                        
                                            GET /wp-content/plugins/gravityforms/css/readyclass.min.css?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:14 GMT
Accept-Ranges: bytes
Content-Length: 30241
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (30241), with no line terminators
Size:   30241
Md5:    4e4b29a8633fb24370dd9961f1bb809c
Sha1:   7b87aa4a403781c59d8b87564d7f00735e7ec923
Sha256: f34635c25f3a1027d5ce9f0216c63202a704536e656c1eeb94dccf488b2cc364
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Tue, 30 Aug 2022 19:42:25 GMT
Accept-Ranges: bytes
Content-Length: 96873
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (31997)
Size:   96873
Md5:    49edccea2e7ba985cadc9ba0531cbed1
Sha1:   f8747f8ee704d9af31d0950015e01d3f9635b070
Sha256: 1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
                                        
                                            GET /wp-content/plugins/gravityforms-groupfields/asset/css/public.css?ver=1.0.2 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 21:53:40 GMT
Accept-Ranges: bytes
Content-Length: 2926
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   2926
Md5:    d46e8c27a79d1382649f6b123e574cd8
Sha1:   9e15176cc0f0a7ca37ed8ba11c78fdf5995c3248
Sha256: 56bb595dc7adf16eb5fe9ef5599ae4a8061df4d433c5ab4aeb22f8f90328e380
                                        
                                            GET /wp-content/plugins/oxygen/component-framework/vendor/aos/aos.js?ver=1 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Sun, 30 May 2021 21:22:22 GMT
Accept-Ranges: bytes
Content-Length: 27319
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1630), with CRLF line terminators
Size:   27319
Md5:    d8d4f11c1e4db865b68974ab43b5bb41
Sha1:   82dc257951a3f78a2c48a34443dd69c29a160119
Sha256: 16b0350bed2d61f482f73ea8ead1251011bae4334cb1eebaf1badc818a94a6fa
                                        
                                            GET /wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:13 GMT
Accept-Ranges: bytes
Content-Length: 35010
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (35010), with no line terminators
Size:   35010
Md5:    62f94f94c1aa96e1b318f6766bd16647
Sha1:   cc256954eb74303e7939de762cd7674e0358111a
Sha256: 3097d0444becd9d089b52b7074072f19201525de874d0775012572fb375b7838
                                        
                                            GET /wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:13 GMT
Accept-Ranges: bytes
Content-Length: 1848
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1848), with no line terminators
Size:   1848
Md5:    827fde8d0de0ba40ab12406eb78b4908
Sha1:   6705762130b2eb5f505ff924b8203ce4f8fd585d
Sha256: 172314ff74044b918766ed4763279b5e8798622087c0a2930f59c9d44662213d
                                        
                                            GET /wp-content/plugins/gravityforms/js/conditional_logic.min.js?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:13 GMT
Accept-Ranges: bytes
Content-Length: 7605
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (7605), with no line terminators
Size:   7605
Md5:    0e09bafc55f674b5ab0883be71e1869c
Sha1:   69de6946eb912aef9442d7a02e12ff0958270c58
Sha256: f75166e3f70100b65a6ce1d4128bc15286e92b19a546fa7709f739e9bcfe52c6
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 03:40:43 GMT
Accept-Ranges: bytes
Content-Length: 3929
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (3704)
Size:   3929
Md5:    e6784d91bf2c668bc4093063c5b15113
Sha1:   687e1d2e957a821280dbd205ae66182f16dfdc30
Sha256: 194ebae85ff853319e8668f23a4c5bf371a7d9f5d550a40980ab53026ddaaa17
                                        
                                            GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Thu, 15 Apr 2021 03:40:43 GMT
Accept-Ranges: bytes
Content-Length: 36172
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (35947)
Size:   36172
Md5:    a236bd4097fcbfb009f64238dc4443a1
Sha1:   ddbeeaa10749e4a74fe624ced0531b9243235dd2
Sha256: 2c3f3b95a692312d9b75815ecb949a40c2a701ff148fe865fde55556c810a22c
                                        
                                            GET /wp-content/plugins/gravityforms/js/datepicker.min.js?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:13 GMT
Accept-Ranges: bytes
Content-Length: 1125
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1125), with no line terminators
Size:   1125
Md5:    7158a5798e811bec7c2a36437117ef97
Sha1:   81276ec99fb929b1e7fdeed98de83a50b4309a58
Sha256: 575a3e8fbb4b34e37c6d23363d66c1a2cdcec52e9e60abb360d1b1736808a568
                                        
                                            GET /wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.4.17.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 02 Apr 2021 22:27:13 GMT
Accept-Ranges: bytes
Content-Length: 4639
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (4610)
Size:   4639
Md5:    a39e45502bab7e9e26723e6ab243e8f8
Sha1:   ac62aacd5ee3e7b64ce6a92b5d8e3fb523e34d16
Sha256: d62a7b7ec5313469ebff5c006b9068dc44d6d1c122cf787ffa29a10113b34060
                                        
                                            GET /wp-content/plugins/gravityforms-groupfields/asset/js/public.js?ver=1.0.2 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Wed, 11 Mar 2020 21:53:40 GMT
Accept-Ranges: bytes
Content-Length: 1943
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1943
Md5:    a1bbdaf4740b7cf0f5ba04542685462d
Sha1:   62ecd970d0e58b90e0e1b01ae245448505c4d0ae
Sha256: f0d12486bd4c5c543c76c41768ce4c909a4a416a9962ffc12547724d939c1ff9
                                        
                                            GET /wp-content/plugins/gravityformssignature/includes/super_signature/ss.js?ver=3.9 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Mon, 18 May 2020 16:37:08 GMT
Accept-Ranges: bytes
Content-Length: 29629
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (6082), with CRLF line terminators
Size:   29629
Md5:    a52cd101e523152e84cd9a413330e36c
Sha1:   d4d9d43330ba8cc25ff94102b01379204233e0c8
Sha256: 9cadb4c0922ce51f3b4e701c95c4b426db7109f15ef6ae69091b02fd8a219df9
                                        
                                            GET /wp-content/plugins/gravityformssignature/includes/super_signature/base64.js?ver=3.9 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Mon, 18 May 2020 16:37:08 GMT
Accept-Ranges: bytes
Content-Length: 3065
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   3065
Md5:    d0ac5dbed8e418cc0f38faa86c995c78
Sha1:   5c349aabe3a2838295f7a98d3098ba5be0c013ab
Sha256: 2c2948dc74d82f929f0b0c2d923d661515e5c68916a0dd97987bbefaf5231ecb
                                        
                                            GET /wp-content/plugins/gravityformssignature/js/frontend.min.js?ver=3.9 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Mon, 18 May 2020 16:37:26 GMT
Accept-Ranges: bytes
Content-Length: 1998
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (1998), with no line terminators
Size:   1998
Md5:    e8bd49bd8cf5a6987c950f14fa1927ff
Sha1:   4d49f8e5be0d40454c5ca871e8f6d79c62f438b4
Sha256: 4c0a66436975adfcb7c9a6bc1404ebf5ea33dc286d8c739c5f4bd6c74e2885cb
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-P93XGSL HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 08:51:24 GMT
expires: Fri, 25 Nov 2022 08:51:24 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77350
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4149)
Size:   77350
Md5:    7c0f6831f08bff08da12e7c2651df1e2
Sha1:   0f4f4c53b0396b6588f958e16fa951292d188a3b
Sha256: 24e87ef79b7b773ea042286420a1d0909b9dab29518d0a6922404dab11cb0e4b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/oxygen/css/claim-now-af1-290.css?cache=1622037247&ver=5.5.11 HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Wed, 26 May 2021 13:54:07 GMT
Accept-Ranges: bytes
Content-Length: 362
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (362), with no line terminators
Size:   362
Md5:    fa9828bacea059f715da8fe9e09b486c
Sha1:   716f6e8eea57a07ed9e47475a2267c0e1e740a52
Sha256: 536c90c03282044ffe87950971e4dc352cfd70fd65d77f9620476aea29c97ad7
                                        
                                            GET /wp-content/uploads/2021/01/Logo.jpg HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 10:21:53 GMT
Accept-Ranges: bytes
Content-Length: 17939
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 317x112, components 3\012- data
Size:   17939
Md5:    9d77218f07c7126a7cf0779d1673b9f1
Sha1:   74b84e83a2dcf2986512c8d90390cf2fee5528f7
Sha256: 0a11dfd7e8fc39002b4a79379d85dcd0705491fdc575ba83fe28a1920878727b
                                        
                                            GET /wp-content/uploads/2021/05/cropped-Untitled-design-11-192x192.png HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Cookie: _gcl_au=1.1.2059194201.1669366284
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 18 Jun 2021 14:30:34 GMT
Accept-Ranges: bytes
Content-Length: 10073
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   10073
Md5:    993cc691fec5b940d462d4d8064dc44d
Sha1:   4a7d23ccb6ceb4e6c575499829c0eea9b80d8e56
Sha256: fc9e075458825a50cc00658a9541a9546e09da207a181fed6e42ca86113d04cf
                                        
                                            GET /wp-content/uploads/2021/05/cropped-Untitled-design-11-32x32.png HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Cookie: _gcl_au=1.1.2059194201.1669366284
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Fri, 18 Jun 2021 14:30:34 GMT
Accept-Ranges: bytes
Content-Length: 1302
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   1302
Md5:    11c9f4633586c27c0020ec6d168ddbb4
Sha1:   01a5768ecea3240049b100b04371adc8ed69d4ce
Sha256: 3628d443d28e3ea23fea28cfe7e69ad75e2d460f78be32b2034c293fb497a03e
                                        
                                            GET /wp-content/plugins/gravityformssignature/includes/super_signature/refresh.png HTTP/1.1 
Host: nationaltaxhelpline.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/claim-now-af1/?src=lola&utm_affid=15451-279721466&utm_clickid=4762
Cookie: _gcl_au=1.1.2059194201.1669366284
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         109.203.126.150
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Server: Apache
Last-Modified: Wed, 19 Aug 2020 00:42:51 GMT
Accept-Ranges: bytes
Content-Length: 1091
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 150 x 24, 8-bit/color RGBA, non-interlaced\012- data
Size:   1091
Md5:    b9a90290e6150235b1094b65d9471bb1
Sha1:   16cad9f0d77f29b60bdb2f5f00b47520478bb509
Sha256: b7b55fad63c2148f3f8f6559923bf00317a1b7668e8ce15f94f04b495e8c567c
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 08:41:08 GMT
expires: Fri, 25 Nov 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 616
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /bat.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.107.21.200
HTTP/2 200 OK
content-type: application/javascript
                                        
cache-control: private,max-age=1800
content-length: 11430
content-encoding: gzip
last-modified: Wed, 09 Nov 2022 21:23:50 GMT
accept-ranges: bytes
etag: "077538f81f4d81:0"
vary: Accept-Encoding
set-cookie: MUID=082D08A6132465532F821AC112D1644B; domain=.bing.com; expires=Wed, 20-Dec-2023 08:51:24 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 2D1C8B34805E4E2AB95D84855D5A1827 Ref B: OSL30EDGE0219 Ref C: 2022-11-25T08:51:24Z
date: Fri, 25 Nov 2022 08:51:24 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (39007), with no line terminators
Size:   11430
Md5:    df169ce602a3bb847c575192cb8b744f
Sha1:   be40c6958e00904f9f50d56a729b87270a48d7c7
Sha256: e47e8fd99a7313873847ce85655117b5b7ba34ddfed7c2900006f3f2be0ae7ee
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6054
Cache-Control: 'max-age=158059'
Date: Fri, 25 Nov 2022 08:51:24 GMT
Last-Modified: Fri, 25 Nov 2022 07:10:31 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /pagead/viewthroughconversion/376354161/?random=1669366283946&cv=11&fst=1669366283946&bg=ffffff&guid=ON&async=1&gtm=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fnationaltaxhelpline.co.uk%2Fclaim-now-af1%2F%3Fsrc%3Dlola%26utm_affid%3D15451-279721466%26utm_clickid%3D4762&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Claim%20Now%20-%20National%20Tax%20Helpline&auid=2059194201.1669366284&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 08:51:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 950
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Fri, 25-Nov-2022 09:06:24 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2097), with no line terminators
Size:   950
Md5:    5440bea7c1c639752d87b839521de190
Sha1:   10a1075f4a4be490e8be376e11aae06ce715e752
Sha256: a761b6d17e62a25aa8feef9188667db19c8d4f6740472ebe3b90c42cdfec8b3c
                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 7WWmiFrgBAtrqCwcZbIStpvEtQdwvJAD4+VqcX9WilS646R58LLRsDa1GbR/7tMM+ZFCYQlWQSedz2LB98nQFA==
content-length: 27340
x-fb-trip-id: 1679558926
date: Fri, 25 Nov 2022 08:51:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   27340
Md5:    44ecaa3c2a4929a40141edc4540aaf84
Sha1:   f29a573182333b2500d41bfc389d6c5232dfb348
Sha256: 6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6054
Cache-Control: 'max-age=158059'
Date: Fri, 25 Nov 2022 08:51:24 GMT
Last-Modified: Fri, 25 Nov 2022 07:10:31 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/376354161/?random=1669366283946&cv=11&fst=1669363200000&bg=ffffff&guid=ON&async=1&gtm=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnationaltaxhelpline.co.uk%2Fclaim-now-af1%2F%3Fsrc%3Dlola%26utm_affid%3D15451-279721466%26utm_clickid%3D4762&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Claim%20Now%20-%20National%20Tax%20Helpline&fmt=3&is_vtc=1&random=820430295&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 08:51:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /pagead/1p-user-list/376354161/?random=1669366283946&cv=11&fst=1669363200000&bg=ffffff&guid=ON&async=1&gtm=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fnationaltaxhelpline.co.uk%2Fclaim-now-af1%2F%3Fsrc%3Dlola%26utm_affid%3D15451-279721466%26utm_clickid%3D4762&ref=http%3A%2F%2Fserviceclub.solutions%2F&tiba=Claim%20Now%20-%20National%20Tax%20Helpline&fmt=3&is_vtc=1&random=820430295&rmt_tld=0&ipr=y HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 08:51:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /action/0?ti=56362249&tm=gtm002&Ver=2&mid=5041d946-8a3a-4f80-90f9-a9fea0423d25&sid=574d5b506c9e11edbf2ed3ccae25296e&vid=574d6c206c9e11ed937f9773438951f7&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Claim%20Now%20-%20National%20Tax%20Helpline&p=https%3A%2F%2Fnationaltaxhelpline.co.uk%2Fclaim-now-af1%2F%3Fsrc%3Dlola%26utm_affid%3D15451-279721466%26utm_clickid%3D4762&r=http%3A%2F%2Fserviceclub.solutions%2F&lt=1753&evt=pageLoad&sv=1&rn=490320 HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=178168289A2961DC391E7A4F9BDC60B9; domain=.bing.com; expires=Wed, 20-Dec-2023 08:51:24 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 61FB18F7C4304BA987DD86F7628F7087 Ref B: OSL30EDGE0219 Ref C: 2022-11-25T08:51:24Z
date: Fri, 25 Nov 2022 08:51:24 GMT
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 25 Nov 2022 08:51:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/action/56362249.js HTTP/1.1 
Host: bat.bing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         13.107.21.200
HTTP/2 204 No Content
                                        
cache-control: private,max-age=1800
set-cookie: MUID=0303EE08A78F60AE12F4FC6FA67A6116; domain=.bing.com; expires=Wed, 20-Dec-2023 08:51:24 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 490421BB19EB4EF486578907116C52E4 Ref B: OSL30EDGE0219 Ref C: 2022-11-25T08:51:24Z
date: Fri, 25 Nov 2022 08:51:24 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /tr/?id=251107796760460&ev=PageView&dl=https%3A%2F%2Fnationaltaxhelpline.co.uk%2Fclaim-now-af1%2F%3Fsrc%3Dlola%26utm_affid%3D15451-279721466%26utm_clickid%3D4762&rl=http%3A%2F%2Fserviceclub.solutions%2F&if=false&ts=1669366284434&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669366284433.939996229&it=1669366284301&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nationaltaxhelpline.co.uk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.200.35
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Fri, 25 Nov 2022 08:51:25 GMT
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2249
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 08:51:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2249
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 08:51:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2249
Expires: Fri, 25 Nov 2022 09:28:54 GMT
Date: Fri, 25 Nov 2022 08:51:25 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8089
x-amzn-requestid: f4b5f150-a5dc-40bf-93b9-394c294a51cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEmkRFSnIAMF5vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e8481-74454bee1a1ec6d506f3d75b;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 20:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZVv8iTGCYV-IiBJ6KwNSG1ZWSEwClaQopUejSqZq0S1wd782lRoyKA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:59:49 GMT
age: 35496
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8089
Md5:    c8f6118fc03f31862ff68fef8a2b9a7f
Sha1:   318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
Sha256: cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5MlzpHpq7auKLSAYikINuPAylXI11VJL3xxIJ9Dyub-7rjQaPfg0WQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 02:07:28 GMT
age: 24237
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3955
Md5:    4006a9037ab5f28dca62b0aa7a704c41
Sha1:   74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
Sha256: 556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7900
x-amzn-requestid: a9d184b1-3b4a-4ca6-9ad2-ce3aac10f422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB91H2IIAMFjGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38b-5732361f36c023c22c922ee9;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nVe_gcpscsmf4QGPseIR2poHwzxp_mfWODrAz8Oy0ePkMgnIREhCag==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:07 GMT
etag: "81f85633fca39972d8e0bf9a4ec7cd999e54564f"
age: 40578
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7900
Md5:    d43ec6824d4fdc4d31b8c245bf8c5849
Sha1:   81f85633fca39972d8e0bf9a4ec7cd999e54564f
Sha256: b0e521b23879af86102f46a9ec412faf6345df31a97a7b58880f63f81fdcd0c6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31c66612-f3a0-4e62-8b93-c9f774ffc236.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6130
x-amzn-requestid: 0ab34b27-2c6b-4a37-87ad-6fa56a265453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wF7KIAMFjlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4a3d24f93ceb37d37a5ce1ee;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SHmcFNiZ97RU02VeLiHLjFynYiSuaQP8T_XKG2UaAigWXG5sYhdVLQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:01 GMT
etag: "0214fc0deecb1115766802f42cfd256e3c479490"
age: 40584
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6130
Md5:    ba7b9c131ab7e5998f25b069ba3860a0
Sha1:   0214fc0deecb1115766802f42cfd256e3c479490
Sha256: 717aa23c687ccebc1b5ebbfd88d0e4fe181fef038d308231842b2b1969f3976b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 2351
x-amzn-requestid: 141bbf99-5d78-4b9c-a537-491718aee68a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b43YGE_SoAMFlbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6379d29a-00017cd344caea2b6408aeb3;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 07:09:14 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 1-8WM-7tNqakPDW9-K0GVbOKdotndEXj2QeJzw3cJol-g9TT5IVyOQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 16:45:53 GMT
age: 57932
etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   2351
Md5:    66d06d3cac1784e4ce6c8c89c300f10a
Sha1:   41ef94d198bbf98185eb332a3b6934c3c26c3afc
Sha256: 55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8917
x-amzn-requestid: 10f3b269-9437-476d-ae4f-a0ac3fb78491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wEIwoAMF8uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4cfeecf4553b26381ed11875;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6ibPrCdDNQqWzxiVYDsl87yUfTP8sUmu22GbhBdDHJruil0qxbw7Fw==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:00 GMT
etag: "2eba66ff6539388c48562503e8d11ff0e060350a"
age: 40585
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8917
Md5:    5863138af1ddbba34a7856242a7b3a06
Sha1:   2eba66ff6539388c48562503e8d11ff0e060350a
Sha256: d1543e1b803a07095148b743925eebbbf21f566a2df9b785a1a9d48c5604496c