Overview

URL newsoft12.thesafeandfunupgrade.bid
IP51.15.153.212
ASN
Location United Kingdom
Report completed2018-03-17 08:22:05 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 51.15.153.212

Date UQ / IDS / BL URL IP
2018-03-20 18:42:47 +0100
0 - 0 - 1 aptitude.yourbestsystems4updatesever.win/bl.php 51.15.153.212
2018-03-20 18:42:42 +0100
0 - 0 - 2 aptitude.yourbestsystems4updatesever.win 51.15.153.212
2018-03-20 10:36:08 +0100
0 - 0 - 1 aptitude.yourbestsystems4updatesever.win/bl.php 51.15.153.212
2018-03-19 17:20:11 +0100
0 - 0 - 1 whenupdate.the-readysystemsforcontentinggreat (...) 51.15.153.212
2018-03-16 05:01:38 +0100
0 - 0 - 0 flashplayer2018-update.com 51.15.153.212
2018-03-16 01:21:57 +0100
0 - 0 - 0 app4com.thereadysitegoodtocontenting.win/?pcl (...) 51.15.153.212

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2018-04-24 06:56:34 +0200
0 - 0 - 1 xz3.unabc.com/download/cfppckh.zip 103.14.103.61
2018-04-24 06:55:59 +0200
0 - 0 - 1 20257.xc.cangpie.com/xiaz/%E9%A9%AC%E9%87%8C% (...) 114.55.188.114
2018-04-24 06:54:02 +0200
0 - 0 - 0 https://strrrijj1.com/gmmdn/docs%202018/docs% (...) 68.66.216.13
2018-04-24 06:52:54 +0200
0 - 0 - 1 rt3.getdownload.net/downloadhelper/named/trin (...) 93.115.28.104
2018-04-24 06:49:54 +0200
0 - 0 - 1 20098.xc.cangpie.com/xiaz/JD-GUIJavaforwindow (...) 114.55.188.114
2018-04-24 06:49:47 +0200
0 - 0 - 2 mcts-qatar.com/wp-includes/Requests/nsssi.exe 108.167.172.12
2018-04-24 06:45:03 +0200
2 - 0 - 1 artemovskiy.xn--5-dtbc6aobax.xn--p1ai/blog/tr (...) 173.212.232.67
2018-04-24 06:28:12 +0200
0 - 0 - 2 blog.51cto.com/attachment/201203/4594712_1332 (...) 59.110.244.199
2018-04-24 06:27:08 +0200
0 - 0 - 0 smarturl.it/FFOnlineStore 52.206.168.130
2018-04-24 06:26:47 +0200
0 - 0 - 0 https://smarturl.it 34.199.201.99

No other reports on domain: thesafeandfunupgrade.bid



JavaScript

Executed Scripts (23)


Executed Evals (5)

#1 JavaScript::Eval (size: 5258, repeated: 1) - SHA256: 847f6a895681edae9f59251c842a9184de97150e61648bfc22fff5bf6b869622

                                        function QCDone(d) {
    try {
        document.getElementById('ci_SW').value = d.SW
    } catch (e) {}
    try {
        document.getElementById('ci_SH').value = d.SH
    } catch (e) {}
    try {
        document.getElementById('ci_SAH').value = d.SAH
    } catch (e) {}
    try {
        document.getElementById('ci_WX').value = d.WX
    } catch (e) {}
    try {
        document.getElementById('ci_WY').value = d.WY
    } catch (e) {}
    try {
        document.getElementById('ci_WW').value = d.WW
    } catch (e) {}
    try {
        document.getElementById('ci_WH').value = d.WH
    } catch (e) {}
    try {
        document.getElementById('ci_CW').value = d.CW
    } catch (e) {}
    try {
        document.getElementById('ci_WIW').value = d.WIW
    } catch (e) {}
    try {
        document.getElementById('ci_WIH').value = d.WIH
    } catch (e) {}
    try {
        document.getElementById('ci_WFC').value = d.WFC
    } catch (e) {}
    try {
        document.getElementById('ci_PL').value = d.PL
    } catch (e) {}
    try {
        document.getElementById('ci_DRF').value = d.DRF
    } catch (e) {}
    try {
        document.getElementById('ci_NP').value = d.NP
    } catch (e) {}
    try {
        document.getElementById('ci_PT').value = d.PT
    } catch (e) {}
    try {
        document.getElementById('ci_NB').value = d.NB
    } catch (e) {}
    try {
        document.getElementById('ci_NG').value = d.NG
    } catch (e) {}
    try {
        document.getElementById('ci_DM').value = d.DM
    } catch (e) {}
    try {
        document.getElementById('ci_CF').value = d.CF
    } catch (e) {}
    try {
        document.getElementById('ci_NW').value = d.NW
    } catch (e) {}
}
var QC = {};
try {
    QC.SW = window.screen.width;
    QC.SH = window.screen.height
} catch (e) {
    QC.SW = -1;
    QC.SH = -1
}
try {
    QC.SAH = window.screen.availHeight
} catch (e) {
    QC.SAH = -1
}
try {
    QC.WX = window.screenX;
    QC.WY = window.screenY
} catch (e) {
    QC.WX = -1;
    QC.WY = -1
}
try {
    QC.WW = window.outerWidth;
    QC.WH = window.outerHeight
} catch (e) {
    QC.WW = -1;
    QC.WH = -1
}
try {
    QC.WIW = window.innerWidth;
    QC.WIH = window.innerHeight
} catch (e) {
    QC.WIW = -1;
    QC.WIH = -1
}
try {
    QC.CW = document.documentElement.clientWidth
} catch (e) {
    QC.CW = -1
}
try {
    QC.WFC = window.top.frames.length
} catch (e) {
    QC.WFC = -1
}
try {
    QC.PL = document.location.href
} catch (e) {
    QC.PL = ''
}
try {
    QC.DRF = document.referrer
} catch (e) {
    QC.DRF = ''
}
try {
    QC.NP = (!(navigator.plugins instanceof PluginArray) || navigator.plugins.length == 0) ? 0 : 1
} catch (e) {
    QC.NP = -1
}
try {
    QC.PT = window.callPhantom !== undefined || window._phantom !== undefined ? 1 : 0
} catch (e) {
    QC.PT = -1
}
try {
    QC.NB = typeof navigator.sendBeacon === "function" ? 1 : 0
} catch (e) {
    QC.NB = -1
}
try {
    QC.NG = navigator.geolocation !== undefined ? 1 : 0
} catch (e) {
    QC.NG = -1
}
try {
    QC.NW = 'webdriver' in navigator ? 1 : 0
} catch (e) {
    QC.NW = -1
}
QC.CF = 0;
try {
    var FlashDetect = new function() {
        var self = this;
        self.installed = false;
        self.raw = "";
        self.major = -1;
        self.minor = -1;
        self.revision = -1;
        self.revisionStr = "";
        var activeXDetectRules = [{
            "name": "ShockwaveFlash.ShockwaveFlash.7",
            "version": function(obj) {
                return getActiveXVersion(obj)
            }
        }, {
            "name": "ShockwaveFlash.ShockwaveFlash.6",
            "version": function(obj) {
                var version = "6,0,21";
                try {
                    obj.AllowScriptAccess = "always";
                    version = getActiveXVersion(obj)
                } catch (err) {}
                return version
            }
        }, {
            "name": "ShockwaveFlash.ShockwaveFlash",
            "version": function(obj) {
                return getActiveXVersion(obj)
            }
        }];
        var getActiveXVersion = function(activeXObj) {
            var version = -1;
            try {
                version = activeXObj.GetVariable("\$version")
            } catch (err) {}
            return version
        };
        var getActiveXObject = function(name) {
            var obj = -1;
            try {
                obj = new ActiveXObject(name)
            } catch (err) {
                obj = {
                    activeXError: true
                }
            }
            return obj
        };
        var parseActiveXVersion = function(str) {
            var versionArray = str.split(",");
            return {
                "raw": str,
                "major": parseInt(versionArray[0].split(" ")[1], 10),
                "minor": parseInt(versionArray[1], 10),
                "revision": parseInt(versionArray[2], 10),
                "revisionStr": versionArray[2]
            }
        };
        var parseStandardVersion = function(str) {
            var descParts = str.split(/ +/);
            var majorMinor = descParts[2].split(/\./);
            var revisionStr = descParts[3];
            return {
                "raw": str,
                "major": parseInt(majorMinor[0], 10),
                "minor": parseInt(majorMinor[1], 10),
                "revisionStr": revisionStr,
                "revision": parseRevisionStrToInt(revisionStr)
            }
        };
        var parseRevisionStrToInt = function(str) {
            return parseInt(str.replace(/[a-zA-Z]/g, ""), 10) || self.revision
        };
        self.majorAtLeast = function(version) {
            return self.major >= version
        };
        self.minorAtLeast = function(version) {
            return self.minor >= version
        };
        self.revisionAtLeast = function(version) {
            return self.revision >= version
        };
        self.versionAtLeast = function(major) {
            var properties = [self.major, self.minor, self.revision];
            var len = Math.min(properties.length, arguments.length);
            for (i = 0; i < len; i++) {
                if (properties[i] >= arguments[i]) {
                    if (i + 1 < len && properties[i] == arguments[i]) {
                        continue
                    } else {
                        return true
                    }
                } else {
                    return false
                }
            }
        };
        self.FlashDetect = function() {
            if (navigator.plugins && navigator.plugins.length > 0) {
                var type = 'application/x-shockwave-flash';
                var mimeTypes = navigator.mimeTypes;
                if (mimeTypes && mimeTypes[type] && mimeTypes[type].enabledPlugin && mimeTypes[type].enabledPlugin.description) {
                    var version = mimeTypes[type].enabledPlugin.description;
                    var versionObj = parseStandardVersion(version);
                    self.raw = versionObj.raw;
                    self.major = versionObj.major;
                    self.minor = versionObj.minor;
                    self.revisionStr = versionObj.revisionStr;
                    self.revision = versionObj.revision;
                    self.installed = true
                }
            } else if (navigator.appVersion.indexOf("Mac") == -1 && window.execScript) {
                var version = -1;
                for (var i = 0; i < activeXDetectRules.length && version == -1; i++) {
                    var obj = getActiveXObject(activeXDetectRules[i].name);
                    if (!obj.activeXError) {
                        self.installed = true;
                        version = activeXDetectRules[i].version(obj);
                        if (version != -1) {
                            var versionObj = parseActiveXVersion(version);
                            self.raw = versionObj.raw;
                            self.major = versionObj.major;
                            self.minor = versionObj.minor;
                            self.revision = versionObj.revision;
                            self.revisionStr = versionObj.revisionStr
                        }
                    }
                }
            }
        }()
    };
    if (FlashDetect.major > 0) {
        QC.CF = 1
    }
} catch (e) {
    QC.CF = 2
}
try {
    QCDone(QC)
} catch (e) {
    console.log(e)
}
                                    

#2 JavaScript::Eval (size: 613, repeated: 1) - SHA256: 7d79d7f17504a461320f713188b82fa5a1fdfd154969db17892e75294035c861

                                        var a;
var b;
var ix;
if (typeof window.innerWidth != 'undefined') {
    a = window.innerWidth;
    b = window.innerHeight
} else if (typeof document.documentElement != 'undefined' && typeof document.documentElement.clientWidth != 'undefined' && document.documentElement.clientWidth != 0) {
    a = document.documentElement.clientWidth;
    b = document.documentElement.clientHeight
} else {
    a = document.getElementsByTagName('body')[0].clientWidth;
    b = document.getElementsByTagName('body')[0].clientHeight
}
try {
    ix = window.self !== window.top ? 1 : 0
} catch (e) {
    ix = 2
}
document.getElementById('a').value = a;
document.getElementById('b').value = b;
document.getElementById('ix').value = ix;
                                    

#3 JavaScript::Eval (size: 61, repeated: 1) - SHA256: 4c7434541d1c4e35e47fa7017129597be4de29d8520f8d28324360e68ee147bb

                                        var eval_fn_1 = function(element, value) {
    element.src = value;
};
                                    

#4 JavaScript::Eval (size: 50, repeated: 1) - SHA256: 107abd1d4c412c9df04a22eea7a81d0ace815adf4ca7b8c2e3d6ea6c459423b5

                                        var eval_fn_2 = function(doc) {
    return doc.open();
};
                                    

#5 JavaScript::Eval (size: 74, repeated: 1) - SHA256: 5825930e400f3c0b303a930b890dd589e3fefeb58b7a2819919a0bfbd43a958f

                                        var eval_fn_3 = function(element, value) {
    element.style.background = value;
};
                                    

Executed Writes (0)



HTTP Transactions (50)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: newsoft12.thesafeandfunupgrade.bid
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         51.15.153.212
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx/1.11.6
Date: Sat, 17 Mar 2018 07:28:00 GMT
Content-Length: 161
Connection: keep-alive
Location: http://bestadbid.com/afu.php?zoneid=1319268&var=


--- Additional Info ---
Magic:  HTML document text
Size:   161
Md5:    c649fe07dc2a9868d4d2e623012a718b
Sha1:   e0daf451b1006607f07cd33fdb7241bbd95abd37
Sha256: 0724402069d1c0f3119bc79999ab1a01f3e06200343e0a4323a9d2317a04763c
                                        
                                            GET /afu.php?zoneid=1319268&var= HTTP/1.1 
Host: bestadbid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         194.187.98.176
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 17 Mar 2018 07:28:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *, *
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Set-Cookie: SeenToday=1; expires=Sun, 18-Mar-2018 07:28:00 GMT; Max-Age=86400; path=/ OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Sun, 18-Mar-2018 07:28:00 GMT; Max-Age=86400; path=/ oaidts=1521271680; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/ OAID=8216a27deea6af7e83f76dd287d6d143; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/ OAID=8216a27deea6af7e83f76dd287d6d143; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/ exsdsf=1521271680 pbk3=b008e6771a84a47dd3fa3fbd952924f16533812115349002469; expires=Sat, 17-Mar-2018 07:38:00 GMT; Max-Age=600 ltm_afu=1; expires=Sun, 18-Mar-2018 07:28:00 GMT; Max-Age=86400; path=/
X-FRAME-OPTIONS: DENY
P3P: CP="CUR ADM OUR NOR STA NID"
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4293
Md5:    338491a7faff093cba29bfc54758bf6e
Sha1:   24efc0da2e4ec1458d96708cb5a81b727dec51d5
Sha256: 7a1973f5d4396c15436d8a05bfcf5ed74abe4fa5adf7a1f72980f3761b7f0749
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bestadbid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: SeenToday=1; OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; oaidts=1521271680; OAID=8216a27deea6af7e83f76dd287d6d143; exsdsf=1521271680; pbk3=b008e6771a84a47dd3fa3fbd952924f16533812115349002469; ltm_afu=1

                                         
                                         194.187.98.176
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sat, 17 Mar 2018 07:28:00 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
Pragma: public


--- Additional Info ---
                                        
                                            GET /?r=%2Fmb%2Fhan&zoneid=1319268&pbk3=b008e6771a84a47dd3fa3fbd952924f16533812115349002469&empty=0&var=&uuid=47fc0b99-1537-45cc-8d32-9d7736421e3b&ad_scheme=1&rotation_type=3&ppucounter=0&first_visit=0&on_test=0&offer_views=0&ab_test=0&adparams=bm9qcz0w&ip=f3d5bb63c9dbdcfb475795d659c65a4e&x=1176&y=754&sw=1176&sh=885&sah=855&wx=-4&wy=-4&ww=1184&wh=863&cw=1176&wiw=1176&wih=754&wfc=0&pl=http%3A%2F%2Fbestadbid.com%2Fafu.php%3Fzoneid%3D1319268%26var%3D&drf=&np=1&pt=0&nb=0&ng=1&dm=undefined&cf=1&nw=0&id=b6978a1dd3fe9d3079f78cdbe2e0d1fe&co=1&rf=0&hs=d01d492f13aec958676a3d4656a2a36c&ix=0&fs=1&timeout=0 HTTP/1.1 
Host: bestadbid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bestadbid.com/afu.php?zoneid=1319268&var=
Cookie: SeenToday=1; OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; oaidts=1521271680; OAID=8216a27deea6af7e83f76dd287d6d143; exsdsf=1521271680; pbk3=b008e6771a84a47dd3fa3fbd952924f16533812115349002469; ltm_afu=1

                                         
                                         194.187.98.176
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 17 Mar 2018 07:28:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *, *
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Set-Cookie: f3d5bb63c9dbdcfb475795d659c65a4e=656JNCplOlIZlPTKOW3utA1HrGXirCm5konF7vAd8ys; expires=Sat, 24-Mar-2018 07:28:00 GMT; Max-Age=604800 OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; expires=Sun, 18-Mar-2018 07:28:00 GMT; Max-Age=86400; path=/ ppucnt=1; expires=Sun, 18-Mar-2018 07:28:00 GMT; Max-Age=86400; path=/ ppucntstart=1521271680; expires=Sun, 18-Mar-2018 07:28:00 GMT; Max-Age=86400; path=/ allcnt=1; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/ OAID=8216a27deea6af7e83f76dd287d6d143; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/ _OACCAP[16812]=1; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/ _OACBLOCK[16812]=1521271680; expires=Mon, 16-Apr-2018 07:28:00 GMT; Max-Age=2592000; path=/ _OXCCLK[16812]=1; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/ _OXPCLK[954]=1; expires=Sun, 17-Mar-2019 07:28:00 GMT; Max-Age=31536000; path=/
P3P: CP="CUR ADM OUR NOR STA NID"
Location: http://record.affiliatelounge.com/_UzEBJymPxgFelMX8RGissmNd7ZgqdRLk/3278


--- Additional Info ---
                                        
                                            GET /_UzEBJymPxgFelMX8RGissmNd7ZgqdRLk/3278 HTTP/1.1 
Host: record.affiliatelounge.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bestadbid.com/afu.php?zoneid=1319268&var=

                                         
                                         151.139.241.25
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 17 Mar 2018 07:28:01 GMT
Content-Length: 0
Cache-Control: private, no-cache, must-revalidate
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Location: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Set-Cookie: PartnerId=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw%3D%3D; expires=Mon, 16-Apr-2018 07:28:01 GMT; Max-Age=2592000; path=/ marketingproduct=Casino; expires=Mon, 16-Apr-2018 07:28:01 GMT; Max-Age=2592000; path=/; domain=.betsafe.ee
X-Powered-By: ZBan
ZBan-result: PASS
Server: NetDNA-cache/2.2
X-Cache: MISS
Connection: keep-alive


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Mar 2018 07:28:01 GMT
Server: Apache
Last-Modified: Wed, 14 Mar 2018 16:13:17 GMT
Expires: Wed, 21 Mar 2018 16:13:17 GMT
Etag: 9380047554BE26022658715764F033744ED7FDC8
Cache-Control: max-age=376515,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    559104eede9c0d996530c1422168a768
Sha1:   9380047554be26022658715764f033744ed7fdc8
Sha256: 15bcbacdb1543686abb7b22caec184c98f8df53a4557cbce6f9c87dedccfbb64
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Mar 2018 07:28:01 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:02:22 GMT
Expires: Fri, 23 Mar 2018 23:02:22 GMT
Etag: 775908E9222CF1F6468260836E1F165234DF1F82
Cache-Control: max-age=573860,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    72b8129455d8b187a5af472100783dd4
Sha1:   775908e9222cf1f6468260836e1f165234df1f82
Sha256: 3f94c69c74ca09f68ae5302f178bc1ca7ad6d0a2ae4b7ef96efd1267b02815f8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Mar 2018 07:28:01 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:02:22 GMT
Expires: Fri, 23 Mar 2018 23:02:22 GMT
Etag: 80054470B49755E53EE7DD1D4F5C2938C746A338
Cache-Control: max-age=573860,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp27
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0ee7a98213b8353e408661ac8678d8b8
Sha1:   80054470b49755e53ee7dd1d4f5c2938c746a338
Sha256: f8715616333147c4ae373c5e01a5bb1852c39987ed57e42f534d98d050183455
                                        
                                            GET /lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655 HTTP/1.1 
Host: www.betsafe.lv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bestadbid.com/afu.php?zoneid=1319268&var=

                                         
                                         94.125.59.127
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private,no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Sid: 163
X-Svs: 3.1.1.0(6.6.2.0)
X-UA-Compatible: chrome=1, requiresActiveX=true
X-FRAME-OPTIONS: SAMEORIGIN
Set-Cookie: PartnerId=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==; domain=.betsafe.lv; expires=Mon, 16-Apr-2018 06:28:02 GMT; path=/; secure PartnerId=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==; domain=.betsafe.lv; expires=Mon, 16-Apr-2018 06:28:02 GMT; path=/; secure PartnerId=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==; domain=.betsafe.lv; expires=Mon, 16-Apr-2018 06:28:02 GMT; path=/; secure auth2=; domain=betsafe.lv; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly TMToken=TBDP20180317092802MjU1ODk3MTY1NTU4NDk4NzliOTAzYzBlMmU4NDcwMGE; path=/; secure RegSource=Casino; domain=betsafe.lv; expires=Sat, 17-Mar-2018 23:00:00 GMT; path=/; secure __RequestVerificationToken=CVxPijI9J7odKW1w7orSC_ct3YVBOSBlM3U5JpIq665cD2OsVy8h3P_IXENfFpEzLNiZ9O2MD52zYm12AKQYsiqknys1; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=3153600
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 12720
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12720
Md5:    758a1e5c573ad9db41c2d80ad02efcc9
Sha1:   14a89b23c0d7fbb61a9d4a3e728bc5d3f2be99a8
Sha256: 195ee20b2eb96c4d4a4883e231cb542b9acfa7bd00cd27d32f6a4a8438104e6b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Server: Apache
Last-Modified: Fri, 16 Mar 2018 23:56:38 GMT
Expires: Fri, 23 Mar 2018 23:56:38 GMT
Etag: A1C428D2EEB19A6B58217071EAD17D6328E2F7FB
Cache-Control: max-age=577115,public,no-transform,must-revalidate
X-OCSP-Responder-ID: rmdccaocsp27
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    73ed65681e5a6463f5bb0e131c00d567
Sha1:   a1c428d2eeb19a6b58217071ead17d6328e2f7fb
Sha256: 5fdf1867027276c317c3222249bf2d1f38a9a514bdaa1493046b4b60c83543dd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 108
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=121603, public, no-transform, must-revalidate
Last-Modified: Sat, 17 Mar 2018 07:01:26 GMT
Expires: Sun, 18 Mar 2018 19:01:26 GMT
Etag: "06346220424b2957cedcdac800aa384d0e1322c5"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    ee031fe43c45cbafe7e4111b99b335cd
Sha1:   06346220424b2957cedcdac800aa384d0e1322c5
Sha256: a1a53e86673088ba1a04154aec056d046f9230e88874acdc03ca4d438b23577b
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/02/df_trio_lv_MasterCSS_v219.css HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 67208
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 422120
Last-Modified: Wed, 28 Feb 2018 10:12:37 GMT
Expires: Sun, 18 Mar 2018 10:12:42 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   67208
Md5:    7df7d9ae362d13a5303bf69144459e13
Sha1:   b3450c3b93ffc1a9085c547097221561f32645db
Sha256: 0be8cbee80272f81db6eac7feb8f1e06e26524e4e9f095c40566318f4d6c89ba
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Startpage/lv/df/2017/09/df_trio_lv_BrandCSS_v77.css HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 1642
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 382442
Last-Modified: Wed, 06 Sep 2017 10:07:10 GMT
Expires: Sun, 18 Mar 2018 21:14:00 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1642
Md5:    cc8b2bfdc9dc553e108c202117e2be4f
Sha1:   850199e8e5fc1f89139c8a998b5f94248f48abb1
Sha256: 696be84de87c847ce72095a279a6a8f8a0abfb158d76ac3afa9a9a846b6d1b4e
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Startpage/lv/df/2017/08/df_trio_lv_BrandCSS.Startpage_v72.css HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 1380
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 382320
Last-Modified: Fri, 18 Aug 2017 14:04:32 GMT
Expires: Sun, 18 Mar 2018 21:16:02 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1380
Md5:    1313b6d06be255da148b64c7ec485d4c
Sha1:   79a2a46e04c2c3bf88720af40d990d47120cd0bf
Sha256: a913d1914a03f592094c45635f6ea52c7c0f9411f04aef066d8af81985554444
                                        
                                            GET /fp/tags.js?org_id=z1adydba&session_id=TBDP20180317092802MjU1ODk3MTY1NTU4NDk4NzliOTAzYzBlMmU4NDcwMGE&pageid=1 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311;Max-Age=155520000;path=/;Secure;HttpOnly
P3P: CP=IVAa PSAa
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5810
Md5:    6c021e1baf3217224c0079b5c5b5418a
Sha1:   81b914e75a0e8ac583a37dfd94caf3ce0764333f
Sha256: e0a8e1b37bd9a27e8c37b3f7223dd7dc4c82fc10b97ab78855c5d56771c72760
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Startpage/lv/df/2017/08/df_trio_lv_Techsson.Echopage.js HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 325
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 480462
Last-Modified: Wed, 23 Aug 2017 11:17:47 GMT
Expires: Sat, 17 Mar 2018 18:00:20 GMT


--- Additional Info ---
Magic:  UTF-8 Unicode (with BOM) C program text, with CRLF line terminators
Size:   325
Md5:    7f22644e25b6e56fd7ea42291a3d4a91
Sha1:   2b97b68dd0a42719cdd5ad87ecf779e7788e32c1
Sha256: e5f391c8caebabf3bf4aa32be4083e4af49d3ffcdf5e131f37a36a270e72ba3e
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/01/df_trio_lv_Techsson_v103.js HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 12038
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 420295
Last-Modified: Wed, 17 Jan 2018 10:34:04 GMT
Expires: Sun, 18 Mar 2018 10:43:07 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   12038
Md5:    465f901a15764e7a894ac0e716aa56e6
Sha1:   1271721c4f6d6c9065f47a47e0b70546eebbcc2c
Sha256: 0f733271f9ed4e20e236b6cdb5010a755a5ae4349a12b27c02749d7cbb079efe
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/df/2017/08/df_trio_lv_Techsson.GoogleAnalytics_v79.js HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 3135
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 383216
Last-Modified: Fri, 18 Aug 2017 13:52:50 GMT
Expires: Sun, 18 Mar 2018 21:01:06 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3135
Md5:    2c160e2823981490286cfa9b04a3ecf9
Sha1:   3ad60e6dac601ede9521346e41f017d1d501be54
Sha256: 231a3d1602ef8a14ca294dc72a5b25f2a69d0b2b8dd959efd408b3b472299e5c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bestadbid.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: SeenToday=1; OAGEO5580f=13%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270; oaidts=1521271680; OAID=8216a27deea6af7e83f76dd287d6d143; exsdsf=1521271680; pbk3=b008e6771a84a47dd3fa3fbd952924f16533812115349002469; ltm_afu=1; f3d5bb63c9dbdcfb475795d659c65a4e=656JNCplOlIZlPTKOW3utA1HrGXirCm5konF7vAd8ys; ppucnt=1; ppucntstart=1521271680; allcnt=1; _OACCAP[16812]=1; _OACBLOCK[16812]=1521271680; _OXCCLK[16812]=1; _OXPCLK[954]=1

                                         
                                         194.187.98.176
HTTP/1.1 204 No Content
                                        
Server: nginx
Date: Sat, 17 Mar 2018 07:28:03 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
Pragma: public


--- Additional Info ---
                                        
                                            GET /ui/scriptloader.php HTTP/1.1 
Host: promotions.betsafe.lv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: PartnerId=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==; RegSource=Casino

                                         
                                         94.125.59.127
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 17 Mar 2018 07:28:03 GMT
Server: Apache/2.4.18 (Ubuntu)
Vary: Accept-Encoding
Content-Length: 1864
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1864
Md5:    ca5bfc9ac0c125e63be5b5bfd7ae9aca
Sha1:   aee72d4ba73dc826757d12c68d1634e720ac8800
Sha256: aa59f16af2e556b7767bb73f80ad2856f8d48f748224d5a0bb19484454556cc3
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/02/df_trio_lv_Techsson.Javascript_v141.js HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 215040
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 422118
Last-Modified: Wed, 28 Feb 2018 10:12:37 GMT
Expires: Sun, 18 Mar 2018 10:12:44 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   215040
Md5:    3e4d0291dacbf703a1ad281aa23777b4
Sha1:   6a604236c802fa8ad6a02bdcb282848735dfcb76
Sha256: 705ee3a8982fb0bddaa30245e3149632968f1b17ae5e5e277772eaeb97b0ef00
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/neutral/file/2017/04/common.logo.white.betsafe_v2.svg HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Range: bytes=0-
If-Range: Tue, 18 Apr 2017 11:57:02 GMT

                                         
                                         178.79.242.1
HTTP/1.1 206 Partial Content
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 4104
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Content-Range: bytes 0-4103/4104
Age: 383508
Last-Modified: Tue, 18 Apr 2017 11:57:02 GMT
Expires: Sun, 18 Mar 2018 20:56:16 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   4104
Md5:    1ff7ede5ae8c7aaeb14565d9d95c5d0a
Sha1:   5bed0fee71e2fdd6c79d3fb3073a9235d3fa69cc
Sha256: e23651de712f243d78030edb4b9ab94ae79db25d4716717dd1cd55e62237fb90
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/image/2017/05/f447132bf9264036b513fbb937976a5a.png HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 8526
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383184
Last-Modified: Fri, 19 May 2017 12:06:10 GMT
Expires: Sun, 18 Mar 2018 21:01:40 GMT


--- Additional Info ---
Magic:  PNG image, 96 x 79, 8-bit/color RGBA, non-interlaced
Size:   8526
Md5:    8ba3eee30d008f8cc0223b85a0bd6194
Sha1:   11e82a4f131f7d490088e8f0e4d31dfb7eedb204
Sha256: e6b4cc3be5bd9c35fb07f3f89b09ef93b77d50f36efc6f3bf2c82b3f94726732
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/image/2017/05/bdeb56c50840446fa539b72b0d4f9868.png HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 4989
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383184
Last-Modified: Fri, 19 May 2017 09:16:54 GMT
Expires: Sun, 18 Mar 2018 21:01:40 GMT


--- Additional Info ---
Magic:  PNG image, 179 x 25, 8-bit/color RGBA, non-interlaced
Size:   4989
Md5:    d7a4119c6fc0b7e809d625cc34b34d92
Sha1:   51943d0be021cb5e41234c1b47a0e9262f34472b
Sha256: 07391e98f4768ca2ffa5b79f794a869be164b22d183e2e8edd68f48f9d0f2b86
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/neutral/image/2017/04/icons.favicon_v3.ico HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 1150
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 320536
Last-Modified: Tue, 18 Apr 2017 10:54:22 GMT
Expires: Mon, 19 Mar 2018 14:25:48 GMT


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    9160d5bc7c8af476187accbd8ca45f4b
Sha1:   458a0de1a2efb4399e1e52531672f09133025946
Sha256: 7d49f09f57054aeef15d19b955efbd26f8e28e46d60361386c0ab8c69075f115
                                        
                                            GET /core/StartPlaying/Api/v2/StartPlayingApi.min.js HTTP/1.1 
Host: www.betsafe.lv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: PartnerId=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==; TMToken=TBDP20180317092802MjU1ODk3MTY1NTU4NDk4NzliOTAzYzBlMmU4NDcwMGE; RegSource=Casino; __RequestVerificationToken=CVxPijI9J7odKW1w7orSC_ct3YVBOSBlM3U5JpIq665cD2OsVy8h3P_IXENfFpEzLNiZ9O2MD52zYm12AKQYsiqknys1

                                         
                                         94.125.59.127
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: public,no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Sun, 18 Mar 2018 07:01:32 GMT
Last-Modified: Mon, 26 Feb 2018 14:40:54 GMT
Accept-Ranges: bytes
Etag: "1D3AF0FCE09DF00"
Server: Microsoft-IIS/8.5
X-Sid: 163
X-Svs: 4.0.0.04.0.30319.36399(6.6.2.0)
Strict-Transport-Security: max-age=3153600
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 1916
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1916
Md5:    ae9527ec31cfba8676b7dd4deb5a1f03
Sha1:   79887529afcd7a90b5510daa780d3dcfa64d51bb
Sha256: f0108378fb72ed1b2b30f22f6a5441da02c4750b850b5b4244eba39f00b0cd38
                                        
                                            GET /core/StartPlaying/Api/v2/StartPlayingInit.ashx?marketid=4028 HTTP/1.1 
Host: www.betsafe.lv
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: PartnerId=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==; TMToken=TBDP20180317092802MjU1ODk3MTY1NTU4NDk4NzliOTAzYzBlMmU4NDcwMGE; RegSource=Casino; __RequestVerificationToken=CVxPijI9J7odKW1w7orSC_ct3YVBOSBlM3U5JpIq665cD2OsVy8h3P_IXENfFpEzLNiZ9O2MD52zYm12AKQYsiqknys1

                                         
                                         94.125.59.127
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Cache-Control: private, no-store, max-age=2,no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Server: Microsoft-IIS/8.5
X-Sid: 163
X-Svs: 4.0.0.04.0.30319.36399(6.6.2.0)
Set-Cookie: auth2=; domain=betsafe.lv; expires=Mon, 11-Oct-1999 22:00:00 GMT; path=/; secure; HttpOnly
Strict-Transport-Security: max-age=3153600
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 350
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   350
Md5:    8876f4f5bcf6f068f6a1f2f711150f51
Sha1:   28277d9b4c38ee537d22b5ecd56f063fa9338222
Sha256: 9503b5def20eb01a60277961928ea5858e1d39f65e37147302e2e41f9d131857
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/neutral/file/2017/04/common.fonts.museosans.cyrl.500.woff.woff HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bps.hs.llnwd.net/e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/02/df_trio_lv_MasterCSS_v219.css
Origin: https://www.betsafe.lv

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 66673
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383453
Last-Modified: Mon, 17 Apr 2017 10:37:56 GMT
Expires: Sun, 18 Mar 2018 20:57:11 GMT


--- Additional Info ---
Magic:  data
Size:   66673
Md5:    80827454f2aaba0d8054b9e1401f627d
Sha1:   7f3706fd5ece6c2499e00b0889874da622d6aded
Sha256: 189c31e8aeb3fe73f62cc24924a32904cc27fdf74b05df652a138b465fb30f05
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/01/df_trio_lv_Techsson.Core_v91.js HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 31800
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 420297
Last-Modified: Wed, 17 Jan 2018 10:34:04 GMT
Expires: Sun, 18 Mar 2018 10:43:07 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   31800
Md5:    6c972b316b68a3e4e1e42e4f792881d0
Sha1:   e4315b5b081511265f1a707c8320b5cb8fbff1b7
Sha256: bbbdcb80ba4eade1607ba6f2bcebe3185e85bdab38af0c6ed368ecbcc068f14a
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/neutral/file/2017/04/common.fonts.symbols.woff.woff HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bps.hs.llnwd.net/e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/02/df_trio_lv_MasterCSS_v219.css
Origin: https://www.betsafe.lv

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 296276
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383395
Last-Modified: Mon, 17 Apr 2017 10:37:59 GMT
Expires: Sun, 18 Mar 2018 20:58:09 GMT


--- Additional Info ---
Magic:  data
Size:   296276
Md5:    936490ef313f6fb7366303e3aba6e8bf
Sha1:   33f7400fa6681131fe4fe33a516c284cb100caf4
Sha256: 348461058741f0b1b0c7651156a4cc7c7f0df73524bba60ff1372e47f8a2ac84
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/neutral/file/2017/07/common.fonts.betsafe-symbols.woff_v8.woff HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://bps.hs.llnwd.net/e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/02/df_trio_lv_MasterCSS_v219.css
Origin: https://www.betsafe.lv

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 303136
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383405
Last-Modified: Mon, 24 Jul 2017 12:43:12 GMT
Expires: Sun, 18 Mar 2018 20:57:59 GMT


--- Additional Info ---
Magic:  data
Size:   303136
Md5:    4aba261ca4f80085a365fa463ab2b7d1
Sha1:   41f853b750273a047727c0a9209c1608275a4699
Sha256: fbdb36676b060ff7a313364295fc256625a9989f4c187c4776255017d6e16f4b
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/df/2018/03/df_trio_lv_Techsson.Dictonary_v66598.js HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:04 GMT
Content-Length: 4733
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
Content-Encoding: gzip
Age: 2314
Last-Modified: Sat, 17 Mar 2018 06:49:28 GMT
Expires: Fri, 23 Mar 2018 06:49:30 GMT


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4733
Md5:    af4950f99d9c62773f83726d6b5de24f
Sha1:   735f27023dc673d3de7b696aa08fc6389aa4490e
Sha256: eb3d2382521b326fe91ee20456f9ced4341ff1d86e1b0ae79004d420153dcefc
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/image/2017/05/f217581441724001b6f70ae92a819b38.svg HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Mar 2018 07:28:05 GMT
Content-Length: 8825
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383219
Last-Modified: Tue, 02 May 2017 07:56:59 GMT
Expires: Sun, 18 Mar 2018 21:01:06 GMT


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012 XML document text
Size:   8825
Md5:    002c55cec325bae7e0837a3052540317
Sha1:   e5624e212341cc2f112093f9f3fb28dcb25d93d5
Sha256: 8de168c1bb03f50f6261cc8c103108e32b1954202186c930f83f95f4a7af329a
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/lv/image/2017/05/181a85b7bc5549aabbac5f5810fec52f.jpg HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sat, 17 Mar 2018 07:28:05 GMT
Content-Length: 136398
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383219
Last-Modified: Tue, 02 May 2017 10:01:35 GMT
Expires: Sun, 18 Mar 2018 21:01:06 GMT


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   136398
Md5:    3515675370c743383e287a2c130b8259
Sha1:   191f95e4dacaf26e3b88d59e194ca7e14266d977
Sha256: 8477aab7890d4a119093fd15d5cfeebe7f7acdc69b35f0c292a0b80152eddc88
                                        
                                            GET /fp/clear.png?org_id=z1adydba&session_id=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6&m=2&ck=0 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Mar 2018 07:28:06 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 2 x 1, 8-bit/color RGBA, non-interlaced
Size:   81
Md5:    1b6d2de2867a3e11063ba25aa1cd4209
Sha1:   bd20b0e089f31f35cba4d0fa7277e73aa74d944c
Sha256: 95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
                                        
                                            GET /fp/clear.png?org_id=z1adydba&session_id=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6&m=1&ck=0&w=48d22c838a1c75ba HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Mar 2018 07:28:06 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 81
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 2 x 1, 8-bit/color RGBA, non-interlaced
Size:   81
Md5:    1b6d2de2867a3e11063ba25aa1cd4209
Sha1:   bd20b0e089f31f35cba4d0fa7277e73aa74d944c
Sha256: 95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
                                        
                                            GET /fp/fp.swf?org_id=z1adydba&session_id=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6&ck=0 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Sat, 17 Mar 2018 07:28:06 GMT
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3975
Md5:    b729a3db1f688fa3b410f84a93aa3b4b
Sha1:   4ca2ce5f3a9970b9cff6d89398f8df59ddf7e0c3
Sha256: c4fd1201526302172824b36640dc3b8831405c27ab84c1d2a2a3e7e95108ce14
                                        
                                            GET /fp/check.js;CIS3SID=514C15BC758615E6A31728BDFCDD0E26?org_id=z1adydba&session_id=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&pageid=1&nonce=93a4299a1526dff6 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Sat, 17 Mar 2018 07:28:06 GMT
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=100
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24409
Md5:    2ec7f0ed80059db0de3b9f90f69e1dec
Sha1:   f09b5903744e44f91bb243aa97b672166fc8850a
Sha256: 749acc68d4a1444b94badd05f0bbcbb472857ad1ceda6f1b3c9b2f23c1b2b2ea
                                        
                                            GET /fp/clear.png?org_id=z1adydba&session=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6&ja=3734332624773d3c386636306330313061336b3d35626b26693f3e302e7a373630266c3d3b313d3c7030323526677c37606b6b3f39323d36643b3b3a6536366431316137383363613537303030333a392c6d6e373938247b636c3d3834266c623d62747e7a7b2d394125384e2f304e7f7f772e686576716964652e6e762530466c7e25304672696d66697663627f6d692f324c717872616e6d2d6d61796827757a27647e2f33466c7a656f2d3b4c6c755b5837676173664c33724d55344f45374730614746663f5a65796e524c612d5b544246595572305a46336969772f394c2d394425383e6b646e6b6764652f3346435a47414c76645f6073253a3677746f5f65676c6977652f33444b666c6b646969746f2532367f74675f79657d7a696525394c3b32383e3936353f266670356a74747225334325324e25304660657b76696460616e2e63656d2f304e616e75247068702f334c7a65646d616e25334e393933313a3e3825383674637a27334424703d726c756f696c5f646c6971605e333824302078343f23786c7d67636e5f77636e6e6f7d7957656f64696b577a6e69716d725e6c616e716d23706c7767696c5f616c6f60655d616b706762637c54382e3a2f66637c657a217a6c7567636e55717f636b637e696d6f566c63647b6d21706675656b665d73686d636b7561766d5e64616e736d23786c776f636e5f78656b6e786c69796f725e666b6c79652b7a647d6d696e557e666157786461796f725c64696e736523706c776769665f6665746164747a5e64696673652b7066776f69665f7976675f7c696f776f78566e6b6c736f297a6e7d6f616e5f606174635633302e372e3024706c35313226726835343b65323e3e663868626f666a363a356c6233343a616b393e393a6b323139682e626a356b6962346f3732336c3035346433656063613b3232353b343a633a3732393832266f78393f3c343d32323130623c3933363a3b6d6c3833303b393c3a696c6d64656b3233356a30313134353163266a7b6f3f576b6e6c6d7f73223f2c6a73683d4c6b7a656e6f7220332e3c&jb=313037266e713d456f78696e6c69273a4637263a25323a285d6b66646777792533422f323a552f394a2d38305763666e6d7f7b2d32304454273038342e312733422732306d6e2f5551253b402d32327a7c25334b31243b26322631392925323a476f6361652d3a4c32303b383b30383b2d32304c6970676e6d78253046332c362e3933 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 204 No Content
Content-Type: text/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:07 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 0
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /fp/ls_fp.html?org_id=z1adydba&session_id=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: text/html;charset=UTF-8
                                        
Date: Sat, 17 Mar 2018 07:28:07 GMT
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Connection: Keep-Alive, Keep-Alive
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=2, max=99
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4229
Md5:    3ea8454ab4aa7f95f4989348163b8842
Sha1:   111042228ca6ba1abee82485e47590282d7f6af7
Sha256: 325db4efac417980b77a38f27ed501cd40875def6473965d027c0f7a797b2bcf
                                        
                                            GET /fp/clear.png?org_id=z1adydba&session=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6&jd=37352626753d343064343261383b3a6931613f3f62612c6a6c6c353131266066683d68373a373a6b6a6e3f66363c3138316c3e3e39343f353a333a67653632316666266a6e746c3d323a39313e3a3331 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 204 No Content
Content-Type: text/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:07 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 0
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /fp/clear.png HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Mar 2018 07:28:07 GMT
Server: Apache
Last-Modified: Sat, 17 Mar 2018 07:28:07 GMT
Expires: Thu, 16 Mar 2023 07:28:07 GMT
Etag: d2cd2f137ee24eb1b2b891ef29b125de
Cache-Control: private, must-revalidate, max-age=0
Content-Length: 81
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 2 x 1, 8-bit/color RGBA, non-interlaced
Size:   81
Md5:    1b6d2de2867a3e11063ba25aa1cd4209
Sha1:   bd20b0e089f31f35cba4d0fa7277e73aa74d944c
Sha256: 95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
                                        
                                            GET /fp/clear.png?org_id=z1adydba&session_id=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6&la=48d72c838a1c75bae37dd20a3d894975b90fbe58ebe9aa16 HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://h.online-metrix.net/fp/ls_fp.html?org_id=z1adydba&session_id=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nonce=93a4299a1526dff6
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 204 No Content
Content-Type: text/javascript
                                        
Date: Sat, 17 Mar 2018 07:28:07 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 0
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /fp/clear.png?fa=313738266c753d3b34313136267f3f3c38663e38633839386b336b373d626b26746f37363a26797e353e3a267378353b333f3e7038383f26667235353226743d574b4e2039302e302e343d2e3a266d355d696e6e6f7d7128585826663d656e2c6d6c3d476b6b7a656d656e616b225f6166646f7d7324647c716e3d3633266474733538353235326c356d6563396b62366c306c3b39363a32393761353b6133306f3a&session%5Fid=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&org%5Fid=z1adydba HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 204 No Content
Content-Type: text/plain; charset=UTF-8
                                        
Date: Sat, 17 Mar 2018 07:28:07 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 0
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /fpc.swf?session=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&org=z1adydba&nu=34314&fx=39322675706c3d60747670713a272d602e6d6666696e6f2d67677c726178246e657425667a2f2c6c6f356f32663e3a6b356e383b33393e346434696661653435303136613036343332372e7535343a6c3c32633233326339633f356861 HTTP/1.1 
Host: aa.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.235.132.129
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Sat, 17 Mar 2018 07:28:08 GMT
Server: Apache
Pragma: no-store
Cache-Control: no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 2001
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Macromedia Flash data, version 7
Size:   2001
Md5:    1aa138249449d29827e983101964a50f
Sha1:   156b6738c6f88e60760fb37b731161885d22a82a
Sha256: 6608fb1f5a2560c8e9617d5157d394b63ddcc9c40523be722e0109909b47a53a
                                        
                                            GET /crossdomain.xml HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Date: Sat, 17 Mar 2018 07:28:08 GMT
Server: Apache
Pragma: no-store
Cache-Control: no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Length: 212
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  XML document text
Size:   212
Md5:    1c8bc0b7588cdf0d84afbdab47095e4d
Sha1:   90625e09a76792ce45fbd1c70da953be7d8b5625
Sha256: 7b587bf339e305f2bc4150c5e73e34d3d9777b2db6f5d7f98842b39968fcf51d
                                        
                                            GET /fp/clear.png?fc=48d62c838a1c75bae2f42a7f033944f6adae65036a866307&session%5Fid=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&nu=17784&org%5Fid=z1adydba HTTP/1.1 
Host: h.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: thx_guid=8aa24db7630745f99b4b1c12a8fef311

                                         
                                         91.235.132.130
HTTP/1.1 204 No Content
Content-Type: text/plain; charset=UTF-8
                                        
Date: Sat, 17 Mar 2018 07:28:08 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Content-Length: 0


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: tg.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1449
Content-Transfer-Encoding: binary
Cache-Control: max-age=392575, public, no-transform, must-revalidate
Last-Modified: Wed, 14 Mar 2018 20:31:03 GMT
Expires: Wed, 21 Mar 2018 20:31:03 GMT
Date: Sat, 17 Mar 2018 07:28:08 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1449
Md5:    2b7211c7972f805871869322cfbbf605
Sha1:   86c6fd58afe72653c01f1fb86168e74129dd71a4
Sha256: a2f69f4cdf892915d0d54220aef54ff968db2291eff278cb2a70b94190a7c825
                                        
                                            GET /fp/clear.png?org_id=z1adydba&session=tbdp20180317092802mju1odk3mty1ntu4ndk4nzliotazyzblmmu4ndcwmge&di=yes&nonce=93a4299a1526dff6 HTTP/1.1 
Host: z1adydba-1db4c5d710c2b9ee2a01672a7df94322786d1c43-am1.d.aa.online-metrix.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         192.225.158.3
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sat, 17 Mar 2018 07:28:08 GMT
Server: Apache
Pragma: no-cache
Cache-Control: no-cache, no-store, must-revalidate
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Connection: close
Content-Length: 81


--- Additional Info ---
Magic:  PNG image, 2 x 1, 8-bit/color RGBA, non-interlaced
Size:   81
Md5:    1b6d2de2867a3e11063ba25aa1cd4209
Sha1:   bd20b0e089f31f35cba4d0fa7277e73aa74d944c
Sha256: 95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743
                                        
                                            GET /e2/v2/bgr/BetsafeBaltics/Common/neutral/file/2017/04/common.logo.white.betsafe_v2.svg HTTP/1.1 
Host: bps.hs.llnwd.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.betsafe.lv/lv/piedavajumi/spring-mash-up-lv?from=luQX5eiqfL1rMW4OM7E0cGNd7ZgqdRLk-QVJFQUx0ZF9icw==&affcode=AREALtd_bs&utm_medium=Affiliate&utm_source=10061655

                                         
                                         178.79.242.1
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Sat, 17 Mar 2018 07:28:02 GMT
Content-Length: 4104
Connection: keep-alive
Cache-Control: max-age=518400
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
Access-Control-Allow-Origin: *
Age: 383506
Last-Modified: Tue, 18 Apr 2017 11:57:02 GMT
Expires: Sun, 18 Mar 2018 20:56:16 GMT


--- Additional Info ---