Report - vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click

Report Overview

Visited public
2023-11-28 06:21:32
Tags
URL
vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=
Finishing URL
freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
IP / ASN
31.220.27.98
#39572 DataWeb Global Group B.V.
Title
Top european football with N1Bet bonus from Free Betting Reviews

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-11-27 05:09:30	464 B	1.4 kB	151.101.65.229
freebettingreviews.com	unknown	unknown	No data	No data	5.5 kB	465 kB	172.67.182.143
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-11-27 07:34:07	1.5 kB	22 kB	104.17.24.14
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2023-11-27 08:05:54	944 B	63 kB	151.101.2.137
ecrwqu.com	577459	2021-11-09	2021-11-09 21:59:02	2023-11-27 08:32:33	1.0 kB	60 kB	185.162.85.2
e1.o.lencr.org	6159	2020-06-29	2021-08-20 09:36:30	2023-11-27 18:23:14	676 B	1.5 kB	23.33.119.27
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-11-27 06:40:38	932 B	166 kB	216.58.211.8
vvewey.com	unknown	2023-08-01	2023-08-01 15:49:38	2023-10-30 08:34:02	1.4 kB	347 kB	185.162.87.220
mdakky.com	unknown	2023-10-12	2023-10-13 10:25:55	2023-11-27 06:05:13	565 B	184 B	185.162.85.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-28	medium	mdakky.com	Sinkholed
2023-11-28	medium	ecrwqu.com	Sinkholed
2023-11-28	medium	ecrwqu.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	freebettingreviews.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	ScriptElement	12 kB	2023-03-07	2025-05-09
Pretty URL freebettingreviews.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 08:20 Times Seen31212 Hash 88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142 Loading...

	unknown	ScriptElement	189 B	2023-11-27	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 17:11 Last Seen2024-08-20 17:42 Times Seen11 Hash 7e3691c63b0e71cc4e24ce7cffed10bc 6a9d74c1821f984ae09060a1e46ddd5274b4420e 7f2a6f02eadbe9f5636f29f26bfc3296cd4e4abd199990a09913deb2649fb524 Loading...

	code.jquery.com/jquery-3.6.1.min.js	ScriptElement	90 kB	2023-03-07	2025-05-09
Pretty URL code.jquery.com/jquery-3.6.1.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:28 Last Seen2025-05-09 07:15 Times Seen14359 Hash 00727d1d5d9c90f7de826f1a4a9cc632 ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2 a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74 Loading...

	cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js	ScriptElement	43 kB	2023-03-07	2025-05-09
Pretty URL cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:06 Last Seen2025-05-09 07:28 Times Seen22746 Hash d5a61c749e44e47159af8a6579dda121 3b41b3bc956685015a347a2238e71db29dfa0dbb 0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740 Loading...

	unknown	ScriptElement	99 B	2023-11-27	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-27 17:11 Last Seen2024-08-20 17:42 Times Seen11 Hash 3a0e8016623f8a08190e468a01079d52 aa3d995a94ac9e78f5abef36f60a62823c69d20a 9642704790da2bb9310c8a4627954370fcfc56988995a72f4c19f6de7cb8d55b Loading...

	www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E	ScriptElement	197 kB	2023-11-28	2023-11-28
Pretty URL www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E IP 216.58.211.8 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-28 07:21 Last Seen2023-11-28 07:21 Times Seen2 Hash d5d08b3fffa1b899d17cd23817d0406d 34199ded4783de0d88160bddf7819a4f92ad8718 e5978f6db998e6553dbfd57865a9fe56689097f4f779c3a7986b3f3ed3809f05 Loading...

HTTP Transactions (26)

URL IP Response Size

vvewey.com/

185.162.87.220

169 B

URL
vvewey.com/
IP
185.162.87.220:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
169 B (169 bytes)
Hash
73d7f0b72c3964636ebb05c137ab75f7
04393cd17cbce199b28d92a49d05c25f3b0e510b
66a4c37663e2e400eda64990fc3119d2519946201310c7f0acb82784e8b60ef1

HTTP Headers

GET / HTTP/1.1
Host: vvewey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx/1.25.0
Date: Tue, 28 Nov 2023 06:21:21 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://vvewey.com/

vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=

31.220.27.98

200 OK

346 kB

URL User Request GET HTTP/2
vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=
IP
31.220.27.98:443
ASN
#39572 DataWeb Global Group B.V.

Certificate
IssuerLet's Encrypt
Subjectvvewey.com
Fingerprint9C:A5:BF:6F:C2:2A:17:3F:3A:FD:13:3C:95:8F:77:2F:01:0E:BA:D4
ValiditySat, 30 Sep 2023 05:31:00 GMT - Fri, 29 Dec 2023 05:30:59 GMT

File type
gzip compressed data, from Unix\012- data
Size
346 kB (345787 bytes)
Hash
86c916ac60985ed53c1133642068b687
16f2f70451d60743ac61f5cd61d1fa2762f63147
1f969c7c83219f18b12d0f05759301919ddd67fb3129cf89e1c99319302ca4cf

HTTP Headers

GET /porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2= HTTP/1.1
Host: vvewey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.25.0
date: Tue, 28 Nov 2023 06:21:22 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: truniq=1; expires=Wed, 29-Nov-2023 06:21:22 GMT; Max-Age=86400; path=/; domain=vvewey.com
x-zone: eu3
content-encoding: gzip
X-Firefox-Spdy: h2

vvewey.com/

185.162.87.220

0 B

URL
vvewey.com/
IP
185.162.87.220:0
ASN
#39572 DataWeb Global Group B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: vvewey.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
server: nginx/1.25.0
date: Tue, 28 Nov 2023 06:21:22 GMT
x-zone: eu
X-Firefox-Spdy: h2

mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1006906&st=1256027&wd=473677&d=vvewey.com&tpl=80&rnd=0.6547644294556944&sbid=&sbid2=intent%3A%2F%2Fvvewey.com%2Fporno-land

185.162.85.3

200 OK

0 B

URL GET HTTP/2
mdakky.com/rpe?a=1&s=1&act=18&src=2&p=1006906&st=1256027&wd=473677&d=vvewey.com&tpl=80&rnd=0.6547644294556944&sbid=&sbid2=intent%3A%2F%2Fvvewey.com%2Fporno-land
IP
185.162.85.3:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=
Certificate
IssuerLet's Encrypt
Subjectmdakky.com
FingerprintAD:81:3E:DA:20:71:A7:CF:FE:91:99:0A:CA:99:24:E4:8D:7B:86:8C
ValidityThu, 12 Oct 2023 14:32:06 GMT - Wed, 10 Jan 2024 14:32:05 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rpe?a=1&s=1&act=18&src=2&p=1006906&st=1256027&wd=473677&d=vvewey.com&tpl=80&rnd=0.6547644294556944&sbid=&sbid2=intent%3A%2F%2Fvvewey.com%2Fporno-land HTTP/1.1
Host: mdakky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vvewey.com
DNT: 1
Connection: keep-alive
Referer: https://vvewey.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 06:21:23 GMT
content-length: 0
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
X-Firefox-Spdy: h2

ecrwqu.com/cuclc?aid=9519781628461859551&t=1701152483&s=1106372

185.162.85.2

223 B

URL
ecrwqu.com/cuclc?aid=9519781628461859551&t=1701152483&s=1106372
IP
185.162.85.2:0
ASN
#39572 DataWeb Global Group B.V.

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size
223 B (223 bytes)
Hash
868305e48401f0372447376af6e98f41
a7c07ca690043901431827bdad3e389307dfb604
d8160ff710c806c8f540a47f8bee7b03480f4f77705d88b04162334c54bc4cbf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cuclc?aid=9519781628461859551&t=1701152483&s=1106372 HTTP/1.1
Host: ecrwqu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvewey.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 28 Nov 2023 06:21:23 GMT
content-type: text/html; charset=utf-8
content-length: 223
location: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
X-Firefox-Spdy: h2

ecrwqu.com/phtbload?a=1&e=aeyJwaWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2Nzd9

185.162.85.3

200 OK

59 kB

URL GET HTTP/2
ecrwqu.com/phtbload?a=1&e=aeyJwaWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2Nzd9
IP
185.162.85.3:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=intent://vvewey.com/porno-land?h=waWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2NzcsInNyYyI6Mn0=eyJ&click_id=7YhBNZxea7hTZbkSWjfFyH&si1=&si2=
Certificate
IssuerLet's Encrypt
Subjectecrwqu.com
Fingerprint47:45:B8:7D:4A:FC:D8:6D:B5:BA:0C:F0:19:2B:20:47:1E:FB:C9:BF
ValidityTue, 12 Sep 2023 03:46:32 GMT - Mon, 11 Dec 2023 03:46:31 GMT

File type
gzip compressed data, from Unix\012- data
Size
59 kB (58995 bytes)
Hash
3fd882ee5e74b19a3b7462d1022dff19
2a05022845364a7d28b86c8ee176fa8418c752e5
0e50f8097ee8b183b8540e68a368115c78ae158bda06375b50751df0dd1e2caa

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /phtbload?a=1&e=aeyJwaWQiOjEwMDY5MDYsInNpZCI6MTI1NjAyNywid2lkIjo0NzM2Nzd9 HTTP/1.1
Host: ecrwqu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://vvewey.com/
Origin: https://vvewey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 06:21:23 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
accept-ch: Sec-CH-UA-Platform-Version
content-encoding: gzip
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.33.119.27

344 B

URL
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
fd34c4a6f71735288838dc60bcfb2837
e23afde22139efec215c5c3a7aaad6228b050f13
3b5c26b7779c71278344428b254c49c6d5f3a7a47bb6828781b66b75382ca9c5

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "3B5C26B7779C71278344428B254C49C6D5F3A7A47BB6828781B66B75382CA9C5"
Last-Modified: Mon, 27 Nov 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13492
Expires: Tue, 28 Nov 2023 10:06:16 GMT
Date: Tue, 28 Nov 2023 06:21:24 GMT
Connection: keep-alive

e1.o.lencr.org/

23.33.119.27

344 B

URL
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
fd34c4a6f71735288838dc60bcfb2837
e23afde22139efec215c5c3a7aaad6228b050f13
3b5c26b7779c71278344428b254c49c6d5f3a7a47bb6828781b66b75382ca9c5

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "3B5C26B7779C71278344428B254C49C6D5F3A7A47BB6828781B66B75382CA9C5"
Last-Modified: Mon, 27 Nov 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13491
Expires: Tue, 28 Nov 2023 10:06:16 GMT
Date: Tue, 28 Nov 2023 06:21:25 GMT
Connection: keep-alive

cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css

151.101.65.229

200 OK

590 B

URL GET HTTP/2
cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text
Size
590 B (590 bytes)
Hash
f38b2db10e01b1572732a3191d538707
a94a059b3178b4adec09e3281ace2819a30095a4
de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5

HTTP Headers

GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ"
content-encoding: br
accept-ranges: bytes
date: Tue, 28 Nov 2023 06:21:25 GMT
age: 22305679
x-served-by: cache-fra-eddf8230085-FRA, cache-bma1674-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 590
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/images/visual/kane.webp

172.67.182.143

170 kB

URL
freebettingreviews.com/topfootball_n1bet/images/visual/kane.webp
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image\012- data
Size
170 kB (170164 bytes)
Hash
d357470c15ed33979888c212be60f4e4
0f87696a75d3232e348c890b5e59abc5b9fc4dff
d2601289e0be5282b6811939bc8018551a1fdfcf001f7d788deb69d33d27ebff

HTTP Headers

GET /topfootball_n1bet/images/visual/kane.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-length: 170164
last-modified: Wed, 22 Nov 2023 08:21:54 GMT
etag: "298b4-60ab9696a068a"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:55 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vZPM%2B7vOEgqdAQmLtwnP%2BHfU5LA%2FaK%2Fr6nuTEuslPObcQ8UuWb6Lj%2FK1%2BBVoOR8aO%2Bvgr4LEOdvMyl9GYp6x2o73bt3Nq%2Bki45pxxxegkpj56JrEWkaE5Qrv95lCFMyt5mypnm1hUFQD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bbee8e7128-OSL
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/modern-normalize/1.0.0/modern-normalize.min.css

104.17.24.14

586 B

URL
cdnjs.cloudflare.com/ajax/libs/modern-normalize/1.0.0/modern-normalize.min.css
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1403), with no line terminators
Size
586 B (586 bytes)
Hash
e2c3dacb39e087f3615880ea4494a826
a572fdd5bb0140aae893fa2d94cb6c14f33fe7ab
f338fa957f96fbd3e2fcde5dec624d6eb46cc28310277e753b828a02d48df2a7

HTTP Headers

GET /ajax/libs/modern-normalize/1.0.0/modern-normalize.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: text/css; charset=utf-8
content-length: 586
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f4055d7-57b"
last-modified: Fri, 21 Aug 2020 23:16:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5475
expires: Sun, 17 Nov 2024 06:21:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LhYH13636pSmfRDT1tpVi2NmJrcUx%2FVPu8QzngJ7gyPTWTkuTjriVDE1amIXNdIfNeMQjw9G8nvBjGqsOJ6C5arHnlDIXb6Fn8eqtDzV0Z2AvVe9j64DlnxcGPUHtrS7DhXmSMyZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82d082bdafa6b4ff-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

freebettingreviews.com/topfootball_n1bet/images/visual/mans.webp

172.67.182.143

200 OK

133 kB

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/images/visual/mans.webp
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
RIFF (little-endian) data, Web/P image\012- data
Size
133 kB (132596 bytes)
Hash
33d147562107ff87a23ce7d7858537e5
298b5ea12bf64333150dbde2ec7afe75816cddcc
ce7e9c59fdbacc46773b240251394c74898620f2db0c2764c7b46163cda3d0af

HTTP Headers

GET /topfootball_n1bet/images/visual/mans.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-length: 132596
last-modified: Wed, 22 Nov 2023 08:21:54 GMT
etag: "205f4-60ab9696a356a"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:56 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63789
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MDMNZQJrlp0rA%2BAvPopUq3o70BEgAuR4%2BRlpOf%2BGmPNns3zCax%2BrnnVJby29dkOArgcQgXOyiy44G1A5zvmEzPivDNd7w5NZt2A%2FIgYAbyE5oxBLqFPcwMcvUnxe8uGiBLBNz6zXQGdy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bbee8f7128-OSL
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/images/visual/cup.webp

172.67.182.143

26 kB

URL
freebettingreviews.com/topfootball_n1bet/images/visual/cup.webp
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image\012- data
Size
26 kB (25682 bytes)
Hash
ddc5c873132a33147c89c04da023da12
7fd7e254e3db90eb30b7a16fcd9ba33c274b3192
091f6f116745c42c26862a21a86d52868c16d6d556c00364194155571f45e2ef

HTTP Headers

GET /topfootball_n1bet/images/visual/cup.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-length: 25682
last-modified: Wed, 22 Nov 2023 08:21:53 GMT
etag: "6452-60ab96961b988"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:56 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63788
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ymVVYOtrTDuZ1f2JFKdZT2s0P52jahWJ53%2FFJgdY1DulbQ0fT2I%2FqxIFhwiBRoDrLf08fZ72D9F482HDtHoMNnSI2pyBvZzj%2BXjjMnD5kkBTztganTDHdmLy5yzO30IDe0qb9F7J3Jbf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bbfe987128-OSL
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/images/visual/bg.webp

172.67.182.143

57 kB

URL
freebettingreviews.com/topfootball_n1bet/images/visual/bg.webp
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1512, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size
57 kB (56668 bytes)
Hash
1a79247e16d0fff445a05d0f8b1e2621
a38e6cc33beff49fca1d9c8470b5272f47493592
eacf1a38cf26d2f6b36985ff05c9c41d814c90dc61d1d6c3f1fc379f8a3877b2

HTTP Headers

GET /topfootball_n1bet/images/visual/bg.webp HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/css/main.css?3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-length: 56668
last-modified: Wed, 22 Nov 2023 08:21:53 GMT
etag: "dd5c-60ab96961c928"
cache-control: max-age=172800
expires: Wed, 29 Nov 2023 12:10:59 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 63677
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=68W4HleV5E03tkiqj1tAOGkZRRHb%2Fw2p7mgXgdAyNXbWDejj3S%2BKiwccay7hYrYvGsKugAi4NCKU9%2BBsWBHdlg6zShXt1DTKC9VnubDhDFPHgYgFyBgs60DL4RmrTfL7dxvSKJIRoke7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082be38017128-OSL
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/css/main.css?3

172.67.182.143

35 kB

URL
freebettingreviews.com/topfootball_n1bet/css/main.css?3
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (9336), with no line terminators
Size
35 kB (35314 bytes)
Hash
7513e6d5cf4894bdc4211da326c93a91
60bba0d13feb696cc88289230117b58c975780cb
3e62fda615a168e3568fc4d00a1dc9f52a49fb46d7298320d2337cab1523cade

HTTP Headers

GET /topfootball_n1bet/css/main.css?3 HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: text/css
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=11713
etag: W/"2dc1-60ab981e7b622-gzip"
expires: Wed, 27 Dec 2023 12:10:54 GMT
last-modified: Wed, 22 Nov 2023 08:28:44 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g7FqLBncH14QE6Qs8xr5n0S8Yz4UwTa5CdE9gsDp%2FM%2FM0oSY9LY6CXZHLP8bJA51gkBbM1chAgChOV%2BwtCAIoPqynyGjHIwqTdt%2FjEPGxMvg3bwbnMucIS9I%2BeQVdqOzSCQv5l24ykrn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bbee8c7128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

172.67.182.143

33 kB

URL
freebettingreviews.com/fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
172.67.182.143:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data
Size
33 kB (33092 bytes)
Hash
057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b

HTTP Headers

GET /fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: font/woff2
content-length: 33092
cf-ray: 82d082be58157128-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 63789
cache-control: public, max-age=31536000
expires: Sun, 24 Nov 2024 07:18:49 GMT
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-apo-via: proxy
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fV1foUOF0QFjMl3qgmVy30uXw%2FAzAh2NGb3FhTygCTSA5dZIFvhDhRvXS%2BQYiLK7xfdZQfUndWfvoCdU0KznecPNu2uKxlMUmedfkpSGwZbgFRSOK1CKqPYDJxXa%2Fyy%2FlvbxCRK7QT5%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400

cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js

104.17.24.14

9.3 kB

URL
cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (42862)
Size
9.3 kB (9283 bytes)
Hash
d5a61c749e44e47159af8a6579dda121
3b41b3bc956685015a347a2238e71db29dfa0dbb
0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740

HTTP Headers

GET /ajax/libs/slick-carousel/1.8.1/slick.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 9283
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-a76f"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 526303
expires: Sun, 17 Nov 2024 06:21:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jAEMlSfI47RQkAJRFdpRl3D9fCGhiG%2BTpegpRv6uD8092HVBL%2BnFGecu1s180xVCTGWEyWirQS0Z%2F%2B6%2BMX5rANxbv%2FyQZN5%2B0n8lTp8Cuf3fERk%2Fzq64XejrLXKm2CqiFchpXmF%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82d082c12b2d0b4d-OSL
alt-svc: h3=":443"; ma=86400

code.jquery.com/jquery-3.6.1.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
31 kB (30957 bytes)
Hash
00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74

HTTP Headers

GET /jquery-3.6.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15e40"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 06:21:26 GMT
age: 1768972
x-served-by: cache-lga13629-LGA, cache-bma1661-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 64373
x-timer: S1701152487.631881,VS0,VE0
vary: Accept-Encoding
content-length: 30957
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.1.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65447)
Size
31 kB (30957 bytes)
Hash
00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74

HTTP Headers

GET /jquery-3.6.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15e40"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 06:21:26 GMT
age: 1768973
x-served-by: cache-lga13629-LGA, cache-bma1661-BMA
x-cache: HIT, HIT
x-cache-hits: 5, 64374
x-timer: S1701152487.803029,VS0,VE0
vary: Accept-Encoding
content-length: 30957
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js

104.17.24.14

9.3 kB

URL
cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.js
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (42862)
Size
9.3 kB (9283 bytes)
Hash
d5a61c749e44e47159af8a6579dda121
3b41b3bc956685015a347a2238e71db29dfa0dbb
0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740

HTTP Headers

GET /ajax/libs/slick-carousel/1.8.1/slick.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freebettingreviews.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 9283
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-a76f"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 526303
expires: Sun, 17 Nov 2024 06:21:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g9V4CRhnT7FvxIzqlUgdh5jBwhy%2F30idYrN54xSC2mnyc2saGOF0YEqL6g2AYMLGXiOqZGCNzQQmK7sQCyZuWJo6jHn7FGGVSMRNVQWMK6moJiG9UIi6Ka72UwSJzUcwVkt8XzTR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82d082c2fbd80b4d-OSL
alt-svc: h3=":443"; ma=86400

www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E

216.58.211.8

73 kB

URL
www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E
IP
216.58.211.8:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (3026)
Size
73 kB (72694 bytes)
Hash
d5d08b3fffa1b899d17cd23817d0406d
34199ded4783de0d88160bddf7819a4f92ad8718
e5978f6db998e6553dbfd57865a9fe56689097f4f779c3a7986b3f3ed3809f05

HTTP Headers

GET /gtag/js?id=G-1J2TEWFZ3Y%3E%3C/sc%20ript%3E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 06:21:26 GMT
expires: Tue, 28 Nov 2023 06:21:26 GMT
cache-control: private, max-age=900
last-modified: Tue, 28 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72694
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c

216.58.211.8

92 kB

URL
www.googletagmanager.com/gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c
IP
216.58.211.8:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (8089)
Size
92 kB (92244 bytes)
Hash
ba31b20ac9418268727ded1eaadf9b2a
c2402f9287ea56d278e6c9e2e85e65ffdfe3f6d3
eb4c023fdc235054c18aa66e964e0c21077aba6360ab60fe2b292e2673bd229f

HTTP Headers

GET /gtag/js?id=G-1J2TEWFZ3Y&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 06:21:27 GMT
expires: Tue, 28 Nov 2023 06:21:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92244
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

freebettingreviews.com/topfootball_n1bet/images/arrowleft.svg

172.67.182.143

200 OK

318 B

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/images/arrowleft.svg
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (335), with no line terminators
Size
318 B (318 bytes)
Hash
f78d54568cdd4e8bd120087c7cdb877a
c5f6766024809917d0ffaa8bbeb7edcb559df6a0
05d5e30675de29995fe9b773443746ddc9031c601422b99ec8c83f12730f7bd4

HTTP Headers

GET /topfootball_n1bet/images/arrowleft.svg HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/css/main.css?3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:27 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:21:50 GMT
etag: W/"13e-60ab96938a5da-gzip"
cache-control: max-age=2592000
expires: Wed, 27 Dec 2023 12:11:01 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63788
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=koepMmv%2Bh4BR4SSQ98JtI6JqyFdZYlqBjcXX6NVVA7Q8rZ58h7CLarPERwgNrzxm7W3v19yTXdWHZU2WH3xaBqgm%2Fj9ZQ71Hnt9ryG988GEh2VBY8c2BN2NvH2GLagCj3RXXlbmuOHUU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082c43bf57128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/images/triangle.svg

172.67.182.143

200 OK

319 B

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/images/triangle.svg
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
ASCII text, with very long lines (8089), ASCII text, with very long lines (336), with no line terminators
Size
319 B (319 bytes)
Hash
294130de0fba42410d9170a5d9134f17
ee43b80e39319541556e76a050bdc231c3f69e21
851124c59b48b17f6aa568671e2ca9c16191f23f13f1abfde3224304aa964e6c

HTTP Headers

GET /topfootball_n1bet/images/triangle.svg HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/css/main.css?3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:27 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:21:52 GMT
etag: W/"13f-60ab969516da2-gzip"
cache-control: max-age=2592000
expires: Wed, 27 Dec 2023 12:11:00 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63788
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BweIoAbaU%2BEIbzBIA3DRtpSOcT5BWthGwvqUglny2K1zPR4OgZPvflQVa5RKyLmVFh%2FJsYinKybBKG%2F%2Ft0sqwwCITu75W8ClYSJDZH34iKlwCqzA9o1vbakYCK2IvOp0kk4Oo2%2Frzrf3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082c47c157128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/js/parallax.js

172.67.182.143

200 OK

516 B

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/js/parallax.js
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
ASCII text, with very long lines (531), with no line terminators
Size
516 B (516 bytes)
Hash
d1e2dd0e3ae038e404991a186059c813
5536007899770cebc3a07868702636ff29631708
6e5c42d975cd35fabb573fbf08f5bac81b55fba306a38d30bd8629c34c920040

HTTP Headers

GET /topfootball_n1bet/js/parallax.js HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:26 GMT
content-type: application/javascript
cache-control: max-age=2592000
cf-bgj: minify
cf-polished: origSize=662
etag: W/"296-60ab96981c4b2-gzip"
expires: Wed, 27 Dec 2023 12:10:58 GMT
last-modified: Wed, 22 Nov 2023 08:21:55 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ANlvg3rjnopLmvfIOidGgOzPzExTUUgU16HDfsbcr9DwuCFfAqiViCqPBAYz6C3JW4BKnj%2F6IO2jWhDLH5%2FmvAmwIFGjIKiXi6JGUhfVaLwiGuN6E1tFxbGMxsMaV00Fd9fbk7%2FYJ77Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082c099797128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

freebettingreviews.com/topfootball_n1bet/images/logo-n1bet-sm.svg

172.67.182.143

200 OK

1.5 kB

URL GET HTTP/3
freebettingreviews.com/topfootball_n1bet/images/logo-n1bet-sm.svg
IP
172.67.182.143:443
ASN
#13335 CLOUDFLARENET

Requested by
https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Certificate
IssuerLet's Encrypt
Subjectfreebettingreviews.com
FingerprintC4:AD:5B:69:53:D0:0D:AF:5D:23:D4:98:12:94:32:90:4F:86:E4:46
ValiditySun, 01 Oct 2023 01:03:17 GMT - Sat, 30 Dec 2023 01:03:16 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1557), with no line terminators
Size
1.5 kB (1504 bytes)
Hash
306e30aa3adb32719a1ce86af1a19343
ceb6924563c9e7d1a26476bebf089ef22aec273e
b98228a0a8297881068657f1706fee2799a85d179016cb2c7859af31d43e6bed

HTTP Headers

GET /topfootball_n1bet/images/logo-n1bet-sm.svg HTTP/1.1
Host: freebettingreviews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://freebettingreviews.com/topfootball_n1bet/?utm_source=evadav&utm_medium=cpc&utm_campaign=n1bet
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 28 Nov 2023 06:21:25 GMT
content-type: image/svg+xml
last-modified: Wed, 22 Nov 2023 08:21:51 GMT
etag: W/"5e0-60ab96940d39c-gzip"
cache-control: max-age=2592000
expires: Wed, 27 Dec 2023 12:10:57 GMT
vary: Accept-Encoding,User-Agent
cf-cache-status: HIT
age: 63789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mIyEQbe9HT6dcXAqv1VG6ZOKxf0MlM7GrZaO94lP5bltEhQKeF7QFnmO3269mjgmI%2F5R6%2FKRjVXd%2F6J5TstRnRO%2Bv0TP3KtxCwa52ZfdkBo6QXCaEpwlmRVrKBqQA0mnUA0frIUtQRto"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82d082bc0ea37128-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (26)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash