| walter-larence.com/aa796b05-116c-4fd2-a1a8-4039e91d59a4 |  18.193.146.82 | 302 | 0 B |
URL HTTP/1.1walter-larence.com/aa796b05-116c-4fd2-a1a8-4039e91d59a4 IP18.193.146.82:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /aa796b05-116c-4fd2-a1a8-4039e91d59a4 HTTP/1.1
Host: walter-larence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sun, 18 Sep 2022 21:38:00 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://media.magicjackpotaffiliates.com/redirect.aspx?pid=2833&lpid=15&bid=1495&clickid=wvpddhkdgn8e9t4j2jmpb39m
Pragma: no-cache
Set-Cookie: aa796b05-116c-4fd2-a1a8-4039e91d59a4-v4=CMM79sjQAEjz0oSU--zEDT83eMAyX40orCU6TlJ7Usw; Max-Age=86400; Expires=Mon, 19-Sep-2022 21:38:00 GMT; Domain=walter-larence.com; Path=/; HttpOnly
cc-v4=De5gZ7cMr7kUgC2wdRF4LCLLT%2BoqMxWIUWzOqHF%2Fhq%2F3DXZt%2BSOL4FxXuibA%2BeD8kymhTzh86AQgpSWJRROqLigJ1yJLyGBVJDNJI%2BOAx0Z9Xi5S2FuzTY4%2B3jUD7lTMx0cP9CnI0LJRq%2Bln%2B0x8dQ%3D%3D; Max-Age=31536000; Expires=Mon, 18-Sep-2023 21:38:00 GMT; Domain=walter-larence.com; Path=/; HttpOnly
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashadb43321efa5cd1662993b701ff25fa4 1299dcea7e9c59d9f22f39d69025484fe71098c1 2c25a6717245be3746f1412af9dd1c351e12dbb93e8e08c3ddcdacf35e419514
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C25A6717245BE3746F1412AF9DD1C351E12DBB93E8E08C3DDCDACF35E419514"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8666
Expires: Mon, 19 Sep 2022 00:02:27 GMT
Date: Sun, 18 Sep 2022 21:38:01 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  143.204.55.35 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb593eb39329cfe060d55be5e4a5405e2 78e46c1028e9f94f8569303ad2d90d7df13a059a 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 18 Sep 2022 21:12:24 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BMzaqbY1ijtl_0QMeYQr-OQXTm41WhUjYDSkhQ-EqrT9lbt7XYFipw==
Age: 1537
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.49 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.49:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g3zUk4MuH0-0JkyOKzr9iIHwZvsjyLPGrEm5GzqWFRThzat699UFnA==
age: 61368
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 21:38:01 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| media.magicjackpotaffiliates.com/redirect.aspx?pid=2833&lpid=15&bid=1495&clickid=wvpddhkdgn8e9t4j2jmpb39m | 23.36.79.17 | 301 Moved Permanently | 0 B |
URL HTTP/2media.magicjackpotaffiliates.com/redirect.aspx?pid=2833&lpid=15&bid=1495&clickid=wvpddhkdgn8e9t4j2jmpb39m IP23.36.79.17:0 ASN#20940 Akamai International B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=2833&lpid=15&bid=1495&clickid=wvpddhkdgn8e9t4j2jmpb39m HTTP/1.1
Host: media.magicjackpotaffiliates.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 0
location: https://bonus.magicjackpot.ro/wheel/?btag=654559_2869484BFA7049BEB6257D174A4F69F7&clickid=wvpddhkdgn8e9t4j2jmpb39m
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sun, 18 Sep 2022 21:38:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 18 Sep 2022 21:38:01 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a2833%2c%22BID%22%3a1495%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1663537081326)%5c%2f%22%2c%22CookieTag%22%3a%2214952833451240919C20229182138%22%7d%5d; SameSite=None;; domain=.magicjackpotaffiliates.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2216726749%7c1%22%7d%5d; domain=.magicjackpotaffiliates.com; expires=Tue, 18-Sep-3021 21:38:01 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=127, origin; dur=51
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css |  104.17.25.14 | 200 OK | 1.5 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css IP104.17.25.14:0
File typeASCII text, with very long lines (3201), with no line terminators Hash8e09ceb5490863a66cd2e83ca3d7e524 35e3d074516ec70c508d748f7ae01827bc0c28ba cccbb374fd4cb6dcbac9df64456b49cb11530e7bafdac6c6c7e67ff2ed350db9
GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
content-type: text/css; charset=utf-8
content-length: 1541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-c81"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8978451
expires: Fri, 08 Sep 2023 21:38:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dzPl%2FbBo0eBlXqURFiEgFPYsAA1c86RLwYeebh8w1%2BpE69%2BbLxnWC2kJiJVOwrwh%2Fv%2BB4sFxHU2E8jtGIjxXoJwVi%2FzkdXmcAjKEtHETO%2BLGcUmkojC%2FNXwQFlm6j%2BtqNIyQo886"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74cd39e85ce1fab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.js | 104.17.25.14 | 200 OK | 1.4 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.js IP104.17.25.14:0
File typeHTML document, ASCII text, with very long lines (4862) Hasha08c3702f999b6cbd18c635f8e88421f 2938a9a742af0e1e7de5b58ad293c61d2838014b 3b512cbaa646370f0897e5e1e7cbab220a2382de70f24e994e88ef4f5121a39c
GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 1399
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-1359"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1480884
expires: Fri, 08 Sep 2023 21:38:01 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l3p1lvL78GicDgb4sXsz8of2dRNrm3OvidOlfRE2BhSKMB8nQJYgmWbQkzNMiUmsaYfo8DP5GWA2taTqmcoSGtt4o%2FuFqcBjF5haxrSI9fu2lVeLJXd4%2BT9W%2FY4fSqgeKpvDG3VO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74cd39e85cdefab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 1.2 kB |
IP142.250.74.3:0
Hash06a10ad22c4e83d32ed6585465b45e81 24af28c25c5381e30c26c4ab767137ec80a487c8 926354b3f6fe6a431e7dad5a66f5ab3c3e9d0504199b0bcaaeda6f17f04e6001
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 2.8 kB |
IP142.250.74.3:0
Hash86f6432272f8bfad758b05a9b5b806b3 f51de12521494f0d1c62bcfba869c0198167f220 b76c45b80c4d3fbd0b54fd85be45eebaba370415b3608923b661e874bc6c0b28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.35 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.35:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 18 Sep 2022 21:03:22 GMT
Expires: Sun, 18 Sep 2022 21:08:41 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DbuVzGW35l3EmQzu6VXyntTxYTwvwwdYqx7DAIuOCnSvsEk18dNEYA==
Age: 2079
|
|
| ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js | 172.217.21.170 | 200 OK | 30 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js IP172.217.21.170:0
File typeASCII text, with very long lines (32065) Hash6d973c8b7e2439d958e09c0a1ab9fe50 05ae0830200c20b9a2dfd5a825adc400481a60fb f3c122dc227e829ed96b2a754296809201bd78abbad7ba50ef5079654e1cc894
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 23:24:22 GMT
expires: Thu, 14 Sep 2023 23:24:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 339219
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 4.0 kB |
IP93.184.220.29:0
Hash0323106ac89ab8fb29cff195541bfd90 8fa3dda54f212f76ca7ffe82c03954ac7f754fdc 252c2319fa18c3db86add1502643659158f4f753ee2b42b03b4e7e3b21c03c92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4185
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:01 GMT
Last-Modified: Sun, 18 Sep 2022 20:28:16 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 1.1 kB |
IP142.250.74.3:0
Hash7bfedc6a159fb833b70fa2876ab142a2 ee9bf7ac674e3e6479785b5a1d161e42ac6a877d 7f05eec5d59280d688cd6cae9791df01fe799571a872028fe211cd0b08b5509f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css2?family=Work+Sans:wght@400;700&display=swap | 142.250.74.10 | 200 OK | 909 B |
URL HTTP/2fonts.googleapis.com/css2?family=Work+Sans:wght@400;700&display=swap IP142.250.74.10:0
Hashd9db04982bff12b49c69e5967af1e7b0 2998991fd110e25839261889dd17b8f5e2da3b92 ef9c1c14ff3e7311a767dc3e98e7b0070f5c9e0000e320c920e1cd5c080d542e
GET /css2?family=Work+Sans:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Sep 2022 21:38:01 GMT
date: Sun, 18 Sep 2022 21:38:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 150 kB |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typePNG image data, 900 x 900, 8-bit colormap, non-interlaced\012- data Size150 kB (149526 bytes) Hasha2fc0ed5288fb49b57cdfdb26032c661 cd0fd5c9a1d59cfc40f69ed463f27dfa3e3c48e1 5df5b3c8eb5c99610683d4d6c8977433754f41b78417612cc692d710353a62be
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 670
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9bfac0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha9323cf0781cad0d5ac23f0c81c105b1 772d0218be53da9f875bb96a287c904976c296da 5c808b03cd8dd26275f12a850d8a36b467246c1461ea65a4c717acb04f2ca722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 3.6 kB |
IP142.250.74.3:0
Hash249edc4fa65677eb85e55663d4a3c019 240bd592700f3836e6cac5b103e0a33ff8d4c933 b781a0f3e356efe2536965ba8a87ca91c22e4665c4c9e71f560bd2c5e0e553a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| push.services.mozilla.com/ | 54.148.148.62 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.148.148.62:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oFCo+Xa3j7IxvlO4aDQrIg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nBTI/Rm03gr7Lub5VdCUFlhh7CY=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha9323cf0781cad0d5ac23f0c81c105b1 772d0218be53da9f875bb96a287c904976c296da 5c808b03cd8dd26275f12a850d8a36b467246c1461ea65a4c717acb04f2ca722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash45f95aa258ab932ac2f8a33ff7944ffe 8f52b66e897dab7cb160d481886805ea216f407f de4fd2aaa566b601e82c38806ec8ea84110b1d63f15efe48186f5bcf70847488
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 48 kB |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
Hash5ecbe74c96de0db29407af73b80e3289 430026b44c48a7d1e80c3075e5c493286c44afd8 5fb9e7e81b227f634f4874a21276ea8f6bbee987e4ed9ca6e3ff9bd30ef3449b
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 670
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9afa20b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 49 kB |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
Hash1d8077cf96bae8f572cba2ff296c788e 028090c36a7f706dd9f73a0048705b12ec068ff0 16918022bf9ee75b61279a0d102791dd404c00854efed235bf7d18e299b76d50
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 719
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9bfaf0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-5LDNKNQ | 142.250.74.72 | 200 OK | 62 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-5LDNKNQ IP142.250.74.72:0
File typeASCII text, with very long lines (27918) Hashff4160ddca170612fc747db20ebdca1b 71bd078f0ac7defbcbb36a30b79cd6320a9d4751 bf96130214335175382a77f41c2b3dab6f66f12987d9e9eb4d6764576b128250
GET /gtm.js?id=GTM-5LDNKNQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Sep 2022 21:38:02 GMT
expires: Sun, 18 Sep 2022 21:38:02 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Sep 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 62373
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha9323cf0781cad0d5ac23f0c81c105b1 772d0218be53da9f875bb96a287c904976c296da 5c808b03cd8dd26275f12a850d8a36b467246c1461ea65a4c717acb04f2ca722
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash45f95aa258ab932ac2f8a33ff7944ffe 8f52b66e897dab7cb160d481886805ea216f407f de4fd2aaa566b601e82c38806ec8ea84110b1d63f15efe48186f5bcf70847488
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| sc-static.net/scevent.min.js | 54.230.82.240 | 200 OK | 8.0 kB |
URL HTTP/2sc-static.net/scevent.min.js IP54.230.82.240:0
File typeASCII text, with very long lines (23033), with no line terminators Hash0f16280f78683c4dcb392b7df7a5ddc0 379551a0ea6b3b2d1ecbf40be1b15fc575dfc00c 6866325a547f2dbee73e122e987dba0e1a0277769d6e9525a3765a7100d041e7
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 7961
server: CloudFront
date: Sun, 18 Sep 2022 21:38:02 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Mon, 19 Sep 2022 20:48:04 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e4YQy6jZUtBgG4DbLjqoxgtbf8KjNtfbzKQt6C7mzAKhTZ9wwxRMZA==
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha05d3239e3bdfe95c8d17bf214323c44 8efa213025a2b2ca57a5408912ef1c0a8b520868 4b9500d053e249ba6b49bd13d5b87b15356052afcd617f25f198a3259d1a2174
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5461
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Last-Modified: Sun, 18 Sep 2022 20:07:01 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha05d3239e3bdfe95c8d17bf214323c44 8efa213025a2b2ca57a5408912ef1c0a8b520868 4b9500d053e249ba6b49bd13d5b87b15356052afcd617f25f198a3259d1a2174
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5461
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Last-Modified: Sun, 18 Sep 2022 20:07:01 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| tr.snapchat.com/cm/i?pid=c00161be-b1ec-4620-8902-f8cc2646f56d&u_scsid=cc602aa5-45bf-4e7c-9131-acc787261e9d&u_sclid=b5bef211-f823-45af-bd3d-b9f0873168f7 | 35.190.43.134 | 200 OK | 0 B |
URL HTTP/2tr.snapchat.com/cm/i?pid=c00161be-b1ec-4620-8902-f8cc2646f56d&u_scsid=cc602aa5-45bf-4e7c-9131-acc787261e9d&u_sclid=b5bef211-f823-45af-bd3d-b9f0873168f7 IP35.190.43.134:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=c00161be-b1ec-4620-8902-f8cc2646f56d&u_scsid=cc602aa5-45bf-4e7c-9131-acc787261e9d&u_sclid=b5bef211-f823-45af-bd3d-b9f0873168f7 HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| tr.snapchat.com/p | 35.190.43.134 | 200 OK | 68 B |
IP35.190.43.134:0
File typePNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data Hashc4a2b870062c2bb98c500bc1526c0498 528666ccdb12997358077bc8fcdbfb6b825c7788 2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
POST /p HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------411874360217364434163993390643
Content-Length: 2288
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
access-control-allow-origin: https://bonus.magicjackpot.ro
cache-control: no-cache, no-transform
set-cookie: sc_at=v2|H4sIAAAAAAAAAAXBgREAEAwDwIl6F0qwTlSn6PD+yZc86Ubg2dCSaUbawVUEqBte1UifvrB74QOmmP+pMgAAAA==;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 68
x-envoy-upstream-service-time: 4
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hasha05d3239e3bdfe95c8d17bf214323c44 8efa213025a2b2ca57a5408912ef1c0a8b520868 4b9500d053e249ba6b49bd13d5b87b15356052afcd617f25f198a3259d1a2174
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5461
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Last-Modified: Sun, 18 Sep 2022 20:07:01 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| analytics.tiktok.com/i18n/pixel/events.js?sdkid=C7FA5N1G5FFTO2SM3VH0&lib=ttq |  104.84.152.65 | 200 OK | 38 kB |
URL HTTP/2analytics.tiktok.com/i18n/pixel/events.js?sdkid=C7FA5N1G5FFTO2SM3VH0&lib=ttq IP104.84.152.65:0 ASN#20940 Akamai International B.V.
File typeUnicode text, UTF-8 text, with very long lines (65464) Hash0fc70ed6a908d0d45a151d20c2765a50 b6844abf0b245202e4f97e8077b4e31ac329a7b6 6997e9c85cfb4c0b564f86ffc1015678f35ce096507923cfa8b20a34b8c02c11
GET /i18n/pixel/events.js?sdkid=C7FA5N1G5FFTO2SM3VH0&lib=ttq HTTP/1.1
Host: analytics.tiktok.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=UTF-8
x-tt-logid: 20220918213802B8E49DAFB1B335623FA2
x-tt-trace-host: 014c3d3a48b720cad047ee4725ef00c61e67485dc018e6498c2db61a9da415c0eb58cfde7ca2146e346b23cc427df77dddf3a946dcb85d7da10950dfec1996e2f56a60b68a9cc68ddf934431b89a45021c
content-encoding: gzip
expires: Sun, 18 Sep 2022 21:38:02 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 18 Sep 2022 21:38:02 GMT
content-length: 37969
x-cache: TCP_MISS from a104-84-152-61.deploy.akamaitechnologies.com (AkamaiGHost/10.9.4-44125806) (-)
vary: Accept-Encoding
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=3, cdn-cache; desc=MISS, edge; dur=4, origin; dur=112
x-origin-response-time: 112,104.84.152.61
x-akamai-request-id: 2f28717e
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash56f5d7f608e25d64207135f045f988cb 901eb59372ae330ae85e1384da93479b21ae1082 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 18 Sep 2022 20:41:12 GMT
expires: Sun, 18 Sep 2022 22:41:12 GMT
cache-control: public, max-age=7200
age: 3410
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash38e7657af6b426db96e62cd44eeac911 b4d04a3abfd994a7eec215cbf57a08f060cea29d 24b0ee3343ba885318db8e2fc0bdbb63bad3c1bd81c09042c21a5aa93db98487
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6232
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Last-Modified: Sun, 18 Sep 2022 19:54:10 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash896bff52d8e6754a724da99230caabd6 bb053af2fcbeae7045f94d66baedc852abd3d663 7e0302d513ca6a7b370cc58c86c9a39a85578a9def775c20e3ede5b3402bc7cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3130
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Last-Modified: Sun, 18 Sep 2022 20:45:52 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 471 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
Hash4ee5c6443c11da4a5cf7ea801cd0c62f e742a7ee1cbedf1a23a82361f3873dbc165f927c e3682e49ed03efcf590a500154380807b54433f8344923e9017994bdf0d46924
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 785
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ec09b50b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/gtm/optimize.js?id=OPT-TCRQ3MX | 142.250.74.174 | 200 OK | 44 kB |
URL HTTP/2www.google-analytics.com/gtm/optimize.js?id=OPT-TCRQ3MX IP142.250.74.174:0
File typeASCII text, with very long lines (1720) Hash538fb76670969ae5f21cf3e7221df343 943631a0ec6c895af80d31eaf81b839877af330a 6e3dfff0717d25698f8f7614fb8de491947e3b2e2e52a64b150586d945d59a89
GET /gtm/optimize.js?id=OPT-TCRQ3MX HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Sep 2022 21:38:02 GMT
expires: Sun, 18 Sep 2022 21:38:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44250
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/conversion_async.js | 142.250.74.164 | 200 OK | 16 kB |
URL HTTP/2www.google.com/pagead/conversion_async.js IP142.250.74.164:0
File typeASCII text, with very long lines (1654) Hash890f716858b5f72587e47c5eca121cb5 91871a0acd9a0ab644d51036bb5ca0c3bdc5e687 7a3629e375468328b3fb25e1a6cc5749604f09099e8d2109f366e7e0226aee4a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 18 Sep 2022 21:38:02 GMT
expires: Sun, 18 Sep 2022 21:38:02 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 3080337328058561381
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15693
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| connect.facebook.net/en_US/fbevents.js |  157.240.200.14 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP157.240.200.14:0
File typeASCII text, with very long lines (64348) Hash9ecd89752214ef749272eef344b9089a 70a58a49c08934265ee34c74efb01d6b3124095d f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: PXLlqAI+ENjraim11CRnGudDk9pZeSkgE1ubTh9myAlDpsjrcRSMw36LGZ548bngQGb36fypyaJuDCKx5FOyjw==
content-length: 26839
x-fb-trip-id: 1679558926
date: Sun, 18 Sep 2022 21:38:02 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash38e7657af6b426db96e62cd44eeac911 b4d04a3abfd994a7eec215cbf57a08f060cea29d 24b0ee3343ba885318db8e2fc0bdbb63bad3c1bd81c09042c21a5aa93db98487
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6232
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Last-Modified: Sun, 18 Sep 2022 19:54:10 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| s2.adform.net/banners/scripts/st/trackpoint-async.js | 37.157.2.248 | 200 OK | 31 kB |
URL HTTP/2s2.adform.net/banners/scripts/st/trackpoint-async.js IP37.157.2.248:0
Hashcaa372cd0462d97c973a753748bd2cda 27fe9f02198ff467e613323970830af9037286f5 70baf03109d41ee566ed9decee88f44531d64c9f923289322e8070937805e194
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 21:38:02 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 25 May 2022 11:34:23 GMT
etag: W/"552eeb5f0620fb6f56733d625b5e719e"
x-amz-request-id: tx0000000000000aa1b2cda-00632773dd-323350c8-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 348 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typegzip compressed data, from Unix\012- data Hash19e6c601e8d653dd4adaa2401d087879 1d1a200786890677a844adb120b79ffb77c43da1 1d7a2e83d2620b9763fe0b475cfba26376807435d537264f22f4aa781e0cceaa
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 747
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ec09be0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 63 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typegzip compressed data, max compression\012- data Hash0339f8f57d1bf75003db591e28957e45 ae2286e497c9f76a02cb40c40a674b73bd293b76 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1274
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ee0b620b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 472 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
Hash6f0747f732f05e110f9fe9938de620d3 d4e9a55014187d0d2af174e5c27d03cc10c6cb05 32a866308c9d930c425a8ced1974039a409528cb4a0bd07bfbe4d8cd39be9742
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 613
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ec09bd0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 472 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
Hash6f0747f732f05e110f9fe9938de620d3 d4e9a55014187d0d2af174e5c27d03cc10c6cb05 32a866308c9d930c425a8ced1974039a409528cb4a0bd07bfbe4d8cd39be9742
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 744
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ed6ae30b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 145 kB |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typegzip compressed data, from Unix\012- data Size145 kB (145352 bytes) Hash1e4d02de59bbbbd75f38d747097fe61c fce172cdae9bbcd13464838e814b1a43bd3b8b1e 5ff6a2a6ebf2dd25c758a6b19f12089b3dd01094f7e7aa95ed37c18bebf661fe
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 891
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ee2b7d0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 1.1 kB |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typegzip compressed data, max compression\012- data Hash0dea774b87b8126794647b4b9b30fad9 5ac0354593426f6b4c8f1ee0ac51c2cfc0ea2924 ed267ac41be79087658f53440d9b97b7325df75c7f87e4bbc5ce70158bf39e76
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1210
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ee0b610b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/viewthroughconversion/10871829174/?random=1663537063872&cv=9&fst=1663537063872&num=1&fmt=3&value=0&label=3xfBCLPMubADELbli8Ao&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&auid=904178280.1663537064&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 | 216.58.207.194 | 200 OK | 42 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/viewthroughconversion/10871829174/?random=1663537063872&cv=9&fst=1663537063872&num=1&fmt=3&value=0&label=3xfBCLPMubADELbli8Ao&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&auid=904178280.1663537064&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 IP216.58.207.194:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/viewthroughconversion/10871829174/?random=1663537063872&cv=9&fst=1663537063872&num=1&fmt=3&value=0&label=3xfBCLPMubADELbli8Ao&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&auid=904178280.1663537064&hn=www.google.com&bttype=purchase&gcp=1&ct_cookie_present=1&async=1 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Sep 2022 21:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Sun, 18-Sep-2022 21:53:02 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-188145668-1&cid=854159620.1663537064&jid=292822046&gjid=1687220503&_gid=526212077.1663537064&_u=aADAAEAAQAAAAC~&z=1088394555 | 142.251.1.156 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-188145668-1&cid=854159620.1663537064&jid=292822046&gjid=1687220503&_gid=526212077.1663537064&_u=aADAAEAAQAAAAC~&z=1088394555 IP142.251.1.156:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-188145668-1&cid=854159620.1663537064&jid=292822046&gjid=1687220503&_gid=526212077.1663537064&_u=aADAAEAAQAAAAC~&z=1088394555 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://bonus.magicjackpot.ro
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Sep 2022 21:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashfd6f5d48a8eb6a76f7c699a235f6ed95 6dfe5af37fa0c7a6ed073d73d8be6e23ec4e1cc4 a7239c791a93ecf634d1afef2a09feae30f46decdbfa039403bd10394e444d56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 184 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typegzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT)\012- data Hash5e8adf280976199ab411ee9e3d70b5fd f70a8096314bb67ebf9298753c3de4fdf58c37fa ed565984ab4d57053149300102f673f2786249ef838edb278fc1b1f619cfa408
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 776
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39eecc200b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash6f0747f732f05e110f9fe9938de620d3 d4e9a55014187d0d2af174e5c27d03cc10c6cb05 32a866308c9d930c425a8ced1974039a409528cb4a0bd07bfbe4d8cd39be9742
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 31 kB |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typegzip compressed data, from Unix\012- data Hashf956d9de19c4b11a1ceb1da37f2f4822 bc1bc7b728e0019683ed06ee54dab0affc5378c7 3efc620e2d51a194656860f3a3c75721db958126f8d28c062afc586ccb8d9bf1
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 613
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ebf9ac0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www.google.no/pagead/1p-conversion/10871829174/?random=1663537063872&cv=9&fst=1663537063872&num=1&value=0&label=3xfBCLPMubADELbli8Ao&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&auid=904178280.1663537064&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 | 142.250.74.3 | 200 OK | 63 B |
URL HTTP/2www.google.no/pagead/1p-conversion/10871829174/?random=1663537063872&cv=9&fst=1663537063872&num=1&value=0&label=3xfBCLPMubADELbli8Ao&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&auid=904178280.1663537064&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 IP142.250.74.3:0
File typeASCII text, with no line terminators Hash0339f8f57d1bf75003db591e28957e45 ae2286e497c9f76a02cb40c40a674b73bd293b76 609cd8e12464fe137cfaa9f1ab6637150d44e105559c901b6df50303fd05aa26
GET /pagead/1p-conversion/10871829174/?random=1663537063872&cv=9&fst=1663537063872&num=1&value=0&label=3xfBCLPMubADELbli8Ao&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&ig=0&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&auid=904178280.1663537064&hn=www.google.com&bttype=purchase&gcp=1&sscte=1&ct_cookie_present=1&async=1&rfmt=3&fmt=4&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bonus.magicjackpot.ro/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Sep 2022 21:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.no/pagead/1p-user-list/10871829174/?random=1663537063870&cv=9&fst=1663534800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&async=1&fmt=3&is_vtc=1&random=416284955&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/10871829174/?random=1663537063870&cv=9&fst=1663534800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&async=1&fmt=3&is_vtc=1&random=416284955&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10871829174/?random=1663537063870&cv=9&fst=1663534800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=2&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2wg9e0&sendb=1&frm=0&url=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&tiba=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&async=1&fmt=3&is_vtc=1&random=416284955&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Sep 2022 21:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hashfd6f5d48a8eb6a76f7c699a235f6ed95 6dfe5af37fa0c7a6ed073d73d8be6e23ec4e1cc4 a7239c791a93ecf634d1afef2a09feae30f46decdbfa039403bd10394e444d56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 21:38:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha1000e166c34863868049de82c2f169e 88277366ea40e092d308ac13bbb1f050205a1c0a 37184f264553c21662c090821a07671880a57894e8e53d5894bd049e99b189e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "37184F264553C21662C090821A07671880A57894E8E53D5894BD049E99B189E2"
Last-Modified: Sat, 17 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4982
Expires: Sun, 18 Sep 2022 23:01:04 GMT
Date: Sun, 18 Sep 2022 21:38:02 GMT
Connection: keep-alive
|
|
| www.facebook.com/tr/?id=859587394820311&ev=PageView&dl=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&rl=&if=false&ts=1663537064115&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663537064113.1748009340&eid=ob3_plugin-set_038dfe4fa6eac1cf5caa2fa31f83278e060949be62cefe6b2c730dc7dd019cef&it=1663537063897&coo=false&rqm=GET | 157.240.200.35 | 200 OK | 44 B |
URL HTTP/2www.facebook.com/tr/?id=859587394820311&ev=PageView&dl=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&rl=&if=false&ts=1663537064115&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663537064113.1748009340&eid=ob3_plugin-set_038dfe4fa6eac1cf5caa2fa31f83278e060949be62cefe6b2c730dc7dd019cef&it=1663537063897&coo=false&rqm=GET IP157.240.200.35:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb798f4ce7359fd815df4bdf76503b295 f8cc6addf1707ad236ad9970b0a48f9733d07da5 10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=859587394820311&ev=PageView&dl=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&rl=&if=false&ts=1663537064115&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1663537064113.1748009340&eid=ob3_plugin-set_038dfe4fa6eac1cf5caa2fa31f83278e060949be62cefe6b2c730dc7dd019cef&it=1663537063897&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sun, 18 Sep 2022 21:38:02 GMT
expires: Sun, 18 Sep 2022 21:38:02 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ncfoud.magicjackpot.ro/events | 35.71.148.152 | 200 OK | 0 B |
URL HTTP/2ncfoud.magicjackpot.ro/events IP35.71.148.152:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /events HTTP/1.1
Host: ncfoud.magicjackpot.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 415
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Cookie: __cf_bm=Ljek1cyhIfdo.58NW.6lE4NkQZopngudoo81WI.FbWM-1663537081-0-AcPsT0l+8W1K7dHPz46BOL6PmtIwDNXWLEe1XvxAVSthVeigtHDGe8Gdmg4ag8yH1j8i5oK56b4UTxe1LjjPHyU=; _gcl_au=1.1.904178280.1663537064; _scid=3e2b9ed1-d80b-4808-ab58-eff89fc5e791; _ga_5JMNEV3JNW=GS1.1.1663537063.1.0.1663537063.0.0.0; _ga=GA1.2.854159620.1663537064; _gid=GA1.2.526212077.1663537064; _gat_UA-188145668-1=1; _tt_enable_cookie=1; _ttp=3de2cb4f-d031-461e-9e99-e3cb0b803865; _fbp=fb.1.1663537064113.1748009340
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
content-length: 0
vary: origin
access-control-allow-credentials: true
access-control-allow-origin: https://bonus.magicjackpot.ro
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
|
|
| region1.google-analytics.com/g/collect?v=2&tid=G-5JMNEV3JNW>m=2oe9e0&_p=633236538&cid=854159620.1663537064&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663537063&sct=1&seg=0&dl=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&dt=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&en=page_view&_fv=1&_nsi=1&_ss=1 | 216.239.34.36 | 204 No Content | 0 B |
URL HTTP/2region1.google-analytics.com/g/collect?v=2&tid=G-5JMNEV3JNW>m=2oe9e0&_p=633236538&cid=854159620.1663537064&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663537063&sct=1&seg=0&dl=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&dt=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&en=page_view&_fv=1&_nsi=1&_ss=1 IP216.239.34.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5JMNEV3JNW>m=2oe9e0&_p=633236538&cid=854159620.1663537064&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663537063&sct=1&seg=0&dl=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdgn8e9t4j2jmpb39m&dt=MagicJackpot%20-%20Cazinou%20Online%20%7C%20Revendic%C4%83%201500%20RON%20Bonus%20si%20400%20Runde%20Gratuite.&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://bonus.magicjackpot.ro
date: Sun, 18 Sep 2022 21:38:02 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6498
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:38:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6498
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:38:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6498
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:38:03 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6498
Expires: Sun, 18 Sep 2022 23:26:21 GMT
Date: Sun, 18 Sep 2022 21:38:03 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash51d067e534c477ce996b3e806f6a132e 451c1f67948e45909e636828e3d2a3099de922f0 e13318949733eb7992695c61570cc8b2961d881a8343c677a77cd035e787bbaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6869
x-amzn-requestid: 8d5cf972-bd9a-42b8-ba33-5dd05191e9f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6u1GspIAMF9vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263e5e-12430c8c7122a3594aba8949;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: leqr7rYJyeBFlYuFM2D-wGJfb7_w-5HbW2Y1aHwjTzZ9_4MTFybNaA==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:08:03 GMT
age: 84600
etag: "451c1f67948e45909e636828e3d2a3099de922f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e47c10c-5801-4548-a632-1dcfbd043a60.jpeg | 34.120.237.76 | 200 OK | 7.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e47c10c-5801-4548-a632-1dcfbd043a60.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash354c71e744d302c316f492a8fb7642dc cdf6caf4cd953e7b58bbb5f9a1512a4e3e06b792 f084331bd667f56556170c595391d888391284dbb7c18794d5033d5db1f07715
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e47c10c-5801-4548-a632-1dcfbd043a60.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7401
x-amzn-requestid: c59249dd-f9cb-4750-8287-65789c57fd77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6J-FaAoAMFZQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263d72-6a68d771099a6006717a547f;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: rt_KX4vcDiqF34OZdIeOfgEo5KmOxzuj9yCP2PMVJLYHT6a6kZ5-MQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:49:54 GMT
etag: "cdf6caf4cd953e7b58bbb5f9a1512a4e3e06b792"
content-type: image/jpeg
age: 85689
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf003d8b6e12692fb16dddd6827deead8 786c333cf08456aea446a55c547520572e1c2df9 d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11919
x-amzn-requestid: 2f547c1f-2f5d-4707-8f6c-fe9dfff51383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfS4FI9oAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145ab-3c967f2653d06c1c079f88c1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Q6pjncaouCXUu0Pz7v6xF_8ClxxVypUSeggW23Z-UTsPamKCTgwjmA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:00:17 GMT
age: 85066
etag: "786c333cf08456aea446a55c547520572e1c2df9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg | 34.120.237.76 | 200 OK | 5.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash29f4a52fb629dce4ef8038d4df7ea58a 4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0 32cee35b22110b83738f49f49edb6efcedb54fe793d5ccc900004e16e3fefda3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1d192c6-d447-4ad9-b142-a9258211f67d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5827
x-amzn-requestid: 9f179e66-3c6f-4e53-94f2-989bf32a6b90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yl7gyHvboAMFSzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632572d1-799e74a63288269b79170d58;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 07:10:09 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9firpBGLDHkjq_CJX01tbyPPS9OXPsTfzC0dLioWt1Axg7Vw5LQ0xg==
via: 1.1 497370ec058751eb0d9251f66d50af5e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:15:02 GMT
age: 51781
etag: "4a5b84c77bd53f4c94e1af4a702f6f85b46b51b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 7.8 kB |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7a22ab7dcdf50f4a297b8e117d336eae e139a0974317212f094fdbe59e26ca5cf6b9e56d 9b4c23c1bb2e4fcd140ce34bf83f315f09b45202c569cb74113c2e65c4031dcd
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 613
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ebf9a50b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg | 34.120.237.76 | 200 OK | 5.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash56ade9172e883c777dd974ca879bceba b2aaf019e083443a6404c262206ee2e981d3165c c8407ad191143d2d947464b357d8426efb334cb165c4fa5ca01573d8f7ca7b76
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0743b1dc-9d34-4282-a031-42c70fa409f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5133
x-amzn-requestid: 01f39c0a-c86f-4057-a505-20200819203c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YioKkFrFoAMFhMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632420a9-5821f44144b61475180ec961;Sampled=0
x-amzn-remapped-date: Fri, 16 Sep 2022 07:07:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3tByM8rVW_WxdiBUCfXzxZWjMvH2PB2VQ290D-DLITqly6QQQKBNSw==
via: 1.1 d042f60a962591f741406f28a8170c5a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 07:13:29 GMT
age: 51874
etag: "b2aaf019e083443a6404c262206ee2e981d3165c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fa6db45-871c-41e1-be1d-bc188fa9419b.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fa6db45-871c-41e1-be1d-bc188fa9419b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf2e5759fd404a039955868b121bbd075 04fb3179255ba5ec897ffc4581966945cc9fe2ca 42623d1a0f52682db915b075a894d8cd18f2b53efc7815304b0304841536cf35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8fa6db45-871c-41e1-be1d-bc188fa9419b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8005
x-amzn-requestid: 2ce67f7f-9a03-4f4d-b06c-ec0de59c2854
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6KhH9PoAMFh2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263d76-6aeeee3217540c5863913912;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:34:46 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: K_ZInDx3OZbVvpWZ5vnimzx-Dk5twaTGv9VGXMZHFpZ0YN7lKZ_5HQ==
via: 1.1 ca66331b52971370c4e54619e8a952cc.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:57:48 GMT
etag: "04fb3179255ba5ec897ffc4581966945cc9fe2ca"
content-type: image/jpeg
age: 85222
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 737
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ebf9a70b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 650
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ebe9a10b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 670
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9bfa90b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 654
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ebf9a40b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 677
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ee2b7b0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| bonus.magicjackpot.ro/wheel/?btag=654559_2869484BFA7049BEB6257D174A4F69F7&clickid=wvpddhkdgn8e9t4j2jmpb39m | 104.18.6.142 | 200 OK | 0 B |
URL HTTP/2bonus.magicjackpot.ro/wheel/?btag=654559_2869484BFA7049BEB6257D174A4F69F7&clickid=wvpddhkdgn8e9t4j2jmpb39m IP104.18.6.142:0
GET /wheel/?btag=654559_2869484BFA7049BEB6257D174A4F69F7&clickid=wvpddhkdgn8e9t4j2jmpb39m HTTP/1.1
Host: bonus.magicjackpot.ro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
content-type: text/html
last-modified: Wed, 24 Aug 2022 18:37:39 GMT
vary: Accept-Encoding
x-hostname: molnet-php74-47
x-varnish: 3179667
age: 0
via: 1.1 varnish (Varnish/6.5)
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=Ljek1cyhIfdo.58NW.6lE4NkQZopngudoo81WI.FbWM-1663537081-0-AcPsT0l+8W1K7dHPz46BOL6PmtIwDNXWLEe1XvxAVSthVeigtHDGe8Gdmg4ag8yH1j8i5oK56b4UTxe1LjjPHyU=; path=/; expires=Sun, 18-Sep-22 22:08:01 GMT; domain=.magicjackpot.ro; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q; report-to cf-csp-endpoint
server: cloudflare
cf-ray: 74cd39e6aa430b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 671
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9bfb30b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| track.adform.net/Serving/TrackPoint/?pm=2616040&ADFPageName=Pageview&ADFdivider=%7C&ord=434419350870&Set1=en-US%7Cen-US%7C1280x1024%7C24&ADFtpmode=2&loc=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdg | 37.157.4.28 | 302 Found | 0 B |
URL HTTP/2track.adform.net/Serving/TrackPoint/?pm=2616040&ADFPageName=Pageview&ADFdivider=%7C&ord=434419350870&Set1=en-US%7Cen-US%7C1280x1024%7C24&ADFtpmode=2&loc=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdg IP37.157.4.28:0
GET /Serving/TrackPoint/?pm=2616040&ADFPageName=Pageview&ADFdivider=%7C&ord=434419350870&Set1=en-US%7Cen-US%7C1280x1024%7C24&ADFtpmode=2&loc=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdg HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bonus.magicjackpot.ro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Sun, 18 Sep 2022 21:38:02 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=2616040&ADFPageName=Pageview&ADFdivider=%7C&ord=434419350870&Set1=en-US%7Cen-US%7C1280x1024%7C24&ADFtpmode=2&loc=https%3A%2F%2Fbonus.magicjackpot.ro%2Fwheel%2F%3Fbtag%3D654559_2869484BFA7049BEB6257D174A4F69F7%26clickid%3Dwvpddhkdg
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Tue, 18-Oct-2022 21:38:02 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 613
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ec09b70b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 562
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e8ae9e0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 668
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ebe99f0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 761
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ec09b80b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 678
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ec09bb0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 1171
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:02 GMT
server: cloudflare
cf-ray: 74cd39ee8bdc0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 575
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9bfab0b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 674
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9ffe20b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q | 104.18.20.157 | 200 OK | 0 B |
URL HTTP/2csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q IP104.18.20.157:0
POST /cdn-cgi/script_monitor/report?m=6pZ5ekhtPbyX_8ZUjZA1ALwafNAYuIx_TjVWpDc56DQ-1663537081-0-AV5yGlk7RmLLcuaq42gZgZ9d34ZgdJvps_Zmd6RQPHDi55yE9TdBp1jz3OF98RAYwKiCs1tKfPtUVMqE6Nz8r_darR4DaRWMiz-RvfjrXX_Q HTTP/1.1
Host: csp-reporting.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/csp-report
Content-Length: 657
Origin: https://bonus.magicjackpot.ro
Connection: keep-alive
Sec-Fetch-Dest: report
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 21:38:01 GMT
server: cloudflare
cf-ray: 74cd39e9ffe40b3d-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|