Report - neegrojowe.com/track-impression-applab?z=7329880&b=20738017&ymid=1c95a3q4geqq6&var=6600357&var_3=20738017_102930261&redirect=true&redirectUrl=https://toplaying.pro/yz992c?external_id=${SUBID}&source=7329880_6600357&ad_campaign_id=cryptocpszd&land_state=before_render&land_id=J1mCFxLYUjKrC3y&land_generation_time=2024-05-10_11:00:38&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=6224325a4d48e64b1c781a8edd18816c&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase

Report Overview

Submitted URL
neegrojowe.com/track-impression-applab?z=7329880&b=20738017&ymid=1c95a3q4geqq6&var=6600357&var_3=20738017_102930261&redirect=true&redirectUrl=https://toplaying.pro/yz992c?external_id=${SUBID}&source=7329880_6600357&ad_campaign_id=cryptocpszd&land_state=before_render&land_id=J1mCFxLYUjKrC3y&land_generation_time=2024-05-10_11:00:38&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=6224325a4d48e64b1c781a8edd18816c&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=apk
IP
104.21.18.218
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-10 16:03:04
Access
public
Website Title
Win virtual $5000
Final URL
toplaying.pro/yz992c?external_id=miss_812828549444284948
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
neegrojowe.com	unknown	unknown	No data	No data	976 B	1.3 kB	172.67.183.101
ubankroll.com	666194	2021-12-14	2021-12-18	2024-04-17	12 kB	355 kB	172.67.152.146
toplaying.pro	unknown	unknown	No data	No data	512 B	22 kB	172.67.209.56

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	neegrojowe.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	ubankroll.com/landings2023/en/match3_pic/assets/js/index.js?v0.12	22 kB	2023-03-09	2024-05-20
Pretty URL ubankroll.com/landings2023/en/match3_pic/assets/js/index.js?v0.12 IP 172.67.152.146 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 12:33:28 Last Seen2024-05-20 06:42:31 Times Seen1615 Hash e1c88fa4afebcef4aed597555e1ef329 3e3c91fc1423d09637fc393b51735bcbcd01ef69 ecd3868e0abe8c0f729e8b483a34df80c7a72bff55c34ad01e804e7413839b38 Loading...

HTTP Transactions (27)

URL IP Response Size

neegrojowe.com/track-impression-applab?z=7329880&b=20738017&ymid=1c95a3q4geqq6&var=6600357&var_3=20738017_102930261&redirect=true&redirectUrl=https://toplaying.pro/yz992c?external_id=${SUBID}&source=7329880_6600357&ad_campaign_id=cryptocpszd&land_state=before_render&land_id=J1mCFxLYUjKrC3y&land_generation_time=2024-05-10_11:00:38&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=6224325a4d48e64b1c781a8edd18816c&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=apk

172.67.183.101

302 Found

0 B

URL User Request GET HTTP/2
neegrojowe.com/track-impression-applab?z=7329880&b=20738017&ymid=1c95a3q4geqq6&var=6600357&var_3=20738017_102930261&redirect=true&redirectUrl=https://toplaying.pro/yz992c?external_id=${SUBID}&source=7329880_6600357&ad_campaign_id=cryptocpszd&land_state=before_render&land_id=J1mCFxLYUjKrC3y&land_generation_time=2024-05-10_11:00:38&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=6224325a4d48e64b1c781a8edd18816c&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=apk
IP
172.67.183.101:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectneegrojowe.com
Fingerprint88:CF:22:AE:A0:19:16:06:28:2A:1A:60:9D:6C:01:2F:1F:51:87:3F
ValidityTue, 30 Apr 2024 10:37:33 GMT - Mon, 29 Jul 2024 10:37:32 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /track-impression-applab?z=7329880&b=20738017&ymid=1c95a3q4geqq6&var=6600357&var_3=20738017_102930261&redirect=true&redirectUrl=https://toplaying.pro/yz992c?external_id=${SUBID}&source=7329880_6600357&ad_campaign_id=cryptocpszd&land_state=before_render&land_id=J1mCFxLYUjKrC3y&land_generation_time=2024-05-10_11:00:38&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=6224325a4d48e64b1c781a8edd18816c&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=apk HTTP/1.1
Host: neegrojowe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Fri, 10 May 2024 16:02:39 GMT
content-length: 0
location: https://toplaying.pro/yz992c?external_id=miss_812828549444284948
x-trace-id: ec8460007599cb24601edcde6dc1eb81
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gUHhJJ63xxDOyCaYUEp7CKvL44CgbtTP%2BAbPKv8xWgVRzeXN%2FI%2Fe%2FkpZ5GC%2FgDTtktHOGDciQGSW3N3EkmaklIYaZ17Dab0e4w4aDE9wzmDvt7LKlSLM%2BJqF6ayG5L8IOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b27a5be6bb51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-4.jpeg

172.67.152.146

200 OK

1.9 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-4.jpeg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3
Size
1.9 kB (1870 bytes)
Hash
897b5ca1190db65d3807cb28a717200e
81d860d075f08e684c900da11491763cb2f19ca6
3c1b498dfa96a398310bb0a0d677b1f4f22738bd4704669ba9fc0e350fd912b1

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/people/img-4.jpeg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 1870
last-modified: Thu, 29 Sep 2022 14:38:35 GMT
etag: "6335adeb-74e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jLTmSKEuTBNdOyiTTazOYP97WGtmzHLYjK%2BYoHQjsz%2BXVnDKuuLQhh%2FoeAUmX0bgyX5mj71qpHiJ2JA6F0WZFO%2BL2a%2FjiNCJUnWmKO%2FPrm8nx5FYaEXWyjqJj8GJlTNC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286356c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-10.jpeg

172.67.152.146

200 OK

1.2 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-10.jpeg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3
Size
1.2 kB (1230 bytes)
Hash
c1a1ce2de59b6e2aaac809211380aada
2cf50ffaac32f326381b371177d9144730112010
76c7f4319527ed36e818f914a7af159946b3c7c4a94659bcb51e36fcac0835a0

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/people/img-10.jpeg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 1230
last-modified: Thu, 29 Sep 2022 14:38:34 GMT
etag: "6335adea-4ce"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jz%2By7qFwmXajiZ14EfC7Ibkz2hpym%2FhpOXy7xQOpQtqos6mi4mc%2FFL0Yf5em8mxVWQpWVjksRvV4%2FVS%2BsP6ZRkz%2FozarXfp%2BQYpP85nqM5iua8mr7CnPeJgjtJ6ld8KH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286856c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/win.jpg

172.67.152.146

200 OK

13 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/win.jpg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 236x230, components 3
Size
13 kB (12884 bytes)
Hash
98156c51a3bfb91641b9f5c4dec014f6
1b91747e37fc1fc2748bb24c0560ed841381d8b2
13471f99505c0cc3fb583d5ff3c0333728f9312dc2459b1bbce00a53b58bed00

HTTP Headers

GET /landings2023/en/match3_pic/win.jpg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 12884
last-modified: Thu, 29 Sep 2022 14:38:41 GMT
etag: "6335adf1-3254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dLga6NHmu9IRI9ywYylj78eOv93ybGib7JxXqHcGoRxDqX3sbTbAXorvuNGNMOAl1scnO25Ynk%2Br2hBjBqJld5VLie2DHBbC8SnLBFDVf4FmGQxUAbQUiwMQthfFsKcG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab285f56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-11.jpeg

172.67.152.146

200 OK

1.4 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-11.jpeg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3
Size
1.4 kB (1369 bytes)
Hash
e6554824897775cb39f8462ebafedd2e
f23c8223db636c08d2c54545e461c18e0e02e447
df466b52a1935fc15c41dba604bcd1371ddc44a6baea9f93727c601bb966bddd

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/people/img-11.jpeg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 1369
last-modified: Thu, 29 Sep 2022 14:38:35 GMT
etag: "6335adeb-559"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5v0rWTK86n9Nv2ARDC4PP5AJShcJzjaI7F6UlWQTkfD8rpvfk1%2B5R24aB2%2F%2BEn7alJw1js2MDGgYT4vdd9RPn4mAB3MWgOfZhVmB49cGIQBfotimy4gnHylwopvwy7aN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286a56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/win4.jpg

172.67.152.146

200 OK

15 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/win4.jpg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 250x236, components 3
Size
15 kB (14827 bytes)
Hash
b50e84e204c1f13485d94beddfc116d6
252faf0fc512d553a603b6fa665f2fd92e471856
4c6cebe520d51a562e18bcb0e6b5c65937124162b7e3c3ce8ce3504e0f2d30fe

HTTP Headers

GET /landings2023/en/match3_pic/win4.jpg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 14827
last-modified: Thu, 29 Sep 2022 14:38:41 GMT
etag: "6335adf1-39eb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PGDWfF%2F12ez2CnS%2F2%2BHI02AKFn2p4SMRaPo%2BpmNQkHVXBc99LuvvNm4G5q1IsQ%2FgRikSiSKDM17UxJJFAWV0jGlI8tQapAty07%2B3aflSKLkUyv74dIFWeHox7wEbJwPN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286656c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/win2.jpg

172.67.152.146

200 OK

16 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/win2.jpg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 236x226, components 3
Size
16 kB (16361 bytes)
Hash
62cbef041e5e92f4c3b9142c11aba923
f552ddd1efbabfa2b8c4a9ae84f5222c33f8f7e7
9029b5eca5c45bfe75d67d88552fa1c815b9e448d79b414fa3d2caedc4a32961

HTTP Headers

GET /landings2023/en/match3_pic/win2.jpg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 16361
last-modified: Thu, 29 Sep 2022 14:38:41 GMT
etag: "6335adf1-3fe9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lhXc1lgaxLJAC64fkLzXhHuKtUQ0XYTqSURoUbSI6e%2BTuPgFLSlTJqJqkt8wKrPRa2oQx%2BIA1m%2FqIvH%2BAIVXz9uKhWGU0FsIB5Nq7pchY5Ie0jv7AVOIQHqztc3H7vzB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286956c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/fonts/Roboto-Bold.woff2

172.67.152.146

200 OK

66 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/fonts/Roboto-Bold.woff2
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
Web Open Font Format (Version 2), TrueType, length 66004, version 1.0
Size
66 kB (66004 bytes)
Hash
ba18ba6bb49f6fb83b70d5ccbc7b4e41
59f3738e0d3597ef128c6e91fc5a78dfc3986d4b
195a79c3a4ad21e1b897dd21799f8432e4431a719b8cdc6931f92a6a7ab4c167

HTTP Headers

GET /landings2023/en/match3_pic/assets/fonts/Roboto-Bold.woff2 HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://toplaying.pro/
Origin: https://toplaying.pro
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: application/octet-stream
content-length: 66004
last-modified: Thu, 29 Sep 2022 14:38:25 GMT
etag: "6335ade1-101d4"
cache-control: max-age=14400
cf-cache-status: HIT
age: 731
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2FHTKhhxde60u%2Be4Kz%2BECyNEyO5xsrAdbXhWktusYrB9nbZse4X6gk4O6c3pIx9ZqMAvojkOJrAz2pebXzlNW%2BThBOWuxBViAuXIB7Sbo7hxtV7yJ%2FpE0EhmlC1oRQ77"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab2ef356cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-9.jpeg

172.67.152.146

200 OK

1.3 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-9.jpeg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3
Size
1.3 kB (1300 bytes)
Hash
c425bca7999a2bfbbc635869517aebe3
c38697cee420b42d2c57c0689b48b38171e8d933
b0c41ae4d2863b654e07cbdd30c89b7baec5edbac2094f84f798fba03d36b682

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/people/img-9.jpeg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 1300
last-modified: Thu, 29 Sep 2022 14:38:37 GMT
etag: "6335aded-514"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2FIw55kLcdTk1koliZIm5sdnFJtoYFf8eZAJtoiJWOTsGsI1%2Fuqo5ROxsXW5ZrHFWQUmO%2FzJCaK%2FOmadiQ0bBFet81WaMP2l0iUneb8N7%2B9%2F%2BvAN7WQsql4ua88L6Yb6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286556c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/fonts/Roboto-Regular.woff2

172.67.152.146

200 OK

66 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/fonts/Roboto-Regular.woff2
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
Web Open Font Format (Version 2), TrueType, length 65764, version 1.0
Size
66 kB (65764 bytes)
Hash
81f751c74973b61ebedbf61f3ecbf480
2915741bf3d737044a6ef97afd6d4eabef908479
56de0d03455d412c89d88c63da6037845d9d2e726e6fdc7adcd3e9aed0d2150a

HTTP Headers

GET /landings2023/en/match3_pic/assets/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://toplaying.pro/
Origin: https://toplaying.pro
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: application/octet-stream
content-length: 65764
last-modified: Thu, 29 Sep 2022 14:38:26 GMT
etag: "6335ade2-100e4"
cache-control: max-age=14400
cf-cache-status: HIT
age: 731
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6hmAZYWmXfHlWran1JrOH6nf2Gr1aoXsMr4itM4W17ZMMJ7jNNPrrWFp14zWW07nQoO4j9MCulxlGzY57HFmMfNNQnyfV04uEJF%2FtOAc8bsGNF8iep1%2FeT8cckaA83eU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab2ef256cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-2.jpeg

172.67.152.146

200 OK

1.3 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-2.jpeg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3
Size
1.3 kB (1297 bytes)
Hash
92b944714cea3e478a8e50dea1a80b26
f12fc267be0ab02e2f3585b42df5b8c10d3cd3a5
fa07d78345204bf48b255523990b544e1b28f9a7810aaf2b8a5a356d05575205

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/people/img-2.jpeg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 1297
last-modified: Thu, 29 Sep 2022 14:38:35 GMT
etag: "6335adeb-511"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4EbAuryamUWi2IIdNYyb8q%2BfceZsYWggGdMufNeS2t7NmhmNrsxhQK5RhnZHwrWm2StCeNjpI70eOS3wENLYtn4GST3OjlHcISkBdAHr0Cjr%2FsnOUyahxR5CH87pX8Da"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab285e56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-3.jpeg

172.67.152.146

200 OK

1.4 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-3.jpeg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3
Size
1.4 kB (1418 bytes)
Hash
d6758d36aa9a5b8c024d3caf2dc2df7d
048d80743ff3d60d4633186d81391b94d7c83b1b
94a926b8594e8b7764c73abaad56fddcca385882391b8c07300c11abfadfe72f

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/people/img-3.jpeg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 1418
last-modified: Thu, 29 Sep 2022 14:38:35 GMT
etag: "6335adeb-58a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2FrFKJh3fGPt7z%2FsXFZyxtsRhFuuCiaGTAr%2F95y1%2FOl3kLyhCvTeXG8hNmSr6TibaoZau289GQJ%2Fy73a%2BhZOASepV6NjBkI4Cgav0Yc%2B7IMMLk21lT3In5VhkynHADZ%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286256c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-1.jpeg

172.67.152.146

200 OK

1.7 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/people/img-1.jpeg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, components 3
Size
1.7 kB (1676 bytes)
Hash
0aa137a0a96d58799ecf30ef67ff9c26
306eb4cb9e47ecb4e7bec4e28b39836a17e33686
1a38826964bc3cab6c150187737002c19f10ed32e49de456610efa46d0f4d505

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/people/img-1.jpeg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/jpeg
content-length: 1676
last-modified: Thu, 29 Sep 2022 14:38:34 GMT
etag: "6335adea-68c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W2Uvz7ovPGMi2UJO8rE1JQJnobsI2WENW8JHuo0x3kTVG%2F3dxMyO4aJ5MDvkJvCLxG2hY4SZ5HZc4GmOubN1bY1wXGc58MD86yuVVDf0Ewt7r0FG4ujMsAvhshLEz6Qs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab588d56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/cards/img-card-1.png

172.67.152.146

200 OK

20 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/cards/img-card-1.png
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
PNG image data, 137 x 138, 8-bit/color RGBA, non-interlaced
Size
20 kB (19821 bytes)
Hash
5ec337b05a265dc6c45db1a0965a87f7
901854fd33df07ea0516675f85f9d6ae4eb1ab0e
89e629e9bcebbd6ec40d421b5db2ad5b37a0780e9407201d90bd3d0ff325f53e

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/cards/img-card-1.png HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/png
content-length: 19821
last-modified: Thu, 29 Sep 2022 14:38:27 GMT
etag: "6335ade3-4d6d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HhM1ijs62QGrJ3lopaHR9Dc%2FQ90Fl6ye0HDLocGIP87gA75I4g%2BjgIo9QNeDADUEvQxovj7mEhoSF5y%2FX2JG%2F%2Fer3CAJTVhuZxrRs4tJT2l6MBTQInlbqUcEyqvNKH3H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286b56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/cards/img-card-3.png

172.67.152.146

200 OK

25 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/cards/img-card-3.png
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
PNG image data, 137 x 137, 8-bit/color RGBA, non-interlaced
Size
25 kB (24581 bytes)
Hash
7afee4adbaade24d733fbbd167ba0a3d
23acae782570f6e5b036453e47c708beea03b8a6
10816bc40d22868b5cb10b9388f31e99bd7750e7669d15a57c307cf38448bd50

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/cards/img-card-3.png HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/png
content-length: 24581
last-modified: Thu, 29 Sep 2022 14:38:28 GMT
etag: "6335ade4-6005"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mdjIBXvCTfWtVyqT4qcqOlaEyAw4y3UxTAMWhJnWxgH5PBnQzv82n%2Frp%2BRtwXX5eduFKayAzkt7SinZ3Pgr1aPDVTMxOxUoj512l1sg97jDghlf4fsEjGcGsZkDUABsW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab387756c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/img-coins.png

172.67.152.146

200 OK

16 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/img-coins.png
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
PNG image data, 219 x 154, 8-bit/color RGBA, non-interlaced
Size
16 kB (15770 bytes)
Hash
c7071a5d5c23b57f2cf953dec3ab5302
a619a168afbb0e2350f49c388dc5e20e96565a48
7584889a4b87206bf013d3cf42878f2edcf304d3e9f52d3e1841052f373147f8

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/img-coins.png HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/png
content-length: 15770
last-modified: Thu, 29 Sep 2022 14:38:33 GMT
etag: "6335ade9-3d9a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vezk3RrE4QDK5%2Brs48CJKRtLfWhw9vM7gHsZkoWy%2BbLLlrnqKFGruimySKark4zw%2BUPP2D6CBSWYxjM8wbL6My0vQjko%2FreummW2DODkaLW2FSkg8ZqKHG5jOqWDeCeC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab387856c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/cards/img-card-2.png

172.67.152.146

200 OK

21 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/cards/img-card-2.png
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
PNG image data, 137 x 137, 8-bit/color RGBA, non-interlaced
Size
21 kB (20703 bytes)
Hash
5f8d8aa27078861a9494a926529b5f2e
59863556285f0880bb9d1cb218583b24ebf16ce5
2f2492cbc011df8db6cf481dd76471fd78759cd860e56543541d715d8b8c4f64

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/cards/img-card-2.png HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/png
content-length: 20703
last-modified: Thu, 29 Sep 2022 14:38:27 GMT
etag: "6335ade3-50df"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MV9y35DPcgF7lNH3deT6%2BRCMYRxvO%2B4wPmNYIpL2uoyRCRB3R9d10jpY7OIn0hb%2FdPFye2j7LaCm0kGwfpC2tr8o7frlGnIJ8XhJLtZUXqQGCPRULxkilRvei49r2mif"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286c56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/apple-touch-icon.png

172.67.152.146

200 OK

9.0 kB

URL GET HTTP/3
ubankroll.com/landings2023/en/match3_pic/apple-touch-icon.png
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
9.0 kB (9034 bytes)
Hash
0dcbac04ddffa14ae6ce967d92249f6d
a7ecbbeea017bab6eae4cea394c350d513f55629
5e653a660c76003539be063366972b33884d4072a4bbab5fb435b67bf678fb1a

HTTP Headers

GET /landings2023/en/match3_pic/apple-touch-icon.png HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 16:02:41 GMT
content-type: image/png
content-length: 9034
last-modified: Thu, 29 Sep 2022 14:38:24 GMT
etag: "6335ade0-234a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1248
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W0k%2Bi3ZX7%2FMP34xWAXcfB8b%2BATMDEnTS4QLSOwFufHRhivKbcc9hqiXHuCO5ZHrPLsK4lKH459RVTnXDNhTy5fRggxbR3eWVzsIF2jl6dR3ssuxL4ppttVUjotOGB0E%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27af380356c5-OSL
alt-svc: h3=":443"; ma=86400

ubankroll.com/landings2023/en/match3_pic/favicon-16x16.png

172.67.152.146

200 OK

940 B

URL GET HTTP/3
ubankroll.com/landings2023/en/match3_pic/favicon-16x16.png
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
940 B (940 bytes)
Hash
f56f88189ba29ea5e8f489513de45961
22553cd837003d64fdbbc331f983eb2e1d97e5d0
6c89dd11aeaebe9d72008bd8b5e8f8579f2d4a39032108717e3c9e3f1123074f

HTTP Headers

GET /landings2023/en/match3_pic/favicon-16x16.png HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 10 May 2024 16:02:41 GMT
content-type: image/png
content-length: 940
last-modified: Thu, 29 Sep 2022 14:38:38 GMT
etag: "6335adee-3ac"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uy%2B%2FP8WdCQhiznahmUhjVVrACFyH4vsCyqzQlaBRbGwj9KhryWXAFHsn%2FX1Uxigl7s6byijUIVPf0rw6d1v6m7VkEfpTzRyfEvIo5gK0vkYTF92z7QWbScx1Nqqp6U0J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27af480656c5-OSL
alt-svc: h3=":443"; ma=86400

ubankroll.com/landings2023/en/match3_pic/assets/images/logo-sign-white.svg

172.67.152.146

200 OK

2.1 kB

URL GET HTTP/3
ubankroll.com/landings2023/en/match3_pic/assets/images/logo-sign-white.svg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
SVG Scalable Vector Graphics image
Size
2.1 kB (2144 bytes)
Hash
7561102ab7d3ae1b3a765becb56b17e9
4543f3c5d4f9ff9b317c59877a58907b7836ef83
82ee4c41edb6599de3c7ec4a79090263b308e16f9a4241fed1bb7cff6563b8bb

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/logo-sign-white.svg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ubankroll.com/landings2023/en/match3_pic/assets/css/main.css?v0.12
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 10 May 2024 16:02:41 GMT
content-type: image/svg+xml
last-modified: Thu, 29 Sep 2022 14:38:33 GMT
etag: W/"6335ade9-860"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5064
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hm6uD4JVA0rokJ%2FbY%2FJGdvgc3bULzCABKuX9DjdBLXhSzXgZHmWNFavF9JPhjIx6wtBZje8i8BqlMskU8guG4mPO2Jijx3XVxJ3qiVR0zpi%2FxZEYnF4PCDTP9Rdpt42m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27af1fd956c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

toplaying.pro/yz992c?external_id=miss_812828549444284948

172.67.209.56

200 OK

21 kB

URL User Request GET HTTP/2
toplaying.pro/yz992c?external_id=miss_812828549444284948
IP
172.67.209.56:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttoplaying.pro
FingerprintB9:60:CD:02:5B:5A:D0:E1:43:BE:AA:33:6F:4E:EC:4A:F5:4E:4C:A5
ValidityMon, 22 Apr 2024 11:31:22 GMT - Sun, 21 Jul 2024 11:31:21 GMT

File type

Size
21 kB (21139 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /yz992c?external_id=miss_812828549444284948 HTTP/1.1
Host: toplaying.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: text/html
cache-control: no-cache, no-store, must-revalidate
expires: Fri, 10 May 2024 16:02:39 GMT
set-cookie: _subid=376l60j6l137a; expires=Mon, 10 Jun 2024 16:02:39 GMT; path=/
15ab5=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEzNzBcIjoxNzE1MzU2OTU5fSxcImNhbXBhaWduc1wiOntcIjRcIjoxNzE1MzU2OTU5fSxcInRpbWVcIjoxNzE1MzU2OTU5fSJ9.57xp-95cEF3sAS5ACwn-4A6FpDzYGLt_I7RSvFQ3MaI; expires=Mon, 19 Sep 2078 08:05:18 GMT; path=/
_token=uuid_376l60j6l137a_376l60j6l137a663e451fe555b4.78342122; expires=Mon, 10 Jun 2024 16:02:39 GMT; path=/
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vC%2FegCHHSRzlGT%2BV7gnQtf%2B6Bt189VU8%2Bt2sbWmFXUmHdVZ%2ByOTi62dDbM6kXd9oGCxqijw5%2FrfMNvhy5kEpUAIuKvCbc3nwIoQGh57OOWHmmTqR2ITGWVhUyp2LUGpq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b27a71ed5b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/logo.svg

172.67.152.146

200 OK

10 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/logo.svg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
SVG Scalable Vector Graphics image
Size
10 kB (10152 bytes)
Hash
658e06eb29d59aff97a12fcb55680ae6
0f6d28c238eea0696f8701deed5212db607fee56
2dd76bdf3124fef957f52e7cf6e7f247ab0512a1b10a68e098b10150b97645eb

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/logo.svg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/svg+xml
last-modified: Thu, 29 Sep 2022 14:38:34 GMT
etag: W/"6335adea-27a8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1249
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VTpeO34Nr%2BXqXjt4kuGWCPRk4B6qo2AZSdmZo4XxTitEc9tr%2FTb%2FouHROtw7twRNGV%2Bvq2Q5eCg0NSx03ywLoJsd7W%2BKzk%2FnWZ9Y2M5%2BkoOXoCRBkclPcZz573j%2BL%2FBJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab286156c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/css/main.css?v0.12

172.67.152.146

200 OK

15 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/css/main.css?v0.12
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
ASCII text, with very long lines (15161), with no line terminators
Size
15 kB (15161 bytes)
Hash
ad2dae2c467ccacffefb67aa37eefa9e
0b42296cb01e5cbed8527e6cd55633abe33be8f6
fee96d2f6af1fd9269a7767df9be6f173cc99ac20dd2312e3f06c2145404921c

HTTP Headers

GET /landings2023/en/match3_pic/assets/css/main.css?v0.12 HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: text/css
last-modified: Thu, 29 Sep 2022 14:38:25 GMT
vary: Accept-Encoding
etag: W/"6335ade1-3b39"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oldQOx5AuJujXcKBgDXJEawBUscR7EMfbBZVUDmWTZmIwpJLRQ%2FbUNy4C0J9NZ%2BhasRjUgG50nSWG3PKI%2BVjkxmE4AVjgnLtMFuoDmo0RkiqGsJbcievzPiKrFoKoIKh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b27ab588e56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/js/index.js?v0.12

172.67.152.146

200 OK

22 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/js/index.js?v0.12
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type

Size
22 kB (22257 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /landings2023/en/match3_pic/assets/js/index.js?v0.12 HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: application/javascript
last-modified: Thu, 29 Sep 2022 14:38:37 GMT
vary: Accept-Encoding
etag: W/"6335aded-56f1"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 1251
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GdMUQNRn6jJjwM%2Fk%2Fmdu1ikbvJYoFkUu%2BfdAF%2FT1Gy1VweCPWxe%2FMQZWeqFV1sZjx4UwzF%2BSN0A7QKqNgtbG9Mksol56aH05i3sG9YvIMTAjZsg933Bu7jza2lARSdpq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881b27ab285c56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/ico-emoji-1.svg

172.67.152.146

200 OK

2.5 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/ico-emoji-1.svg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
SVG Scalable Vector Graphics image
Size
2.5 kB (2476 bytes)
Hash
71d9e962691be15287afc991b6225c72
39d813e6ccf3266fda67139046971076e12126aa
04a94d18f175c4a951327a732b87288e74231eb7d50cde38b96a5716d966edf2

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/ico-emoji-1.svg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/svg+xml
last-modified: Thu, 29 Sep 2022 14:38:32 GMT
etag: W/"6335ade8-9ac"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CxXkgtU1oCgWS5esbCdKIkdFKOF1oxCbjuwjW0Zb8i3v7xMLB6af6%2F%2BAvAkOce0gig%2B979hnayWaKg0Z%2FscBoF5HXeTwwL6uaVXAJGLgS8HP35LWsrnLdbFuJjML4Zjj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab487c56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/ico-emoji-2.svg

172.67.152.146

200 OK

907 B

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/ico-emoji-2.svg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
SVG Scalable Vector Graphics image
Size
907 B (907 bytes)
Hash
8beed2d2b60233236a300d1aebb4c486
2a13625796052ddc9357df31d873d06e2d310313
643a82ac0a2fe33e61dd40c25f283852a00345397acdd7197d537fdb98f3fb24

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/ico-emoji-2.svg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/svg+xml
last-modified: Thu, 29 Sep 2022 14:38:32 GMT
etag: W/"6335ade8-38b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kwJTq2%2FS9rMv%2B%2Fj4%2FHS1qXRSO8cmS%2BPqqdKB3S92IqC6sFDZkULh4uSNHUI6iTZE6hcdu7jzIB%2FmR6DOrE6LHPfJk%2FhTjyvjw4cSGahKZWd7oBIwZ3lHi%2Bj24C1oKA3%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab487d56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ubankroll.com/landings2023/en/match3_pic/assets/images/ico-emoji-3.svg

172.67.152.146

200 OK

7.5 kB

URL GET HTTP/2
ubankroll.com/landings2023/en/match3_pic/assets/images/ico-emoji-3.svg
IP
172.67.152.146:443
ASN
#13335 CLOUDFLARENET

Requested by
https://toplaying.pro/yz992c?external_id=miss_812828549444284948
Certificate
IssuerGoogle Trust Services LLC
Subjectubankroll.com
Fingerprint09:E5:97:F3:2F:FE:4E:69:8E:39:99:02:B1:50:02:A6:1E:10:FE:86
ValidityMon, 06 May 2024 06:34:15 GMT - Sun, 04 Aug 2024 06:34:14 GMT

File type
SVG Scalable Vector Graphics image
Size
7.5 kB (7496 bytes)
Hash
6707ded12174ced776e82f51a5c4ec35
9099c9d570af244ef6f67b18c22d7f855cf6bfb6
d90a0d19532b8354de0f3b2264a9725bfbbc53c6d7d7f9731f00bb0e6a0413ab

HTTP Headers

GET /landings2023/en/match3_pic/assets/images/ico-emoji-3.svg HTTP/1.1
Host: ubankroll.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://toplaying.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 16:02:40 GMT
content-type: image/svg+xml
last-modified: Thu, 29 Sep 2022 14:38:32 GMT
etag: W/"6335ade8-1d48"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5063
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wlpe3Ps9xmHWLb3u3IfWD36FrkLHJ%2BZ72HtiHP7b3tcpFZN0IJWe2ABdBmrbVPqbJyuMtlelCJjDQ%2BfPZf8iIU2w9IfevMR2Mx0aYVX%2FBaBBHvdh%2FElLIuJJQVY7mZYQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881b27ab487f56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (27)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2