Report - yeranemelancaio.com/14090/26798?lp=18&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&param=679199_2064795_1209135

Report Overview

Submitted URL
yeranemelancaio.com/14090/26798?lp=18&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&param=679199_2064795_1209135_197
IP
14.102.229.199
ASN
#209242 Cloudflare London, LLC
Submitted
2024-04-19 10:08:22
Access
public
Website Title
Ice Casino
Final URL
centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-19	489 B	11 kB	142.250.74.106
centaurusnow.com	unknown	2018-04-13	2019-03-18	2024-04-18	28 kB	2.6 MB	14.102.228.38
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	1.6 kB	76 kB	216.58.207.227
yeranemelancaio.com	unknown	unknown	No data	No data	578 B	62 kB	14.102.229.199

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	yeranemelancaio.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	centaurusnow.com/shared/js/jquery-3.6.0.min.js	89 kB	2023-03-08	2024-05-02
Pretty URL centaurusnow.com/shared/js/jquery-3.6.0.min.js IP 14.102.228.38 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:22:50 Last Seen2024-05-02 02:10:18 Times Seen54 Hash 0fcc71a8b68d9511c06480f1cd29b42a 486ca28dd30679204abc919811716212e3661d69 d614c9f583f439281092ecdc396451c09ac47e52c358552001aae2d851f99310 Loading...

	centaurusnow.com/promo/7118/js/index.js	6.9 kB	2023-11-21	2024-04-29
Pretty URL centaurusnow.com/promo/7118/js/index.js IP 14.102.228.38 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-21 22:25:12 Last Seen2024-04-29 22:13:20 Times Seen19 Hash 7dea8fa1989fc5924c485f1dbbf8c815 ca548e84219ff415e0df2f8b0fef270e7c5c8c08 96eeab9c3fba7eae16f33cba7a55cfc3feb0e4e8eae118f98f192fc8efaf8839 Loading...

	centaurusnow.com/assets/js/bundle-341220101100.min.js	36 kB	2023-06-02	2024-05-02
Pretty URL centaurusnow.com/assets/js/bundle-341220101100.min.js IP 14.102.228.38 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-02 19:20:55 Last Seen2024-05-02 02:10:18 Times Seen106 Hash c21f2b7687fbef8812b4311f1bb034fb 11e18dda9464c7da151f3c8d87ca88df5ea04a6d 72bd990665a3e23e453cbc32142e0adc634dcf9ce65098207d7697807daa6730 Loading...

	unknown	15 B	2023-04-11	2024-05-02
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 22:15:25 Last Seen2024-05-02 02:10:18 Times Seen233 Hash 0ab27234c83cf65a83f197cbe2ad78f6 cd919f0d596755f0fbffd2f92dbf38c140d58487 0ac6c99bc33d700f96fbeb16522a74fba61a971c9a58a14c4f8e45d1310cf87d Loading...

	centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO	545 B	2023-05-20	2024-05-02
Pretty URL centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO IP 14.102.228.38 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-05-20 14:41:58 Last Seen2024-05-02 02:10:18 Times Seen114 Hash badb70d24eb270811f530a96593bb04e cc2a66fa896ad3f62e4436be63f4ed708c277f3c f9e21af8c8ace8ea1767d4b11bfe7a506df5d39185d83c30f2ea312f8d4e0bee Loading...

	centaurusnow.com/assets/js/lm-1.0.0.min.js	189 B	2023-06-02	2024-05-02
Pretty URL centaurusnow.com/assets/js/lm-1.0.0.min.js IP 14.102.228.38 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-02 19:20:55 Last Seen2024-05-02 02:10:18 Times Seen109 Hash 61ca27b32fd4ae3fbb568b759fa1d678 dca1dc923bcd2093da3bb39a65a1d64aa1baf463 0405fc1f27636448050c4f267b89d9d75250af8f5eb0d0720bfafc5b64090a85 Loading...

HTTP Transactions (39)

URL IP Response Size

centaurusnow.com/promo/7118/img/logo-en.png

14.102.228.38

200 OK

5.4 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/logo-en.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 168 x 98, 8-bit colormap, non-interlaced
Size
5.4 kB (5362 bytes)
Hash
259b065bcb0c996a55b657618d1ce151
e39317847ec5ef1e35f9e6c1ac355d7ef8e0f72d
f70449482e693997740b52daf00eacb6166d38ab0145cc2680fc4525e670530f

HTTP Headers

GET /promo/7118/img/logo-en.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 5362
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
etag: "631b0299-14f2"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3961
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17234997b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/scratch-anim.gif

14.102.228.38

200 OK

105 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/scratch-anim.gif
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
GIF image data, version 89a, 354 x 203
Size
105 kB (105120 bytes)
Hash
a2cf37190a530afec0ed73a0e141dba6
bd0d655ee0c68ffedae1fb3bdd89829746d5164d
c77b4c6f3b7731e069f88bc269498f77ea4984064cb94dd29e0045385332f6ac

HTTP Headers

GET /promo/7118/img/scratch-anim.gif HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/gif
content-length: 105120
last-modified: Fri, 09 Sep 2022 09:08:40 GMT
etag: "631b0298-19aa0"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c1723499db509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/scratch-used.png?v=1

14.102.228.38

200 OK

43 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/scratch-used.png?v=1
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 444 x 302, 8-bit colormap, non-interlaced
Size
43 kB (42904 bytes)
Hash
f6d24460eb09093ba439dc1e4bd0186e
03ee903cdad8ac80b925a6e2a00bd0a56f650548
979bd0355ab985809b2b9ea798bd96540b2bd164a40bfe98c1544a6930d6fea9

HTTP Headers

GET /promo/7118/img/scratch-used.png?v=1 HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 42904
last-modified: Fri, 09 Sep 2022 09:08:42 GMT
etag: "631b029a-a798"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3312
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c1723499fb509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/euro.jpg

14.102.228.38

200 OK

21 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/euro.jpg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 354x203, components 3
Size
21 kB (21219 bytes)
Hash
8abadd7c855097b96d7fb01d7a266de0
d2e4faec933c128321aa1184705eca8abcfeaa28
25ae57a75965f5fea4071586f0d189f8e9879e7df7cde46442af8adfcfb2ac6e

HTTP Headers

GET /promo/7118/img/euro.jpg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/jpeg
content-length: 21219
access-control-allow-origin: *
cf-bgj: h2pri
etag: "631b0299-52e3"
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172349a2b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/x5.png

14.102.228.38

200 OK

6.4 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/x5.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 243 x 131, 8-bit colormap, non-interlaced
Size
6.4 kB (6367 bytes)
Hash
d687f3a8c45aea39bed754c83224d371
5e5bd8ad20e32c46f083deeb40be135b94d17028
d310896da34763d66e50fff00ca506afbb72f957ba9923a1dc9d9221d6fa0938

HTTP Headers

GET /promo/7118/img/x5.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 6367
last-modified: Mon, 15 Aug 2022 11:05:03 GMT
etag: "62fa285f-18df"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172359b2b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/x7.png

14.102.228.38

200 OK

6.3 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/x7.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 243 x 131, 8-bit colormap, non-interlaced
Size
6.3 kB (6320 bytes)
Hash
516574fb6c4fd5d6fd7c4755006ff815
8d4a5f2c18c0d843b1210a6a509f56c090fd3543
5d348aaa66efa2a55df56af37b0a77ebca7c258c32795246875050a5a37a70e0

HTTP Headers

GET /promo/7118/img/x7.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 6320
last-modified: Fri, 09 Sep 2022 09:08:44 GMT
etag: "631b029c-18b0"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172359bcb509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/x15.png

14.102.228.38

200 OK

8.3 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/x15.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 243 x 131, 8-bit colormap, non-interlaced
Size
8.3 kB (8258 bytes)
Hash
d6b431e5bd3970e7f1aae035f37391a1
e657d8ee38e2041d7cb10c64fa685afa27b63176
acf7634841d979668eef18051f5385a4f16fc84f4a39fbf3d0a024929856ab68

HTTP Headers

GET /promo/7118/img/x15.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 8258
last-modified: Fri, 09 Sep 2022 09:08:43 GMT
etag: "631b029b-2042"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172359b8b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/anim-first.png

14.102.228.38

200 OK

23 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/anim-first.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 868 x 155, 8-bit colormap, non-interlaced
Size
23 kB (23076 bytes)
Hash
5f49293044745b04776a40c6da70ff5f
aa6bb26247ad1c29e8d9cd3b43b3132c2ec06a0b
e8dc71d62bf0999936baed3d5f8ac3176c9df559676b0ded5ba2f2df637fc94f

HTTP Headers

GET /promo/7118/img/anim-first.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 23076
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
etag: "631b0299-5a24"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172359beb509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/anim-second.png

14.102.228.38

200 OK

23 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/anim-second.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 868 x 155, 8-bit colormap, non-interlaced
Size
23 kB (23374 bytes)
Hash
839c163532ccd154f11fe8330b0fd2ac
121acc8ca7d63963f8288fda4f96fcec02a429ff
a48fe1318c854ae582ff36bfa81bf78014493fab918b9173fd7da712112d13e4

HTTP Headers

GET /promo/7118/img/anim-second.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 23374
last-modified: Fri, 09 Sep 2022 09:08:42 GMT
etag: "631b029a-5b4e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172369c8b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/anim-front.png

14.102.228.38

200 OK

25 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/anim-front.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 856 x 145, 8-bit colormap, non-interlaced
Size
25 kB (25237 bytes)
Hash
62f7cf6eaad338ba772b68d640da100b
05615651180c50735a1942bd1a907c392025ec36
abcb3ba15390a4ad8b49e10e7aee959735ae5c66acbd8a3c38fb65cc866b179f

HTTP Headers

GET /promo/7118/img/anim-front.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 25237
last-modified: Fri, 09 Sep 2022 09:08:42 GMT
etag: "631b029a-6295"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172369c9b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/subtract.png

14.102.228.38

200 OK

575 B

URL GET HTTP/2
centaurusnow.com/promo/7118/img/subtract.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 462 x 124, 8-bit colormap, non-interlaced
Size
575 B (575 bytes)
Hash
e18dbd0e0c00f72dc86a2259d52e7f7d
7805702f5a23f180734de5e9edef207228d04403
cf6dbc6f6558a8bc7210bdf2c0e171eaf95e09b9981c3b1965a72039e9d5cf2a

HTTP Headers

GET /promo/7118/img/subtract.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 575
last-modified: Fri, 09 Sep 2022 09:08:42 GMT
etag: "631b029a-23f"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172369cbb509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/wheel-en.png

14.102.228.38

200 OK

202 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/wheel-en.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced
Size
202 kB (202103 bytes)
Hash
89791b7dffa5a1b9856f02abd8f1e573
f690e6fa81f486354358f196bc2e977fbfe7a272
29986a9291c031d6f6e155fc64ba9a1e0ceb792dfbb5242972f20ea0ec00e6fa

HTTP Headers

GET /promo/7118/img/wheel-en.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 202103
last-modified: Fri, 02 Dec 2022 15:23:17 GMT
etag: "638a1865-31577"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c1723499bb509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/nok.jpg

14.102.228.38

200 OK

31 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/nok.jpg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 354x203, components 3
Size
31 kB (31036 bytes)
Hash
e25f418421c24c51a39cc9a3f7345f3d
1795bc64fd3af7467c583e8dc67fe0a102690b43
5c82e0e44c455f52ff766b841904f514b3d4aaba37cfb42c3d2354a61ac2769a

HTTP Headers

GET /promo/7118/img/nok.jpg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/jpeg
content-length: 31036
access-control-allow-origin: *
cf-bgj: h2pri
etag: "631b0299-793c"
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172349a5b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/popup-anim.gif

14.102.228.38

200 OK

170 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/popup-anim.gif
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
GIF image data, version 89a, 360 x 360
Size
170 kB (170326 bytes)
Hash
8dbf9d9e2963bec6e8c93a12f0b145a9
f485b848a302f0fad3db4acbe6ee9e1fa804ba35
d3a2c5dedfe3bfb3076bec9ef2a8ef8983b896f3dac8b31ac2625bdfa111e200

HTTP Headers

GET /promo/7118/img/popup-anim.gif HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/gif
content-length: 170326
last-modified: Fri, 09 Sep 2022 09:08:40 GMT
etag: "631b0298-29956"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172369cab509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/dkk.jpg

14.102.228.38

200 OK

60 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/dkk.jpg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 417x232, components 3
Size
60 kB (59465 bytes)
Hash
29ae23496565de032eed1b378b9c4e4d
8310cc05c7487b4d7efb8f8b8b87431bbcb48f2b
02ffe2eda01747d3be03a0d3181603826a1e98c2ed0baa4e1c533333d9f01a1a

HTTP Headers

GET /promo/7118/img/dkk.jpg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/jpeg
content-length: 59465
access-control-allow-origin: *
cf-bgj: h2pri
etag: "631b0299-e849"
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172349a9b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/plzl.jpg

14.102.228.38

200 OK

40 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/plzl.jpg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 354x203, components 3
Size
40 kB (40238 bytes)
Hash
1e51a80b3f65885a5b629e78808682ac
3f0ef49a82e896a17b0f1b5138ea5fcb0764f939
1014c355b3cd37ab3f30ac6d7702d355316c2643dbb3b1c1244571933bc35e0d

HTTP Headers

GET /promo/7118/img/plzl.jpg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/jpeg
content-length: 40238
access-control-allow-origin: *
cf-bgj: h2pri
etag: "631b0299-9d2e"
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172349a4b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/ron.jpg

14.102.228.38

200 OK

50 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/ron.jpg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 417x232, components 3
Size
50 kB (50257 bytes)
Hash
1f15c7820301b9d9451e3b27c8d41294
215b406d3ec341431bee3ae53b9c915450dfd88f
bc402aa395e3b99f12d8610eb302d51e4400abf8a1d0bb10a8644a5f11dc84c3

HTTP Headers

GET /promo/7118/img/ron.jpg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/jpeg
content-length: 50257
access-control-allow-origin: *
cf-bgj: h2pri
etag: "631b0299-c451"
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172349aab509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/huf.jpg

14.102.228.38

200 OK

42 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/huf.jpg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 417x232, components 3
Size
42 kB (41963 bytes)
Hash
9480288759d3952310407074b492198f
74cb73b1b4bf234fa50f5d931b40ff91fa084eff
b376cb7a61009d65b736ca83a97d5bfa035655d12501587c0ffe7c5531433f81

HTTP Headers

GET /promo/7118/img/huf.jpg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/jpeg
content-length: 41963
access-control-allow-origin: *
cf-bgj: h2pri
etag: "631b0299-a3eb"
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172359acb509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/lang-arr.png

14.102.228.38

200 OK

328 B

URL GET HTTP/2
centaurusnow.com/promo/7118/img/lang-arr.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 13 x 8, 8-bit colormap, non-interlaced
Size
328 B (328 bytes)
Hash
8088b814f879090ac2e513986aa3001e
064fd94faf69ab77bb04b50b4ab535e59759a33c
9056c85fdec83f5bec653b517cc947f822398fc047f8b2f3ba8286faa6298c9d

HTTP Headers

GET /promo/7118/img/lang-arr.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/promo/7118/css/main.css
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 328
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
etag: "631b0299-148"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17254b99b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/wheel-win-frame.png

14.102.228.38

200 OK

4.6 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/wheel-win-frame.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 105 x 124, 8-bit colormap, non-interlaced
Size
4.6 kB (4601 bytes)
Hash
b0c076cb781532a03c1e3773434908e2
bf0fcc11a598102a76de8baa7be35763cd1fad45
90210cfadb3ef9299d751b62105f4709bef9c676ec57b376cf0772c04a800d69

HTTP Headers

GET /promo/7118/img/wheel-win-frame.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/promo/7118/css/main.css
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 4601
last-modified: Mon, 15 Aug 2022 11:05:02 GMT
etag: "62fa285e-11f9"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17254b9cb509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/wheel-btn.png

14.102.228.38

200 OK

18 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/wheel-btn.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 264 x 528, 8-bit colormap, non-interlaced
Size
18 kB (18331 bytes)
Hash
fc083a2b45acaba651bc99c8200a980e
d399e849efa8d2681b0c3ccfa09a82d4c7f95c15
edf33ee1ab6caaf025239fe4349d4b6a4624d2879c7e34c40c91b5387c88ce4b

HTTP Headers

GET /promo/7118/img/wheel-btn.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/promo/7118/css/main.css
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 18331
last-modified: Fri, 09 Sep 2022 09:08:42 GMT
etag: "631b029a-479b"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17254ba1b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/anim-bg.png

14.102.228.38

200 OK

9.9 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/anim-bg.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 868 x 155, 8-bit colormap, non-interlaced
Size
9.9 kB (9861 bytes)
Hash
645c7c2afc0a550c7d9c63ea01e0aad9
2f362aa594b1a7bbf58c3d344f5b2f1fcd375d84
ff45cf59e2c089b464b103af54742308d162bbd3e30173cb5ed7e74e03482046

HTTP Headers

GET /promo/7118/img/anim-bg.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/promo/7118/css/main.css
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/png
content-length: 9861
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
etag: "631b0299-2685"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 2750
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17255ba3b509-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/fs-icon.svg

14.102.228.38

200 OK

719 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/fs-icon.svg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
gzip compressed data, from Unix
Size
719 kB (718950 bytes)
Hash
ef269395f5e358a202eb9d64e8717de6
292ed28097322ac089703b018d79f5e150c659c8
63bfe85bf316e24409007edbec9bf5247d85d9926b834e1909c1dd3478754981

HTTP Headers

GET /promo/7118/img/fs-icon.svg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/svg+xml
last-modified: Mon, 15 Aug 2022 11:05:03 GMT
etag: W/"62fa285f-331"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3961
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17234999b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/assets/js/lm-1.0.0.min.js

14.102.228.38

200 OK

640 B

URL GET HTTP/2
centaurusnow.com/assets/js/lm-1.0.0.min.js
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
gzip compressed data, from Unix
Size
640 B (640 bytes)
Hash
7e6eb65b0c24d2f9bf1341a895679622
9f133eb743fccd6a3c1c26316d533e6ea2f4f986
07decf0bf657462bf2480d6bb7963698335ded2b56c6b4e73bbde73d57d3d69c

HTTP Headers

GET /assets/js/lm-1.0.0.min.js HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: application/javascript
last-modified: Wed, 17 Apr 2024 15:29:37 GMT
etag: W/"661feae1-bd"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7144
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172379dcb509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://centaurusnow.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:02 GMT
expires: Fri, 18 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 113393
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.227

200 OK

33 kB

URL GET HTTP/2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://centaurusnow.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:02 GMT
expires: Fri, 18 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 113393
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/flags.png

14.102.228.38

200 OK

2.8 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/flags.png
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
PNG image data, 16 x 320, 8-bit colormap, non-interlaced
Size
2.8 kB (2752 bytes)
Hash
6e28e9c4d4ca49ef9541b5619af1e57b
88e3864c56c90e819ac10cf1d662dbddff1c3aaf
7c33c5c384bd368390f6a2a4d902feedcff9ff52b9b39aed8b22f75c24c89dbe

HTTP Headers

GET /promo/7118/img/flags.png HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/promo/7118/css/main.css
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg; pm=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:56 GMT
content-type: image/png
content-length: 2752
last-modified: Fri, 09 Sep 2022 09:08:41 GMT
etag: "631b0299-ac0"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1372
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c1726fd30b509-OSL
X-Firefox-Spdy: h2

fonts.gstatic.com/s/russoone/v16/Z9XUDmZRWg6M1LvRYsHOz8mJ.woff2

216.58.207.227

200 OK

7.4 kB

URL GET HTTP/2
fonts.gstatic.com/s/russoone/v16/Z9XUDmZRWg6M1LvRYsHOz8mJ.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7368, version 1.0
Size
7.4 kB (7368 bytes)
Hash
7194d4041c205a37f3eda9fc1c9d2c02
d14368b4d236b19577ad80ee17d4ad080b6b24ef
82f191a65d38e50c45e0c35e15343690ea1d122402990b99d0c5a1585f9d47af

HTTP Headers

GET /s/russoone/v16/Z9XUDmZRWg6M1LvRYsHOz8mJ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://centaurusnow.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:35:05 GMT
expires: Fri, 18 Apr 2025 02:35:05 GMT
cache-control: public, max-age=31536000
age: 113571
last-modified: Thu, 24 Aug 2023 22:05:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

yeranemelancaio.com/14090/26798?lp=18&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&param=679199_2064795_1209135_197

14.102.229.199

302 Found

62 kB

URL User Request GET HTTP/2
yeranemelancaio.com/14090/26798?lp=18&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&param=679199_2064795_1209135_197
IP
14.102.229.199:443
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerGoogle Trust Services LLC
Subjectyeranemelancaio.com
FingerprintE4:FA:BA:1E:63:7F:12:CE:EF:BE:DA:41:EB:38:9F:8A:3D:52:A9:F0
ValidityTue, 12 Mar 2024 14:14:51 GMT - Mon, 10 Jun 2024 14:14:50 GMT

File type

Size
62 kB (61600 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /14090/26798?lp=18&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&param=679199_2064795_1209135_197 HTTP/1.1
Host: yeranemelancaio.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: text/html; charset=UTF-8
location: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
cache-control: no-cache, private
cf-cache-status: DYNAMIC
set-cookie: _HGAU=e8c20875-1f6b-489d-93ee-c349f5bb2b3a; expires=Sun, 19-Apr-2026 10:07:55 GMT; Max-Age=63072000; path=/; secure; httponly; samesite=lax
vst_cnt_19468=1; expires=Sun, 19-May-2024 10:07:55 GMT; Max-Age=2592000; path=/; secure; httponly; samesite=lax
__cf_bm=DLDIoz9.RiDOSSHt6vx6j5iYKzGCbn5pJ3dEYezm_Uo-1713521275-1.0.1.1-Ooaag_JV3iS2jhabGlSx1wT4dpLSEqeXXW8IVbWWYtbT826JLg_3sCY4a5RSyibitxctocJVfiwghGSAFQ4jvQ; path=/; expires=Fri, 19-Apr-24 10:37:55 GMT; domain=.yeranemelancaio.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 876c17206d671c12-OSL
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/css/main.css

14.102.228.38

200 OK

22 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/css/main.css
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
ASCII text, with very long lines (21751), with no line terminators
Size
22 kB (21751 bytes)
Hash
427965c51bea7fa5a9c26510ceef5f26
c558719a9b04c98dd95b7d612fa3e123d1a1e85d
a6ab574981a6a464141183f9be61f91e31283ae889bdd75dbbc5a23038c024c2

HTTP Headers

GET /promo/7118/css/main.css HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: text/css
last-modified: Thu, 11 May 2023 15:09:25 GMT
etag: W/"645d0525-54f7"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3961
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17233992b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;700;900&family=Russo+One&display=swap

142.250.74.106

200 OK

10 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;700;900&family=Russo+One&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text
Size
10 kB (10240 bytes)
Hash
ec78a6c92a734bdbcaa8b5f32f634c34
c4e971d08c892d0b64b42ac16ca3394e38d1d7ef
eff21287afacebb5e504f80ae8f5c7cf7ab8f970768060895e6595b95f931602

HTTP Headers

GET /css2?family=Montserrat:wght@300;400;500;700;900&family=Russo+One&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 10:07:55 GMT
date: Fri, 19 Apr 2024 10:07:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/money-icon.svg

14.102.228.38

200 OK

729 B

URL GET HTTP/2
centaurusnow.com/promo/7118/img/money-icon.svg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
SVG Scalable Vector Graphics image
Size
729 B (729 bytes)
Hash
9f29d23ae32af8066295c1e690be673d
edb1e1601619c1dfa11bb4320e248e0b8e769afa
a26bb2c5bd1a121173cf4048115f1e8a3880ea8488861615aac7c9a7a547dadb

HTTP Headers

GET /promo/7118/img/money-icon.svg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/svg+xml
last-modified: Mon, 15 Aug 2022 11:05:03 GMT
etag: W/"62fa285f-2d9"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3961
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c1723499ab509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/js/index.js

14.102.228.38

200 OK

6.9 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/js/index.js
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JavaScript source, ASCII text, with very long lines (7470), with no line terminators
Size
6.9 kB (6910 bytes)
Hash
193b47866cef4355636d30a08b316c25
d123e328c9b481b094e56ac3e5f94f21aa1b4218
cbcd04d95135ab775d718c2478d0011bac7e6a5f7e33fcd46f1db1da8ca67995

HTTP Headers

GET /promo/7118/js/index.js HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 15:09:48 GMT
etag: W/"645d053c-1afe"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3961
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c1723ea48b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/assets/js/bundle-341220101100.min.js

14.102.228.38

200 OK

36 kB

URL GET HTTP/2
centaurusnow.com/assets/js/bundle-341220101100.min.js
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type

Size
36 kB (35685 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/js/bundle-341220101100.min.js HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: application/javascript
last-modified: Wed, 17 Apr 2024 15:30:04 GMT
etag: W/"661feafc-8b65"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7166
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172369ccb509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/shared/js/jquery-3.6.0.min.js

14.102.228.38

200 OK

89 kB

URL GET HTTP/2
centaurusnow.com/shared/js/jquery-3.6.0.min.js
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type

Size
89 kB (88803 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /shared/js/jquery-3.6.0.min.js HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: application/javascript
last-modified: Wed, 10 Aug 2022 10:11:03 GMT
etag: W/"62f38437-15ae3"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 7166
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c172379deb509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/favicon.ico

14.102.228.38

200 OK

15 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/favicon.ico
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
15 kB (15406 bytes)
Hash
c502363de38f52a35abcd53c3d7bd807
90aa08a25b9cfb86be709b18deddbe000511c7ab
d9d5424190bc29e04f18e3bad471157d0dcf34903216febc267086a2ccd2708e

HTTP Headers

GET /promo/7118/img/favicon.ico HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg; pm=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/x-icon
last-modified: Mon, 15 Aug 2022 11:04:39 GMT
etag: W/"62fa2847-3c2e"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 1371
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17268cdfb509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/preloader.svg

14.102.228.38

200 OK

438 B

URL GET HTTP/2
centaurusnow.com/promo/7118/img/preloader.svg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
SVG Scalable Vector Graphics image
Size
438 B (438 bytes)
Hash
ae15a7d3bac3238b2f1c722030800762
2cb2b597c314bca48ba0b0e95adec2f5935d4e1a
eb42642fcc4ae7048b906b9ca0df9ce393cabe151f7a848be2c3d26b2ec6f091

HTTP Headers

GET /promo/7118/img/preloader.svg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/svg+xml
last-modified: Mon, 15 Aug 2022 11:05:03 GMT
etag: W/"62fa285f-1b6"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: HIT
age: 3961
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17234994b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO

14.102.228.38

200 OK

62 kB

URL User Request GET HTTP/2
centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type

Size
62 kB (61600 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cf-cache-status: DYNAMIC
set-cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; expires=Sun, 19-Apr-2026 10:07:55 GMT; Max-Age=63072000; path=/; secure; httponly; samesite=lax
ade2d8a196d1571d0926270bd5a71d77=1; expires=Sun, 19-May-2024 00:00:00 GMT; Max-Age=2555525; path=/; secure; httponly; samesite=lax
__cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg; path=/; expires=Fri, 19-Apr-24 10:37:55 GMT; domain=.centaurusnow.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 876c17211f70b509-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

centaurusnow.com/promo/7118/img/bg-desk.jpg

14.102.228.38

200 OK

718 kB

URL GET HTTP/2
centaurusnow.com/promo/7118/img/bg-desk.jpg
IP
14.102.228.38:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://centaurusnow.com/ice/p7118?atp=679199_2064795_1209135_197&goto=sitereg&click_id=GMUBOL_yAWifuilwm4N-6AGv5kmAApeAwKiQh-zLAQ&plid=14090&bnid=26798&lang=en&cc=NO
Certificate
IssuerGoogle Trust Services LLC
Subjectcentaurusnow.com
Fingerprint3F:B7:17:71:3D:64:A2:19:8B:C4:0A:71:09:F2:F6:26:92:E8:E4:53
ValidityTue, 12 Mar 2024 13:46:07 GMT - Mon, 10 Jun 2024 13:46:06 GMT

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1102, components 3
Size
718 kB (718464 bytes)
Hash
a885d47f272af8e2daeaa27677ed841a
7b2eda8dc74034ebfe8ef3b37b24078b8c082ac7
4aadf4158780f2705c4ec562d7ff1e738eaf72f449b92b1fcf700854d5c865be

HTTP Headers

GET /promo/7118/img/bg-desk.jpg HTTP/1.1
Host: centaurusnow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://centaurusnow.com/promo/7118/css/main.css
Cookie: promouuid=0cf6bd76-0c26-464a-b46a-873b86273c97; ade2d8a196d1571d0926270bd5a71d77=1; __cf_bm=QyVT5BcpAMS0N7GopHraOCSWkB0CE39Gch5s8l5BwnU-1713521275-1.0.1.1-3lUgdMdTJWk9Or5StEAldDyXwBYiq9XlSu62F2KnxfxkSje79hr4dIWt9G7vIII.VBrax5ZhO65Tli14RbzeXg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:07:55 GMT
content-type: image/jpeg
content-length: 718464
access-control-allow-origin: *
cf-bgj: h2pri
etag: "62fa2858-af680"
last-modified: Mon, 15 Aug 2022 11:04:56 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4560
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c17254b98b509-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate