| sleevegrope.com/aegw7b5ab?adb=y&aqde=6&dev=e&key=ca5a55269d9cb02fd1aa566e6617c652&kw=[%22kesari%22,%22chapter%22,%222%22,%222025%22,%22hindi%22,%22web-dl%22,%22480p%22,%22720p%22,%221080p%22,%22gdrive%22,%22mlwbd%22,%22com%22]&psid=fojik.com,fojik.com&psid=fojik.may&refer=https://fojik.com/movie/kesari-chapter-2-2025/&res=14.1055&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=6&v=25.5.2579 | 192.243.59.12 | 200 OK | 5.0 kB |
URL User Request GET sleevegrope.com/aegw7b5ab?adb=y&aqde=6&dev=e&key=ca5a55269d9cb02fd1aa566e6617c652&kw=[%22kesari%22,%22chapter%22,%222%22,%222025%22,%22hindi%22,%22web-dl%22,%22480p%22,%22720p%22,%221080p%22,%22gdrive%22,%22mlwbd%22,%22com%22]&psid=fojik.com,fojik.com&psid=fojik.may&refer=https://fojik.com/movie/kesari-chapter-2-2025/&res=14.1055&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=6&v=25.5.2579 IP 192.243.59.12:443
ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectsleevegrope.com FingerprintF0:9B:B5:36:ED:7F:BC:A8:F8:28:78:DD:80:C5:27:8E:04:24:E2:02 ValidityWed, 21 May 2025 22:50:41 GMT - Tue, 19 Aug 2025 22:50:40 GMT
File typeHTML document, ASCII text, with very long lines (4998) Hashf72f556b726d30f914119db9ff44ce6d 7168659fd1a3150cdb9d1890148078d709828f44 30d96946bb9f41e4d028c8de775073e918dd90c69fde364fd74f82072bba8293
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aegw7b5ab?adb=y&aqde=6&dev=e&key=ca5a55269d9cb02fd1aa566e6617c652&kw=[%22kesari%22,%22chapter%22,%222%22,%222025%22,%22hindi%22,%22web-dl%22,%22480p%22,%22720p%22,%221080p%22,%22gdrive%22,%22mlwbd%22,%22com%22]&psid=fojik.com,fojik.com&psid=fojik.may&refer=https://fojik.com/movie/kesari-chapter-2-2025/&res=14.1055&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=6&v=25.5.2579 HTTP/1.1
Host: sleevegrope.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 03 Jun 2025 13:40:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.U0CRB9z3_oo396Gz1st4LF5l_aUr28345lyQQXuoD6A; expires=Tue, 03 Jun 2025 13:41:27 GMT; path=/
Host: sleevegrope.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: cea9339343e899e36674daad29084cf9
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| experttrafficcounter.com/stats | 0.0.0.0 | | 0 B |
URL GET experttrafficcounter.com/stats IP 0.0.0.0:0
Requested byhttps://sleevegrope.com/aegw7b5ab?adb=y&aqde=6&dev=e&key=ca5a55269d9cb02fd1aa566e6617c652&kw=[%22kesari%22,%22chapter%22,%222%22,%222025%22,%22hindi%22,%22web-dl%22,%22480p%22,%22720p%22,%221080p%22,%22gdrive%22,%22mlwbd%22,%22com%22]&psid=fojik.com,fojik.com&psid=fojik.may&refer=https://fojik.com/movie/kesari-chapter-2-2025/&res=14.1055&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=6&v=25.5.2579
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stats HTTP/1.1
Host: experttrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sleevegrope.com
DNT: 1
Connection: keep-alive
Referer: https://sleevegrope.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| sleevegrope.com/favicon.ico | 0.0.0.0 | | 0 B |
URL GET sleevegrope.com/favicon.ico IP 0.0.0.0:0
Requested byhttps://sleevegrope.com/aegw7b5ab?adb=y&aqde=6&dev=e&key=ca5a55269d9cb02fd1aa566e6617c652&kw=[%22kesari%22,%22chapter%22,%222%22,%222025%22,%22hindi%22,%22web-dl%22,%22480p%22,%22720p%22,%221080p%22,%22gdrive%22,%22mlwbd%22,%22com%22]&psid=fojik.com,fojik.com&psid=fojik.may&refer=https://fojik.com/movie/kesari-chapter-2-2025/&res=14.1055&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=6&v=25.5.2579 CertificateIssuerLet's Encrypt Subjectsleevegrope.com FingerprintF0:9B:B5:36:ED:7F:BC:A8:F8:28:78:DD:80:C5:27:8E:04:24:E2:02 ValidityWed, 21 May 2025 22:50:41 GMT - Tue, 19 Aug 2025 22:50:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: sleevegrope.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sleevegrope.com/api/users?token=L2FlZ3c3YjVhYj9rZXk9MTBhZmFlYzM1NDA0ZmZkNWVkYmFkMDEzMWJiMzhlZTYmc3VibWV0cmljPTI2NTI3NTkz
Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.U0CRB9z3_oo396Gz1st4LF5l_aUr28345lyQQXuoD6A; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| sleevegrope.com/api/users?token=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 | 172.240.127.234 | 302 Found | 17 kB |
URL User Request GET sleevegrope.com/api/users?token=L2FlZ3c3YjVhYj9hZGI9eSZhcWRlPTYmZGV2PWUma2V5PWNhNWE1NTI2OWQ5Y2IwMmZkMWFhNTY2ZTY2MTdjNjUyJmt3PSU1QiUyMmtlc2FyaSUyMiUyQyUyMmNoYXB0ZXIlMjIlMkMlMjIyJTIyJTJDJTIyMjAyNSUyMiUyQyUyMmhpbmRpJTIyJTJDJTIyd2ViLWRsJTIyJTJDJTIyNDgwcCUyMiUyQyUyMjcyMHAlMjIlMkMlMjIxMDgwcCUyMiUyQyUyMmdkcml2ZSUyMiUyQyUyMm1sd2JkJTIyJTJDJTIyY29tJTIyJTVEJnBzaWQ9Zm9qaWsuY29tJTJDZm9qaWsuY29tJnBzdD0xNzQ4OTU4MDg3JnJlZmVyPWh0dHBzJTNBJTJGJTJGZm9qaWsuY29tJTJGbW92aWUlMkZrZXNhcmktY2hhcHRlci0yLTIwMjUlMkYmcmVzPTE0LjEwNTUmcm10Yz10JnNjckhlaWdodD03MjAmc2NyV2lkdGg9MTI4MCZzaGlwPSZzaHU9ODkxODJjMDY0NWExZGQ3YTQ2MjdkMGI2MzRmOGIwOWRmYzYzZDJiNTlhNDM5YzA4YzM3YTRmOGRjM2RkY2E3Mjk4NWYyNjBlOTI0ZmVjYTM4MjQzMWNmOTNiZGE5ZjNjNGYyYTM5ZTY5NTE3NWYxNTZiMDc0MGJlY2YxMWRlMjI0Y2EyZDUxM2I1NDMxMDI5ODMzYzlkZmIzMTJhY2EyYjI5NDJkOTMwNTE4YWMzZjRlNTI1JnN1YjM9aW52b2tlX2xheWVyJnR6PTYmdj0yNS41LjI1NzkmcGlpPSZpbj0mdXVpZD0 IP 172.240.127.234:443
CertificateIssuerLet's Encrypt Subjectsleevegrope.com FingerprintF0:9B:B5:36:ED:7F:BC:A8:F8:28:78:DD:80:C5:27:8E:04:24:E2:02 ValidityWed, 21 May 2025 22:50:41 GMT - Tue, 19 Aug 2025 22:50:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L2FlZ3c3YjVhYj9hZGI9eSZhcWRlPTYmZGV2PWUma2V5PWNhNWE1NTI2OWQ5Y2IwMmZkMWFhNTY2ZTY2MTdjNjUyJmt3PSU1QiUyMmtlc2FyaSUyMiUyQyUyMmNoYXB0ZXIlMjIlMkMlMjIyJTIyJTJDJTIyMjAyNSUyMiUyQyUyMmhpbmRpJTIyJTJDJTIyd2ViLWRsJTIyJTJDJTIyNDgwcCUyMiUyQyUyMjcyMHAlMjIlMkMlMjIxMDgwcCUyMiUyQyUyMmdkcml2ZSUyMiUyQyUyMm1sd2JkJTIyJTJDJTIyY29tJTIyJTVEJnBzaWQ9Zm9qaWsuY29tJTJDZm9qaWsuY29tJnBzdD0xNzQ4OTU4MDg3JnJlZmVyPWh0dHBzJTNBJTJGJTJGZm9qaWsuY29tJTJGbW92aWUlMkZrZXNhcmktY2hhcHRlci0yLTIwMjUlMkYmcmVzPTE0LjEwNTUmcm10Yz10JnNjckhlaWdodD03MjAmc2NyV2lkdGg9MTI4MCZzaGlwPSZzaHU9ODkxODJjMDY0NWExZGQ3YTQ2MjdkMGI2MzRmOGIwOWRmYzYzZDJiNTlhNDM5YzA4YzM3YTRmOGRjM2RkY2E3Mjk4NWYyNjBlOTI0ZmVjYTM4MjQzMWNmOTNiZGE5ZjNjNGYyYTM5ZTY5NTE3NWYxNTZiMDc0MGJlY2YxMWRlMjI0Y2EyZDUxM2I1NDMxMDI5ODMzYzlkZmIzMTJhY2EyYjI5NDJkOTMwNTE4YWMzZjRlNTI1JnN1YjM9aW52b2tlX2xheWVyJnR6PTYmdj0yNS41LjI1NzkmcGlpPSZpbj0mdXVpZD0 HTTP/1.1
Host: sleevegrope.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sleevegrope.com/api/users?token=L2FlZ3c3YjVhYj9rZXk9MTBhZmFlYzM1NDA0ZmZkNWVkYmFkMDEzMWJiMzhlZTYmc3VibWV0cmljPTI2NTI3NTkz
Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.U0CRB9z3_oo396Gz1st4LF5l_aUr28345lyQQXuoD6A; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Tue, 03 Jun 2025 13:40:27 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
location: https://leadgainz.com/click?key=60fd3c694c8363576cbe&SUB_ID_SHORT=5242cbd2d039afab74d717731b0a1724&COST_CPC=&PLACEMENT_ID=26527593&CAMPAIGN_ID=1249499&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3389393
set-cookie: iprc16682bc77629d505ba41c66f7b4a8ef2=5989859; expires=Wed, 04 Jun 2025 13:40:27 GMT; path=/
pdhtkv=true; expires=Wed, 04 Jun 2025 13:40:27 GMT; path=/
uncs=1; expires=Wed, 04 Jun 2025 13:40:27 GMT; path=/
pdhtkv28=true; expires=Wed, 04 Jun 2025 13:40:27 GMT; path=/
uncs28=1; expires=Wed, 04 Jun 2025 13:40:27 GMT; path=/
u_pl26527593=1; expires=Wed, 04 Jun 2025 13:40:27 GMT; path=/
x-envoy-upstream-service-time: 186
Host: sleevegrope.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 624f431456bdbebdd515a6fe9409041e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| leadgainz.com/click?key=60fd3c694c8363576cbe&SUB_ID_SHORT=5242cbd2d039afab74d717731b0a1724&COST_CPC=&PLACEMENT_ID=26527593&CAMPAIGN_ID=1249499&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3389393 | 159.89.47.245 | 307 Temporary Redirect | 17 kB |
URL User Request GET leadgainz.com/click?key=60fd3c694c8363576cbe&SUB_ID_SHORT=5242cbd2d039afab74d717731b0a1724&COST_CPC=&PLACEMENT_ID=26527593&CAMPAIGN_ID=1249499&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3389393 IP 159.89.47.245:443
ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectleadgainz.com Fingerprint2A:C1:8F:E4:23:4F:B0:B3:AF:5D:84:D7:29:B9:24:8D:76:D5:84:6D ValiditySun, 25 May 2025 11:56:23 GMT - Sat, 23 Aug 2025 11:56:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?key=60fd3c694c8363576cbe&SUB_ID_SHORT=5242cbd2d039afab74d717731b0a1724&COST_CPC=&PLACEMENT_ID=26527593&CAMPAIGN_ID=1249499&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3389393 HTTP/1.1
Host: leadgainz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sleevegrope.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Tue, 03 Jun 2025 13:40:28 GMT
location: https://betspintrack.com/fadb2b3268bc2601/
server: Caddy
set-cookie: uclick=n7yCxV5eb9I1gOTzbWCY4KfJxs1HwbAbzXsygUQOgMYV4NSSgprusO4N/sQN6HOhm1VQMhMj; Max-Age=31536000; SameSite=Lax
bcid=d0vfmj53c3kc739q8u30; Max-Age=31536000; SameSite=Lax
x-request-id: ecc4645d-cd62-44e0-b035-d4e407994a2a
content-length: 0
X-Firefox-Spdy: h2
|
|
| betspintrack.com/fadb2b3268bc2601/ | 188.166.82.118 | 200 OK | 17 kB |
URL User Request GET betspintrack.com/fadb2b3268bc2601/ IP 188.166.82.118:443
ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectbetspintrack.com FingerprintAD:B2:54:6C:8B:B3:00:1C:CF:45:F3:C1:FC:72:D2:6E:B2:D1:42:5E ValidityTue, 20 May 2025 14:21:33 GMT - Mon, 18 Aug 2025 14:21:32 GMT
File typeHTML document, ASCII text Hashb0d5fe7b907ddcb1993023561819822b 1c0cf2e266981d1a2bf3318664fd6e0f8691e799 d33fdeaff769613efeebc7186cb92d57e3b1c52dd5a6e2f81b137fbaf49655fa
GET /fadb2b3268bc2601/ HTTP/1.1
Host: betspintrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sleevegrope.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 03 Jun 2025 13:40:28 GMT
content-type: text/html
last-modified: Fri, 23 May 2025 10:24:36 GMT
vary: Accept-Encoding
etag: W/"68304ce4-434e"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
referrer-policy: same-origin
alt-svc: h3=":443"; ma=86400
content-encoding: br
X-Firefox-Spdy: h2
|
|
| betspintrack.com/favicon.ico | 188.166.82.118 | 404 Not Found | 146 B |
URL GET betspintrack.com/favicon.ico IP 188.166.82.118:443
ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://betspintrack.com/fadb2b3268bc2601/ CertificateIssuerLet's Encrypt Subjectbetspintrack.com FingerprintAD:B2:54:6C:8B:B3:00:1C:CF:45:F3:C1:FC:72:D2:6E:B2:D1:42:5E ValidityTue, 20 May 2025 14:21:33 GMT - Mon, 18 Aug 2025 14:21:32 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: betspintrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betspintrack.com/fadb2b3268bc2601/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Tue, 03 Jun 2025 13:40:28 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: br
X-Firefox-Spdy: h2
|
|