whatsappwebescanearcodigo.blogspot.be/
189 B URL whatsappwebescanearcodigo.blogspot.be/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ee7b5d3ab7de699eac5bf529ebfa7993
7ecf84f08c3e048cc29621476471d7968ab367fe
534dbfca77bf1b216a95781ccc4737a49ecf6eaa321cefa3ab3d57fc0a9afb8d
GET / HTTP/1.1
Host: whatsappwebescanearcodigo.blogspot.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://whatsappwebescanearcodigo.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Mon, 04 Dec 2023 03:24:36 GMT
expires: Mon, 04 Dec 2023 03:24:36 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 189
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
whatsappwebescanearcodigo.blogspot.com/
20 kB URL whatsappwebescanearcodigo.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2234)
Hash 95a48beba99a199f7a1434168615313c
e7eaaee00d592c78546b28ac77aab3c8865b6824
a97c07071f785db1b7039f9a9c9c31abe0895d6ace40f0643f4d633256922fc3
GET / HTTP/1.1
Host: whatsappwebescanearcodigo.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 04 Dec 2023 03:24:37 GMT
date: Mon, 04 Dec 2023 03:24:37 GMT
cache-control: private, max-age=0
last-modified: Wed, 15 Nov 2023 15:40:29 GMT
etag: W/"ede5e64b4f77c4dcd705f7d72c31106efd1b851399fba0a95c8a6e34a2bf162d"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19543
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
whatsappwebescanearcodigo.blogspot.com/js/cookienotice.js
2.0 kB URL whatsappwebescanearcodigo.blogspot.com/js/cookienotice.js
IP
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: whatsappwebescanearcodigo.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Mon, 04 Dec 2023 03:24:37 GMT
expires: Mon, 11 Dec 2023 03:24:37 GMT
cache-control: public, max-age=604800
last-modified: Mon, 04 Dec 2023 00:51:03 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform.js
22 kB URL apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (2664)
Hash fd67324a3d81895bdf76b073089663b1
5abb1b0a36c645085e31830e6647faa790ad4e91
8eaa06f95fa0ac44c2c186f200874f2f3ebc3aaa92412f0d0c096f517d3581d1
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Mon, 04 Dec 2023 03:24:37 GMT
expires: Mon, 04 Dec 2023 03:24:37 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "bccfddc1dce4fb76"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=g0v8BSoQ2icJNpu7Y_6PXdOLtbhJL3qgCZAJNujLC2ct1TmmpZEBDRUg3xGDmtasoeD_MM7D9scSIGZoNsT4W2U-2-0IHkEyxq5gKv58PcKJ7jFmVtAWOAoB7T96S1Sxhwf0Do-IHYyH4X9pWUL2WorfmXV5Zz7I-M-JB6xuQG8; expires=Tue, 04-Jun-2024 03:24:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3754116945-widgets.js
59 kB URL www.blogger.com/static/v1/widgets/3754116945-widgets.js
IP
File type ASCII text, with very long lines (2258)
Hash 0f3580b0033bbd151cdb647634be7404
4d8508ef28b0e50fa8c28ccaeb1f2a6855a75bdc
38d944d88c98612f76ed693afb143f1c032ca27ba56ec46a6714ab3dc511f974
GET /static/v1/widgets/3754116945-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 01 Dec 2023 01:58:17 GMT
expires: Sat, 30 Nov 2024 01:58:17 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 23:28:54 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 264380
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
7.8 kB URL www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 1e32420a7b6ddbdcb7def8b3141c4d1e
a1be54d42ff1f95244c9653539f90318f5bc0580
a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 12:58:11 GMT
expires: Thu, 28 Nov 2024 12:58:11 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 01:58:19 GMT
content-type: text/css
vary: Accept-Encoding
age: 397586
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
162 B URL resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 14:29:38 GMT
expires: Wed, 06 Dec 2023 14:29:38 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 05:57:17 GMT
content-type: image/gif
age: 392099
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sBrgd3xPHCBwkVDGtuuPNIWf0KZRvBgiKTi7cbQaOPEMIvOyurnpFJqEOMIoWjSyCaxBA7krk-ejwqtkyZt4uXn80LonZsMc_RsrtMdvxJ5XAmvFnYmA8cNMMJe4qaokzVImwyMF0wEc12jSCMZDovDpy_=s0-d
1.7 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sBrgd3xPHCBwkVDGtuuPNIWf0KZRvBgiKTi7cbQaOPEMIvOyurnpFJqEOMIoWjSyCaxBA7krk-ejwqtkyZt4uXn80LonZsMc_RsrtMdvxJ5XAmvFnYmA8cNMMJe4qaokzVImwyMF0wEc12jSCMZDovDpy_=s0-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash db219a1b8bf37eb2b8b6d9fd4a29db92
ebf7b34a01af55721e1f2eee054842342ec1f5ae
c9d9dbcb51286f193dce3dd632e7c981b4dda899605391c185318f42ef425313
GET /blogger_img_proxy/ALY8t1sBrgd3xPHCBwkVDGtuuPNIWf0KZRvBgiKTi7cbQaOPEMIvOyurnpFJqEOMIoWjSyCaxBA7krk-ejwqtkyZt4uXn80LonZsMc_RsrtMdvxJ5XAmvFnYmA8cNMMJe4qaokzVImwyMF0wEc12jSCMZDovDpy_=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:37 GMT
server: fife
content-length: 1744
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sKOONzHw1zdzl3KMSHgpPh4nRJoa0tJZEoxfm1nluHo3gR2J30CVBSDD6njerrldauqiM8wyJiLeAirkRhfYcUoyoU3KdFgcNaRDU7mwN9sA=s0-d
26 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sKOONzHw1zdzl3KMSHgpPh4nRJoa0tJZEoxfm1nluHo3gR2J30CVBSDD6njerrldauqiM8wyJiLeAirkRhfYcUoyoU3KdFgcNaRDU7mwN9sA=s0-d
IP
File type PNG image data, 304 x 236, 8-bit/color RGBA, non-interlaced\012- data
Hash e4897c292d9834a57dcfe3f9a3cdbd6d
06dd11d2d018dbf1b00326b00ff0cd77de743f26
7ebcd3c572cb6082a8f7c814342d7408bc463195922074600361fa7b8a299236
GET /blogger_img_proxy/ALY8t1sKOONzHw1zdzl3KMSHgpPh4nRJoa0tJZEoxfm1nluHo3gR2J30CVBSDD6njerrldauqiM8wyJiLeAirkRhfYcUoyoU3KdFgcNaRDU7mwN9sA=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 05 Dec 2023 03:24:37 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.png"
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:37 GMT
server: fife
content-length: 26093
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
store-images.s-microsoft.com/image/apps.54461.9007199267033340.2b6eeabf-c589-4a93-82af-f51ea0b4f571.7d8379bf-5ab5-46be-b396-5f4f8fd08b63?mode=scale&q=90&h=200&w=200&background=%23FF8282
4.4 kB URL store-images.s-microsoft.com/image/apps.54461.9007199267033340.2b6eeabf-c589-4a93-82af-f51ea0b4f571.7d8379bf-5ab5-46be-b396-5f4f8fd08b63?mode=scale&q=90&h=200&w=200&background=%23FF8282
IP
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fef15e60e221943897fd331eac76d96
eaca55ae90f6ee165112432cb4f33c462a127743
d2b6002505d259ae2a366c421641d70c624677f428c217db235da5a6673538dd
GET /image/apps.54461.9007199267033340.2b6eeabf-c589-4a93-82af-f51ea0b4f571.7d8379bf-5ab5-46be-b396-5f4f8fd08b63?mode=scale&q=90&h=200&w=200&background=%23FF8282 HTTP/1.1
Host: store-images.s-microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public, max-age=7776000, s-maxage=7776000
Content-Type: image/png
Last-Modified: Tue, 24 Jan 2017 06:38:57 GMT
Accept-Ranges: none
ETag: W/"AECMXq2FCT9uta5/Wp+IPt/heqltHdQgMHg4RDQ0NDIzQUM0MUM3MkE"
MS-CV: X8Rvc0q+ZUaYxP5K.0
Access-Control-Expose-Headers: MS-CV
Content-Length: 4405
Date: Mon, 04 Dec 2023 03:24:37 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
store-images.s-microsoft.com/image/apps.55687.9007199267033340.45747ee5-e4ed-466b-bd2f-43d8dd3793c8.16b026e1-921a-4e00-9bb7-0f9ef5546452?w=672&h=378&q=80&mode=letterbox&background=%23FFE4E4E4&format=jpg
44 kB URL store-images.s-microsoft.com/image/apps.55687.9007199267033340.45747ee5-e4ed-466b-bd2f-43d8dd3793c8.16b026e1-921a-4e00-9bb7-0f9ef5546452?w=672&h=378&q=80&mode=letterbox&background=%23FFE4E4E4&format=jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 672x378, components 3\012- data
Hash 2c4ee8c23a10d622de03913efd0d681d
2fb78d3cb3ad9dbce035ded748ea11d24afab79a
811f3210ccd2fd0237ded06279881ebb88fa16fe4cff6c68b4fc66b8ea7fe9ec
GET /image/apps.55687.9007199267033340.45747ee5-e4ed-466b-bd2f-43d8dd3793c8.16b026e1-921a-4e00-9bb7-0f9ef5546452?w=672&h=378&q=80&mode=letterbox&background=%23FFE4E4E4&format=jpg HTTP/1.1
Host: store-images.s-microsoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: public, max-age=7776000, s-maxage=7776000
Content-Type: image/jpeg
Last-Modified: Tue, 19 Jan 2016 06:11:54 GMT
Accept-Ranges: none
ETag: W/"AEBrurh6kS8dO3AEgBOVRjTd6jTNHtQgMHg4RDMyMDk3NkRCRTE2MUU"
MS-CV: Posa1JSYz0W66DA6.0
Access-Control-Expose-Headers: MS-CV
Content-Length: 43450
Date: Mon, 04 Dec 2023 03:24:38 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
lh4.ggpht.com/P8rYw0T52dQRrOn0dgM9cMr3rs2ezCZX_mYfK5m-uyWqiQk0EfPMiBsoYXExC-xDsh0=h900
203 kB URL lh4.ggpht.com/P8rYw0T52dQRrOn0dgM9cMr3rs2ezCZX_mYfK5m-uyWqiQk0EfPMiBsoYXExC-xDsh0=h900
IP
File type PNG image data, 540 x 900, 8-bit/color RGB, non-interlaced\012- data
Size 203 kB (202649 bytes)
Hash 30d86f4ff2e677dd8609f63dffe48697
c0ea3717cc1a8050b3707de1d7f62af5d676398b
6814923ce88a3ac7d62ff98c5a4e5e446eb6e720974b8669ca9de7e7106b1dfe
GET /P8rYw0T52dQRrOn0dgM9cMr3rs2ezCZX_mYfK5m-uyWqiQk0EfPMiBsoYXExC-xDsh0=h900 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Tue, 05 Dec 2023 03:24:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:38 GMT
server: fife
content-length: 202649
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.zoho.com/crm/help/img/outlook-sign-in-box.png
67 kB URL www.zoho.com/crm/help/img/outlook-sign-in-box.png
IP
ASN #41913 Computerline GmbH
File type PNG image data, 503 x 351, 8-bit/color RGBA, non-interlaced\012- data
Hash 45fd9b465690f3a29465b809132df758
83d7036d4362226ea2ad2305d583598e02e86e7e
2586f36b6603cd629907ffc6a54bf0ca9e4461da9fdeb15a876ad2e92f84f5e4
GET /crm/help/img/outlook-sign-in-box.png HTTP/1.1
Host: www.zoho.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: ZGS
Date: Mon, 04 Dec 2023 03:24:38 GMT
Content-Type: image/png
Content-Length: 67325
Last-Modified: Wed, 17 Aug 2016 12:26:36 GMT
Connection: keep-alive
ETag: "57b457fc-106fd"
Expires: Mon, 11 Dec 2023 03:24:38 GMT
Cache-Control: max-age=604800
Strict-Transport-Security: max-age=63072000
Accept-Ranges: bytes
resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png
403 B URL resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png
IP
File type PNG image data, 20 x 1100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f7de2e6afefb125b1f14fa5cda610ee
57a145f234b504a73f9d55cf39f2231a04719456
ecb30886406e3f776ff7bc3834de849944471e626ff148bed2fa389d02866044
GET /blogblog/data/1kt/simple/gradients_light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 403
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 13:09:34 GMT
expires: Wed, 06 Dec 2023 13:09:34 GMT
cache-control: public, max-age=604800
last-modified: Tue, 28 Nov 2023 15:57:03 GMT
content-type: image/png
age: 396904
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
61 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (1505)
Hash 71aaa92f748ba3c48d6edfb40204d614
ad1ca8c338494256d564ee7857707f758e03948b
215f3b01f5decd286eb88ac2dc56b997e6cd2ce8f47998dfa9e2917f8b890982
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Cookie: NID=511=g0v8BSoQ2icJNpu7Y_6PXdOLtbhJL3qgCZAJNujLC2ct1TmmpZEBDRUg3xGDmtasoeD_MM7D9scSIGZoNsT4W2U-2-0IHkEyxq5gKv58PcKJ7jFmVtAWOAoB7T96S1Sxhwf0Do-IHYyH4X9pWUL2WorfmXV5Zz7I-M-JB6xuQG8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60962
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:45:42 GMT
expires: Fri, 29 Nov 2024 02:45:42 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 347936
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sqM8fN1Izwd1V5pidAFSE4yylK2ocrw3_RfUSwLNFxqD_yAhEzdmrZyeIroUaCW8k5zhNTWy1qo_BTt8t0H1zaGA_PxDb1fLhtP4HNzOmjzgFKIBr6sL3QER1Vb_wwDtb9xTm9mYI=s0-d
165 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sqM8fN1Izwd1V5pidAFSE4yylK2ocrw3_RfUSwLNFxqD_yAhEzdmrZyeIroUaCW8k5zhNTWy1qo_BTt8t0H1zaGA_PxDb1fLhtP4HNzOmjzgFKIBr6sL3QER1Vb_wwDtb9xTm9mYI=s0-d
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1022x782, components 3\012- data
Size 165 kB (164839 bytes)
Hash 6699678d8134c095bd498cbf3b857492
ac9a41008bd74e708773dfbd1f60a1c868b38138
e94797d3b0ca977e81e42aaa44dcc88c2f208cb8be7fddde48efbd1f1e5cd608
GET /blogger_img_proxy/ALY8t1sqM8fN1Izwd1V5pidAFSE4yylK2ocrw3_RfUSwLNFxqD_yAhEzdmrZyeIroUaCW8k5zhNTWy1qo_BTt8t0H1zaGA_PxDb1fLhtP4HNzOmjzgFKIBr6sL3QER1Vb_wwDtb9xTm9mYI=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 05 Dec 2023 03:24:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:38 GMT
server: fife
content-length: 164839
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
wiki.2n.cz/hip/inte/files/latest/en/25338133/25338132/2/1520953712864/Zoiper.png
185 B URL wiki.2n.cz/hip/inte/files/latest/en/25338133/25338132/2/1520953712864/Zoiper.png
IP
ASN #5610 O2 Czech Republic, a.s.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4c555068310076e85908835c721911f5
9ec990aabb4391e139034f68e5e657e0f1d0b74d
568b4de0ad30e85670e724dc30ccb675924353b77807356c5ad7f29c8c38f510
GET /hip/inte/files/latest/en/25338133/25338132/2/1520953712864/Zoiper.png HTTP/1.1
Host: wiki.2n.cz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx/1.14.2
date: Mon, 04 Dec 2023 03:24:38 GMT
content-type: text/html
content-length: 185
location: https://wiki.2n.com/hip/inte/files/latest/en/25338133/25338132/2/1520953712864/Zoiper.png
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=6720836798646097304&zx=6c2d1a7d-9ce0-4c11-bc14-431ba6bd579e
21 B URL www.blogger.com/dyn-css/authorization.css?targetBlogID=6720836798646097304&zx=6c2d1a7d-9ce0-4c11-bc14-431ba6bd579e
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=6720836798646097304&zx=6c2d1a7d-9ce0-4c11-bc14-431ba6bd579e HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 04 Dec 2023 03:24:38 GMT
last-modified: Mon, 04 Dec 2023 03:24:38 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMGJkZjMwODktOGE0Yy00YTkwLWI3OWUtYmJlMzZiODhlMTZi&options=w1600
238 kB URL themes.googleusercontent.com/image?id=0BwVBOzw_-hbMMGJkZjMwODktOGE0Yy00YTkwLWI3OWUtYmJlMzZiODhlMTZi&options=w1600
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 1600x982, components 3\012- data
Size 238 kB (237608 bytes)
Hash 16af848721ee4b2d19062a13088417f4
3c6446cb473895cceb7487b99468b81fd0558ea4
1ae85109797bf8343808061ef8013d438afce50de3c2eeb288c12ec14c8df354
GET /image?id=0BwVBOzw_-hbMMGJkZjMwODktOGE0Yy00YTkwLWI3OWUtYmJlMzZiODhlMTZi&options=w1600 HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Tue, 05 Dec 2023 03:24:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:38 GMT
server: fife
content-length: 237608
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
42 B URL pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Sun, 03 Dec 2023 11:32:03 GMT
expires: Sun, 17 Dec 2023 11:32:03 GMT
cache-control: public, max-age=1209600
age: 57155
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vke01IZ8z-zfKMa0cihM_xTyFG1xdp8BRr8gdlhJ19qNkQOId4VtR64jlY_tJkw5VdYrtw4rrW97Ep1aXpr4DLrhC_ZEqX6RDCnE7ZgYZWmv_SVtBv0dJj_UnQDMQ=s0-d
94 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vke01IZ8z-zfKMa0cihM_xTyFG1xdp8BRr8gdlhJ19qNkQOId4VtR64jlY_tJkw5VdYrtw4rrW97Ep1aXpr4DLrhC_ZEqX6RDCnE7ZgYZWmv_SVtBv0dJj_UnQDMQ=s0-d
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 520x473, components 3\012- data
Hash 8a0dab098cd8221da5864034d70b5765
cea39751c6854c45db9cf968e0d03c56ae04bb62
dbf865b204046c10d0eab247913caddfc26f0514762cd63f29bee2924362bb8e
GET /blogger_img_proxy/ALY8t1vke01IZ8z-zfKMa0cihM_xTyFG1xdp8BRr8gdlhJ19qNkQOId4VtR64jlY_tJkw5VdYrtw4rrW97Ep1aXpr4DLrhC_ZEqX6RDCnE7ZgYZWmv_SVtBv0dJj_UnQDMQ=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 05 Dec 2023 03:24:38 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:38 GMT
server: fife
content-length: 93665
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.profitabledisplaynetwork.com/7944989fa16fb73b3c06deb46a847eaa/invoke.js
11 kB URL www.profitabledisplaynetwork.com/7944989fa16fb73b3c06deb46a847eaa/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (29613), with no line terminators
Hash 58a7468bbac138905981263522aa1ee5
3779f54c5015c489b0f4770f710b183a545e8062
4fe6ed3d1ecacf407c7a5d416e838c2650a50d856f44a8e074fe24e94688fbf4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /7944989fa16fb73b3c06deb46a847eaa/invoke.js HTTP/1.1
Host: www.profitabledisplaynetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:38 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 532f4dba917744ae5ab5637ff5b234c3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sSkBzDvd8cG20MoyjBzL9vQImASI13_Sx5t8loYx2RBvxENbL-8aDQm96XK_h0yf2AfFcEkCMaVkb7G9SMPHmAzJ5_cWnUQe1ZesfKYS8C70AvepCQx_OOM-W_ieYrO_1YD2o=s0-d
62 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sSkBzDvd8cG20MoyjBzL9vQImASI13_Sx5t8loYx2RBvxENbL-8aDQm96XK_h0yf2AfFcEkCMaVkb7G9SMPHmAzJ5_cWnUQe1ZesfKYS8C70AvepCQx_OOM-W_ieYrO_1YD2o=s0-d
IP
File type PNG image data, 640 x 960, 8-bit/color RGB, non-interlaced\012- data
Hash dcc40a964d3975cbdc159022f350bfb3
4fd393929568dd5451955efb9ee89e7c31b326e7
92a469804b8b73ae18fdec637f7aa0fae947bb93f36173af3a281943c0d7c470
GET /blogger_img_proxy/ALY8t1sSkBzDvd8cG20MoyjBzL9vQImASI13_Sx5t8loYx2RBvxENbL-8aDQm96XK_h0yf2AfFcEkCMaVkb7G9SMPHmAzJ5_cWnUQe1ZesfKYS8C70AvepCQx_OOM-W_ieYrO_1YD2o=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Tue, 05 Dec 2023 03:24:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.png"
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:39 GMT
server: fife
content-length: 61961
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/navbar.g?targetBlogID=6720836798646097304&blogName=Whatsapp+web+escanear+c%C3%B3digo&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://whatsappwebescanearcodigo.blogspot.com/search&blogLocale=it&v=2&homepageUrl=https://whatsappwebescanearcodigo.blogspot.com/&vt=1988509535854801501&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
2.6 kB URL www.blogger.com/navbar.g?targetBlogID=6720836798646097304&blogName=Whatsapp+web+escanear+c%C3%B3digo&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://whatsappwebescanearcodigo.blogspot.com/search&blogLocale=it&v=2&homepageUrl=https://whatsappwebescanearcodigo.blogspot.com/&vt=1988509535854801501&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3170)
Hash d90b1d944d7780397beefd6b7ade316a
25c7760ac5448ccc9a25a2f98ca3edb89da4d8fe
4c7a766ea99294242349fc4d8439afdc4e005addbe9e407eb6c67a07513b45c7
GET /navbar.g?targetBlogID=6720836798646097304&blogName=Whatsapp+web+escanear+c%C3%B3digo&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://whatsappwebescanearcodigo.blogspot.com/search&blogLocale=it&v=2&homepageUrl=https://whatsappwebescanearcodigo.blogspot.com/&vt=1988509535854801501&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 04 Dec 2023 03:24:39 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2605
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/img/share_buttons_20_3.png
5.1 kB URL www.blogger.com/img/share_buttons_20_3.png
IP
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:00:50 GMT
expires: Thu, 07 Dec 2023 04:00:50 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 17:00:16 GMT
content-type: image/png
age: 343429
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sBrgd3xPHCBwkVDGtuuPNIWf0KZRvBgiKTi7cbQaOPEMIvOyurnpFJqEOMIoWjSyCaxBA7krk-ejwqtkyZt4uXn80LonZsMc_RsrtMdvxJ5XAmvFnYmA8cNMMJe4qaokzVImwyMF0wEc12jSCMZDovDpy_=s0-d
1.7 kB URL lh3.googleusercontent.com/blogger_img_proxy/ALY8t1sBrgd3xPHCBwkVDGtuuPNIWf0KZRvBgiKTi7cbQaOPEMIvOyurnpFJqEOMIoWjSyCaxBA7krk-ejwqtkyZt4uXn80LonZsMc_RsrtMdvxJ5XAmvFnYmA8cNMMJe4qaokzVImwyMF0wEc12jSCMZDovDpy_=s0-d
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash db219a1b8bf37eb2b8b6d9fd4a29db92
ebf7b34a01af55721e1f2eee054842342ec1f5ae
c9d9dbcb51286f193dce3dd632e7c981b4dda899605391c185318f42ef425313
GET /blogger_img_proxy/ALY8t1sBrgd3xPHCBwkVDGtuuPNIWf0KZRvBgiKTi7cbQaOPEMIvOyurnpFJqEOMIoWjSyCaxBA7krk-ejwqtkyZt4uXn80LonZsMc_RsrtMdvxJ5XAmvFnYmA8cNMMJe4qaokzVImwyMF0wEc12jSCMZDovDpy_=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 04 Dec 2023 03:24:39 GMT
server: fife
content-length: 1744
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform:gapi.iframes.style.common.js
22 kB URL apis.google.com/js/platform:gapi.iframes.style.common.js
IP
File type ASCII text, with very long lines (2664)
Hash b970f4ece0f21dae7d57dcbbbe1eb48b
52ab98370d3fc4bfd4c1b23cb3ed5dc1e37d779a
53dbcf2ac8d4a8d0a0fc4d5a15778fd36664923c87a60891a87bf8ec45535a91
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Cookie: NID=511=g0v8BSoQ2icJNpu7Y_6PXdOLtbhJL3qgCZAJNujLC2ct1TmmpZEBDRUg3xGDmtasoeD_MM7D9scSIGZoNsT4W2U-2-0IHkEyxq5gKv58PcKJ7jFmVtAWOAoB7T96S1Sxhwf0Do-IHYyH4X9pWUL2WorfmXV5Zz7I-M-JB6xuQG8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21940
date: Mon, 04 Dec 2023 03:24:39 GMT
expires: Mon, 04 Dec 2023 03:24:39 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "f3d0fc258127dfc5"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash ebc0f19a7067085e95ff0e35ee441f4d
23c3d68afd4c1c6cdecce9007aa3bddc793bc52d
6a07099ef655ed036e4a865236f8a6e5549e9a468e207691923634fc51c3186d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 04 Dec 2023 03:24:39 GMT
Last-Modified: Mon, 04 Dec 2023 01:50:25 GMT
Server: ECAcc (ska/F7B4)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vC2IgkDtUhRE0yGAhvUpTC1vh2uiB-jhpoYtdVFH8Jc7tiX_S74Paw==
Age: 5654
resources.blogblog.com/img/navbar/icons_peach.png
907 B URL resources.blogblog.com/img/navbar/icons_peach.png
IP
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 3718077fe5eb689b0ded987a52881d06
f0ce5596ef43f850c400cbbc0556697fb3e7b232
72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 11:28:24 GMT
expires: Thu, 07 Dec 2023 11:28:24 GMT
cache-control: public, max-age=604800
last-modified: Thu, 30 Nov 2023 06:30:42 GMT
content-type: image/png
age: 316575
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/arrows-light.png
117 B URL resources.blogblog.com/img/navbar/arrows-light.png
IP
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 25c2b0cfe0ad4dcda4a0e3727d091d80
b9d16f4311e64648b7970baf00cb9841e3c3351b
bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:02:35 GMT
expires: Thu, 07 Dec 2023 02:02:35 GMT
cache-control: public, max-age=604800
last-modified: Wed, 29 Nov 2023 17:00:16 GMT
content-type: image/png
age: 350524
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
t.bl-fastcdn.com/adspace/380603.js?wsid=
12 kB URL t.bl-fastcdn.com/adspace/380603.js?wsid=
IP
File type ASCII text, with very long lines (29613)
Hash e9547641d32e4ef36605cf937ace6a34
5d16cc26fd8c000f6afc1f4c10a956af4cae5660
757ca8b86de3eb4ac8f32b185ca58fd388b4f43ec49fd8502ce28a2e1440eafa
GET /adspace/380603.js?wsid= HTTP/1.1
Host: t.bl-fastcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:38 GMT
content-type: text/javascript; charset=utf-8
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Sat, 26 Jul 1997 05:00:00 GMT
etag: "28d5b000a5c095c9ec30ec66395d4ba7"
content-encoding: gzip
cf-cache-status: BYPASS
set-cookie: checkkeks=1; expires=Tue, 03-Dec-2024 03:24:37 GMT; Max-Age=31536000; path=/; domain=.bl-fastcdn.com
eTag=28d5b000a5c095c9ec30ec66395d4ba7; expires=Tue, 05-Dec-2023 03:24:37 GMT; Max-Age=86400; path=/; domain=.bl-fastcdn.com
eTag=28d5b000a5c095c9ec30ec66395d4ba7; expires=Tue, 05-Dec-2023 03:24:37 GMT; Max-Age=86400; path=/; domain=.slimspots.com
u_current_ads_view=----; expires=Tue, 05-Dec-2023 03:24:38 GMT; Max-Age=86400; path=/; domain=.bl-fastcdn.com
u_current_ads_view=----; expires=Tue, 05-Dec-2023 03:24:38 GMT; Max-Age=86400; path=/; domain=.slimspots.com
u_current_ads_view=----; expires=Tue, 05-Dec-2023 03:24:38 GMT; Max-Age=86400; path=/; domain=.bl-fastcdn.com
u_current_ads_view=----; expires=Tue, 05-Dec-2023 03:24:38 GMT; Max-Age=86400; path=/; domain=.slimspots.com
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jz27EWfW11sTzJsEG9npEpPeKxZfGl1iWyvm6nmPp873b0SipBk0fbdQXaMzqmpYme2Zhros0woCX7TE0gmikq0yMcQyvZ8V9IOJn0aBab54G5PMyxHabRJRFft%2BayTD5zIC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300f000ac2f712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
wiki.2n.com/hip/inte/files/latest/en/25338133/25338132/2/1520953712864/Zoiper.png
14 kB URL wiki.2n.com/hip/inte/files/latest/en/25338133/25338132/2/1520953712864/Zoiper.png
IP
ASN #5610 O2 Czech Republic, a.s.
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 584d1d7db9755e5b4e5696790fcb5215
23273c15c4ff7cb23b35340f3de547520708c76c
0c0e43231a3c165178ffee359cee9226fe47333f6867df7b5d5ffb809a990a79
GET /hip/inte/files/latest/en/25338133/25338132/2/1520953712864/Zoiper.png HTTP/1.1
Host: wiki.2n.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://whatsappwebescanearcodigo.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.14.2
date: Mon, 04 Dec 2023 03:24:38 GMT
content-type: image/png
set-cookie: JSESSIONID=AA29A5D6A8BAA7C76558B7B3898F6E28; Path=/; Secure; HttpOnly
cache-control: public,max-age=31536000
x-content-type-options: nosniff
strict-transport-security: max-age=15768000; includeSubDomains
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
46 kB URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (1505)
Hash a5139ae5276fac825f580dd8b48d0f72
2820e165c330673129cebdc8e7cf806e1620c0a0
2170ad362c9ba9f7ff9b642d2a9d72a263fff1cd47de3664c55d6a7462c4cbc3
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Cookie: NID=511=g0v8BSoQ2icJNpu7Y_6PXdOLtbhJL3qgCZAJNujLC2ct1TmmpZEBDRUg3xGDmtasoeD_MM7D9scSIGZoNsT4W2U-2-0IHkEyxq5gKv58PcKJ7jFmVtAWOAoB7T96S1Sxhwf0Do-IHYyH4X9pWUL2WorfmXV5Zz7I-M-JB6xuQG8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 23:12:04 GMT
expires: Thu, 28 Nov 2024 23:12:04 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 360755
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
proftrafficcounter.com/stats
40 B URL proftrafficcounter.com/stats
IP
File type ASCII text, with no line terminators
Hash deb86fcd0941e9148d431fb93b5de8bc
a1b1b3a30bb326380e08fb2a0b8b69ae6f31c67a
7e292105ff1174672ed9760c6051d5a218f5802dd27bdef41bc2e191324fb7ff
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://whatsappwebescanearcodigo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Cookie: uid_id2=1d358e62-d3d4-4415-82be-d0faf76fcee9:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:39 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://whatsappwebescanearcodigo.blogspot.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.profitabledisplaynetwork.com/a29a690b05d09c82ce4da8a166d23c0c/invoke.js
11 kB URL www.profitabledisplaynetwork.com/a29a690b05d09c82ce4da8a166d23c0c/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (29604), with no line terminators
Hash 9f64df9b3f01b06dbac176c76ea259c3
7b72dc8e78eabb52fc0ef80dceb8b5a23c5640b9
c4c556b35fb3a57c0c4127f939b25d7b09329efdfb7f125a2e72e550ca91a563
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a29a690b05d09c82ce4da8a166d23c0c/invoke.js HTTP/1.1
Host: www.profitabledisplaynetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 08aac3e5af6a7cc05197b467f2e24bca
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
dinnercreekawkward.com/watch.282534226121.js?key=c9785a2d556bc38427c050f1b7d11254&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1
0 B URL dinnercreekawkward.com/watch.282534226121.js?key=c9785a2d556bc38427c050f1b7d11254&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.282534226121.js?key=c9785a2d556bc38427c050f1b7d11254&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1 HTTP/1.1
Host: dinnercreekawkward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://whatsappwebescanearcodigo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:39 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Origin: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://dinnercreekawkward.com/watch.282534226121.js?key=c9785a2d556bc38427c050f1b7d11254&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=4f6f9ef5c1280f6e577bdce6987623166d9c78c2fdb6528b230a5a2809529b8ff638bd99655e6e133c121ca2df677b0baa547e1f34841772268ac4937c6d1b754d41d20aee4c835257682cd9fcf875bb7805ce713d55269416a252164906&pst=1701660339&rmtc=t
Set-Cookie: u_pl=15939345; expires=Tue, 05 Dec 2023 03:24:39 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.Ls4uSyCQzP7w9IZmCZo01VejGDsobWYRIDJx9H5BajQ; expires=Mon, 04 Dec 2023 03:25:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f1fcc04a09523ee64e3c9b2e60339a7d
Strict-Transport-Security: max-age=0; includeSubdomains
prerogativeslob.com/watch.1568586293439.js?key=a29a690b05d09c82ce4da8a166d23c0c&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1
0 B URL prerogativeslob.com/watch.1568586293439.js?key=a29a690b05d09c82ce4da8a166d23c0c&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1568586293439.js?key=a29a690b05d09c82ce4da8a166d23c0c&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1 HTTP/1.1
Host: prerogativeslob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://whatsappwebescanearcodigo.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:39 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Origin: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://prerogativeslob.com/watch.1568586293439.js?key=a29a690b05d09c82ce4da8a166d23c0c&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=3be6cac14f74713414071081c78e80327927ab189ae5377ce5d93d72ea56502c9f115175c4cd0b19ef540c6bc3edb9b178b4a46e93b0e7d70a8ee905b48d793c7ad664ff1732ca1f09cdec99d417c3a4acb3437cbf22ebd64390dd73fb036bf0aa14db&pst=1701660339&rmtc=t
Set-Cookie: u_pl=15409008; expires=Tue, 05 Dec 2023 03:24:39 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTQwOTAwOCwiayI6ImEyOWE2OTBiMDVkMDljODJjZTRkYThhMTY2ZDIzYzBjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMzEwMTI2LCJwaWQiOjE0OTQyNywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjoyNSwicHQiOjQsInBrIjoiY3l5eXZ1MXhkIiwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd2hhdHNhcHB3ZWJlc2NhbmVhcmNvZGlnby5ibG9nc3BvdC5jb20vIiwiYXIiOltdfX0.qs_yC4Cz7ps5HXj8a4jjDUlgRC057BFQ8M20wkaSwcI; expires=Mon, 04 Dec 2023 03:25:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fdbab90aea3342369fc620295554677b
Strict-Transport-Security: max-age=0; includeSubdomains
dinnercreekawkward.com/watch.282534226121.js?key=c9785a2d556bc38427c050f1b7d11254&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=4f6f9ef5c1280f6e577bdce6987623166d9c78c2fdb6528b230a5a2809529b8ff638bd99655e6e133c121ca2df677b0baa547e1f34841772268ac4937c6d1b754d41d20aee4c835257682cd9fcf875bb7805ce713d55269416a252164906&pst=1701660339&rmtc=t
2.1 kB URL dinnercreekawkward.com/watch.282534226121.js?key=c9785a2d556bc38427c050f1b7d11254&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=4f6f9ef5c1280f6e577bdce6987623166d9c78c2fdb6528b230a5a2809529b8ff638bd99655e6e133c121ca2df677b0baa547e1f34841772268ac4937c6d1b754d41d20aee4c835257682cd9fcf875bb7805ce713d55269416a252164906&pst=1701660339&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2684)
Hash 724798ec74b7637cbd0ea45dacebce15
d6cb4577f1246783d1162d96fd4c19b6ef4357c5
25ccdab23ad7355ef0043e71e233b3c176f6a404ab7d3d212451b8a8fb98b75b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.282534226121.js?key=c9785a2d556bc38427c050f1b7d11254&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=4f6f9ef5c1280f6e577bdce6987623166d9c78c2fdb6528b230a5a2809529b8ff638bd99655e6e133c121ca2df677b0baa547e1f34841772268ac4937c6d1b754d41d20aee4c835257682cd9fcf875bb7805ce713d55269416a252164906&pst=1701660339&rmtc=t HTTP/1.1
Host: dinnercreekawkward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://whatsappwebescanearcodigo.blogspot.com
Referer: https://whatsappwebescanearcodigo.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=15939345; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNTkzOTM0NSwiayI6ImM5Nzg1YTJkNTU2YmMzODQyN2MwNTBmMWI3ZDExMjU0Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNDQ4NjcwLCJwaWQiOjE0OTQyNywiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjo1LCJwdCI6NCwicGsiOiJmOG0xaWs1OSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3doYXRzYXBwd2ViZXNjYW5lYXJjb2RpZ28uYmxvZ3Nwb3QuY29tLyIsImFyIjpbXX19.Ls4uSyCQzP7w9IZmCZo01VejGDsobWYRIDJx9H5BajQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:39 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Origin: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1d358e62-d3d4-4415-82be-d0faf76fcee9:1:1; expires=Mon, 11 Dec 2023 03:24:39 GMT; secure; SameSite=None
iprc2ba0f626fdbd3640db6dfa8efffd84d9=3569806; expires=Mon, 04 Dec 2023 07:24:39 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 05 Dec 2023 03:24:39 GMT; secure; SameSite=None
uncs=1; expires=Tue, 05 Dec 2023 03:24:39 GMT; secure; SameSite=None
pdhtkv5=true; expires=Tue, 05 Dec 2023 03:24:39 GMT; secure; SameSite=None
uncs5=1; expires=Tue, 05 Dec 2023 03:24:39 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cf99de557e16e5603791bcaa55bc458d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
prerogativeslob.com/watch.1568586293439.js?key=a29a690b05d09c82ce4da8a166d23c0c&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=3be6cac14f74713414071081c78e80327927ab189ae5377ce5d93d72ea56502c9f115175c4cd0b19ef540c6bc3edb9b178b4a46e93b0e7d70a8ee905b48d793c7ad664ff1732ca1f09cdec99d417c3a4acb3437cbf22ebd64390dd73fb036bf0aa14db&pst=1701660339&rmtc=t
642 B URL prerogativeslob.com/watch.1568586293439.js?key=a29a690b05d09c82ce4da8a166d23c0c&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=3be6cac14f74713414071081c78e80327927ab189ae5377ce5d93d72ea56502c9f115175c4cd0b19ef540c6bc3edb9b178b4a46e93b0e7d70a8ee905b48d793c7ad664ff1732ca1f09cdec99d417c3a4acb3437cbf22ebd64390dd73fb036bf0aa14db&pst=1701660339&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (604)
Hash 96a862c5bb5322648320457825185d53
8396f2634be4af730bcfb89bbaed9e3c31f0c46a
2a127d1b99170f0ea404877f36bee30423a4254d5db29e1535593804b3692297
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.1568586293439.js?key=a29a690b05d09c82ce4da8a166d23c0c&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1&shu=3be6cac14f74713414071081c78e80327927ab189ae5377ce5d93d72ea56502c9f115175c4cd0b19ef540c6bc3edb9b178b4a46e93b0e7d70a8ee905b48d793c7ad664ff1732ca1f09cdec99d417c3a4acb3437cbf22ebd64390dd73fb036bf0aa14db&pst=1701660339&rmtc=t HTTP/1.1
Host: prerogativeslob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://whatsappwebescanearcodigo.blogspot.com
Referer: https://whatsappwebescanearcodigo.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=15409008; ain=eyJhbGciOiJIUzI1NiJ9.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.qs_yC4Cz7ps5HXj8a4jjDUlgRC057BFQ8M20wkaSwcI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Origin: https://whatsappwebescanearcodigo.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1d358e62-d3d4-4415-82be-d0faf76fcee9:1:1; expires=Mon, 11 Dec 2023 03:24:40 GMT; secure; SameSite=None
iprc44e43b560ad7961b4f470572d87590b8=2717339; expires=Tue, 05 Dec 2023 05:24:40 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 05 Dec 2023 03:24:40 GMT; secure; SameSite=None
uncs=1; expires=Tue, 05 Dec 2023 03:24:40 GMT; secure; SameSite=None
pdhtkv25=true; expires=Tue, 05 Dec 2023 03:24:40 GMT; secure; SameSite=None
uncs25=1; expires=Tue, 05 Dec 2023 03:24:40 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bbf815f1f5144f3ecec2b308b6acf3ba
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
semicolonrichsieve.com/watch.834262114371?key=7944989fa16fb73b3c06deb46a847eaa&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1
1.5 kB URL semicolonrichsieve.com/watch.834262114371?key=7944989fa16fb73b3c06deb46a847eaa&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (780)
Hash 51ddc445e3628c698c3502ba39f9e821
5827fd95521df25290572a804b32d885c1cfe5f8
38333898c11784c99d753b0020bfc634e5f32564384741b86e358e51e6576e15
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.834262114371?key=7944989fa16fb73b3c06deb46a847eaa&kw=%5B%22whatsapp%22%2C%22web%22%2C%22escanear%22%2C%22c%C3%B3digo%22%5D&refer=https%3A%2F%2Fwhatsappwebescanearcodigo.blogspot.com%2F&tz=0&dev=e&res=14.3095&uuid=1d358e62-d3d4-4415-82be-d0faf76fcee9%3A1%3A1 HTTP/1.1
Host: semicolonrichsieve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17372253; expires=Tue, 05 Dec 2023 03:24:40 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.UTOrXoGrkqZGxdtS0hzksBzicuJmErBhKIHoX8zBms4; expires=Mon, 04 Dec 2023 03:25:40 GMT; secure; SameSite=None
uid_id2=1d358e62-d3d4-4415-82be-d0faf76fcee9:1:1; expires=Mon, 11 Dec 2023 03:24:40 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7bc09b2c05bf94e41b59ea7074c1d36c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
conqueredallrightswell.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=15409008
1.4 kB URL conqueredallrightswell.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=15409008
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (512)
Hash be82764c30fef7dab9454f8f246f16e2
03088dba2b498d53d5f6a911713d690e153c9f13
afbc66407e169290bbdc569f1c22405b355d14117b9ea565fbf00078efe6fd5c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=15409008 HTTP/1.1
Host: conqueredallrightswell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Tue, 05 Dec 2023 03:24:40 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.TddHddTDt7x_rMFk2Bd9Uic8rh4LLZKj-C3l8D43Gu8; expires=Mon, 04 Dec 2023 03:25:40 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dbccde27cf6f3aa49b83d996bd062771
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
conqueredallrightswell.com/api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTE1NDA5MDA4JnBzdD0xNzAxNjYwMzQwJnJlZmVyPWh0dHBzJTNBJTJGJTJGd2hhdHNhcHB3ZWJlc2NhbmVhcmNvZGlnby5ibG9nc3BvdC5jb20lMkYmcm10Yz10JnNodT03NDBlZjUxZWZiMTUxNDgwMjVjY2JmNjZiN2YzNjE5MDdhZGM0YmJlODRmOGY3Yjc2NGZmYjBmMTBmMzdkMGQ4ZjZjNGJjYzBiYjg2Y2E3Y2UzYTEyYThjYzUxOTkxZDA4ZjQ4Nzk0YTlmODIwZDQwNmFmYjVlMjY4OGZhZWM3Mzg1YWMyMWVmOWJjMmI3MWNhYjkxOGU4MjFlZjg0MWE4Njg4Y2E5YTRiMjYyZWFkMmUwODRmODM5OGFiYTE3ZTI%3D&uuid=&pii=&in=false
0 B URL conqueredallrightswell.com/api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTE1NDA5MDA4JnBzdD0xNzAxNjYwMzQwJnJlZmVyPWh0dHBzJTNBJTJGJTJGd2hhdHNhcHB3ZWJlc2NhbmVhcmNvZGlnby5ibG9nc3BvdC5jb20lMkYmcm10Yz10JnNodT03NDBlZjUxZWZiMTUxNDgwMjVjY2JmNjZiN2YzNjE5MDdhZGM0YmJlODRmOGY3Yjc2NGZmYjBmMTBmMzdkMGQ4ZjZjNGJjYzBiYjg2Y2E3Y2UzYTEyYThjYzUxOTkxZDA4ZjQ4Nzk0YTlmODIwZDQwNmFmYjVlMjY4OGZhZWM3Mzg1YWMyMWVmOWJjMmI3MWNhYjkxOGU4MjFlZjg0MWE4Njg4Y2E5YTRiMjYyZWFkMmUwODRmODM5OGFiYTE3ZTI%3D&uuid=&pii=&in=false
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTE1NDA5MDA4JnBzdD0xNzAxNjYwMzQwJnJlZmVyPWh0dHBzJTNBJTJGJTJGd2hhdHNhcHB3ZWJlc2NhbmVhcmNvZGlnby5ibG9nc3BvdC5jb20lMkYmcm10Yz10JnNodT03NDBlZjUxZWZiMTUxNDgwMjVjY2JmNjZiN2YzNjE5MDdhZGM0YmJlODRmOGY3Yjc2NGZmYjBmMTBmMzdkMGQ4ZjZjNGJjYzBiYjg2Y2E3Y2UzYTEyYThjYzUxOTkxZDA4ZjQ4Nzk0YTlmODIwZDQwNmFmYjVlMjY4OGZhZWM3Mzg1YWMyMWVmOWJjMmI3MWNhYjkxOGU4MjFlZjg0MWE4Njg4Y2E5YTRiMjYyZWFkMmUwODRmODM5OGFiYTE3ZTI%3D&uuid=&pii=&in=false HTTP/1.1
Host: conqueredallrightswell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://conqueredallrightswell.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.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.TddHddTDt7x_rMFk2Bd9Uic8rh4LLZKj-C3l8D43Gu8; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 03:24:41 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://track.trackingtraffo.com/pop/imp?auth=pz6uwx&c=aWH0m9CSDwOCQEM5ADIYEEL4X5T3Sl-S4OZpH33MLI2acJTdLVWX8byuAkN24uHQOEBdG825YQM_Me35XBSe8Jbx8Hz5rxKjc7NWmf1-8-gULu4_WBVZYyDAJOndwEkcsmpl0ZJe5oNdjARSe2qw_g5rhyyuxU3RqeJX2wi6Dmx_cfOjTJ6xz4ydFrIh9adsR-TK4C984JKO0W84_7RyACudgUyygmzZ8RTKDhsCHJlldtxb3kWpcQvDgxO4N3zQXtpwHlI0e6GlAHj3Cau1e-IQzTZQJq0pRS4nqYKrdFgpKE3o0QSsaoE79u_8hQr8t4LlXi5U78BOGfyhQu5_AyU3_I6KguLU3zHxNr6mRBKK-TzM7SxZXK7jL4Ob_e0MfYNXsgyuwu5XPCtl4_FTLMdqDxNgWT-2rpxt7l0y_TXgt_MjgTuz2bGNSaGNu4geG36YsE1S5TzdknihOitW36V7KCK61ieTr5dBNiQBmE69UbLGPGncnufnYYPvB6W5go2BpBROHt1e55W4RjPQE_xWzca6UAE5d-I9q7xflEFA8rPYtS38WajjWrbL75uvTjC05-oqcaY8Xnq0WZnUlNFDcIfVmxwlOiPParSHFvHjakWRrnLsXNPw7alVzjBBbydgQb1Irb5ITIcayfPLODY5ygnEuBKi43wDOM-MN5NJsNQIlzSUj3uTYNK4nC0-
Set-Cookie: pdhtkv=true; expires=Tue, 05 Dec 2023 03:24:41 GMT
uncs=1; expires=Tue, 05 Dec 2023 03:24:41 GMT
pdhtkv28=true; expires=Tue, 05 Dec 2023 03:24:41 GMT
uncs28=1; expires=Tue, 05 Dec 2023 03:24:41 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f00f6680ce5c000cf8b6fa8559308469
Strict-Transport-Security: max-age=0; includeSubdomains
track.trackingtraffo.com/pop/imp?auth=pz6uwx&c=aWH0m9CSDwOCQEM5ADIYEEL4X5T3Sl-S4OZpH33MLI2acJTdLVWX8byuAkN24uHQOEBdG825YQM_Me35XBSe8Jbx8Hz5rxKjc7NWmf1-8-gULu4_WBVZYyDAJOndwEkcsmpl0ZJe5oNdjARSe2qw_g5rhyyuxU3RqeJX2wi6Dmx_cfOjTJ6xz4ydFrIh9adsR-TK4C984JKO0W84_7RyACudgUyygmzZ8RTKDhsCHJlldtxb3kWpcQvDgxO4N3zQXtpwHlI0e6GlAHj3Cau1e-IQzTZQJq0pRS4nqYKrdFgpKE3o0QSsaoE79u_8hQr8t4LlXi5U78BOGfyhQu5_AyU3_I6KguLU3zHxNr6mRBKK-TzM7SxZXK7jL4Ob_e0MfYNXsgyuwu5XPCtl4_FTLMdqDxNgWT-2rpxt7l0y_TXgt_MjgTuz2bGNSaGNu4geG36YsE1S5TzdknihOitW36V7KCK61ieTr5dBNiQBmE69UbLGPGncnufnYYPvB6W5go2BpBROHt1e55W4RjPQE_xWzca6UAE5d-I9q7xflEFA8rPYtS38WajjWrbL75uvTjC05-oqcaY8Xnq0WZnUlNFDcIfVmxwlOiPParSHFvHjakWRrnLsXNPw7alVzjBBbydgQb1Irb5ITIcayfPLODY5ygnEuBKi43wDOM-MN5NJsNQIlzSUj3uTYNK4nC0-
0 B URL track.trackingtraffo.com/pop/imp?auth=pz6uwx&c=aWH0m9CSDwOCQEM5ADIYEEL4X5T3Sl-S4OZpH33MLI2acJTdLVWX8byuAkN24uHQOEBdG825YQM_Me35XBSe8Jbx8Hz5rxKjc7NWmf1-8-gULu4_WBVZYyDAJOndwEkcsmpl0ZJe5oNdjARSe2qw_g5rhyyuxU3RqeJX2wi6Dmx_cfOjTJ6xz4ydFrIh9adsR-TK4C984JKO0W84_7RyACudgUyygmzZ8RTKDhsCHJlldtxb3kWpcQvDgxO4N3zQXtpwHlI0e6GlAHj3Cau1e-IQzTZQJq0pRS4nqYKrdFgpKE3o0QSsaoE79u_8hQr8t4LlXi5U78BOGfyhQu5_AyU3_I6KguLU3zHxNr6mRBKK-TzM7SxZXK7jL4Ob_e0MfYNXsgyuwu5XPCtl4_FTLMdqDxNgWT-2rpxt7l0y_TXgt_MjgTuz2bGNSaGNu4geG36YsE1S5TzdknihOitW36V7KCK61ieTr5dBNiQBmE69UbLGPGncnufnYYPvB6W5go2BpBROHt1e55W4RjPQE_xWzca6UAE5d-I9q7xflEFA8rPYtS38WajjWrbL75uvTjC05-oqcaY8Xnq0WZnUlNFDcIfVmxwlOiPParSHFvHjakWRrnLsXNPw7alVzjBBbydgQb1Irb5ITIcayfPLODY5ygnEuBKi43wDOM-MN5NJsNQIlzSUj3uTYNK4nC0-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pop/imp?auth=pz6uwx&c=aWH0m9CSDwOCQEM5ADIYEEL4X5T3Sl-S4OZpH33MLI2acJTdLVWX8byuAkN24uHQOEBdG825YQM_Me35XBSe8Jbx8Hz5rxKjc7NWmf1-8-gULu4_WBVZYyDAJOndwEkcsmpl0ZJe5oNdjARSe2qw_g5rhyyuxU3RqeJX2wi6Dmx_cfOjTJ6xz4ydFrIh9adsR-TK4C984JKO0W84_7RyACudgUyygmzZ8RTKDhsCHJlldtxb3kWpcQvDgxO4N3zQXtpwHlI0e6GlAHj3Cau1e-IQzTZQJq0pRS4nqYKrdFgpKE3o0QSsaoE79u_8hQr8t4LlXi5U78BOGfyhQu5_AyU3_I6KguLU3zHxNr6mRBKK-TzM7SxZXK7jL4Ob_e0MfYNXsgyuwu5XPCtl4_FTLMdqDxNgWT-2rpxt7l0y_TXgt_MjgTuz2bGNSaGNu4geG36YsE1S5TzdknihOitW36V7KCK61ieTr5dBNiQBmE69UbLGPGncnufnYYPvB6W5go2BpBROHt1e55W4RjPQE_xWzca6UAE5d-I9q7xflEFA8rPYtS38WajjWrbL75uvTjC05-oqcaY8Xnq0WZnUlNFDcIfVmxwlOiPParSHFvHjakWRrnLsXNPw7alVzjBBbydgQb1Irb5ITIcayfPLODY5ygnEuBKi43wDOM-MN5NJsNQIlzSUj3uTYNK4nC0- HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 04 Dec 2023 03:24:41 GMT
Content-Length: 0
Connection: keep-alive
Location: https://plinksplanet.com/click.php?key=9uc6oqnzjpo0cd9ylmvc&clickid=d11b06ab-dc50-4423-a123-807758f2932f&cost=0.0058&PUB_ID=261&SUB_ID=16122660&KEYWORD=Other&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-12-04&BID_PUB=0.0058&CR_ID=362886&PUB_NAME=Adsterra-POP-ms
plinksplanet.com/click.php?key=9uc6oqnzjpo0cd9ylmvc&clickid=d11b06ab-dc50-4423-a123-807758f2932f&cost=0.0058&PUB_ID=261&SUB_ID=16122660&KEYWORD=Other&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-12-04&BID_PUB=0.0058&CR_ID=362886&PUB_NAME=Adsterra-POP-ms
0 B URL plinksplanet.com/click.php?key=9uc6oqnzjpo0cd9ylmvc&clickid=d11b06ab-dc50-4423-a123-807758f2932f&cost=0.0058&PUB_ID=261&SUB_ID=16122660&KEYWORD=Other&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-12-04&BID_PUB=0.0058&CR_ID=362886&PUB_NAME=Adsterra-POP-ms
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click.php?key=9uc6oqnzjpo0cd9ylmvc&clickid=d11b06ab-dc50-4423-a123-807758f2932f&cost=0.0058&PUB_ID=261&SUB_ID=16122660&KEYWORD=Other&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-12-04&BID_PUB=0.0058&CR_ID=362886&PUB_NAME=Adsterra-POP-ms HTTP/1.1
Host: plinksplanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.24.0
Date: Mon, 04 Dec 2023 03:24:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=2t3vbzft8n; expires=Tue, 05-Dec-2023 03:24:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=2t3vbzft8n-2t3vbzft8n-sl1z-0-2t1mi4-52a80-52a7dz-0ae0a3; expires=Tue, 05-Dec-2023 03:24:42 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://promo.20bet.partners/redirect.aspx?pid=174576&bid=1971&lpid=1256&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Strict-Transport-Security: max-age=31536000
promo.20bet.partners/redirect.aspx?pid=174576&bid=1971&lpid=1256&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
0 B URL promo.20bet.partners/redirect.aspx?pid=174576&bid=1971&lpid=1256&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=174576&bid=1971&lpid=1256&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3 HTTP/1.1
Host: promo.20bet.partners
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://20media.world/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a174576%2c%22BID%22%3a1971%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701660282783)%5c%2f%22%2c%22CookieTag%22%3a%221971174576451240919C2023124324%22%7d%5d; SameSite=None;; domain=.20bet.partners; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%222157428144%7c1%22%7d%5d; domain=.20bet.partners; expires=Wed, 04-Dec-3022 03:24:42 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-azure-ref: 0ekZtZQAAAADriTlmJfnbSpHvU96I8RKUU1ZHMjBFREdFMDUwNwA3OGIzMGY1NS05NWIyLTQ4YzgtYjFhOC1mZTNkZmIwNTljZDk=
x-cache: CONFIG_NOCACHE
date: Mon, 04 Dec 2023 03:24:41 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 50d71606cbc5a0e02caed542a4e193dd
edd0f097ced73eaa48a3e2027df3beae5b7b358f
3ffc92c91dcfe584aa3354fb432380707802f2b7bf9f31759eac480c4a13b79a
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 04 Dec 2023 03:24:43 GMT
Last-Modified: Mon, 04 Dec 2023 02:05:58 GMT
Server: ECAcc (ska/F6E1)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: My8XUHmu70NH_8DVPVh8dWpzo5PvHJtHVVfAH_6Uhl6mdCQs7fp02w==
Age: 4725
20media.world/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
286 B URL 20media.world/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
IP
File type HTML document, ASCII text
Hash 418e660ceb3a1f6752c141b43f5367bc
0925fef71450841ac6e7f7c3a36212472e190578
018e3e191d9fa2b74461c04eddb00c31a2e07543d7461e2d4c04fbb0dc1078e1
GET /casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3 HTTP/1.1
Host: 20media.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 03:24:43 GMT
content-type: text/html; charset=utf-8
content-length: 286
location: https://20bet.com/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
X-Firefox-Spdy: h2
20bet.com/custom-assets/mainLoaderDark.gif
674 kB URL 20bet.com/custom-assets/mainLoaderDark.gif
IP
Size 674 kB (674540 bytes)
Hash c796f05d38553d5625f4a12f692ca3d9
e090ea00741700b9dea1ff9a176c5d8d5ccbaf7b
70266fb35a5e3cfc3b5b699fdc6de8533fa125bbf90bb22881ae0c074fe87fd2
GET /custom-assets/mainLoaderDark.gif HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 04 Dec 2023 03:24:43 GMT
content-type: text/html; charset=UTF-8
location: /custom-assets/mainloaderdark.gif
cf-ray: 8300f025a8ff56b4-OSL
cf-cache-status: HIT
age: 4373
cache-control: public, max-age=14400
expires: Mon, 04 Dec 2023 07:24:43 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
X-Firefox-Spdy: h2
20bet.com/configuration.js
3.6 kB URL 20bet.com/configuration.js
IP
Hash dd686e077a04e52716757c714f0df02c
6a4858de9bd8354db4f4fc1699e478e033008a5c
b2181ceba197abc0cc27696c794167aafda9d8cf62299313139490ae2668b19a
GET /configuration.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:43 GMT
content-type: text/javascript; charset=UTF-8
cf-ray: 8300f025a8fd56b4-OSL
cf-cache-status: MISS
cache-control: no-cache, no-store, private
last-modified: Mon, 04 Dec 2023 03:24:43 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
casino.cur.a8r.games/public/sg.js
2.6 kB URL casino.cur.a8r.games/public/sg.js
IP
File type gzip compressed data, from Unix\012- data
Hash 93fe4f6a19c45d4b2c4e8e0aa0eb6a76
c1eedfb14bd7be80dc3ccb0e365fc69d15ca9eac
7f8262bf47ff6e4bf61101f5f8f941acbfc6ef2ccae069331ee7ac14c7376096
GET /public/sg.js HTTP/1.1
Host: casino.cur.a8r.games
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:43 GMT
content-type: text/javascript; charset=utf-8
a8r-request-id: a7b4d6e5-211b-4735-8f63-461db718630d
strict-transport-security: max-age=15724800; includeSubDomains
last-modified: Mon, 04 Dec 2023 01:03:00 GMT
cf-cache-status: HIT
age: 4424
expires: Mon, 04 Dec 2023 07:24:43 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300f025e8030b02-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/62147dea76397913ea62d464d5a0a380-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid
49 kB URL c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/62147dea76397913ea62d464d5a0a380-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid
IP
File type PNG image data, 512 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ef6782be55b8ce8f5b132d28af8e0d0
cb99df77f4865d9c2f287539a5ca474cf76f7d09
d614922fde9604f8899e47f3cc3d69bf952312b996f7cf1421163996710850fa
GET /sealassets/62147dea76397913ea62d464d5a0a380-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 49397
date: Mon, 04 Dec 2023 03:23:01 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"c0f5-y5nfd/SGXZwvKHU5pcpHTPdvfQk"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300eda8ed5c690a-FRA
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DDBWWlbgIcWfUbXQiDCevKF-0h_u66q0Y2qcQpXJAXwXuVn1tFBrrA==
age: 103
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/62147dea76397913ea62d464d5a0a380-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D
95 B URL c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/62147dea76397913ea62d464d5a0a380-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
GET /sealassets/62147dea76397913ea62d464d5a0a380-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 95
date: Mon, 04 Dec 2023 03:24:44 GMT
x-powered-by: Express
cache-control: max-age=1200
etag: W/"5f-NEKpX+iQzkdps2suzGEbgBpUz7U"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f02a2f9271b2-FRA
x-cache: Miss from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HGpB6sSHZH3nYyU1rsEV89NZ1Tw9O9EFmT9OQ1RD2X7_GlT2aklitw==
X-Firefox-Spdy: h2
tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAACT
36 kB URL tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAACT
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (62522)
Hash 68c6f25df2edcffbba301cc078381a0b
ac8348041b65f0f2d6097d03575d22d58a876153
2ef0da6de12c3eee8250edcb6413aa3b28a662af81e0446f512d1f94a2dcc97c
GET /dist/tag-manager.js?id=STM-AAAACT HTTP/1.1
Host: tm.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
apigw-requestid: PZdJSjnbDoEEMBA=
vary: Accept-Encoding
content-encoding: gzip
content-length: 36092
date: Mon, 04 Dec 2023 03:24:44 GMT
cache-control: max-age=900, public
x-n: S
X-Firefox-Spdy: h2
ws-cdn001.akamaized.net/7693683943e78a298c36d469e68b47d8/widgetloader
66 kB URL ws-cdn001.akamaized.net/7693683943e78a298c36d469e68b47d8/widgetloader
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (43921)
Hash 7ee11ab85013bfde0bdc6aa5e3ad236b
edfe5e6e137bafaba8bf21f9748fd8e8ee006e92
9d1b0864a8429e543cd34c6026212a5e1c036fcab0b78599cc1f3514b6a9cea0
GET /7693683943e78a298c36d469e68b47d8/widgetloader HTTP/1.1
Host: ws-cdn001.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-security-policy: frame-ancestors 'self' https://st-cdn001.akamaized.net https://ls-cdn001.akamaized.net
cache-control: public, max-age=120, stale-while-revalidate=60, immutable
etag: "1fa233d1f3ecb3f89370d39d3b179988-1e6017e444d1bba74ef67dc9498e30e1"
content-encoding: gzip
date: Mon, 04 Dec 2023 03:24:44 GMT
content-length: 66098
vary: Accept-Encoding
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
goo.gl/YjGoeC
40 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash dbd958d731962674fd90d41fa4e4a258
a2c36e12eb6f6b628fa9944036374879a186a084
485a188bf09d86adab5b5b88126ab5df6b2b73dee4c15c7dae8ce6499b1507f3
GET /YjGoeC HTTP/1.1
Host: goo.gl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://whatsappwebescanearcodigo.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 04 Dec 2023 03:24:39 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000
content-security-policy: script-src 'nonce-JpjPZXqFm3aZgl54IEu0BA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 340030
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic
1.3 kB URL fonts.googleapis.com/css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic
IP
File type gzip compressed data, max compression\012- data
Hash bb86907949600e009f3c9203808ba2c7
39ae3aeeea18cf928b320628f5e793389fb42d3c
97ebb5f694ee675c6fa1233e46b7b1419fe856cc603370d6f45d783d06172b2c
GET /css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 03:24:43 GMT
date: Mon, 04 Dec 2023 03:24:43 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist/tracker.js
6.4 kB URL tracker.ads.sportradar.com/dist/tracker.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (25690)
Hash 235331a0761142ae4fd345cdf7c7f9ed
f71a2cb5824a7049b2c86f5658f48e17ff7f588c
063237f5f52863c3f711ef56625653397a5650eca2da3fa375dc181985a1badb
GET /dist/tracker.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 12 Sep 2023 08:33:19 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
etag: "235331a0761142ae4fd345cdf7c7f9ed"
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: cV0BJ2C9-pZZPv5JpEZhhBmh8LrMAHSLy8Spy4nowD79C5vBCxSozQ==
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 04 Dec 2023 03:24:45 GMT
content-length: 6405
cache-control: max-age=900, public
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist//sp-3.8.0.js
24 kB URL tracker.ads.sportradar.com/dist//sp-3.8.0.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65378)
Hash 143272dddc33395008a84a86ac9c2e96
8a90a07a66c30b4fa28300001cf97db7baba420e
6361e3a49a38d1fdc74ec96bd29ee1ecd7c30045ccb0e5f361413d65cbf5ef87
GET /dist//sp-3.8.0.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 12 Sep 2023 08:33:18 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
etag: "143272dddc33395008a84a86ac9c2e96"
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: njP0IQN7s5ct7Da835uTffzKnHKndDUxRgwXR9vRZnoKdZVWPX1i0Q==
vary: Accept-Encoding
content-encoding: gzip
content-length: 24162
date: Mon, 04 Dec 2023 03:24:45 GMT
cache-control: max-age=900, public
X-Firefox-Spdy: h2
s.magsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450322975
20 B URL s.magsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450322975
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450322975 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.opoxv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450320963
20 B URL s.opoxv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450320963
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450320963 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.pemsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450320331
20 B URL s.pemsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450320331
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450320331 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450322268
20 B URL syndication.realsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450322268
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450322268 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.magsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450319175
20 B URL s.magsrv.com/tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450319175
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=57b5280ca4f08841b71b86b4f5203cf0&stackUid=20231204032450319175 HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A86672%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.opoxv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450322748
20 B URL s.opoxv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450322748
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450322748 HTTP/1.1
Host: s.opoxv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.opoxv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s.pemsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450323308
20 B URL s.pemsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450323308
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450323308 HTTP/1.1
Host: s.pemsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.pemsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450323649
20 B URL syndication.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450323649
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2&stackUid=20231204032450323649 HTTP/1.1
Host: syndication.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-12-03%22%3B%7D%7D; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
assets.customer.io/assets/track.js
3.3 kB URL assets.customer.io/assets/track.js
IP
File type gzip compressed data, from Unix\012- data
Hash bda3a79ebff68237b988667595c41566
2b6bfe5ee70697ea9e5d75914a6d252929ffe387
d28f824d0ce4e47082a7fec5d15537069d1c8023687cba2176a8898eb3ac8b4c
GET /assets/track.js HTTP/1.1
Host: assets.customer.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Sun, 03 Dec 2023 04:03:07 GMT
last-modified: Fri, 11 Aug 2023 18:01:41 GMT
etag: W/"92f4f643083ddfd3fc572a181243cb46"
x-amz-server-side-encryption: AES256
x-amz-version-id: YnPUbk.59KSLpiqsKMfvCCZt1qaij9rt
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B8pIYzQn0-dpwcVOYr_XwvCpWujj_PSOfHb35StdiRb4LMzyE7yZpg==
age: 84097
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331
43 B URL tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ba036c43037cfe89320d1ef7b64cd43f
88c72d3e26047eb1e45e5564a76427734f120efe
42cb846e07917f6731406e500f24aeb2e88c42cda124eaa59e08c5331cad8bcb
GET /api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 03:24:45 GMT
content-type: image/gif
content-length: 43
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: ae594545da0bccd8
set-cookie: ts_rt_45d3301c-de08-443f-9716-ba31e2632331=AAMC; expires=Tue, 03 Dec 2024 03:24:45 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
ocsp.entrust.net/
1.6 kB IP
Hash cd48101e4a98ff2f6951c22f8811bbdd
aab16d9bbbd6a96da5f492706b51a00cad0fc280
91925063cfe627cbc798419a51db712242f09ecfae84ac8b501a55ba39600f03
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "91925063CFE627CBC798419A51DB712242F09ECFAE84AC8B501A55BA39600F03"
Last-Modified: Sun, 03 Dec 2023 19:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3181
Expires: Mon, 04 Dec 2023 04:17:46 GMT
Date: Mon, 04 Dec 2023 03:24:45 GMT
Connection: keep-alive
a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
0 B URL a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?type=js&aid=1121&id=1859 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 04 Dec 2023 03:24:45 GMT
Location: https://a.sportradarserving.com/ul_cb/pixel?type=js&aid=1121&id=1859
Set-Cookie: zuuid=928d857d-e1bc-4201-b136-1b0b50ad5c6e; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
c=1701660285; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1701660285; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
load.sgtm.20bet.com/oxbdhhgm.js?id=GTM-55HKBB7
78 kB URL load.sgtm.20bet.com/oxbdhhgm.js?id=GTM-55HKBB7
IP
File type ASCII text, with very long lines (49826)
Hash 87d33787d836224d80f501d894066e95
61297b28191b5521d14395473deb0a92dceb4188
fcf34f805631aa1f6b6f1b7e06dd4fb0cceec7eb38c70ed37c6008467138d2ec
GET /oxbdhhgm.js?id=GTM-55HKBB7 HTTP/1.1
Host: load.sgtm.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:44 GMT
content-type: application/javascript; charset=UTF-8
cf-ray: 8300f029fa580b51-OSL
cf-cache-status: REVALIDATED
access-control-allow-origin: *
cache-control: private, max-age=900
expires: Mon, 04 Dec 2023 03:24:44 GMT
last-modified: Mon, 04 Dec 2023 03:06:34 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
alt-svc: h3=":443"; ma=86400
cf-bgj: minify
cf-polished: origSize=237346
cross-origin-resource-policy: cross-origin
x-stape-version: 1.1.1
referrer-policy: same-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
a.sportradarserving.com/ul_cb/pixel?type=js&aid=1121&id=1859
1.5 kB URL a.sportradarserving.com/ul_cb/pixel?type=js&aid=1121&id=1859
IP
File type ASCII text, with very long lines (1527), with no line terminators
Hash 5fddeda800d1337a9d8f7927177371ef
34308a35ff4384628bdf47492320264e7838de96
066cea36a81bbf968a2f99bb095765496472cf926de82b95bdf565cf9cb13a8a
GET /ul_cb/pixel?type=js&aid=1121&id=1859 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
DNT: 1
Connection: keep-alive
Cookie: zuuid=928d857d-e1bc-4201-b136-1b0b50ad5c6e; c=1701660285; zuuid_lu=1701660285
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Mon, 04 Dec 2023 03:24:45 GMT
Set-Cookie: zuuid=928d857d-e1bc-4201-b136-1b0b50ad5c6e; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1701660285; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1701660285; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
bss=!bidswitch,470917485; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
cm2=!bidswitch,470989485; path=/; expires=Tue, 03-Dec-2024 03:24:45 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 1527
Connection: keep-alive
track.trackingtraffo.com/pixel/js?auth=v3eu6k&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={DLV%20-%20currency}&amount={DLV%20-%20value}&affId={AFFILIATE_ID}
534 B URL track.trackingtraffo.com/pixel/js?auth=v3eu6k&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={DLV%20-%20currency}&amount={DLV%20-%20value}&affId={AFFILIATE_ID}
IP
Hash 2c9e522eb4e084bb324a4b67086ccbb4
00ac4ecf152cda5f44d1529a7fcec9ea6c5f7175
bd707e83cd784aff2347b21a4bc2d39ea7191645b78863ac3e1b2eef5041967a
GET /pixel/js?auth=v3eu6k&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur={DLV%20-%20currency}&amount={DLV%20-%20value}&affId={AFFILIATE_ID} HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Type: text/javascript
Content-Length: 534
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Access-Control-Allow-Origin: *
track.trackingtraffo.com/pixel?auth=e28uem&event=other&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=%7BCURRENCY%7D&amount=%7BDEPOSIT%7D&affId=%7BAFFILIATE_ID%7D&site=20bet.com&ln=en-US
0 B URL track.trackingtraffo.com/pixel?auth=e28uem&event=other&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=%7BCURRENCY%7D&amount=%7BDEPOSIT%7D&affId=%7BAFFILIATE_ID%7D&site=20bet.com&ln=en-US
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?auth=e28uem&event=other&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=%7BCURRENCY%7D&amount=%7BDEPOSIT%7D&affId=%7BAFFILIATE_ID%7D&site=20bet.com&ln=en-US HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 04 Dec 2023 03:24:45 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
20bet.com/app/22933.0a79c0899b1b300c.js
1.9 kB URL 20bet.com/app/22933.0a79c0899b1b300c.js
IP
File type ASCII text, with very long lines (5465), with no line terminators
Hash eec8e00ac26aafa58c29284ae1bcbfd0
3d0d092a39303601c1c0736bb8d22467a6f4055b
11fb78b66e3728ded22453e73b3b9514c5e37a0f5c0305f9bc79c7fd9661e03c
GET /app/22933.0a79c0899b1b300c.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0336cd056b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-1559"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/19858.fd46e6d37574e84f.js
47 kB URL 20bet.com/app/19858.fd46e6d37574e84f.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash be1441d29d4e77955e22127c66add1cc
4a798ecd5a0ce048194e159a3eb0307fa80d11a5
a9591969ad57c867b1f9e0e2a6f7c4cc68fe54a74a18ca0858039b7d58a0d9e5
GET /app/19858.fd46e6d37574e84f.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033acf156b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682997-31f39"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:07 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/19568.ab73f1bcf1ed56b6.js
19 kB URL 20bet.com/app/19568.ab73f1bcf1ed56b6.js
IP
File type ASCII text, with very long lines (16389), with no line terminators
Hash 1611a6635ea0ca631de16892da6ddca5
2e2ba140ce561e24ab8766df17ca43cabd796361
5cb0e0e226d02a4f543d0b65b1f03ee65efcfecc7ca77ded88c3cd52f46dd3df
GET /app/19568.ab73f1bcf1ed56b6.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0337cd556b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568299e-4005"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:14 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.seon.io/js/v4/agent.js
398 kB URL cdn.seon.io/js/v4/agent.js
IP
File type gzip compressed data, from Unix\012- data
Size 398 kB (398069 bytes)
Hash 56632087dbe2527dbe6b1aa6d895075b
efb7bd5e43fed2d76e50bbe0b19ede3ffdd8db04
ed6cab71900208b217661f3d24f37cbbe071c31bb80865a49c7769537508ea25
GET /js/v4/agent.js HTTP/1.1
Host: cdn.seon.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
server: AmazonS3
content-encoding: gzip
date: Mon, 04 Dec 2023 02:43:27 GMT
cache-control: max-age=3600
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cIP4E2RY7R_MfBnqXVwnP2D7Z91MO2SpwRaDjD6iEPJ6et0zXB8_5w==
age: 2514
X-Firefox-Spdy: h2
20bet.com/app/46423.0dca2d659c439509.js
200 OK 37 kB URL GET HTTP/2 20bet.com/app/46423.0dca2d659c439509.js
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65456)
Hash fd6f270dd7ac99355d596bb66c97127c
5953b820870708d7d24b576abf3dac46e8b60a76
bcbed3baa8a38dbe40bde627ddc12bf14c7b3920cd64e5cc57eace34c4b8aad8
GET /app/46423.0dca2d659c439509.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0338cdd56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-1cba0"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/47051.d49724c0afe1c0f7.js
21 kB URL 20bet.com/app/47051.d49724c0afe1c0f7.js
IP
File type ASCII text, with very long lines (52446), with no line terminators
Hash 9b7aaca3931d6252da0e78fbae88834d
940bed7b824113d2905403153bd745b7c8717ddf
3d10067428a36b68db8cc25fddd3cf10bc3d25f79421b97346941cf405bc74b9
GET /app/47051.d49724c0afe1c0f7.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033ed0556b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-ccde"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/39304.e13d7a8149ceb871.js
200 OK 3.3 kB URL GET HTTP/2 20bet.com/app/39304.e13d7a8149ceb871.js
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (8027), with no line terminators
Hash 7f33c0cba8a81faeb285fce0a9621ff3
c05fcc9351811d726258900ae4ad6fbb06dfe025
c3b41954ea9e5ddbe6c97c44b70920d0d7e55538243f734fd955fb561cc152f8
GET /app/39304.e13d7a8149ceb871.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0338ce156b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-1f5b"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/14069.6f1de6bea0195208.js
699 B URL 20bet.com/app/14069.6f1de6bea0195208.js
IP
File type ASCII text, with very long lines (354), with no line terminators
Hash 18d1fb98760c10f69f7b86e676f1223a
f08d278e977b13c25587945fe9935126c712b0fd
3dc40ab2b8373dad8080c1ef82e497f388176e4836b2a3177ac356e7b6f42a7b
GET /app/14069.6f1de6bea0195208.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0336cd156b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-162"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
region1.analytics.google.com/g/s/collect?dma=1&dma_cps=sypham>m=45j91e3b81v889124220z8832196572z99138617576&_gsid=J9LNZYMXZEHw0uLa9T-FqjKyUilATc7g
0 B URL region1.analytics.google.com/g/s/collect?dma=1&dma_cps=sypham>m=45j91e3b81v889124220z8832196572z99138617576&_gsid=J9LNZYMXZEHw0uLa9T-FqjKyUilATc7g
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/s/collect?dma=1&dma_cps=sypham>m=45j91e3b81v889124220z8832196572z99138617576&_gsid=J9LNZYMXZEHw0uLa9T-FqjKyUilATc7g HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://20bet.com
date: Mon, 04 Dec 2023 03:24:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81v889124220z99138617576&aip=1&z=1022303751
42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81v889124220z99138617576&aip=1&z=1022303751
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81v889124220z99138617576&aip=1&z=1022303751 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 04 Dec 2023 03:24:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
0 B URL a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?type=js&aid=1121&id=1859 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Cookie: zuuid=928d857d-e1bc-4201-b136-1b0b50ad5c6e; c=1701660285; zuuid_lu=1701660285; zuuid_k=1; zuuid_k_lu=1701660285; bss=!bidswitch,470917485; cm2=!bidswitch,470989485
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Mon, 04 Dec 2023 03:24:47 GMT
Content-Length: 0
Connection: keep-alive
platform.20bet.com/api/market-descriptions/get-all-outcomes/no
0 B URL platform.20bet.com/api/market-descriptions/get-all-outcomes/no
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/market-descriptions/get-all-outcomes/no HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:47 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03dae4d0b65-OSL
X-Firefox-Spdy: h2
20bet.com/app/19034.645279daef33f8bf.js
20 kB URL 20bet.com/app/19034.645279daef33f8bf.js
IP
File type ASCII text, with very long lines (59202)
Hash e4eccd929a1bc5f46a540393ef44c16e
41b97235d784f0b0184716056e74f9382e3a6794
4e640f78bc3fb43aa0d2fcdf6a05152f29ac63a6bfad39b0366cdbc3137a5575
GET /app/19034.645279daef33f8bf.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0338cde56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-e792"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/market-descriptions/get-all-markets/no
0 B URL platform.20bet.com/api/market-descriptions/get-all-markets/no
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/market-descriptions/get-all-markets/no HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:47 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03dbe500b65-OSL
X-Firefox-Spdy: h2
20bet.com/app/3771.b61f941fe4522c4d.js
4.9 kB URL 20bet.com/app/3771.b61f941fe4522c4d.js
IP
File type ASCII text, with very long lines (14577)
Hash b66c498c19ef16195fb6fcd575600530
cb37080c5247b02f2622728a9be47a0aa4c86862
de981b471d18e147b177c17d2d427f895b4672e974c3e0a6a759cc0aad4bc8bf
GET /app/3771.b61f941fe4522c4d.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0338cd856b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-3940"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/28316.282a8cc5b43fe00a.js
44 kB URL 20bet.com/app/28316.282a8cc5b43fe00a.js
IP
File type ASCII text, with very long lines (65456)
Hash 2f8901afeb9490c658b72fccc6017654
8697785a04b45ab0c27699e6cddc5cfd248dab5d
075edfe6700db208a63aca5ab53eb28183daa7ab544716930b87c38ad124824c
GET /app/28316.282a8cc5b43fe00a.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0338cdc56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682990-2083c"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:00 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/v2/ip-data
0 B URL platform.20bet.com/api/v2/ip-data
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/ip-data HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:47 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03e5e640b65-OSL
X-Firefox-Spdy: h2
20bet.com/app/71486.784eba061d4a8e9a.js
10 kB URL 20bet.com/app/71486.784eba061d4a8e9a.js
IP
File type Unicode text, UTF-8 text, with very long lines (41422), with no line terminators
Hash c7172067c9c7edda68e598cc210ee36d
6e11c231fd71e99cf8a0a50fc6b0dcaacb64a6c6
b4adf8779b73593d1f36ebfd49cb85dd84fde60131fd8db336ba55e7e23311b5
GET /app/71486.784eba061d4a8e9a.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0339ce856b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-a1e4"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/data/get-currencies
0 B URL platform.20bet.com/api/data/get-currencies
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/get-currencies HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:47 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03e9e690b65-OSL
X-Firefox-Spdy: h2
20bet.com/app/66582.f5b1b98a99d95857.js
12 kB URL 20bet.com/app/66582.f5b1b98a99d95857.js
IP
File type ASCII text, with very long lines (31707), with no line terminators
Hash a66814a396871dda74e2b2971a879fd9
b67ddfba48933a33dc3692f7e8777466846f13c3
e3df0098994f43770768eb5e16e000d79343142cbfb8602f3f93bc228b78e7b1
GET /app/66582.f5b1b98a99d95857.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033ace956b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-7bdb"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/45980.79ec118fb5e40ffe.js
6.6 kB URL 20bet.com/app/45980.79ec118fb5e40ffe.js
IP
File type ASCII text, with very long lines (21851)
Hash b0227475aa3067e71cd44162b2f70152
7212eca9aea2f8db291b82e557ada3e2fa481707
a268d56bf6c14fbd646375850187579ee23e006fde2d53a2e7da91b153924fae
GET /app/45980.79ec118fb5e40ffe.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033acec56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-55ab"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/64251.0b08f6d9a00a4197.js
12 kB URL 20bet.com/app/64251.0b08f6d9a00a4197.js
IP
File type ASCII text, with very long lines (34691)
Hash 70a359834f08ea54215b2a8ce9c2d693
8eb20b15bd1ee886af6ddd2d04618ce7d8b5c040
892bed5b13d4278a5b2b736957895295322c105588785379f76ce58a06cb2abf
GET /app/64251.0b08f6d9a00a4197.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0343d3a56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682990-87d3"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:00 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/54764.f136c0b24a32e93a.js
40 kB URL 20bet.com/app/54764.f136c0b24a32e93a.js
IP
File type ASCII text, with very long lines (65456)
Hash 4eae46205bc4a01654aaea5065f06518
f01f397de51a37908d9eb3cc558f8a19e899293a
5647bc671bb159c26a0b72542857a75adb9c279e0d841ade6671633099052238
GET /app/54764.f136c0b24a32e93a.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0339ce256b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568299e-beb9f"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:14 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/73439.f776e6b2499c9704.js
5.2 kB URL 20bet.com/app/73439.f776e6b2499c9704.js
IP
File type ASCII text, with very long lines (12550), with no line terminators
Hash 0845c662a0da355523084a644e0db944
bf3da1f1e7092d3c9177ad2d32f075a426bf93e0
0ec4de4a2884bfe5753eb962652b7c7e34c8c06615a45b670ad0675875d4b0de
GET /app/73439.f776e6b2499c9704.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0341d2256b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-3106"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/6886.eb60c660813a95d9.js
2.8 kB URL 20bet.com/app/6886.eb60c660813a95d9.js
IP
File type ASCII text, with very long lines (5793), with no line terminators
Hash 2291944d6c48fcf98fe4496e896662b9
807896462d48c0a3667b3568e168a50bf5accf28
9e79bb126bd2e8a4d4706faeeaa400ccd2036c919a884e4d093a1579ce6eb20e
GET /app/6886.eb60c660813a95d9.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0341d2056b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-16a1"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/98115.b9c1f3e9342266c5.css
394 B URL 20bet.com/app/98115.b9c1f3e9342266c5.css
IP
File type ASCII text, with very long lines (1236)
Hash e23a161ac30a4150249d0b2a74b56118
76ab3f3150c711832ff03857e0866285d2f16510
d63a83c4a916ca5c08a87981ef0cfcf33895e6e239bb5a2fe803d34f5b568a99
GET /app/98115.b9c1f3e9342266c5.css HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: text/css
cf-ray: 8300f0341d1e56b4-OSL
cf-cache-status: HIT
age: 254
cache-control: public, max-age=14400
etag: W/"65682997-4d5"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:07 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/46688.655377d362fcda3a.js
2.5 kB URL 20bet.com/app/46688.655377d362fcda3a.js
IP
File type ASCII text, with very long lines (7709), with no line terminators
Hash be700c5bc7e2ea408a4079551ad75533
1a91d2124777126a4e9e3250f187b65ab90db4c0
6e03430719a616dde1d3e5218d175aa33ffd1f9b555c8b3a40d9a95946539e4a
GET /app/46688.655377d362fcda3a.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0341d2656b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-1e1d"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/31910.ce1a1ae3227491d5.js
1.6 kB URL 20bet.com/app/31910.ce1a1ae3227491d5.js
IP
File type ASCII text, with very long lines (3337), with no line terminators
Hash b691fb69a53643170294b425efb09d68
84148aa2b1b66b1414da18a1c68b00159bf290f0
d702ac186b5a03437099e6070bb4980018b6a1c9d504e3241674a56d8a8aa505
GET /app/31910.ce1a1ae3227491d5.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0342d2956b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-d09"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/44179.e68824d9b190fdcc.js
200 OK 12 kB URL GET HTTP/2 20bet.com/app/44179.e68824d9b190fdcc.js
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (45688), with no line terminators
Hash 2bd2e8e7bcc95452a4ac8fb644d780cc
1c9b36bad2275534112f9e1fe16ebe850a067d63
964cf045c0f67dc1e4deae8ec0f99faea0f45fd742cbc14bc449207b902d9920
GET /app/44179.e68824d9b190fdcc.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0339ce656b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682990-b27a"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:00 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/71794.ff396911b0bb75dd.js
1.3 kB URL 20bet.com/app/71794.ff396911b0bb75dd.js
IP
File type Unicode text, UTF-8 text, with very long lines (1933), with no line terminators
Hash 295850788beaf3bd17d7d79ebbf322b4
f90a92737555d58ed1ae80ef7d78e9480aeb2b35
e8aaa1f44562b600897c6ccb1073a673abc8e452c738716e0a50981bdc33a7f0
GET /app/71794.ff396911b0bb75dd.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0339ce356b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568299e-808"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:14 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/market-descriptions/get-all-outcomes/no
13 kB URL platform.20bet.com/api/market-descriptions/get-all-outcomes/no
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 814d0c0461dcdb0342e9bd4b5484213a
5c5dfff47bfea62786ab2e52b22615584f1791f8
9b641056d9e69f067ee4a6c7b972742f0c82cc54f8c2b686f3a6d9d2cab95350
GET /api/market-descriptions/get-all-outcomes/no HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:47 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03df82c56b4-OSL
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/user/pinned-events?competitor2Id_neq=&competitor1Id_neq=&oddsExists_eq=1&limit=50&main=1&status_in%5B%5D=0&relations%5B%5D=odds&relations%5B%5D=withMarketsCount&relations%5B%5D=result&relations%5B%5D=league&relations%5B%5D=competitors&relations%5B%5D=sportCategories&relations%5B%5D=tips&relations%5B%5D=additionalInfo
200 OK 14 kB URL GET HTTP/2 platform.20bet.com/api/user/pinned-events?competitor2Id_neq=&competitor1Id_neq=&oddsExists_eq=1&limit=50&main=1&status_in%5B%5D=0&relations%5B%5D=odds&relations%5B%5D=withMarketsCount&relations%5B%5D=result&relations%5B%5D=league&relations%5B%5D=competitors&relations%5B%5D=sportCategories&relations%5B%5D=tips&relations%5B%5D=additionalInfo
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 571ff8554594c208ff73081b017c8bf7
3a3c4035bb172bfa05a56a22fe48cff7d6858fff
de91c68570aa7fc2b383b2b6ff7043389b2456a970f348f75f5d08d0b07e4b85
GET /api/user/pinned-events?competitor2Id_neq=&competitor1Id_neq=&oddsExists_eq=1&limit=50&main=1&status_in%5B%5D=0&relations%5B%5D=odds&relations%5B%5D=withMarketsCount&relations%5B%5D=result&relations%5B%5D=league&relations%5B%5D=competitors&relations%5B%5D=sportCategories&relations%5B%5D=tips&relations%5B%5D=additionalInfo HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:48 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03f589b56b4-OSL
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/data/get-countries
195 kB URL platform.20bet.com/api/data/get-countries
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 195 kB (195088 bytes)
Hash 6ae5a84de15780fcd793c6e82cb27ade
467224bf48b1ba0c5e83aa61811a0d9c5fe8a469
8a1e17165de17bab963517d2f0c4719644bc019b9148df4f0ae7b816ace5f0c8
GET /api/data/get-countries HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:48 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03f88aa56b4-OSL
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/18824.6b17be991741f55a.js
32 kB URL 20bet.com/app/18824.6b17be991741f55a.js
IP
File type Unicode text, UTF-8 text, with very long lines (50047), with no line terminators
Hash 4cd4dfbafda725697f156ea42d53b7a1
5375cc13c22ed027358d229fece21caabecbdf11
b1abe2df73f0f8e4d5721abafc781f31ff9e646754724d3294705c52cff0f2b8
GET /app/18824.6b17be991741f55a.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0342d2c56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-c385"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/19712.d24c238e174c052c.js
18 kB URL 20bet.com/app/19712.d24c238e174c052c.js
IP
File type ASCII text, with very long lines (2285), with no line terminators
Hash c9f97be6ead6a1f1c97a7fed46aaf41b
647f60bfcf452aba313a3c35255bd8e31b8075a4
17a0365f9d08d452e6a9c7462090406a61c71ccf75b1f81520f331c326f533cd
GET /app/19712.d24c238e174c052c.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033acf056b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-8ed"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 07:29:35 GMT
expires: Fri, 29 Nov 2024 07:29:35 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 330913
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
load.sgtm.20bet.com/gtoxbdhhgm.js?id=G-J9LNZYMXZE&l=dataLayer&cx=c
107 kB URL load.sgtm.20bet.com/gtoxbdhhgm.js?id=G-J9LNZYMXZE&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (5955)
Size 107 kB (106580 bytes)
Hash 81f23211c1e60d73e5cf0799a47011b8
d54eadea24eff9dc8d1f5eeee9e7f26b96e4cbb1
34c83b2dd8d4e0dab37f290b0c86938e1a700788a9f4f104879a85c427f9dab2
GET /gtoxbdhhgm.js?id=G-J9LNZYMXZE&l=dataLayer&cx=c HTTP/1.1
Host: load.sgtm.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:24:45 GMT
content-type: application/javascript; charset=UTF-8
cf-ray: 8300f02d3fbc7128-OSL
cf-cache-status: EXPIRED
access-control-allow-origin: *
cache-control: private, max-age=900
expires: Mon, 04 Dec 2023 03:24:45 GMT
last-modified: Mon, 04 Dec 2023 03:22:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
x-robots-tag: noindex
x-stape-version: 1.1.1
referrer-policy: same-origin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: cloudflare
content-encoding: br
platform.20bet.com/api/v2/registration-configurations?desktop=1
2.7 kB URL platform.20bet.com/api/v2/registration-configurations?desktop=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 546d7d9e16f4a456faf76b3d6e295f7c
d95ac557cebd2e5aceb5950528d9e834aa40bd58
e965f7c6d05285af03a9fee7efb6d66a346edffd065a99e3466d637a0570ac8d
GET /api/v2/registration-configurations?desktop=1 HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:47 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03f68a056b4-OSL
content-encoding: br
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
68 B URL c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png
IP
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash e679fbd466a2d656f194a5da4fa083cd
2aa795c7607aa6ea41313be88f1b7a9c1ab516b3
f309b7c03d9cae63a9bedbee6ed655f3dbcdb194132943639344dead5f3b9710
GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 68
date: Thu, 30 Nov 2023 21:58:43 GMT
last-modified: Tue, 15 Dec 2020 08:04:53 GMT
etag: "e679fbd466a2d656f194a5da4fa083cd"
cache-control: no-cache, no-store, must-revalidate
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y3QF__GauY_Wf04RqO6p-ZEC7QheIkwqstC4w_gNmAq5a-7Fb3qkeQ==
age: 278766
X-Firefox-Spdy: h2
20bet.com/app/44749.277136c886ae9326.js
1.6 kB URL 20bet.com/app/44749.277136c886ae9326.js
IP
File type ASCII text, with very long lines (2447), with no line terminators
Hash 8cfaa1c11d59178281464761485161cd
c588a54a8c8baf74799b15cd6e7f6e06c4376d4f
f77903ad4fc2118dab824c1713f3b2ad7b8f374b874f3d75e99beffa823727c5
GET /app/44749.277136c886ae9326.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:48 GMT
content-type: application/javascript
cf-ray: 8300f042f99856b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-98f"
expires: Mon, 04 Dec 2023 07:24:48 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
centrifugo.20bet.com/connection/websocket
0 B URL centrifugo.20bet.com/connection/websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /connection/websocket HTTP/1.1
Host: centrifugo.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://20bet.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jSEhzEbQvUYIlbp/OKAErQ==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 04 Dec 2023 03:24:48 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3APi59vTOnoR7XxU6JPrzbvLZVs=
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8300f0443831568e-OSL
platform.20bet.com/api/v2/casino/last-winners?limit=4&has_live=0
0 B URL platform.20bet.com/api/v2/casino/last-winners?limit=4&has_live=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/last-winners?limit=4&has_live=0 HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:48 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f04528b80b65-OSL
X-Firefox-Spdy: h2
20bet.com/app/91534.9232ff6aab00e836.js
34 kB URL 20bet.com/app/91534.9232ff6aab00e836.js
IP
File type ASCII text, with very long lines (37600), with no line terminators
Hash 45014882b90733c5b02c7fa5c9718d44
b24bdb9c4c8fa720ec485d58256927b494f91a94
9aef7564d9c1aa540037dcd9f8eae5368c4e7d34868c77c556aac0f8faf18581
GET /app/91534.9232ff6aab00e836.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0342d3156b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682990-92e0"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:00 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/81742.b75ec8d80db64542.js
192 kB URL 20bet.com/app/81742.b75ec8d80db64542.js
IP
File type ASCII text, with very long lines (1853), with no line terminators
Size 192 kB (191706 bytes)
Hash 27db5d084a26aa307de03851fde89960
1b1091f605baf7c6e0c723d4e8de61c2db12d18c
b5202638616506dea95c655a4c734a12182315d5dc9e616017bfd721880cdc2a
GET /app/81742.b75ec8d80db64542.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:48 GMT
content-type: application/javascript
cf-ray: 8300f042f99b56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682997-73d"
expires: Mon, 04 Dec 2023 07:24:48 GMT
last-modified: Thu, 30 Nov 2023 06:20:07 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/v2/casino/producer?is_live=0&is_desktop=1
0 B URL platform.20bet.com/api/v2/casino/producer?is_live=0&is_desktop=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/producer?is_live=0&is_desktop=1 HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:48 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f04578c90b65-OSL
X-Firefox-Spdy: h2
platform.20bet.com/api/v2/casino/category?isLive=0&auth=false&categoryRecentlyPlayedEnabled=true
0 B URL platform.20bet.com/api/v2/casino/category?isLive=0&auth=false&categoryRecentlyPlayedEnabled=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/casino/category?isLive=0&auth=false&categoryRecentlyPlayedEnabled=true HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:48 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f04578c60b65-OSL
X-Firefox-Spdy: h2
20bet.com/app/85536.1cc5b8aade7e1e3c.js
363 kB URL 20bet.com/app/85536.1cc5b8aade7e1e3c.js
IP
File type ASCII text, with very long lines (1379), with no line terminators
Size 363 kB (363182 bytes)
Hash c6fb64c9fa8aa0c9bcb3598c4c0694cd
300585061237e73d86b0640efd2139a8c8ded271
78c25be70058a9908cc36ce5648f113f3984312f9802b037aaee5cb433a878af
GET /app/85536.1cc5b8aade7e1e3c.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033acef56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-563"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/assets/banners/casino/header_casino.webp
269 kB URL 20bet.com/assets/banners/casino/header_casino.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x460, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 269 kB (269174 bytes)
Hash 96d6a7f546ed96e3c3b710b0529b6958
767268af900033c2428ea1156f2fc783b95509c1
f95373a54b6e4992d86f6981cac11ec8deea18456eba753753b79619db98f703
GET /assets/banners/casino/header_casino.webp HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:49 GMT
content-type: image/webp
content-length: 269174
cf-ray: 8300f0460a7d56b4-OSL
cf-cache-status: HIT
accept-ranges: bytes
cache-control: public, max-age=14400
etag: "65682aa8-41b76"
expires: Mon, 04 Dec 2023 07:24:49 GMT
last-modified: Thu, 30 Nov 2023 06:24:40 GMT
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
20bet.com/app/30390.9ca45326394465d7.js
8.6 kB URL 20bet.com/app/30390.9ca45326394465d7.js
IP
File type ASCII text, with very long lines (9191)
Hash 04db047000c54c54d29c76a43261acd8
a7204fb2a32be0688eefc1d3ab2bd43d2aa15da7
ee47aa01f788fd42680263b720a236d465728bbe345f94009495cba4d482eacd
GET /app/30390.9ca45326394465d7.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0342d2756b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-2437"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/67380.c2666b06a0fef023.js
9.1 kB URL 20bet.com/app/67380.c2666b06a0fef023.js
IP
File type ASCII text, with very long lines (712), with no line terminators
Hash a5994045d9555f87f6a7277cf846b540
3a02222c6df5714377283b30515e2b1bd8fee212
3336f5547f48be91f96c5b747c9dd174669c0ad5cf743e195bef4e6ee925ce14
GET /app/67380.c2666b06a0fef023.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:48 GMT
content-type: application/javascript
cf-ray: 8300f04309a456b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568299e-2c8"
expires: Mon, 04 Dec 2023 07:24:48 GMT
last-modified: Thu, 30 Nov 2023 06:20:14 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/50381.45c005f2c59c1974.js
16 kB URL 20bet.com/app/50381.45c005f2c59c1974.js
IP
File type Unicode text, UTF-8 text, with very long lines (2246), with no line terminators
Hash 0ed5e7245bb42136dced69844e692240
02d0d0eea4d5ee836b2cb8266f82ead728cdea0f
3ed1cbe4f71b5408fd7becbd6d02074396936a8cab6c42868c6689e2457f0181
GET /app/50381.45c005f2c59c1974.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0343d3656b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-8c8"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/28356.225016ae833d69fb.js
20 kB URL 20bet.com/app/28356.225016ae833d69fb.js
IP
File type Unicode text, UTF-8 text, with very long lines (12041), with no line terminators
Hash b8aa2d4564f605d329d4e29d03e0f77c
8c7e76056fba11dccff34302811fa12b7f0f2129
3ee3e300d1be452911afd098944c95d07500a65397e145150487b91d74a5b783
GET /app/28356.225016ae833d69fb.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033bcf556b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682990-2f0a"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:00 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
0 B URL a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?type=js&aid=1121&id=1859 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Cookie: zuuid=928d857d-e1bc-4201-b136-1b0b50ad5c6e; c=1701660285; zuuid_lu=1701660285; zuuid_k=1; zuuid_k_lu=1701660285; bss=!bidswitch,470917485; cm2=!bidswitch,470989485
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Mon, 04 Dec 2023 03:24:49 GMT
Content-Length: 0
Connection: keep-alive
20bet.com/assets/promo-offer-popup/accounting-coins-stack.svg
4.6 kB URL 20bet.com/assets/promo-offer-popup/accounting-coins-stack.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (911)
Hash 1218647f93b8ae492cde67702ec51327
30b6ce07cf54f4e9b8309b26b1787872cd99f8bd
f7dc70c8646d3ce98f63d99e391b88a9da13ea43133dbd03ada89a2d1a269142
GET /assets/promo-offer-popup/accounting-coins-stack.svg HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:49 GMT
content-type: image/svg+xml
cf-ray: 8300f0473aca56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682ab6-16e9"
expires: Mon, 04 Dec 2023 07:24:49 GMT
last-modified: Thu, 30 Nov 2023 06:24:54 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/49236.3a0496688b108fe2.js
197 kB URL 20bet.com/app/49236.3a0496688b108fe2.js
IP
File type Unicode text, UTF-8 text, with very long lines (26322), with no line terminators
Size 197 kB (196947 bytes)
Hash fdfea762e62e2a405a691445f6fc6f95
ba59413f7e2c252b1214b711cf6f9d3bbcddb478
dd3e056162ace789541fa38909a4a85dd0d6401cc2e6e9406de1674fc2f8eb78
GET /app/49236.3a0496688b108fe2.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033bcf656b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682997-66d3"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:07 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/31586.d4c300b02ea789ab.js
39 kB URL 20bet.com/app/31586.d4c300b02ea789ab.js
IP
File type Unicode text, UTF-8 text, with very long lines (45328), with no line terminators
Hash bdc5625caafc49356ebb3a5512552633
84c4003bb7b5a4c36c94b1b1275f77800e84f912
534774909bdbb9192af3931bcf1b3e186f538411b4822379395c0349bc11fb47
GET /app/31586.d4c300b02ea789ab.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033dcff56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-b140"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/providers_small/color/all-providers.svg
69 kB URL dwmu1hf7ovvid.cloudfront.net/logos/providers_small/color/all-providers.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1039)
Hash 368c15a3508982efb54c11e9eaf3e480
2e2113d3674937ed0eca0b12628943646d8bee7e
56ea6cffe38f580d890ae291db5b9b386a0e92440da727bce7f932ad0fc81fe4
GET /logos/providers_small/color/all-providers.svg HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 68663
date: Sun, 03 Dec 2023 15:23:52 GMT
last-modified: Tue, 15 Jun 2021 13:20:51 GMT
etag: "368c15a3508982efb54c11e9eaf3e480"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I1v1f6QWuEr7NXu92dn5SwpFqMGesLrJjJULrqL8q6I3kJvOvHtjPw==
age: 43258
X-Firefox-Spdy: h2
20bet.com/assets/placeholders/games/190x190.png
7.0 kB URL 20bet.com/assets/placeholders/games/190x190.png
IP
File type PNG image data, 190 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash 9283bd080c01ccbbb87480d4baecae32
f7bcba62d6571f4d33fd590d09510442bd3f3f47
8860cf92a6813fb4c5c96574e04f1aebfbe670f84d05a4563efbb8a1248ad4bc
GET /assets/placeholders/games/190x190.png HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:49 GMT
content-type: image/png
content-length: 6980
cf-ray: 8300f04a0ba056b4-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 4095
cache-control: public, max-age=14400
etag: "65682aa2-1b44"
expires: Mon, 04 Dec 2023 07:24:49 GMT
last-modified: Thu, 30 Nov 2023 06:24:34 GMT
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2F20bet.com%2Fno%2Fcasino%2Ffast-games%3Fbtag%3D655020_147C492314EF4FF7A76BCA1383E14FF7%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26utm_term%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26subid%3D0d80b2t3vbzft8n2b3&channel_type=code&jsonp=__zkled8abi8
896 B URL api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2F20bet.com%2Fno%2Fcasino%2Ffast-games%3Fbtag%3D655020_147C492314EF4FF7A76BCA1383E14FF7%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26utm_term%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26subid%3D0d80b2t3vbzft8n2b3&channel_type=code&jsonp=__zkled8abi8
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (896), with no line terminators
Hash 0952cf144ddba9dd6760f395093893f3
32cb54c7356a5fc9823344a2634e1966191ec3ea
06bd409c2b9c576e039d511c93a8af3274419c1b8bbbd0a0e4b642d3d0971d5c
GET /v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2F20bet.com%2Fno%2Fcasino%2Ffast-games%3Fbtag%3D655020_147C492314EF4FF7A76BCA1383E14FF7%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26utm_term%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26subid%3D0d80b2t3vbzft8n2b3&channel_type=code&jsonp=__zkled8abi8 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: frame-ancestors https://20bet.com/;
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-frame-options: allow-from https://20bet.com/
content-length: 896
date: Mon, 04 Dec 2023 03:24:49 GMT
X-Firefox-Spdy: h2
20bet.com/app/99085.c5ac5adfa10d0e36.js
21 kB URL 20bet.com/app/99085.c5ac5adfa10d0e36.js
IP
File type ASCII text, with very long lines (16594)
Hash dd1cc91660a4b292ff4231e2aa9bc882
b4b6daf80a66e5d8012fa9550dbd995f5364d918
9f2e837c2c6602c9f88a3cba941f92da85f640a7143c268637494cf2052da14e
GET /app/99085.c5ac5adfa10d0e36.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0341d1d56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682997-4122"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:07 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.softswiss.net/i/s4/playngo/LegacyofDead.webp
11 kB URL cdn.softswiss.net/i/s4/playngo/LegacyofDead.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1eae95366105cb183c6431fe0d10ee58
1b3b21e57276bbfdace980a728f7b4a7a1c1334e
ff7b2f7eb0cf8b7ef51b2eb6ae43685d8c6ea61f8334b7d3727f1f70a8f26e63
GET /i/s4/playngo/LegacyofDead.webp HTTP/1.1
Host: cdn.softswiss.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:49 GMT
content-type: image/webp
content-length: 10638
last-modified: Tue, 24 Dec 2019 09:20:03 GMT
etag: "5e01d843-298e"
expires: Sun, 03 Dec 2023 19:24:47 GMT
cache-control: max-age=86400
referrer-policy: strict-origin-when-cross-origin
cf-cache-status: HIT
age: 46383
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300f04a68d5b512-OSL
X-Firefox-Spdy: h2
20bet.com/app/51045.eeda8c1186e9bbdf.css
90 kB URL 20bet.com/app/51045.eeda8c1186e9bbdf.css
IP
File type ASCII text, with very long lines (13037)
Hash b856aecb62b26bcb8b6a6b62ba59a269
9c308ff902122ecbbe9ff66b424d4d8e8b7baf0f
72d202ab7c9768c0d43fbd1e090aeafc18b5833467043bb444774bf4a4607214
GET /app/51045.eeda8c1186e9bbdf.css HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: text/css
cf-ray: 8300f0349d6a56b4-OSL
cf-cache-status: HIT
age: 250
cache-control: public, max-age=14400
etag: W/"6568299e-3009c"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:14 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/38082.0743c8d693c10787.js
16 kB URL 20bet.com/app/38082.0743c8d693c10787.js
IP
File type ASCII text, with very long lines (12567), with no line terminators
Hash 9a7a0d623cb85830c445331ab19f9a1e
a39215ccb3b7a2cffcef794863bce5bab9898994
f2e36c010a780b7375e782ae3442d726cf4037742ef4d81aa449b43981897276
GET /app/38082.0743c8d693c10787.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0341d1c56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682990-3117"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:20:00 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
2.8 kB URL c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
IP
File type ASCII text, with very long lines (7677), with no line terminators
Hash b4c7ddd9b2b0e65563b2443eee96449a
3871db2a8e11b1a83fe034977f0a3dd71dee414a
331dbf0219929f7acec845ccb3ab924828a370b8bdad8f3607a7256ac9160ddc
GET /apg-seal.js HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Mon, 04 Dec 2023 03:20:12 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"d98-/G6u4Q+afx0svkvxpnfFN78lmMw"
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300e983f9363aa2-FRA
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cMs-WpJIMf_pRogICB4kbz-E6DW77HNsixn8Sp-ZIx15CpJSVtozJA==
age: 277
X-Firefox-Spdy: h2
platform.20bet.com/api/v3/casino/game?title=&per_page=25&category_id=53&page=1&has_live=0&is_desktop=1&perPage=25
0 B URL platform.20bet.com/api/v3/casino/game?title=&per_page=25&category_id=53&page=1&has_live=0&is_desktop=1&perPage=25
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v3/casino/game?title=&per_page=25&category_id=53&page=1&has_live=0&is_desktop=1&perPage=25 HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:50 GMT
content-length: 0
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f0513cd90b65-OSL
X-Firefox-Spdy: h2
api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_d06e8caf15ee8a57ebf38c607e38772f&language=en&group_id=24&jsonp=__lc_localization
3.8 kB URL api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_d06e8caf15ee8a57ebf38c607e38772f&language=en&group_id=24&jsonp=__lc_localization
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (11083), with no line terminators
Hash 106fe0addaf99d77939a178e79e6136c
83de3b6160f1027b4d333792da938e983516150a
2a3cd9f680feeedfc7892a451d8d66e3b4fe779b65534c66b16dcd7c5241a29a
GET /v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_d06e8caf15ee8a57ebf38c607e38772f&language=en&group_id=24&jsonp=__lc_localization HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2024-05-31
vary: Accept-Encoding
cache-control: public, max-age=600
expires: Mon, 04 Dec 2023 03:34:50 GMT
date: Mon, 04 Dec 2023 03:24:50 GMT
content-length: 3840
X-Firefox-Spdy: h2
secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=24&embedded=1&widget_version=3&unique_groups=1
2.6 kB URL secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=24&embedded=1&widget_version=3&unique_groups=1
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8911), with no line terminators
Hash 5d5e2818bfde3f97c7c717552a9d4435
d9152624df02dd703ca4b9090b2def298942f080
70f82e173809bbbcd4884d0b853599ec31f03527a47282721d722c69d9de56d3
GET /customer/action/open_chat?license_id=9054575&group=24&embedded=1&widget_version=3&unique_groups=1 HTTP/1.1
Host: secure.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:24:50 GMT
content-length: 2616
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/53_bgaming/colored/bgaming.svg
886 B URL d3c3rwqla6qxaf.cloudfront.net/producer/53_bgaming/colored/bgaming.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (886), with no line terminators
Hash 0ff62b362e019eccdd6e0b8a33b6ea4d
8a04906b671d7c466879d53a8e3a1edbf338edd4
de0b5943f68d8517b5de8c89800d2d43e221cd940fb61be5874a3c366c752165
GET /producer/53_bgaming/colored/bgaming.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 886
last-modified: Thu, 12 Oct 2023 08:30:28 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 20:56:16 GMT
etag: "0ff62b362e019eccdd6e0b8a33b6ea4d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: liXPE4vXq95OzhLYAkJMHMhdohwS0-EEqG_Dv2JMypk41PxS0y9uEg==
age: 23316
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/92_caleta/colored/caleta.svg
930 B URL d3c3rwqla6qxaf.cloudfront.net/producer/92_caleta/colored/caleta.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (930), with no line terminators
Hash e68b78188291c5cf9e61049bd3f1f054
83779f27800e86ebcb1849696908c99d8f48e7b7
52864c9ffe0a489f09d22c5eff9d285083e1c3fd4f7ad03577c1f231c2645b7a
GET /producer/92_caleta/colored/caleta.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 930
date: Sun, 03 Dec 2023 15:51:53 GMT
last-modified: Thu, 12 Oct 2023 08:30:28 GMT
etag: "e68b78188291c5cf9e61049bd3f1f054"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: z6d42HqAwdEwLPq9khzlUfHs1Gk1ZGWVIJvndq8Ss2bRPJeO_d0L9Q==
age: 41579
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/24_evoplay/colored/evoplay1.svg
238 B URL d3c3rwqla6qxaf.cloudfront.net/producer/24_evoplay/colored/evoplay1.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash ae597e182a9c21635eb422106bf2c8d9
27f93951ed1b018595687b5a5cda7ec4c0530a2b
aafe6d7200213691f17887d485c742fbb6378e9477ae6472c580f8ca601d5461
GET /producer/24_evoplay/colored/evoplay1.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 238
date: Sun, 03 Dec 2023 19:57:15 GMT
last-modified: Thu, 12 Oct 2023 08:31:14 GMT
etag: "ae597e182a9c21635eb422106bf2c8d9"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zr31hGC_VbBlVfN5zclKOvy4HhZRWDXLLzMtKtox3sWbtKVGFVKsFw==
age: 26857
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/173_hacksaw/colored/hacksaw.svg
501 B URL d3c3rwqla6qxaf.cloudfront.net/producer/173_hacksaw/colored/hacksaw.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (501), with no line terminators
Hash f23a639b2ab1aff6f03e751da9e200d3
f5f91d3183ecc8014aa2a4e1d54064a6407adc84
be4060184caf34815730886af13b312ca2980e6b8d1342d1de46fca5f65d472f
GET /producer/173_hacksaw/colored/hacksaw.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 501
date: Sun, 03 Dec 2023 17:29:36 GMT
last-modified: Thu, 12 Oct 2023 08:31:12 GMT
etag: "f23a639b2ab1aff6f03e751da9e200d3"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: leqCV-ViWD4kD3_7y6CYU_Ii5ekgkhxh4c_YaBqQSv_FE_BMjWCKYQ==
age: 35716
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/34_kiron/colored/kiron.svg
580 B URL d3c3rwqla6qxaf.cloudfront.net/producer/34_kiron/colored/kiron.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (580), with no line terminators
Hash 25aa4d754ee3092ad6d4ddf0f0ab2451
100e76644cc4abf7d7ddc52cad541e4e2eb24217
a71e4be03dc1bad19da6880ed07f3046226c7955144ff2292d18051b8f90b554
GET /producer/34_kiron/colored/kiron.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 580
date: Sun, 03 Dec 2023 19:45:42 GMT
last-modified: Thu, 12 Oct 2023 08:30:42 GMT
etag: "25aa4d754ee3092ad6d4ddf0f0ab2451"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wO5B0iqkyyYwwdWumOCiHWD2OUnJFhXXPfUS0b48TVRsgo1lCHUfxg==
age: 27550
X-Firefox-Spdy: h2
20bet.com/app/68530.56128c8d2a8d7f70.js
1.7 kB URL 20bet.com/app/68530.56128c8d2a8d7f70.js
IP
File type ASCII text, with very long lines (2166), with no line terminators
Hash 0e563bb192846c1970b9ea072d8a8f14
75b66c3cdcc6b587225418bdc8d663730163de8e
5837ffe30966e8deee504adff90939f25f1ccb682578e22cf03c07753781f17d
GET /app/68530.56128c8d2a8d7f70.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:50 GMT
content-type: application/javascript
cf-ray: 8300f050fd6056b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-876"
expires: Mon, 04 Dec 2023 07:24:50 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/2_netent/colored/netent.svg
332 B URL d3c3rwqla6qxaf.cloudfront.net/producer/2_netent/colored/netent.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (332), with no line terminators
Hash e7f675b743ce8e3105ea3057deb91475
bca337d10cf50182b69af3c549f9963fee9fef27
45f2374bae4c0fcbca4fae64c0520671f0faa70a443443aa1b966fc3dd736400
GET /producer/2_netent/colored/netent.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 332
date: Sun, 03 Dec 2023 19:51:17 GMT
last-modified: Thu, 12 Oct 2023 08:31:18 GMT
etag: "e7f675b743ce8e3105ea3057deb91475"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BT5CWWxudqn1G9K1ZCoQLBNuQf_G985BfLZelpqJRId_3ASnpWQauQ==
age: 27215
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/106_nolimit/colored/nolimit.svg
521 B URL d3c3rwqla6qxaf.cloudfront.net/producer/106_nolimit/colored/nolimit.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (521), with no line terminators
Hash 8220d8f136572b0d2b675a74d6b5404b
cac2c9643d313ad87894b601d030cd3b96e11bd1
ee3b288302ae51a0174553a10c9ab79580d26ecccdd610800a7332513be39e13
GET /producer/106_nolimit/colored/nolimit.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 521
last-modified: Thu, 12 Oct 2023 08:30:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 20:47:51 GMT
etag: "8220d8f136572b0d2b675a74d6b5404b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mwxls2Cl8qb-pipb1qKksiDq8QjhOfpOkYuuxbR1y5Jr584Ks3TmOg==
age: 23821
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/8_gameart/colored/gameart.svg
669 B URL d3c3rwqla6qxaf.cloudfront.net/producer/8_gameart/colored/gameart.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (669), with no line terminators
Hash 3b2b942259dcffd8a1c1becb379cc680
085577a2a0bd33d5355050249d7e782197b9c9ad
405f30a9c83fd1694576326527556dbc2d96d96264db02ce8c43c7bbb78c1592
GET /producer/8_gameart/colored/gameart.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 669
date: Sun, 03 Dec 2023 19:45:38 GMT
last-modified: Thu, 12 Oct 2023 08:30:49 GMT
etag: "3b2b942259dcffd8a1c1becb379cc680"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7P6vhdN_ysxeYGNomYn4yLLnmSMLJC1-Vutq-iqFCZ1Y47hP9zM2WA==
age: 27554
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/199_oryx/colored/oryx.svg
629 B URL d3c3rwqla6qxaf.cloudfront.net/producer/199_oryx/colored/oryx.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (629), with no line terminators
Hash c359219051cad158d88279406b83b14f
4e89849cffffd460eaccc7d72105f70782cd60a1
cd988616a7acbe64ba360caabf05996c916bcf14697fbb81c9ad67c5ac9c4d31
GET /producer/199_oryx/colored/oryx.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 629
date: Sun, 03 Dec 2023 19:45:42 GMT
last-modified: Thu, 12 Oct 2023 08:30:32 GMT
etag: "c359219051cad158d88279406b83b14f"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gmvmC9PZ5jNfD_7zQ7KscTuYqBnhYNmhl_1wMBnDxpxAdS7ltfHniQ==
age: 27550
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/9_pragmaticplay/colored/pragmaticplay.svg
757 B URL d3c3rwqla6qxaf.cloudfront.net/producer/9_pragmaticplay/colored/pragmaticplay.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (757), with no line terminators
Hash dab7d0af9f6bc1ee58b7c0d7cf62f228
6f1c895c2546515a510784afb1f945b66d615c3c
20724a22816868997d66ec61ee51c3c447e75ae3d656862abb1d8ce54196b380
GET /producer/9_pragmaticplay/colored/pragmaticplay.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 757
last-modified: Thu, 12 Oct 2023 08:30:59 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 20:56:16 GMT
etag: "dab7d0af9f6bc1ee58b7c0d7cf62f228"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NyledWgUMj4Ujq3vHL_GvsBYRmhLN-hvKaDz7t2ngZ0ky2bxqzhLbA==
age: 23316
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/44_quickspin/colored/quickspin.svg
771 B URL d3c3rwqla6qxaf.cloudfront.net/producer/44_quickspin/colored/quickspin.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (771), with no line terminators
Hash 9d73acb0da0d01a1a0f6f6a35bf7ce58
f2a0e568a855f88ba0a1d87829d07cdcc9d3bb08
fefaff2e47a83a38439a5cbf7e3040467b0eed39ff21edd8e39dc50e05da4bd5
GET /producer/44_quickspin/colored/quickspin.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 771
last-modified: Thu, 12 Oct 2023 08:30:47 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 16:32:49 GMT
etag: "9d73acb0da0d01a1a0f6f6a35bf7ce58"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xS0ORz_RtvBj_MYFW1mKbPAEKRjxRc3IqEOTtPdTcNIrzBc9fmlRBA==
age: 39123
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/200_swintt/colored/swintt.svg
369 B URL d3c3rwqla6qxaf.cloudfront.net/producer/200_swintt/colored/swintt.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (369), with no line terminators
Hash 65665fb7020ecf5c9291d6e1d025a831
2474b2695a014c2855774f4b3d4bc8f51ac999fd
4c4339e9a9bd64f71e6f15985ed21f4b2da056d0fc3f1dd6bdaa4250a89a7c0c
GET /producer/200_swintt/colored/swintt.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 369
date: Mon, 04 Dec 2023 01:23:03 GMT
last-modified: Thu, 12 Oct 2023 08:30:33 GMT
etag: "65665fb7020ecf5c9291d6e1d025a831"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GzfEZAUziBiug-LjXxQZ0i-lR6fuvoFm_RxnNDnJ6ydxsUhWXmREjQ==
age: 7309
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/26_thunderkick/colored/thunderkick.svg
481 B URL d3c3rwqla6qxaf.cloudfront.net/producer/26_thunderkick/colored/thunderkick.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (481), with no line terminators
Hash bebf1853f49014751414c2dcf5e8f1d1
c271932cf6190e8be59141e9da3171eb733a437c
f1c6575f477ebe45f9e103ee28e13f1a7b77382fbdb9a231687e20f75a32edab
GET /producer/26_thunderkick/colored/thunderkick.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 481
date: Sun, 03 Dec 2023 19:45:42 GMT
last-modified: Thu, 12 Oct 2023 08:30:57 GMT
etag: "bebf1853f49014751414c2dcf5e8f1d1"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eKFiwpdhRI6ysrhWhEdAHTuuwa7n3L-ZOjJx0tVPlvyiwrcTbGlX_g==
age: 27550
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/316_triplecherry/colored/triplecherry.svg
770 B URL d3c3rwqla6qxaf.cloudfront.net/producer/316_triplecherry/colored/triplecherry.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (531)
Hash cedcedf423f918908dc373e56ede15a9
428b8dbc269140b5428d21783c40eb4ac1cd38b6
c40dd5d7704059d515b736dd24c1fb0f03c218c91341c2e8ae9fb07565215312
GET /producer/316_triplecherry/colored/triplecherry.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 770
date: Sun, 03 Dec 2023 11:44:18 GMT
last-modified: Thu, 12 Oct 2023 08:31:29 GMT
etag: "cedcedf423f918908dc373e56ede15a9"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: IJw3KHkcjDPqJbnZsf7RM2UhCmijxbb27LC1kuVCQdcp-074muBIrA==
age: 56434
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/20_wazdan/colored/wazdan.svg
525 B URL d3c3rwqla6qxaf.cloudfront.net/producer/20_wazdan/colored/wazdan.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (525), with no line terminators
Hash a723506ecb6eecbffe70e5cb87c87945
08f32d3dc7ac49d710ce7fde5e90d871ce917464
7108ea892cb8614c56589b274f45afd556a5bea54e1e9d047f41749964303721
GET /producer/20_wazdan/colored/wazdan.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 525
date: Sun, 03 Dec 2023 19:45:38 GMT
last-modified: Thu, 12 Oct 2023 08:31:04 GMT
etag: "a723506ecb6eecbffe70e5cb87c87945"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VlDvTO3gub8HWce6NcFzQCs4x9C7eFk_vr6kZdph2FYBL3VjNK5twg==
age: 27554
X-Firefox-Spdy: h2
20bet.com/app/38395.d6eedb39f190df6f.js
3.3 kB URL 20bet.com/app/38395.d6eedb39f190df6f.js
IP
File type ASCII text, with very long lines (7615), with no line terminators
Hash 0b1f8497307b43ab41743976b5b97216
241acf8b026a906727c0a9fe41c583727a7daf3c
fde79c48e1d69de1c7ce139520bfffcd8d3c178efaccee66e937cd166d8109dc
GET /app/38395.d6eedb39f190df6f.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:49 GMT
content-type: application/javascript
cf-ray: 8300f0490b5d56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568297b-1dbf"
expires: Mon, 04 Dec 2023 07:24:49 GMT
last-modified: Thu, 30 Nov 2023 06:19:39 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-tetherusd.svg
1.7 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-tetherusd.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash fd99af454ab5449c16b46e4d7c8ba008
6cd8211fa712a2aa2898333da10ac0522f560376
6a8c6c647ad8eb9dad4f961e7cb316f43c015a8b9c4884195a1dc4d6538bdfe6
GET /img/payment-iq-cryptocurrency-tetherusd.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1685
x-amz-id-2: aCPE4DixZPlQYzTNcK5Mk3fQDDyQUPm2ZoY9yUYmAaPqv/Y2cMX3EE4Q52ClpzkW5WQWR/5nNrw=
x-amz-request-id: K067AYS6E55NMFRY
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Fri, 06 May 2022 12:42:46 GMT
etag: "fd99af454ab5449c16b46e4d7c8ba008"
x-amz-meta-s3cmd-attrs: atime:1651840776/ctime:1651840774/gid:2033007316/gname:AGCSOFT%5CDomain%20Users/md5:fd99af454ab5449c16b46e4d7c8ba008/mode:33188/mtime:1651840769/uid:1501083981/uname:yevhen.karavanchenko
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QtGMdDV2OaMOKPKG_jUVj0NDwSHO6CeT4nrekPS3J6IRguVPSNH_6g==
X-Firefox-Spdy: h2
20bet.com/app/67572.9a02bac82b778802.js
13 kB URL 20bet.com/app/67572.9a02bac82b778802.js
IP
File type ASCII text, with very long lines (1877), with no line terminators
Hash 21df8e38f16a024643072886040049f6
e7ff22ae35820dfe982ce2f2f67096eb858f55c3
a70b80ab76696d8af77fa2bec106b1a04e1d59d2bbf2351351488dbb1e216c10
GET /app/67572.9a02bac82b778802.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:50 GMT
content-type: application/javascript
cf-ray: 8300f050fd6856b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682982-755"
expires: Mon, 04 Dec 2023 07:24:50 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-bank-interac.svg
3.7 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-bank-interac.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash a86d7530ab31d4d8168ca27c921f11f7
ad02e815accc5dca106dc583234853ad8bde09fe
a02a3c8cf56a8ddfd893498accbd987a279fbff825fffaa1fb1bde50ea84273a
GET /img/payment-iq-bank-interac.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3668
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Fri, 08 Sep 2023 10:26:30 GMT
etag: "a86d7530ab31d4d8168ca27c921f11f7"
x-amz-server-side-encryption: AES256
x-amz-meta-s3cmd-attrs: atime:1694168786/ctime:1694168785/gid:20/gname:staff/md5:a86d7530ab31d4d8168ca27c921f11f7/mode:33188/mtime:1694168784/uid:501/uname:nikitaschekin
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wRGtc0COk_n7OB2kcYbUYyWS0F_4qkBDZFh8coThr1NflsVr9grxjg==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-ripple.svg
1.2 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-ripple.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash a1e8e28871215cbde7bf27116b157863
9b9d8ac4f0cb064ee240c46a4399d5a4afced532
5a395dcd8cddd8c95b41105eff08d8384359c6e29a0221071b17dd76a6988526
GET /img/payment-iq-cryptocurrency-ripple.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1228
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Thu, 28 Jul 2022 12:07:13 GMT
etag: "a1e8e28871215cbde7bf27116b157863"
x-amz-meta-s3cmd-attrs: atime:1659010003/ctime:1659010009/gid:20/gname:staff/md5:a1e8e28871215cbde7bf27116b157863/mode:33188/mtime:1659009991/uid:501/uname:nikitaschekin
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IwnsL8o8k9oKlL482mKP9bOTuSGGJmu3eHrt11knCbm5geb8LMuAgA==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-ethereum.svg
1.8 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-ethereum.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 2819177e29240e9abba945193708002d
a2be8ffbb3100098dd943bb859fb617c3daf2635
f4a3adf3ced22ef3a3a6a1cb8e26c619ead66f51d71d3896701680222fc4d9df
GET /img/payment-iq-cryptocurrency-ethereum.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1785
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Fri, 06 May 2022 12:42:20 GMT
etag: "2819177e29240e9abba945193708002d"
x-amz-meta-s3cmd-attrs: atime:1651840619/ctime:1651840618/gid:2033007316/gname:AGCSOFT%5CDomain%20Users/md5:2819177e29240e9abba945193708002d/mode:33188/mtime:1651840608/uid:1501083981/uname:yevhen.karavanchenko
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5vSbpGCbYnQA7W64MVdxif9RuJOtR_aORwn3tF_cgfo8-wsk7d1Nmg==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-litecoin.svg
2.0 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-litecoin.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 8c91edb86e4201b14ba655250a221520
37aa735bb6ca862093601c9272017b8abc58a582
7f7a1ee93c3641f87151e64e040b3a4e33cf921fdd4cd21c4e7dca4f966f6978
GET /img/payment-iq-cryptocurrency-litecoin.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1955
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Fri, 06 May 2022 12:42:27 GMT
etag: "8c91edb86e4201b14ba655250a221520"
x-amz-meta-s3cmd-attrs: atime:1651840650/ctime:1651840649/gid:2033007316/gname:AGCSOFT%5CDomain%20Users/md5:8c91edb86e4201b14ba655250a221520/mode:33188/mtime:1651840646/uid:1501083981/uname:yevhen.karavanchenko
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1D46UtCmNEaHut7F1c0ubilpLq4OpdwOphBQwl3-GY8dVtAHRH0gpg==
X-Firefox-Spdy: h2
20bet.com/app/25271.3fac05380575d948.js
9.8 kB URL 20bet.com/app/25271.3fac05380575d948.js
IP
File type ASCII text, with very long lines (5240), with no line terminators
Hash e4906eff90f94b1934cf9b2b403be124
dc4939232cc34e8e4e2c247df54bc03e6e9645be
8a9f9fadef88555b3288c164f4b3c0b71536d8845f507b6adf6fffc00b0b7a0b
GET /app/25271.3fac05380575d948.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:50 GMT
content-type: application/javascript
cf-ray: 8300f050fd6356b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568299e-1478"
expires: Mon, 04 Dec 2023 07:24:50 GMT
last-modified: Thu, 30 Nov 2023 06:20:14 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-bitcoin.svg
1.9 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-cryptocurrency-bitcoin.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (807), with CRLF line terminators
Hash 40b876dbba657dc8fa89754bba6a94a5
4d3186e82d2d9bad11b5f6c8ba75a456ce6d19fb
f542c59efd4bfd7e917ad2f6c6de8ea67f0d962742b2c4bdf354385a5ffa824b
GET /img/payment-iq-cryptocurrency-bitcoin.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1867
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Fri, 06 May 2022 12:41:57 GMT
etag: "40b876dbba657dc8fa89754bba6a94a5"
x-amz-meta-s3cmd-attrs: atime:1651839897/ctime:1651839896/gid:2033007316/gname:AGCSOFT%5CDomain%20Users/md5:40b876dbba657dc8fa89754bba6a94a5/mode:33188/mtime:1651839887/uid:1501083981/uname:yevhen.karavanchenko
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FtcgnDFoC3Yvuy4GPwT4PzxhbnODbHUsbQVSR1t6i-DlLT-LUpqxXA==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-neteller-neteller.svg
1.3 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-neteller-neteller.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1199), with CRLF line terminators
Hash 76a5b4b5026d360a5ceee36e1e4899bf
3e7b3611971147bb42b74db555f7cb1bfc5384e0
c8f42775ae5019f51376eb33aff70d3f5ec855483326fcfa4f0084c2d961ad23
GET /img/payment-iq-neteller-neteller.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1306
x-amz-id-2: JS+H0bQavqhXfpNDexluBy2qMn+UN2cAzt0vh7EphZI6cU2SBrKYS7zwU833/QvzQ12ARCvSdGg=
x-amz-request-id: K069DN7CB0V5AX6D
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Wed, 22 Sep 2021 12:02:06 GMT
etag: "76a5b4b5026d360a5ceee36e1e4899bf"
x-amz-meta-s3cmd-attrs: md5:76a5b4b5026d360a5ceee36e1e4899bf
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EcXnv6Axy5h1QcfBH1TulfxK7rQ5s2GvehkMu4fdQZkrjUEFPtz74Q==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-skrill-skrill.svg
1.9 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-skrill-skrill.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1578), with CRLF line terminators
Hash 1b7572d6671dcf82401653b6221ee54d
f101a5c9bc92b9aab8dc500535c78a572db5c25b
43b8760fcb07ceb8106e1770a0a807a546db76110fad6ce7d31ee263aeeff5ba
GET /img/payment-iq-skrill-skrill.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1913
x-amz-id-2: Kct38LmJoRFSaxefTzsfSu27JSplh1HQb/7ZIYYjMxGC/wE2WbzZ3YS8xRsUvs36euerYJPdY/zUMp5Q9J9Jdw==
x-amz-request-id: K06EGGTCZ9HWX5D8
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Wed, 22 Sep 2021 12:02:06 GMT
etag: "1b7572d6671dcf82401653b6221ee54d"
x-amz-meta-s3cmd-attrs: md5:1b7572d6671dcf82401653b6221ee54d
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yq16m6vPuOfp8pBiUqactRrqto7ayN2Ov2uIhDDffMS6VoP0VYchBw==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-visa.svg
1.9 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-visa.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash aeac19527d7d39db9d3f318d2996ce0d
b59de14e18f7fe3bd3e71bc2056b8626687c0649
2a85a40eedf0a1e3131804dc968beb0a1ca52c314fcc0359e7ad790f0817d705
GET /img/payment-iq-creditcard-visa.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 1872
vary: Accept-Encoding
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Wed, 22 Sep 2021 12:02:04 GMT
etag: "aeac19527d7d39db9d3f318d2996ce0d"
x-amz-meta-s3cmd-attrs: md5:aeac19527d7d39db9d3f318d2996ce0d
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7vN8xmucupjMbFkPlZXY7D_HCveAf-_svcg__sOOvh-d1nGDHIx9oQ==
X-Firefox-Spdy: h2
20bet.com/app/45584.560cb643db4fdf41.js
3.2 kB URL 20bet.com/app/45584.560cb643db4fdf41.js
IP
File type ASCII text, with very long lines (865), with no line terminators
Hash 5434e86a627419eeda5e539ec568c10c
7b9161f17e296c01e1cda4b143bcbf1e7beb9196
8e48b537efe4d360b13570ca2f85c8b12268d88d8de0dc250af6d6f282549f29
GET /app/45584.560cb643db4fdf41.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:50 GMT
content-type: application/javascript
cf-ray: 8300f050fd6556b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-361"
expires: Mon, 04 Dec 2023 07:24:50 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-jeton-jeton.svg
5.5 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-jeton-jeton.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5347), with CRLF line terminators
Hash 364fab25b65b27e259b39a9d26c93f9f
4c3273a2e7386c9f82241ecf18e091eabe8bb527
848d629baeeb43c44b7171790a27e57ff9c073603db5e5601a8499a1cbed6203
GET /img/payment-iq-jeton-jeton.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5454
x-amz-id-2: GUTQwXUH1tCUZjvlcrzW51i2NrgrShL13G4ywz0XxB9/NxuO/T0AVVKdym7EtA+ycF6fGslIbgg=
x-amz-request-id: K06428ZDTTBDPBTC
date: Mon, 04 Dec 2023 03:24:52 GMT
last-modified: Wed, 22 Sep 2021 12:02:05 GMT
etag: "364fab25b65b27e259b39a9d26c93f9f"
x-amz-meta-s3cmd-attrs: md5:364fab25b65b27e259b39a9d26c93f9f
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QJx_9sDJdJtJIoFpCHoAj8Tm_SOl_xnsNxikm11gsb8tLNvKTD08iw==
X-Firefox-Spdy: h2
cdn.softswiss.net/i/s4/softswiss/ScratchAlpacaGold.webp
14 kB URL cdn.softswiss.net/i/s4/softswiss/ScratchAlpacaGold.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0c83004b373147f7e88ed3004641e107
05a953777c9d35f9b28806d4b9a5e441eaf2468d
ba3b2084f407e57cc6502686f9a84b44af2bd91c3ab4b595fd903f3d75cbc6bc
GET /i/s4/softswiss/ScratchAlpacaGold.webp HTTP/1.1
Host: cdn.softswiss.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:51 GMT
content-type: image/webp
content-length: 14424
last-modified: Wed, 18 Oct 2023 15:20:05 GMT
etag: "652ff7a5-3858"
expires: Mon, 04 Dec 2023 06:23:22 GMT
cache-control: max-age=86400
referrer-policy: strict-origin-when-cross-origin
cf-cache-status: HIT
age: 32914
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300f0572b77b512-OSL
X-Firefox-Spdy: h2
cdn.softswiss.net/i/s4/softswiss/ScratchAlpacaSilver.webp
14 kB URL cdn.softswiss.net/i/s4/softswiss/ScratchAlpacaSilver.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 31164638c2a831398f70c5182aa1d23e
f63cb4de19017c9fd5ef201b7530497207ad9d19
145b9a55af7694f5c4e77cb5d18199382b09673b20b3ab408eb14f690dff1741
GET /i/s4/softswiss/ScratchAlpacaSilver.webp HTTP/1.1
Host: cdn.softswiss.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:51 GMT
content-type: image/webp
content-length: 13844
last-modified: Wed, 18 Oct 2023 15:20:05 GMT
etag: "652ff7a5-3614"
expires: Sun, 03 Dec 2023 20:59:43 GMT
cache-control: max-age=86400
referrer-policy: strict-origin-when-cross-origin
cf-cache-status: HIT
age: 65102
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8300f0572b79b512-OSL
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/0.560086b6.chunk.js
15 kB URL cdn.livechatinc.com/widget/static/js/0.560086b6.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (47599), with no line terminators
Hash 1ac03d967e46fcf63e261e02fe3ac706
6ed4f32f5bee5e2aaf28a057ca0a8a83ad404b99
37e38fc2a4947983da3a03b38d58f6a734e61530fd9bcb6dca05bc48ed1f73ca
GET /widget/static/js/0.560086b6.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 31 Jul 2023 10:32:01 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: x4bp2rNlF.2.Kjwsgr0x4zgcAMUxyD_n
server: AmazonS3
content-encoding: br
etag: W/"1ac03d967e46fcf63e261e02fe3ac706"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: iO68LFTKsE5oAk4sskP39JIOp4J8EIfoiByZsATnWjmW3TwnZVjTpg==
content-length: 14880
cache-control: max-age=31536000
expires: Tue, 03 Dec 2024 03:24:51 GMT
date: Mon, 04 Dec 2023 03:24:51 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/1.b3e9bd18.chunk.js
66 kB URL cdn.livechatinc.com/widget/static/js/1.b3e9bd18.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65462)
Hash a1c381c5236d931e165b5f97bb458c7f
ca2fd79d761e9d7895a9ea92e53f1073930bf50d
c3fa220489a7130866d79f6a79792aa69ce0ce23ea4ba181a03144002736d5ae
GET /widget/static/js/1.b3e9bd18.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 23 Nov 2023 10:38:14 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: RWJiCAzhtwX6bpdOAENKLtzWJ..6vb_F
server: AmazonS3
content-encoding: br
etag: W/"a1c381c5236d931e165b5f97bb458c7f"
vary: Accept-Encoding
x-amz-cf-pop: AMS58-P4
x-amz-cf-id: 8HAcOpSlqP2Tm8HGEWooKO3A3UyCcAvtfqlNI-WPJU8I7G3-vMSAVg==
content-length: 66442
cache-control: max-age=31536000
expires: Tue, 03 Dec 2024 03:24:51 GMT
date: Mon, 04 Dec 2023 03:24:51 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/58_cq9/colored/cq9.svg
224 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/58_cq9/colored/cq9.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (3218), with no line terminators
Size 224 kB (223506 bytes)
Hash 41b413bfec57fb20cbdf256311948720
f151a29628a3b7fc60c7f5cc9ac7989849b2df60
ae02b7905233f121f22dcb5c38ff05cf8b3ac7153c2e245045a7154ad31f832f
GET /producer/58_cq9/colored/cq9.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 03 Dec 2023 15:24:35 GMT
last-modified: Thu, 12 Oct 2023 08:30:29 GMT
etag: W/"41b413bfec57fb20cbdf256311948720"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rLOfBu8c7wAWqJwTdg2elBUz1DbisMX48kIQ3Zo1PH1LqMTDs94eNQ==
age: 43217
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/124_bingo/colored/bingo1.svg
46 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/124_bingo/colored/bingo1.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1174), with no line terminators
Hash decfcbe7a376dc404897726c467546bd
944cee99a7f71c45503e30b250fc9527ee2336b6
44d87fc2d1f75969bb893eadc09ebdc64c57475254aeedc9d82fda205abbab57
GET /producer/124_bingo/colored/bingo1.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 03 Dec 2023 12:02:55 GMT
last-modified: Thu, 12 Oct 2023 08:30:39 GMT
etag: W/"decfcbe7a376dc404897726c467546bd"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iyruCmTldokEfoDYkfvAgd6NYBIMHXT1oGAtPq8chk3z5DB3QCMmhQ==
age: 55317
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/pragmaticplay/bigbasscrash/190x190/BigBassCrash.webp
8.6 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/pragmaticplay/bigbasscrash/190x190/BigBassCrash.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f09a2f1147445735456ebdc21487d8b2
dc18c0e17f07ae9431a9f1992b6f8a70ba52a2e7
fa9df5a15230a0e9ed7b2797bc35da9da0087523b08daa97db23a34ea5dd4589
GET /games-images/pragmaticplay/bigbasscrash/190x190/BigBassCrash.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8610
last-modified: Wed, 27 Sep 2023 01:34:54 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 04 Dec 2023 02:27:53 GMT
etag: "f09a2f1147445735456ebdc21487d8b2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: liGxeN9J7y649G4afmZamIzLsofcAEkEJtq8CXZ-Vb4snJVATvC36A==
age: 3419
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/320_bfgames/colored/bfgames.svg
17 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/320_bfgames/colored/bfgames.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 191d09989be79f4113414d485d43f901
52676cea5a1e423cbb37ea8d7a8e4d36bd1de8b7
ff4c3ef6c3f4d1c5f2fd4968aadaf92d5da7f7effaf07d7230c9991f559f4693
GET /producer/320_bfgames/colored/bfgames.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 03 Dec 2023 19:45:38 GMT
last-modified: Thu, 12 Oct 2023 08:30:31 GMT
etag: W/"191d09989be79f4113414d485d43f901"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zWaXXNCIfgnc8tGA26oeD_mjhaKKoge6afZN8uvIj4NW649Nf-lbYw==
age: 27554
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/bgaming/spacexy/190x190/SpaceXY.webp
5.2 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/bgaming/spacexy/190x190/SpaceXY.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 99ca7063521130e377fb52322507783a
e6c190011cec1cecf7e90818dbbc57ffb2c14035
6110fa326cd9257125ef7b8136435528cce521d791abd30592d21d7a8a6ec7a8
GET /games-images/bgaming/spacexy/190x190/SpaceXY.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5178
last-modified: Mon, 11 Apr 2022 19:33:47 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 14:50:46 GMT
etag: "99ca7063521130e377fb52322507783a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: T4ienP-5NX0U7QzxicfIyoUPhUU4XNbgRXTeVn_Nw4kflu8M3Yb2Ag==
age: 45246
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/smartsoft/jetx/190x190/JetX_1677502231.webp
6.0 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/smartsoft/jetx/190x190/JetX_1677502231.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b09b40398bd888d61eeaa272cbd54010
24f2e6e44532ddb7c6ffe4adaddc7ce8491e8dcc
d95c434dbfd120672895a743b4f3a7408de50302e81cdd7a57833996ac3005c5
GET /games-images/smartsoft/jetx/190x190/JetX_1677502231.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6044
last-modified: Mon, 27 Feb 2023 12:50:32 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 22:43:37 GMT
etag: "b09b40398bd888d61eeaa272cbd54010"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HxNGTIytOl0aievLGzsTztGDJ1rKB_0rIc_buVYxfKrlbzqtmk3V_A==
age: 16875
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/78_bsg/colored/bsg.svg
8.7 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/78_bsg/colored/bsg.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3884), with no line terminators
Hash b1fcfac461998408ac9b11dcba27871d
75b331d300d77b886c2e3d92830f761be8b644b7
8f329f6bf85def24f241e263a0c0f112f5a112334c812e6d77a4abacd74eef9b
GET /producer/78_bsg/colored/bsg.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 03 Dec 2023 17:47:58 GMT
last-modified: Thu, 12 Oct 2023 08:30:28 GMT
etag: W/"b1fcfac461998408ac9b11dcba27871d"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Yg-HUtrV29VSdf8qJroeld580ur_KZzm-nB_j7BJ79EZnkXHfEPkIA==
age: 34614
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/122_bigtimegaming/colored/bigtimegaming.svg
12 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/122_bigtimegaming/colored/bigtimegaming.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3008), with no line terminators
Hash 6cc72ca72d21e67a243422cb82d3794f
7dcf82add75508cdaee36a450266917b64520c9f
7e729573ccce6b23f16176153527826357f629ee243c170fda9be0a128ffcc95
GET /producer/122_bigtimegaming/colored/bigtimegaming.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 03 Dec 2023 17:29:36 GMT
last-modified: Thu, 12 Oct 2023 08:31:08 GMT
etag: W/"6cc72ca72d21e67a243422cb82d3794f"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QbHPMABsKKHLUp3PljBOE760jg-HKBInRs1mTLraOskMLnM536EQVw==
age: 35716
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/79_booming/colored/booming.svg
14 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/79_booming/colored/booming.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2210), with no line terminators
Hash e9bc357d58f76d83d25a2ff82ce9e1f8
db2be8bc49d66bd34d33201bb0fa2735ed401733
efb8e234ccc2507c43558f7560d470f699ee14d32b4f908a219e93fa089f2048
GET /producer/79_booming/colored/booming.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 12 Oct 2023 08:30:45 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Sun, 03 Dec 2023 11:12:52 GMT
etag: W/"e9bc357d58f76d83d25a2ff82ce9e1f8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0873-pcYZS33hCCz1CZN56yzjPEMy6wF_MTyrKxo1Qs2SpBqUv4yGg==
age: 58320
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/82_elk/colored/elk.svg
12 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/82_elk/colored/elk.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1452), with no line terminators
Hash 906f518b01fe402557e95c40c55478c8
9758c9c0291d303e46cf4e4b7bd74b2956983df1
05942dd56d3c3e6e43963f9d7d314ea4d581ed0f3b13edb3ee3dbec4860283f8
GET /producer/82_elk/colored/elk.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 03 Dec 2023 19:57:15 GMT
last-modified: Thu, 12 Oct 2023 08:31:09 GMT
etag: W/"906f518b01fe402557e95c40c55478c8"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: j1ftSg6i2tQ-87wD7blSUSRAogMFpKlFdIQC-ZXaNGH19XHGw9dkKA==
age: 26857
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/gamingcorps/plinko/190x190/Plinko97.webp
5.8 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/gamingcorps/plinko/190x190/Plinko97.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b01c4bda4fdabf9d192768008be75ceb
7ecef7eea1ef4fb17cb75732f484e2d51713889c
a8635e24dbefecaadaf1a2e8df8b2ff508ede089a676595d4c56429afdd07b93
GET /games-images/gamingcorps/plinko/190x190/Plinko97.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5848
last-modified: Sat, 10 Dec 2022 10:35:49 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 04 Dec 2023 01:26:32 GMT
etag: "b01c4bda4fdabf9d192768008be75ceb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 13aFRXLRRKzuS6IwQjTCFW6V6qsYjYYK-wlDoq6rR44g0Z_tVtVRLw==
age: 7100
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/producer/83_endorphina/colored/endorphina.svg
26 kB URL d3c3rwqla6qxaf.cloudfront.net/producer/83_endorphina/colored/endorphina.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1495), with no line terminators
Hash 021b6bc523805a25587163adb80b2f75
6e64ddaf4281d49fec44cb6e750e5986ab029abb
283b5c724414bdb5b8a60b5d536e812b659571d9b0804b28814592a8abb41418
GET /producer/83_endorphina/colored/endorphina.svg HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 03 Dec 2023 19:45:38 GMT
last-modified: Thu, 12 Oct 2023 08:30:29 GMT
etag: W/"021b6bc523805a25587163adb80b2f75"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: h3IVgntSmoJIOVnYPQ9ENTXVUEbRu2iQlDWs_cZYvP7s9EoGT5X1aw==
age: 27554
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/pragmaticplay/spaceman/190x190/Spaceman.webp
10 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/pragmaticplay/spaceman/190x190/Spaceman.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2d1105dff768d20d12a859fc358eab71
1eb0140269bf0eba737fff6d8da91bf45714e784
d262cfe671407ced776f44b7a050ccea84f99db5ae9215e0d440c69a8fb897ff
GET /games-images/pragmaticplay/spaceman/190x190/Spaceman.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 10046
last-modified: Mon, 11 Apr 2022 20:24:11 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 21:56:13 GMT
etag: "2d1105dff768d20d12a859fc358eab71"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Eeg7jQtnZPYhAC16vAo7apVlDjXo-OntZtqBmAS8Pe-Qxwj2GET_8w==
age: 19719
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/gamingcorps/penaltychampion/190x190/PenaltyChampion94.webp
13 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/gamingcorps/penaltychampion/190x190/PenaltyChampion94.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a33e23b55b20461b6ac979493adfe9af
460f5475ea0158cc60d2253e4f413c72696f85c3
4b631efa08ea097f9afcc5ec2bc3b02b812bef7988a24644e50aa2fb9cad41f0
GET /games-images/gamingcorps/penaltychampion/190x190/PenaltyChampion94.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 12636
date: Sun, 03 Dec 2023 15:26:08 GMT
last-modified: Sat, 10 Dec 2022 10:35:48 GMT
etag: "a33e23b55b20461b6ac979493adfe9af"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vzO4O3nMv3b7k2tcql_m-Jia6M3-lqzZKo3C4f6HUXT4nK3cDVNXGg==
age: 43124
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/onlyplay/needforx/190x190/NeedforX.webp
41 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/onlyplay/needforx/190x190/NeedforX.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3aed44fcdb276eed45e4c12112351148
e6c8a0c3d1b077183a153afb6f90fb07728ea84b
145e2fbb809819638d20852b87356f0eb634c0ea54d51da1fdb22d1cc71a50f4
GET /games-images/onlyplay/needforx/190x190/NeedforX.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 41388
last-modified: Fri, 10 Feb 2023 01:35:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 23:32:19 GMT
etag: "3aed44fcdb276eed45e4c12112351148"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HVlM1aEf8Aqf3T5aKT_YYmZO5O5flmWllDGeCRda9hMXd8CU6DJjyw==
age: 13953
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/betsolutions/plinko/190x190/Plinko.webp
7.2 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/betsolutions/plinko/190x190/Plinko.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f21f583844c8118f20f903d8121fe85e
3a1fcba831fd4ef56c98d4c6c01cd70e019384a7
9608eae5980c291430260dd84be1af59daaeda888a38cae38fe710a0d88d33fc
GET /games-images/betsolutions/plinko/190x190/Plinko.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 7204
date: Sun, 03 Dec 2023 10:36:55 GMT
last-modified: Thu, 24 Aug 2023 10:37:53 GMT
etag: "f21f583844c8118f20f903d8121fe85e"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 3UunGblgxajVLNFLWbSJMsFRJv_O5C5GS9ABAuiFT5svJN6gDlCv1A==
age: 60477
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/barbarabang/rocketbang/190x190/RocketBang.webp
5.4 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/barbarabang/rocketbang/190x190/RocketBang.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd4cbf7cc7d07e1c49172c4323ee8f7e
d9f15745516f6d943b18d75a1350ccb778de37fc
8620c3a766836f57e1156bdc66e2f91754d6bffcd50ff87a2ec5ccdfe4da3549
GET /games-images/barbarabang/rocketbang/190x190/RocketBang.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5416
last-modified: Wed, 01 Mar 2023 01:42:02 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 04 Dec 2023 01:26:32 GMT
etag: "cd4cbf7cc7d07e1c49172c4323ee8f7e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Rx7u0LglkPQ-XbxgUMzeMW9Yiz2vZmplbDEyjKFaOSdQL8lGHXf6oQ==
age: 7100
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/betsolutions/mines/190x190/Mines.webp
6.8 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/betsolutions/mines/190x190/Mines.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 55750517997c384cbccac16119504dc1
e3de8b423d68cbc4ea3ed960ad5b39ae85e91606
1f9b4b31b16bd7cfb8d0420263b5f9d7dd3d5bc628434a9265ab0864b91d8b13
GET /games-images/betsolutions/mines/190x190/Mines.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6750
date: Mon, 04 Dec 2023 01:26:32 GMT
last-modified: Thu, 24 Aug 2023 10:37:51 GMT
etag: "55750517997c384cbccac16119504dc1"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ho-_h_2kUZ3oruZjjo-tZiM8za-aQuTHqxAV554Sbw5AoAH0RHF17w==
age: 7100
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/bingo/bingoblast/190x190/BingoBlast.webp
5.2 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/bingo/bingoblast/190x190/BingoBlast.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f53cb584ad562ab34aa2595977c43b26
ba54ec09128198d43d38dd5e3d56cdd9df6adbdb
e4fcf66630ee889628d5c25bbbe43198e1a62489269096a48f9a84266b0040f9
GET /games-images/bingo/bingoblast/190x190/BingoBlast.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5248
last-modified: Wed, 09 Nov 2022 01:32:36 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 04 Dec 2023 02:27:53 GMT
etag: "f53cb584ad562ab34aa2595977c43b26"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yfRUn5WvbtCrCNPCbUmGoovCkT_QGxlqPuiUgR1__N5BhuSIzNGfOQ==
age: 3419
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/bingo/75ballbingo/190x190/75BallBingo1.webp
7.2 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/bingo/75ballbingo/190x190/75BallBingo1.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0bfab8c623d31a82f28bdad1198b24df
c55d8b062eb193749a5a9bcf1f492bb678f8ff3b
3b9f0b0eef2ca7b36524880ab7a8b26195cff63d7e40af9c0cf6007c8f85b7ca
GET /games-images/bingo/75ballbingo/190x190/75BallBingo1.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 7208
last-modified: Wed, 09 Nov 2022 01:32:34 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 03 Dec 2023 23:02:48 GMT
etag: "0bfab8c623d31a82f28bdad1198b24df"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aTFthTtjwicCKkUgaHK1pyUfAU4iDFP3nOjuIUBr5R1lyBIJTQr5FA==
age: 15724
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/smartsoft/cricketx/190x190/CricketX.webp
11 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/smartsoft/cricketx/190x190/CricketX.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ac31c5e1826fa5a560a1c701d1a4ddc1
fe9c327c02af63f78ee1b5d8f328f11f08ab4604
8bc6608aa3d26a7777d0ce27e6d5732d088097135c80b08163d9f4a11e3fec7b
GET /games-images/smartsoft/cricketx/190x190/CricketX.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 11154
date: Sun, 03 Dec 2023 13:35:52 GMT
last-modified: Fri, 26 Aug 2022 01:40:55 GMT
etag: "ac31c5e1826fa5a560a1c701d1a4ddc1"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aajeBkZ6NhB7WnQjDeBxrAqvbji9kAzDYCcODYqGBQRl0eVJdx838w==
age: 49740
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/bgaming/plinkoxy/190x190/PlinkoXY.webp
5.1 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/bgaming/plinkoxy/190x190/PlinkoXY.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2c24cd89fdd498750b041792efb4146b
1fd162467e952ca94b7299118fc7b278ba8a93d6
f33fd08006a0bfc519051534f5046336aec4ebc7d9dfe1a14ec7c355eb544e07
GET /games-images/bgaming/plinkoxy/190x190/PlinkoXY.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5114
last-modified: Mon, 11 Apr 2022 19:33:39 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 04 Dec 2023 00:45:16 GMT
etag: "2c24cd89fdd498750b041792efb4146b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HEs3J4m0zBFUoJKDsIWSccIXKsTyjkUGq15cuQFBPpxG40n3o1EUEg==
age: 9576
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/onlyplay/f777fighter/190x190/F777Fighter.webp
8.5 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/onlyplay/f777fighter/190x190/F777Fighter.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a459fa962dd62c0ee0eeae6c454693bd
ed340cfa79555b84dc714d66dc6453f5125bd2ad
3ebee795771458e8f3c4343b7f4f733ef5c7eda18cf79b5dc91196d0957947d5
GET /games-images/onlyplay/f777fighter/190x190/F777Fighter.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8514
last-modified: Fri, 26 Aug 2022 01:47:07 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 04 Dec 2023 03:24:52 GMT
etag: "a459fa962dd62c0ee0eeae6c454693bd"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9z0BXVOfm4YOP7nDQ3yXhXmO27DvnIYoVJId7Xh2kwyA3EDLh78gmA==
X-Firefox-Spdy: h2
d3c3rwqla6qxaf.cloudfront.net/games-images/gamingcorps/skyliner/190x190/Zephyr.webp
8.6 kB URL d3c3rwqla6qxaf.cloudfront.net/games-images/gamingcorps/skyliner/190x190/Zephyr.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x190, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b076186aa86bc22c1e1e57d3db383322
a51b49adc0895974706755eb5e9a6bcc45fdab11
b502cdd88dffc6ce3ffd285390ad3c72a2437336cb5253bb21dd68fd7e2d644e
GET /games-images/gamingcorps/skyliner/190x190/Zephyr.webp HTTP/1.1
Host: d3c3rwqla6qxaf.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8574
last-modified: Sat, 10 Dec 2022 10:35:54 GMT
accept-ranges: bytes
server: AmazonS3
date: Mon, 04 Dec 2023 03:24:52 GMT
etag: "b076186aa86bc22c1e1e57d3db383322"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: knG0nrVDciyHYPK54jQLNR6Kk7VhmcIEwc6hb-U5wkW0q8HqQnOBbw==
X-Firefox-Spdy: h2
20bet.com/cdn-cgi/rum?
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 2861
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:52 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8300f059f82d56b4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
20bet.com/cdn-cgi/rum?
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 63347
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:52 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8300f059e82b56b4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
accounts.livechatinc.com/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/24/token
195 B URL accounts.livechatinc.com/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/24/token
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text
Hash cc714e3b021f9b99896b0b4525e45a10
7be276e99dfb571378bc69952f39b16d3f33832c
d408280f11797a272b0139de3d50136040f30e597612c0f063e105a2efdf5658
POST /v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/24/token HTTP/1.1
Host: accounts.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 225
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 195
date: Mon, 04 Dec 2023 03:24:52 GMT
set-cookie: __lc_cid=72336603-e3c3-4838-afb5-30d12d9044b4; Path=/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/24/token; Domain=accounts.livechatinc.com; Expires=Thu, 04 Dec 2025 03:24:52 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=955a2bed0899ee9be68667f4b97e16a0630ac429d45a774e39458479ce6f371a20c4eb2d51dd20c4cfd468974a83fa943fad3e4187fe18be30d81c3c1448; Path=/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/24/token; Domain=accounts.livechatinc.com; Expires=Thu, 04 Dec 2025 03:24:52 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cid=72336603-e3c3-4838-afb5-30d12d9044b4; Path=/licence/g9054575_24/; Domain=accounts.livechatinc.com; Expires=Thu, 04 Dec 2025 03:24:52 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=955a2bed0899ee9be68667f4b97e16a0630ac429d45a774e39458479ce6f371a20c4eb2d51dd20c4cfd468974a83fa943fad3e4187fe18be30d81c3c1448; Path=/licence/g9054575_24/; Domain=accounts.livechatinc.com; Expires=Thu, 04 Dec 2025 03:24:52 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__oauth_redirect_detector=counter=1&t=1701660322&tag=53e1acfd0d907d6a2e22323c3fc3ade16d7ef9b3; Path=/; Expires=Mon, 04 Dec 2023 03:25:22 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
0 B URL api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://secure.livechatinc.com/
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Authorization,Content-Type
access-control-allow-origin: https://secure.livechatinc.com
vary: Accept-Encoding
content-length: 0
date: Mon, 04 Dec 2023 03:24:52 GMT
X-Firefox-Spdy: h2
track.customer.io/events/page.gif?name=https%3A%2F%2F20bet.com%2Fno%2Fcasino%2Ffast-games%3Fbtag%3D655020_147C492314EF4FF7A76BCA1383E14FF7%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26utm_term%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26subid%3D0d80b2t3vbzft8n2b3&data%5Bbtag%5D=655020_147C492314EF4FF7A76BCA1383E14FF7&data%5Butm_source%5D=retarget&data%5Butm_medium%5D=Ubidex&data%5Butm_campaign%5D=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&data%5Butm_term%5D=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&data%5Bsubid%5D=0d80b2t3vbzft8n2b3&data%5Bwidth%5D=1280&data%5Bheight%5D=1024&data%5Breferrer%5D=https%3A%2F%2Fconqueredallrightswell.com%2F&c=&s=47bb5265-ed83-2bbe-886d-2f762f53345f&site_id=0e8fbf60ebbf2b4f79c2×tamp=1701660297696
35 B URL track.customer.io/events/page.gif?name=https%3A%2F%2F20bet.com%2Fno%2Fcasino%2Ffast-games%3Fbtag%3D655020_147C492314EF4FF7A76BCA1383E14FF7%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26utm_term%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26subid%3D0d80b2t3vbzft8n2b3&data%5Bbtag%5D=655020_147C492314EF4FF7A76BCA1383E14FF7&data%5Butm_source%5D=retarget&data%5Butm_medium%5D=Ubidex&data%5Butm_campaign%5D=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&data%5Butm_term%5D=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&data%5Bsubid%5D=0d80b2t3vbzft8n2b3&data%5Bwidth%5D=1280&data%5Bheight%5D=1024&data%5Breferrer%5D=https%3A%2F%2Fconqueredallrightswell.com%2F&c=&s=47bb5265-ed83-2bbe-886d-2f762f53345f&site_id=0e8fbf60ebbf2b4f79c2×tamp=1701660297696
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /events/page.gif?name=https%3A%2F%2F20bet.com%2Fno%2Fcasino%2Ffast-games%3Fbtag%3D655020_147C492314EF4FF7A76BCA1383E14FF7%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26utm_term%3DUbidex-20bet-DE-Reg-pop-AllPromoCasino%26subid%3D0d80b2t3vbzft8n2b3&data%5Bbtag%5D=655020_147C492314EF4FF7A76BCA1383E14FF7&data%5Butm_source%5D=retarget&data%5Butm_medium%5D=Ubidex&data%5Butm_campaign%5D=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&data%5Butm_term%5D=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&data%5Bsubid%5D=0d80b2t3vbzft8n2b3&data%5Bwidth%5D=1280&data%5Bheight%5D=1024&data%5Breferrer%5D=https%3A%2F%2Fconqueredallrightswell.com%2F&c=&s=47bb5265-ed83-2bbe-886d-2f762f53345f&site_id=0e8fbf60ebbf2b4f79c2×tamp=1701660297696 HTTP/1.1
Host: track.customer.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-disposition: attachment
content-length: 35
content-transfer-encoding: binary
content-type: image/gif
cross-origin-resource-policy: cross-origin
date: Mon, 04 Dec 2023 03:24:52 GMT
status: 200 OK
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
2 B URL api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer dal:cNKPcm8LR26hOdYm3u0alQ
Content-Length: 295
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
content-type: application/json
vary: Accept-Encoding
content-length: 2
date: Mon, 04 Dec 2023 03:24:52 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81h1v889124220z8832196572z99138617576&aip=1&z=213030805
42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81h1v889124220z8832196572z99138617576&aip=1&z=213030805
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81h1v889124220z8832196572z99138617576&aip=1&z=213030805 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 04 Dec 2023 03:24:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81h1v889124220z8832196572z99138617576&aip=1&z=989839835
42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81h1v889124220z8832196572z99138617576&aip=1&z=989839835
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&dma=1&dma_cps=sypham&tid=G-J9LNZYMXZE&cid=7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291>m=45j91e3b81h1v889124220z8832196572z99138617576&aip=1&z=989839835 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 04 Dec 2023 03:24:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
20bet.com/cdn-cgi/rum?
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 551
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660294.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc; _cioanonid=47bb5265-ed83-2bbe-886d-2f762f53345f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Mon, 04 Dec 2023 03:24:57 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8300f078a8a756b4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
platform.20bet.com/api/data/get-countries-list
200 OK 151 kB URL GET HTTP/2 platform.20bet.com/api/data/get-countries-list
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 151 kB (151200 bytes)
Hash 04ba6e4c77696635186e71d7da4919db
a1be90a9b46cf086487cdbc8f65767ddab4b64f7
622259843d853ba09fa650ad35c8ea0d15ceaa003034f0c3fc96574e47f9fb46
GET /api/data/get-countries-list HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:48 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8300f03f78a256b4-OSL
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/4369.afbed5eb0fc1b1bd.js
200 OK 18 kB URL GET HTTP/2 20bet.com/app/4369.afbed5eb0fc1b1bd.js
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (18160), with no line terminators
Hash f7d2cd3f6d145176fef476fa1605607f
e17a7d1f2fbbdb062a7eff8d789d04244868c067
82a5b0be65b092419dbe82f1e4182aaeb91fafe6dd73bac694a4b28a04bbfed5
GET /app/4369.afbed5eb0fc1b1bd.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0342d2a56b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-46f0"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/45098.4cb245e3125f6b92.js
200 OK 574 B URL GET HTTP/2 20bet.com/app/45098.4cb245e3125f6b92.js
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (590), with no line terminators
Hash e075d63e85b07565d6335c72795eb60b
fe471476154f82c171061dc3d314476f0ad9ddf8
685e4895b7072b79100ac01b5e317d53bfc7333e4c326b2f442d0c96c72fe544
GET /app/45098.4cb245e3125f6b92.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.1.1701660293.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=uIFZ8e3zJ6LO3hHVZljW7rawE9l%2FGkeyGmn35rCzZoNx8D1%2F1qf4R61Ey%2BXWJuhOKMyFuxU1%2F%2F8U0xbfsTBHzPj4gnyHqz64kgyss1KJD33X5tBoBdw%2BeI%2FnVh2ogw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g; ubc-code=d064f929-0be2-42d7-8a50-2e6073b588dc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:48 GMT
content-type: application/javascript
cf-ray: 8300f0452a4456b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"6568299e-23e"
expires: Mon, 04 Dec 2023 07:24:48 GMT
last-modified: Thu, 30 Nov 2023 06:20:14 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/56834.d086fe82ccf7aec6.js
200 OK 20 kB URL GET HTTP/2 20bet.com/app/56834.d086fe82ccf7aec6.js
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (20064), with no line terminators
Hash 8152388534098f5b1c98234cbc1eba91
0ef722acdc987a0d0c9868efcdf113573e780e4b
9988161d6d48993e0959208f26147dcf6d16dfba270f01afc3adeaf68e2a62bc
GET /app/56834.d086fe82ccf7aec6.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f033bcf756b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-4e60"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/95059.7d19d765f4c46966.js
200 OK 5.9 kB URL GET HTTP/2 20bet.com/app/95059.7d19d765f4c46966.js
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (6037), with no line terminators
Hash 4aa610752b03a6fbb4421166c9c8c68a
b5604e72644f9c751873a253265c51c20a614edd
4bf84d14e82cf80ee950d5feb46e9226d4a0031fc1f05db79be4054e8ee142b3
GET /app/95059.7d19d765f4c46966.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: application/javascript
cf-ray: 8300f0343d3456b4-OSL
cf-cache-status: HIT
cache-control: public, max-age=14400
etag: W/"65682989-1733"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:53 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://20bet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 367852
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
20bet.com/api/translation/get?locale=nor_NO
200 OK 365 kB URL GET HTTP/2 20bet.com/api/translation/get?locale=nor_NO
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size 365 kB (364655 bytes)
Hash bd2ca52e3762ebbd38020af0ed6087b6
ac5253549c4c09dbab6acca5a70a4b3c3a50ff7c
687d33565c98b82df7367c1e46667533f752ae2af42ce8403a1047ddd6b42bd0
GET /api/translation/get?locale=nor_NO HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:44 GMT
content-type: application/json
cf-ray: 8300f02a2a6e56b4-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/80668.11b83a6512f321bd.css
200 OK 232 B URL GET HTTP/2 20bet.com/app/80668.11b83a6512f321bd.css
IP
Requested by https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Certificate IssuerCloudflare, Inc.
Subject20bet.com
FingerprintBC:BC:84:0F:5F:E1:75:8C:8C:C4:E5:BB:48:03:C7:CB:D3:A5:54:9E
ValidityTue, 21 Mar 2023 00:00:00 GMT - Tue, 19 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 6ad9cad150e51dc65269c43a16283c15
4e2bb6318f47712a12726f8c407fe9610b397599
ee6d50f5b8d2a71ee60a4b54d4fd5d85b91ff479ceb6c0a0df145af251e3155a
GET /app/80668.11b83a6512f321bd.css HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://20bet.com/no/casino/fast-games?btag=655020_147C492314EF4FF7A76BCA1383E14FF7&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino&subid=0d80b2t3vbzft8n2b3
Cookie: preferred-language=no; btag=655020_147C492314EF4FF7A76BCA1383E14FF7; subid=0d80b2t3vbzft8n2b3; utm_campaign=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; utm_medium=Ubidex; utm_source=retarget; utm_term=Ubidex-20bet-DE-Reg-pop-AllPromoCasino; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=92dc1704-1586-4276-934e-23a79604d198.1701660291.1.1701660291..e0b22dce-dce2-4ac7-9315-27ead2697dba....0; _ga_J9LNZYMXZE=GS1.1.1701660290.1.0.1701660290.0.0.0; _ga=GA1.1.969624907.1701660291; FPID=FPID2.2.7ub91gBXR076A9sXNcnR4vMDq5dqjGfpQ580H0AvexQ%3D.1701660291; FPLC=i5J1XwaPUvz4xEf14eBB%2BAUyM%2Bttwdho9d3CAniTg0WZ7i5X620JondmOYzf3fs9B2ChEiHjAlFL3SHt15QZO6qx3UO2SgIiKpbDC4MM1YQ0R%2Fx3Po4WhMpsJzkdEw%3D%3D; FPGSID=1.1701660285.1701660285.G-J9LNZYMXZE.Hw0uLa9T-FqjKyUilATc7g
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 03:24:46 GMT
content-type: text/css
cf-ray: 8300f0345d4c56b4-OSL
cf-cache-status: HIT
age: 251
cache-control: public, max-age=14400
etag: W/"65682982-e8"
expires: Mon, 04 Dec 2023 07:24:46 GMT
last-modified: Thu, 30 Nov 2023 06:19:46 GMT
vary: Accept-Encoding
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
216.58.207.225
18.184.210.76
95.101.10.99
95.211.229.245
104.18.41.153
90.182.112.35
185.20.209.52
188.114.96.1
88.214.206.175
0.0.0.0