GET /logo.htm?m=100316&s=01K0WT38RKBZJY47YBS89VV52T&sv=1.1.6 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Content-Type: text/html
Expires: 0
Pragma: no-cache
Set-Cookie: k=f226bfcbddc348848f80b1071298bfb9; Path=/; Expires=Thu, 23 Jul 2026 23:32:33 GMT; HttpOnly; Secure; SameSite=None
X-Correlation-Id: d30a68ef-4aff-4e51-a73b-e7f993f89c5f
Date: Wed, 23 Jul 2025 23:32:33 GMT
Transfer-Encoding: chunked

GET /_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.3PoUF2c0zTw.2018.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.Fq4SrCtjZF0.L.F4.O/am=AAADDwAC/d=1/exm=_b,_tp/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrhy2dAjcm97ZOc8okhEnjjhzfJZhA/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;oGtAuc:sOXFj;qafBPd:yDVVkb;qddgKe:xQtZb;tbg2ob:Up7mff;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=uZmJdd HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/payments-consumer-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/payments-consumer-boq-js-css-signers"
report-to: {"group":"boq-infra/payments-consumer-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/payments-consumer-boq-js-css-signers"}]}
content-length: 30174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Jul 2025 20:00:12 GMT
expires: Thu, 23 Jul 2026 20:00:12 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 28 Jun 2025 01:33:51 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 12741
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /img/layout/kondo/secure/orderform-details-block/expandable/paypal.svg HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.eyJqdGkiOjEzNDc5NzI2MzYsInJlbWVtYmVyTWUiOnRydWUsInVzZXIiOiJkYThhOTAxZGMzN2E4MDQ0MDdkOWMzZTk2MWZlYjZkNWI2OWZmN2VkZmJhYzdkZDk3MmQ1NTA5N2EzNDljMThmZWY5N2VmM2U1ZmMxNGEwNjQwMDZkNzE0ZGQxNTFlMzQ2NjdmYjIyNTk2NDJmMjM4MTRkZTdlY2JkOWU1YjlkNTIyNWU2NTA4MDNmOGFjYTIyZTA1YjA1MjMyOGM3MzczMzQxMjAzMmZiZjRhMGU3MGQ2MmVkYzZiN2VjMmIwMjYxZTQ4NWFjYjgzZmY0ZmI2YzRkODE3NDc1NWEzY2E1MjRkYjhmZmQzZmMzZWM4YmU3ZjRjZjEyMGY5MGZhMmU2OTljNGJhNGQwOTc0YjgyOWFkYTg3MDA1MDQwMTcyYTVjM2I2MmM0NjQzYzU3YWQ5ODNjNTQ1N2Q0MzRhYjU2ODg0MWQ4NmI3NWQ0YWUzZjY0MzI2YzkyY2I1ZTFjYWNmOTUwZDEzNmQ1MzgzMDY4ZTNkODk1NTg0NTkwZDkzMWYyYjZjZjQ0OTlkNWYyYWQ5ODk0NmI4MDUwZWM1NTRmODg5ODJmNzY0NDdjNjE4ZGExZTFkZGU4ZDA1MjkyZTU1NTVkN2Y0OTNmYzBmNWY0ZjhjNDRjOGI1MDkzYzU1NzQwYmUyZjAzOWI4YTEzNDNhZTA0ZGMyYmZiNzdhNDc3ODlmNDQzZjU0ODQ3ODZlMTllOTdlOGY4OTA1ZjdmYzkzYzA0ZDNkNmJhZDkxNTQwODFmMjg5NTZlM2M2OTdlNTUwMGZlM2UwNjg4Mjc1OWY0NTkwOGQzMTUwMmE3MTNkZTg3NmVkMDQ3YWFiMWZjMTI3MGE0YjgzNzlhMzdmNWM2OTQ5YmJmMzhkYTA1YjVkNzhiNDJhNzc1ZGExMjA3Y2FiZDE5ZjNhN2I2NWZiYzMwMzM3ZjNlYWM0MjI4IiwidXNlcklkIjoyMTQ5MDMxNzQsImN1c3RvbWVyRmlkIjoiRklEOkNTVDoxNzUzMzEzNTQ4Onk5enVKSno1c2Q0ZUQiLCJpYXQiOjE3NTMzMTM1NDl9.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:30 GMT
content-type: image/svg+xml
x-goog-generation: 1677691780279240
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8704
x-goog-hash: crc32c=bnD7oQ==, md5=1pJ0r00JfxdoQ7cVan+x4Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Type
x-guploader-uploadid: AFiumC5fVZ5I0oUHIHQCyToHXKfLKDkeEcDFnAsKCWVKigyCGccG1798VA8a50JJDkO0dA1d5wLtN_lD4Q
expires: Wed, 30 Jul 2025 23:32:30 GMT
cache-control: max-age=604800
age: 3119
last-modified: Wed, 01 Mar 2023 17:29:40 GMT
etag: W/"d69274af4d097f176843b7156a7fb1e1"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/img/layout/kondo/secure/orderform-details-block/expandable/paypal.svg>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

GET /v1.1.12/iframe.html HTTP/1.1
Host: cdn.prod.pci-bridge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
x-guploader-uploadid: ABgVH89cT_6bNsnjJTy2cvPXEja0yzSGxTan9KLvjRBBugBbpV2qLaf7LFE4swp3Ly9PGwE
x-goog-generation: 1720016312480331
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 163
content-encoding: gzip
x-goog-hash: crc32c=OQe43g==, md5=bhIIuCNtVpZF1icaUn+08Q==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 163
access-control-allow-origin: *
server: UploadServer
date: Wed, 23 Jul 2025 00:20:25 GMT
age: 83526
last-modified: Wed, 03 Jul 2024 14:18:32 GMT
etag: "6e1208b8236d569645d6271a527fb4f1"
content-type: text/html
cache-control: public,max-age=3600,no-transform
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: payment=("https://cdn.prod.pci-bridge.com")
feature-policy: payment https://cdn.prod.pci-bridge.com
referrer-policy: no-referrer
content-security-policy: default-src 'none'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; font-src https://fonts.gstatic.com https://use.typekit.net; connect-src https://api.prod.pci-bridge.com; require-trusted-types-for 'script';
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /v1.1.12/js/pcibridge.js HTTP/1.1
Host: cdn.prod.pci-bridge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
x-guploader-uploadid: ABgVH88NGKP7tFzroiddKvFEbF7fURjaCol58GcgIC9JTV5j1WWIJdbAhLDStCvqmywkVna3ASihm3o
x-goog-generation: 1720016312304109
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 59041
content-encoding: gzip
x-goog-hash: crc32c=4ShYPQ==, md5=ZUdfdYF5HH37rtiA5NJdVA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 59041
access-control-allow-origin: *
server: UploadServer
date: Wed, 23 Jul 2025 00:38:11 GMT
age: 82460
last-modified: Wed, 03 Jul 2024 14:18:32 GMT
etag: "65475f7581791c7dfbaed880e4d25d54"
content-type: application/javascript
cache-control: public,max-age=3600,no-transform
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: payment=("https://cdn.prod.pci-bridge.com")
feature-policy: payment https://cdn.prod.pci-bridge.com
referrer-policy: no-referrer
content-security-policy: default-src 'none'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; font-src https://fonts.gstatic.com https://use.typekit.net; connect-src https://api.prod.pci-bridge.com; require-trusted-types-for 'script';
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

POST /md HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1174
Origin: https://ssl.kaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://ssl.kaptcha.com/logo.htm?m=100316&s=01K0WT38RKBZJY47YBS89VV52T&sv=1.1.6
Cookie: k=f226bfcbddc348848f80b1071298bfb9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: e1435487-9212-45a5-8fb6-29ba0e71f788
Date: Wed, 23 Jul 2025 23:32:36 GMT
Content-Length: 0

GET /?tr_uuid=20250724-0932-20f7-b6e3-c6517d2888cb&fp=-7 HTTP/1.1
Host: xn--hu1b88ll0ffvo7li.linkmoya.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __tad=1753313540.4097070
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Wed, 23 Jul 2025 23:32:22 GMT
server: Apache
location: http://cuyuzu.com/xr.php?e=sfeU%2BQysCra%2FhKjhJ%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
content-length: 0
content-type: text/html; charset=UTF-8
connection: close

GET /favicon.ico HTTP/1.1
Host: woclck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: uclick=meiKlAtVPdo1gLD8OmCYvnfDefHJGGmOxh3J7RCFSUoamzFYdwRuaTmCs8ITaorxJ3mtfQ==; bcid=d20n22anaffc73cdq330
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

GET /img/layout/kondo/secure/divided-orderform/tav-awards2024.png HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.eyJqdGkiOjEzNDc5NzI2MzYsInJlbWVtYmVyTWUiOnRydWUsInVzZXIiOiJkYThhOTAxZGMzN2E4MDQ0MDdkOWMzZTk2MWZlYjZkNWI2OWZmN2VkZmJhYzdkZDk3MmQ1NTA5N2EzNDljMThmZWY5N2VmM2U1ZmMxNGEwNjQwMDZkNzE0ZGQxNTFlMzQ2NjdmYjIyNTk2NDJmMjM4MTRkZTdlY2JkOWU1YjlkNTIyNWU2NTA4MDNmOGFjYTIyZTA1YjA1MjMyOGM3MzczMzQxMjAzMmZiZjRhMGU3MGQ2MmVkYzZiN2VjMmIwMjYxZTQ4NWFjYjgzZmY0ZmI2YzRkODE3NDc1NWEzY2E1MjRkYjhmZmQzZmMzZWM4YmU3ZjRjZjEyMGY5MGZhMmU2OTljNGJhNGQwOTc0YjgyOWFkYTg3MDA1MDQwMTcyYTVjM2I2MmM0NjQzYzU3YWQ5ODNjNTQ1N2Q0MzRhYjU2ODg0MWQ4NmI3NWQ0YWUzZjY0MzI2YzkyY2I1ZTFjYWNmOTUwZDEzNmQ1MzgzMDY4ZTNkODk1NTg0NTkwZDkzMWYyYjZjZjQ0OTlkNWYyYWQ5ODk0NmI4MDUwZWM1NTRmODg5ODJmNzY0NDdjNjE4ZGExZTFkZGU4ZDA1MjkyZTU1NTVkN2Y0OTNmYzBmNWY0ZjhjNDRjOGI1MDkzYzU1NzQwYmUyZjAzOWI4YTEzNDNhZTA0ZGMyYmZiNzdhNDc3ODlmNDQzZjU0ODQ3ODZlMTllOTdlOGY4OTA1ZjdmYzkzYzA0ZDNkNmJhZDkxNTQwODFmMjg5NTZlM2M2OTdlNTUwMGZlM2UwNjg4Mjc1OWY0NTkwOGQzMTUwMmE3MTNkZTg3NmVkMDQ3YWFiMWZjMTI3MGE0YjgzNzlhMzdmNWM2OTQ5YmJmMzhkYTA1YjVkNzhiNDJhNzc1ZGExMjA3Y2FiZDE5ZjNhN2I2NWZiYzMwMzM3ZjNlYWM0MjI4IiwidXNlcklkIjoyMTQ5MDMxNzQsImN1c3RvbWVyRmlkIjoiRklEOkNTVDoxNzUzMzEzNTQ4Onk5enVKSno1c2Q0ZUQiLCJpYXQiOjE3NTMzMTM1NDl9.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:30 GMT
content-type: image/png
content-length: 25137
x-guploader-uploadid: AFIdbgTe8H-lxJ3KzhRAE8BqYL4ahCUwI47G-YH2X8XXOLGEDbMHuTXIViWWwBEFaXAnp12Lx9-tjwA
x-goog-generation: 1737727699734276
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 25137
x-goog-hash: crc32c=VJGS/g==, md5=3I7lI6RF0dPD589SB4989Q==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Type
expires: Wed, 30 Jul 2025 23:32:30 GMT
cache-control: max-age=604800
last-modified: Fri, 24 Jan 2025 14:08:19 GMT
etag: "dc8ee523a445d1d3c3e7cf52078f7cf5"
age: 288
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/img/layout/kondo/secure/divided-orderform/tav-awards2024.png>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /v1.1.12/js/pcibridge.js HTTP/1.1
Host: cdn.prod.pci-bridge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
x-guploader-uploadid: ABgVH88NGKP7tFzroiddKvFEbF7fURjaCol58GcgIC9JTV5j1WWIJdbAhLDStCvqmywkVna3ASihm3o
x-goog-generation: 1720016312304109
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 59041
content-encoding: gzip
x-goog-hash: crc32c=4ShYPQ==, md5=ZUdfdYF5HH37rtiA5NJdVA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 59041
access-control-allow-origin: *
server: UploadServer
date: Wed, 23 Jul 2025 00:38:11 GMT
age: 82460
last-modified: Wed, 03 Jul 2024 14:18:32 GMT
etag: "65475f7581791c7dfbaed880e4d25d54"
content-type: application/javascript
cache-control: public,max-age=3600,no-transform
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: payment=("https://cdn.prod.pci-bridge.com")
feature-policy: payment https://cdn.prod.pci-bridge.com
referrer-policy: no-referrer
content-security-policy: default-src 'none'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; font-src https://fonts.gstatic.com https://use.typekit.net; connect-src https://api.prod.pci-bridge.com; require-trusted-types-for 'script';
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 755
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /js/fingerprint/iife.min.js HTTP/1.1
Host: xn--hu1b88ll0ffvo7li.linkmoya.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--hu1b88ll0ffvo7li.linkmoya.top/
Cookie: __tad=1753313540.4097070
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 23 Jul 2025 23:32:21 GMT
server: Apache
last-modified: Mon, 28 Apr 2025 06:31:33 GMT
etag: "85c0-633d0d5c5fb40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14345
content-type: application/javascript
connection: close

GET /css/sf-pro-display HTTP/1.1
Host: fonts.cdnfonts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://resources.totalav.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 23 Jul 2025 23:32:31 GMT
content-type: text/css;charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: br
age: 414165
cache-control: max-age=2678400
cf-cache-status: HIT
last-modified: Sat, 19 Jul 2025 04:29:45 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=fn5w64kCMxI4zbe5Hb1JYP9Ru5k4C28bQeJM7Fx%2FBLOEVHEjVdiZuGyHU6HCiFkT2csjRphClc0xSuLzp0x4C%2Fkm7Tsxb3roufmES06KqUc%3D"}]}
cf-ray: 963efa3f0ac3b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /v1.1.12/iframe.html HTTP/1.1
Host: cdn.prod.pci-bridge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
x-guploader-uploadid: ABgVH89cT_6bNsnjJTy2cvPXEja0yzSGxTan9KLvjRBBugBbpV2qLaf7LFE4swp3Ly9PGwE
x-goog-generation: 1720016312480331
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 163
content-encoding: gzip
x-goog-hash: crc32c=OQe43g==, md5=bhIIuCNtVpZF1icaUn+08Q==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 163
access-control-allow-origin: *
server: UploadServer
date: Wed, 23 Jul 2025 00:20:25 GMT
age: 83526
last-modified: Wed, 03 Jul 2024 14:18:32 GMT
etag: "6e1208b8236d569645d6271a527fb4f1"
content-type: text/html
cache-control: public,max-age=3600,no-transform
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: payment=("https://cdn.prod.pci-bridge.com")
feature-policy: payment https://cdn.prod.pci-bridge.com
referrer-policy: no-referrer
content-security-policy: default-src 'none'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; font-src https://fonts.gstatic.com https://use.typekit.net; connect-src https://api.prod.pci-bridge.com; require-trusted-types-for 'script';
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.en_US.3PoUF2c0zTw.2018.O/ck=boq-payments-consumer.InstantbuyFrontendBuyflowPayframeUi.Fq4SrCtjZF0.L.F4.O/am=AAADDwAC/d=1/exm=FCpbqb,WhJNk,Wt6vjf,_b,_tp,hhhU8,uZmJdd/excm=_b,_tp,payframeview/ed=1/wt=2/ujg=1/rs=AMitfrhy2dAjcm97ZOc8okhEnjjhzfJZhA/ee=EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NJ1rfe:yGfSdd;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;oGtAuc:sOXFj;qafBPd:yDVVkb;qddgKe:xQtZb;tbg2ob:Up7mff;wR5FRb:siKnQd;yEQyxe:p8L0ob;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe,lwddkf,EFQ78c HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/payments-consumer-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/payments-consumer-boq-js-css-signers"
report-to: {"group":"boq-infra/payments-consumer-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/payments-consumer-boq-js-css-signers"}]}
content-length: 14604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Jul 2025 20:00:13 GMT
expires: Thu, 23 Jul 2026 20:00:13 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Sat, 28 Jun 2025 01:33:51 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 12740
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

POST /fin HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 113
Origin: https://ssl.kaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://ssl.kaptcha.com/logo.htm?m=100316&s=01K0WT38RKBZJY47YBS89VV52T&sv=1.1.6
Cookie: k=f226bfcbddc348848f80b1071298bfb9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: 01eeb70d-2c53-46fc-bda7-e3d8565b4536
Date: Wed, 23 Jul 2025 23:32:36 GMT
Content-Length: 0

GET /?tr_uuid=20250724-0932-20f7-b6e3-c6517d2888cb&fp=-7 HTTP/1.1
Host: xn--hu1b88ll0ffvo7li.linkmoya.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1753313540.4097070
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Wed, 23 Jul 2025 23:32:22 GMT
server: Apache
location: https://xn--hu1b88ll0ffvo7li.linkmoya.top/?tr_uuid=20250724-0932-20f7-b6e3-c6517d2888cb&fp=-7
content-length: 0
content-type: text/html; charset=UTF-8
connection: close

GET /build/prod/26.381.3/ts/bundle/secureApp.min.js HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.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.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:30 GMT
content-type: text/javascript
content-length: 171604
x-guploader-uploadid: ABgVH88YkCpeP-ftYm1XsWU4K0CFybD4Xzy30VjvlHNkx_qrlZGhvm41mtwsHlAT5s1CERo
x-goog-generation: 1753286759690033
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 171604
content-encoding: gzip
x-goog-hash: crc32c=wajmyA==, md5=XAlTq9+Y2hDGTi6NymlrWw==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Type
expires: Wed, 30 Jul 2025 23:32:30 GMT
cache-control: max-age=604800
last-modified: Wed, 23 Jul 2025 16:05:59 GMT
etag: "5c0953abdf98da10c64e2e8dca696b5b"
age: 268
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/build/prod/26.381.3/ts/bundle/secureApp.min.js>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

POST /md HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1176
Origin: https://ssl.kaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://ssl.kaptcha.com/logo.htm?m=100316&s=01K0WT38RKBZJY47YBS89VV52T&sv=1.1.6
Cookie: k=f226bfcbddc348848f80b1071298bfb9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: ebef4d78-60b8-4ee5-8f2e-a8fe10cdab9d
Date: Wed, 23 Jul 2025 23:32:36 GMT
Content-Length: 0

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 755
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /r.php?u=https%3A%2F%2Fwoclck.com%2Fclick%3Fkey%3Dbd3745f67dab90f144ec%26t%3D0.008%26t1%3D0.008%26t2%3D349365300%26t3%3D0%26t4%3D0%26t5%3D1%26t6%3Ds&s=j&enc=KbIt7mXladyaVkwFn3L73n49fjlPWW1YR1RZbGttMmR0R29FSFZTMEJ1UFFMSVk5MW16VzdxanN3c0Z5Q3pJTHNKN1hCSFF2VWJNWFluY0ZIcDQ1VmV3SzNTWUFuZGRESTFRR21LbzMxVGhxWGNmY0JOODA2WUpJdkRITjJmSGZwb3dCMWl4d3hvRnBmOFErbmJUUGNkVWdWVWVtNnZRTGxrazlXMXMrU3JqWkgzZjgzT0N0SzE2dVNDUTJTS0RwQVArUWRFNDUvSitHb1BxMHh4WGo3ZzZRZXgwc1BYam1uMzZ3Nk9oN2dML3VBdWM1RGlTQWJta25IWlF3K0NTTlZtTXo3a0ZFRVN3UklWb3ZrSlQyWVNEaVNJMnpuRzJDazNSQWdFc3VTSTVqYXc4MzlLSEU4aW9qa3RETXZmdklEZWVucGYwRGNuWXJZYkViZDJrRUtDQ1dEdFpLZnExWEFIcXh2dFVxUDZZVXp6dGVCY0FDOFhoeUk2cFFIdTA1VUVXeGdVQzBpQzNDQjA5U2NsRFZmcStPSHpGMnptQXRhUlJndHdaYytaNS9CaEtTZ1FRcHdEZnNQUE45c1NmQWVHaVNjOWVMQVpYSXd1bjZMdnlDR3dHeVZNblZ4UG9VV0lJZTQrRG51ZXBvSzFlOWZJU3lncWpXUjNvZTliUzRqb0JsT3dodGFwVitFTnhYRTkyUnVPbUh5WGZVU25RcDdoWmdvKys3U2JiVEN5RzlkODhyTUp4Z2lhMkJlTkVzejlrVHcvanlZbjlvWHpMM0lsckJuMjRQTHBzQzB6Z2dJeWlmb3RIcUJ4OHgzWDV2dmd6YnRYWUtZMlo3UTM1UTNtbUc2YlFtenYwdk9Na0VhSVpLSlkreE5JVk9YaHRVSGdTN3V2ZXhxRDJYbHdMcW54L2pScVVKUXhUdmRrMHpTYVhscmVRdXNZLzJFUTdNTUV4UWw0UzFFbFVXSXVtWTNQb3pvV0JyNUJjOC9ieUJyTDNnUUl1dituRTI4Q282UDRiQzFwcWwrOTQvZ2haWEwrNm9QSXNnK3Z5K0RybG5TeTFwV2pjSGdUcStzVjFVQ2Q1MjRtYlJhMW02WUZTLyt3dTBVOHZZMmVpTGlFS3orRFJVN2FKQzc4eFB6NUVOVjlIakxBMmZvQXpneXJGa1V2M3R2WWVyRlowWlpON0pjWlJyTnZzanZldk12bFFLajFDREdwN2xhcHRHNG5FVkEvRVBzaTE0cUo4NWIyUll4RUQ1NDNudnVYNjA1VlJjTVJSQ000MUttNmF2a1RrNXZBOUM5UGVsemxJYTMySjB3bTViaDIvSU1ZWGZkTG9ERDF6eUgyaEdWUDhiRml5SVlTQm1pelV4bDRFZElpcmRMYlU%3D&vs=1280:1024&ds=1280:1024&sl=0:0&os=f&nos=f&if=f&sc=f&gpu=Mesa%20-%20llvmpipe&fp=-7 HTTP/1.1
Host: cuyuzu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://cuyuzu.com/xr.php?e=sfeU%2BQysCra%2FhKjhJ%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
DNT: 1
Connection: keep-alive
Cookie: __dsnsid=20250724093222869957ae1d1eefa0f9
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Wed, 23 Jul 2025 23:32:25 GMT
server: Apache
location: https://woclck.com/click?key=bd3745f67dab90f144ec&t=0.008&t1=0.008&t2=349365300&t3=0&t4=0&t5=1&t6=s
content-length: 0
content-type: text/html; charset=UTF-8
connection: close

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: cuyuzu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://cuyuzu.com/xr.php?e=sfeU%2BQysCra%2FhKjhJ%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
Cookie: __dsnsid=20250724093222869957ae1d1eefa0f9
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html

GET /click?key=bd3745f67dab90f144ec&t=0.008&t1=0.008&t2=349365300&t3=0&t4=0&t5=1&t6=s HTTP/1.1
Host: woclck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://cuyuzu.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Wed, 23 Jul 2025 23:32:25 GMT
server: Caddy
set-cookie: uclick=meiKlAtVPdo1gLD8OmCYvnfDefHJGGmOxh3J7RCFSUoamzFYdwRuaTmCs8ITaorxJ3mtfQ==; Max-Age=31536000; SameSite=Lax
bcid=d20n22anaffc73cdq330; Max-Age=31536000; SameSite=Lax
x-request-id: 13861c7d-d28c-4dde-ae13-df33a244ae7b
content-length: 327
X-Firefox-Spdy: h2

GET /cross-domain/respond.src.js HTTP/1.1
Host: secure.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.eyJqdGkiOjEzNDc5NzI2MzYsInJlbWVtYmVyTWUiOnRydWUsInVzZXIiOiJkYThhOTAxZGMzN2E4MDQ0MDdkOWMzZTk2MWZlYjZkNWI2OWZmN2VkZmJhYzdkZDk3MmQ1NTA5N2EzNDljMThmZWY5N2VmM2U1ZmMxNGEwNjQwMDZkNzE0ZGQxNTFlMzQ2NjdmYjIyNTk2NDJmMjM4MTRkZTdlY2JkOWU1YjlkNTIyNWU2NTA4MDNmOGFjYTIyZTA1YjA1MjMyOGM3MzczMzQxMjAzMmZiZjRhMGU3MGQ2MmVkYzZiN2VjMmIwMjYxZTQ4NWFjYjgzZmY0ZmI2YzRkODE3NDc1NWEzY2E1MjRkYjhmZmQzZmMzZWM4YmU3ZjRjZjEyMGY5MGZhMmU2OTljNGJhNGQwOTc0YjgyOWFkYTg3MDA1MDQwMTcyYTVjM2I2MmM0NjQzYzU3YWQ5ODNjNTQ1N2Q0MzRhYjU2ODg0MWQ4NmI3NWQ0YWUzZjY0MzI2YzkyY2I1ZTFjYWNmOTUwZDEzNmQ1MzgzMDY4ZTNkODk1NTg0NTkwZDkzMWYyYjZjZjQ0OTlkNWYyYWQ5ODk0NmI4MDUwZWM1NTRmODg5ODJmNzY0NDdjNjE4ZGExZTFkZGU4ZDA1MjkyZTU1NTVkN2Y0OTNmYzBmNWY0ZjhjNDRjOGI1MDkzYzU1NzQwYmUyZjAzOWI4YTEzNDNhZTA0ZGMyYmZiNzdhNDc3ODlmNDQzZjU0ODQ3ODZlMTllOTdlOGY4OTA1ZjdmYzkzYzA0ZDNkNmJhZDkxNTQwODFmMjg5NTZlM2M2OTdlNTUwMGZlM2UwNjg4Mjc1OWY0NTkwOGQzMTUwMmE3MTNkZTg3NmVkMDQ3YWFiMWZjMTI3MGE0YjgzNzlhMzdmNWM2OTQ5YmJmMzhkYTA1YjVkNzhiNDJhNzc1ZGExMjA3Y2FiZDE5ZjNhN2I2NWZiYzMwMzM3ZjNlYWM0MjI4IiwidXNlcklkIjoyMTQ5MDMxNzQsImN1c3RvbWVyRmlkIjoiRklEOkNTVDoxNzUzMzEzNTQ4Onk5enVKSno1c2Q0ZUQiLCJpYXQiOjE3NTMzMTM1NDl9.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 23 Jul 2025 23:32:30 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self', frame-ancestors 'self';
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /build/prod/26.381.3/css/kondo/secure/_totalav/secure.min.css HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.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.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:30 GMT
content-type: text/css
content-length: 13018
x-guploader-uploadid: ABgVH8-kQk9VS4gYwqVl2iQv4kaWibBK_8WcwgMInvQ1Z3r8z6V0Enc3JMJk1bEQ3_LCpOI
x-goog-generation: 1753286743530051
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 13018
content-encoding: gzip
x-goog-hash: crc32c=bgbxeg==, md5=hnwSYF9Z3cEmVsKtXxCtTw==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Type
expires: Wed, 30 Jul 2025 23:32:30 GMT
cache-control: max-age=604800
last-modified: Wed, 23 Jul 2025 16:05:43 GMT
etag: "867c12605f59ddc12656c2ad5f10ad4f"
age: 720
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/build/prod/26.381.3/css/kondo/secure/_totalav/secure.min.css>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /img/global/secure/form_footer/green-guarantee-shield.svg HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.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.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:30 GMT
content-type: image/svg+xml
x-goog-generation: 1688397021033099
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5770
x-goog-hash: crc32c=RCQfAQ==, md5=jHktESc6jb3rrqtXDn1PnA==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Type
x-guploader-uploadid: AFiumC4pDUFtfMcxlM0CJFJhmYfmgpV8VpFu8XrAFucg4iofnOLEDtqogG6R6mVqma5hfQG_3zw
expires: Wed, 30 Jul 2025 23:32:30 GMT
cache-control: max-age=604800
age: 137
last-modified: Mon, 03 Jul 2023 15:10:21 GMT
etag: W/"8c792d11273a8dbdebaeab570e7d4f9c"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/img/global/secure/form_footer/green-guarantee-shield.svg>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

POST /terms/shown HTTP/1.1
Host: secure.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 126
Origin: https://secure.totalav.com
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.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.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 23 Jul 2025 23:32:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self', frame-ancestors 'self';
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; expires=Thu, 23-Jul-2026 23:32:32 GMT; Max-Age=31536000; path=/; domain=.totalav.com
_snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; expires=Thu, 23-Jul-2026 23:32:32 GMT; Max-Age=31536000; path=/; domain=.totalav.com
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /cs/generatecookie?m=100316&s=01K0WT38RKBZJY47YBS89VV52T&sv=1.1.6 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.totalav.com/
Origin: https://secure.totalav.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: 3d07132c-be9e-4f2b-8511-8345f282af85
Date: Wed, 23 Jul 2025 23:32:33 GMT
Content-Length: 323
Content-Type: text/plain; charset=utf-8

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET / HTTP/1.1
Host: xn--hu1b88ll0ffvo7li.linkmoya.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Wed, 23 Jul 2025 23:32:20 GMT
server: Apache
set-cookie: __tad=1753313540.4097070; expires=Sat, 21-Jul-2035 23:32:20 GMT; Max-Age=315360000
vary: Accept-Encoding
content-encoding: gzip
content-length: 583
content-type: text/html; charset=UTF-8
connection: close

GET /xr.php?e=sfeU%2BQysCra%2FhKjhJ%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 HTTP/1.1
Host: cuyuzu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET /67e2e8814c081/click/a624284/fed0cb04-f459-4c26-8119-f1a1a8934680// HTTP/1.1
Host: url.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Wed, 23 Jul 2025 23:32:26 GMT
content-type: text/html; charset=UTF-8
location: https://www.totalav.com/ultra-deal-20-1
set-cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; expires=Tue, 21-Oct-2025 23:32:26 GMT; Max-Age=7776000; path=/; domain=.totalav.com
FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; expires=Tue, 21-Oct-2025 23:32:26 GMT; Max-Age=7776000; path=/; domain=.totalav.com
FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; expires=Tue, 21-Oct-2025 23:32:26 GMT; Max-Age=7776000; path=/; domain=.totalav.com
FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; expires=Tue, 21-Oct-2025 23:32:26 GMT; Max-Age=7776000; path=/; domain=.totalav.com
x-content-type-options: nosniff
access-control-allow-origin: *
x-execution-time: 50.234 ms
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2

GET /build/prod/26.381.3/css/kondo/global/_totalav/global.min.css HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.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.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:30 GMT
content-type: text/css
content-length: 15895
x-guploader-uploadid: ABgVH8_L_Sjok5-LMBOCWgjC-FtaxrZbcdoFqyQ_Jib7nZVztLbEcYgQtkZ286L4RzJLPaY
x-goog-generation: 1753286738519813
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 15895
content-encoding: gzip
x-goog-hash: crc32c=8gLEPQ==, md5=HQZ9NR2lGAZSfnv8Z8ByvQ==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Type
expires: Wed, 30 Jul 2025 23:32:30 GMT
cache-control: max-age=604800
last-modified: Wed, 23 Jul 2025 16:05:38 GMT
etag: "1d067d351da51806527e7bfc67c072bd"
age: 720
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/build/prod/26.381.3/css/kondo/global/_totalav/global.min.css>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /font/roboto/Roboto-Medium-webfont.woff HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.totalav.com
DNT: 1
Connection: keep-alive
Referer: https://resources.totalav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:31 GMT
content-type: font/woff
content-length: 25048
cache-control: max-age=604800
expires: Wed, 30 Jul 2025 23:32:31 GMT
last-modified: Mon, 19 Aug 2019 15:33:46 GMT
etag: "b9d01ac1742192a7c9d30f3fe346a9f4"
x-goog-generation: 1566228826052099
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 25048
x-goog-hash: crc32c=Aphgvw==, md5=udAawXQhkqfJ0w8/40ap9A==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
x-guploader-uploadid: AFiumC7a_oeD5Xzc3uNy4132KbhBc5P4yGQG4fY3tfbeDhoCGg1VtB-TuXQYBGQx8o92hWJt_wo
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/font/roboto/Roboto-Medium-webfont.woff>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

POST /session/01K0WT38RKBZJY47YBS89VV52T HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
client-id: 100316
Origin: https://secure.totalav.com
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
Set-Cookie: k=85831b2851374236ba82c6d162070b4b; Path=/; Expires=Thu, 23 Jul 2026 23:32:33 GMT; HttpOnly; Secure; SameSite=None
X-Correlation-Id: 1b9d7dbf-8f00-42e5-8b07-5725973978c6
Date: Wed, 23 Jul 2025 23:32:33 GMT
Content-Length: 0

GET /fp/common/9f1ecd79.js HTTP/1.1
Host: url.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.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.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 23 Jul 2025 23:32:31 GMT
content-type: text/javascript;charset=UTF-8
cache-control: max-age=2592000, public, s-maxage=2592000
x-content-type-options: nosniff
vary: Accept-Encoding, Accept-Encoding
etag: W/"c1f21197fdb9d3e498efa333dcb08ddc"
expires: Fri, 22 Aug 2025 23:32:31 GMT
last-modified: Wed, 23 Jul 2025 23:32:31 GMT
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2

POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 806
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://pay.google.com/
X-Goog-AuthUser: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 756
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 23 Jul 2025 23:32:35 GMT
server: Playlog
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /font/Inter/Inter-Bold.woff2 HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.totalav.com
DNT: 1
Connection: keep-alive
Referer: https://resources.totalav.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:31 GMT
content-type: application/octet-stream
content-length: 104516
x-goog-generation: 1693560715435354
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 104516
x-goog-hash: crc32c=6p4ygQ==, md5=7FoAmWQXbCADRv3V5gPTxA==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
x-guploader-uploadid: AFiumC6bSDQDbNMLbbyISKmhAbmWQMf_1qjVlN2ntnTmvlUQK_uKqMQo4G6ozEWOSixtB82xb-W4HwKL3A
expires: Wed, 30 Jul 2025 23:32:31 GMT
cache-control: max-age=604800
age: 1102
last-modified: Fri, 01 Sep 2023 09:31:55 GMT
etag: "ec5a009964176c200346fdd5e603d3c4"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/font/Inter/Inter-Bold.woff2>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

GET /cs/config?m=100316&s=01K0WT38RKBZJY47YBS89VV52T&sv=1.1.6 HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://secure.totalav.com/
Origin: https://secure.totalav.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: 2fad7616-105e-41fa-a40c-88336b14031b
Date: Wed, 23 Jul 2025 23:32:32 GMT
Content-Length: 164
Content-Type: text/plain; charset=utf-8

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /v1.1.12/iframe.html HTTP/1.1
Host: cdn.prod.pci-bridge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
x-guploader-uploadid: ABgVH89cT_6bNsnjJTy2cvPXEja0yzSGxTan9KLvjRBBugBbpV2qLaf7LFE4swp3Ly9PGwE
x-goog-generation: 1720016312480331
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 163
content-encoding: gzip
x-goog-hash: crc32c=OQe43g==, md5=bhIIuCNtVpZF1icaUn+08Q==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 163
access-control-allow-origin: *
server: UploadServer
date: Wed, 23 Jul 2025 00:20:25 GMT
age: 83526
last-modified: Wed, 03 Jul 2024 14:18:32 GMT
etag: "6e1208b8236d569645d6271a527fb4f1"
content-type: text/html
cache-control: public,max-age=3600,no-transform
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: payment=("https://cdn.prod.pci-bridge.com")
feature-policy: payment https://cdn.prod.pci-bridge.com
referrer-policy: no-referrer
content-security-policy: default-src 'none'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; font-src https://fonts.gstatic.com https://use.typekit.net; connect-src https://api.prod.pci-bridge.com; require-trusted-types-for 'script';
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /img/global/favicons/lock/favicon-16x16.png HTTP/1.1
Host: resources.totalav.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.totalav.com/
Cookie: FRT:ADVTD=FID%3AAFF%3A1694776898%3ACHCSK87vY7PLk%2F67e2e8814c081%2Fa624284%2Ffed0cb04-f459-4c26-8119-f1a1a8934680%2F; FRT:VIS=VIS%3A2507239190421546881710a88c766.92972112; FRT:SIGNUPSOURCE=ultra-deal; FRT:LANDER=ultra-deal-20-1; PHPSESSID=59a456b21651e87089d65d36020a4f97; _snsd=djpWa2xUT2pJMU1EY3lNemt4T1RBME1qRTFORFk0T0RFM01UQmhPRGhqTnpZMkxqa3lPVGN5TVRFeSxhOlJrbEVPa0ZHUmpveE5qazBOemMyT0RrNE9rTklRMU5MT0RkMldUZFFUR3M9LGM6TmpkbE1tVTRPREUwWXpBNE1RPT0sczE6WVRZeU5ESTROQT09LHMyOlptVmtNR05pTURRdFpqUTFPUzAwWXpJMkxUZ3hNVGt0WmpGaE1XRTRPVE0wTmpndyxzMzo%3D; 3PROD=TAVPREM; LC=eyJhbGciOiJSU0EiLCJ0eXAiOiJKV1QifQ.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.OpvN93W_aEtBfjqGXOMKIMTfdSvnWMs8Qk5foMbMbLuDiQXxQjVfW4SK09cuf0sJecw1HcoG25b_UIrMEy2Ffn-WS_7h45KLRykTrC7LQnWSx6YB5Oa3x00oh8LAOQNDTzC_BasEND-9VQLJpu2kEWwinNNk1qL4L1SMNfavp4rZe5julq8J0Ne9Gut1sy0ROiznB-3EaiHaSuUVNhsFvKn9CPQsnbXUKzw9B6UQy28cESbBUpM2JPaB2x5oPbryslVtv0j2VClZZ49U1-V2pfykyuLi3ttOvWviRnkWLuQndqUAkVQ-n2bOmYtb1RMXXSONIubrW8bWOb4IGDlfiA; FRT:PROD=TAVPREM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: keycdn
date: Wed, 23 Jul 2025 23:32:31 GMT
content-type: image/png
content-length: 1103
x-goog-generation: 1565684587348164
x-goog-metageneration: 6
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1103
x-goog-hash: crc32c=elkv7w==, md5=F0xnL005e69VyRK+tzBiuw==
x-goog-storage-class: MULTI_REGIONAL
access-control-expose-headers: Content-Type
x-guploader-uploadid: AFiumC52HhzaLDKQEQA4VuQ_r430wcvi9WBcJGcR7kA0eDsSgplNjGEwnMA82h_eQghVGNAn-5p2ABjk2g
expires: Wed, 30 Jul 2025 23:32:31 GMT
cache-control: max-age=604800
last-modified: Tue, 13 Aug 2019 08:23:07 GMT
etag: "174c672f4d397baf55c912beb73062bb"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
link: <https://storage.googleapis.com/protected-static/img/global/favicons/lock/favicon-16x16.png>; rel="canonical"
x-cache: HIT
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://pay.google.com/
Origin: https://pay.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://pay.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 23 Jul 2025 23:32:34 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /md HTTP/1.1
Host: ssl.kaptcha.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 101
Origin: https://ssl.kaptcha.com
DNT: 1
Connection: keep-alive
Referer: https://ssl.kaptcha.com/logo.htm?m=100316&s=01K0WT38RKBZJY47YBS89VV52T&sv=1.1.6
Cookie: k=f226bfcbddc348848f80b1071298bfb9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, private
Expires: 0
Pragma: no-cache
X-Correlation-Id: 5274005e-f2ed-4b4c-92dc-15a52d646162
Date: Wed, 23 Jul 2025 23:32:36 GMT
Content-Length: 0