walter-larence.com/b75b0f06-4a8e-41a8-8e67-afd5f7268639
302 0 B URL HTTP/1.1 walter-larence.com/b75b0f06-4a8e-41a8-8e67-afd5f7268639
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /b75b0f06-4a8e-41a8-8e67-afd5f7268639 HTTP/1.1
Host: walter-larence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sun, 04 Sep 2022 19:54:16 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://join.bet.co.za/redirect.aspx?pid=2430&bid=1702&sub1=wl650dqe9okg3bqii9435n8s
Pragma: no-cache
Set-Cookie: b75b0f06-4a8e-41a8-8e67-afd5f7268639-v4=9fUoz46KlgJyoDRoUivVuDAWnqSlQh3-nFa4C6GUO6w; Max-Age=86400; Expires=Mon, 05-Sep-2022 19:54:16 GMT; Domain=walter-larence.com; Path=/; HttpOnly
cc-v4=pc1UiiWnNgkLHvvkLOsycuQ3HRqS2noRZ%2Bpg1tmJUu6lzRmnM%2Fb2%2BzBL3ytRd4FJkWe1TfoKkYEb4RJgIGvGV31LczzreseS%2FThlJvvKg5O2RnE1cYaA2hozqIT67VpmyUFaDQIlutp7QzyQ3PiUvQ%3D%3D; Max-Age=31536000; Expires=Mon, 04-Sep-2023 19:54:16 GMT; Domain=walter-larence.com; Path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2579
Expires: Sun, 04 Sep 2022 20:37:15 GMT
Date: Sun, 04 Sep 2022 19:54:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 19:44:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3LSSZN077sez1pYXjHsSt2IGr4gvXo0B4cLUU7HsehVxW1upEmmGFQ==
Age: 597
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KBJAjrkecmK7TrNpFFTu0KKw6t61a8yZozbYrlcmTRHt1ruTdQiUjg==
age: 67139
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Sep 2022 19:54:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 19:38:16 GMT
Expires: Sun, 04 Sep 2022 20:06:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LlQ5hPZPgt5tExX-B_w_JxrDlrg2CxWZz_zjuX8kEY-cCC75gDYEow==
Age: 960
join.bet.co.za/redirect.aspx?pid=2430&bid=1702&sub1=wl650dqe9okg3bqii9435n8s
301 Moved Permanently 0 B URL HTTP/2 join.bet.co.za/redirect.aspx?pid=2430&bid=1702&sub1=wl650dqe9okg3bqii9435n8s
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=2430&bid=1702&sub1=wl650dqe9okg3bqii9435n8s HTTP/1.1
Host: join.bet.co.za
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 0
location: https://promo.bet.co.za/welcome-bonus-bet/?btag=654648_9E16D016B3F34B1D972829EFC9CFE9D7&sub1=wl650dqe9okg3bqii9435n8s
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sun, 04 Sep 2022 19:54:17 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 04 Sep 2022 19:54:17 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a2430%2c%22BID%22%3a1702%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1662321256978)%5c%2f%22%2c%22CookieTag%22%3a%2217022430451240919C2022941954%22%7d%5d; SameSite=None;; domain=.bet.co.za; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22127087159%7c1%22%7d%5d; domain=.bet.co.za; expires=Tue, 04-Sep-3021 19:54:16 GMT; path=/; secure; SameSite=Strict
server-timing: edge; dur=234, origin; dur=147, cdn-cache; desc=MISS
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 512
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:17 GMT
Last-Modified: Sun, 04 Sep 2022 19:45:45 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: atlFGIEz7mxPerBfAuzQ0A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: I1ess75x3rIGo+z2Lf8d8K4whPI=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0b2673ac24eea16db229468d8aa0ac9
685df82113f90c6ab536aa32c22ff4e1f0fe4fcc
a11ede618e688023423ba551123ad656a8c64ba909de91710709ebdfacfa7950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A11EDE618E688023423BA551123AD656A8C64BA909DE91710709EBDFACFA7950"
Last-Modified: Sat, 03 Sep 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21545
Expires: Mon, 05 Sep 2022 01:53:22 GMT
Date: Sun, 04 Sep 2022 19:54:17 GMT
Connection: keep-alive
promo.bet.co.za/welcome-bonus-bet/?btag=654648_9E16D016B3F34B1D972829EFC9CFE9D7&sub1=wl650dqe9okg3bqii9435n8s
200 OK 9.7 kB URL HTTP/1.1 promo.bet.co.za/welcome-bonus-bet/?btag=654648_9E16D016B3F34B1D972829EFC9CFE9D7&sub1=wl650dqe9okg3bqii9435n8s
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15315), with CRLF, LF line terminators
Hash 72eabdd4deedff66da2aab369421542a
bd0440aa12e327096d090f119d75b80eb732a4a6
f7f223198c613952dcfd775269f003e913f0f09aa0c3447fd9c3f6831a7415b7
GET /welcome-bonus-bet/?btag=654648_9E16D016B3F34B1D972829EFC9CFE9D7&sub1=wl650dqe9okg3bqii9435n8s HTTP/1.1
Host: promo.bet.co.za
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a2430%2c%22BID%22%3a1702%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1662321256978)%5c%2f%22%2c%22CookieTag%22%3a%2217022430451240919C2022941954%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
date: Sun, 04 Sep 2022 19:54:17 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
p3p: CP="This is not a privacy policy."
x-unbounce-pageid: 4c98b220-b04b-4e84-8032-3b2fe9376302
etag: "d:167c5b9f6b7dfef5f4a5f734a80193ec"
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
x-unbounce-visitorid: 02c1600a-67c1-4d50-8e51-24aab740ba4a
x-unbounce-variant: d
content-location: https://promo.bet.co.za/welcome-bonus-bet/
link: <https://promo.bet.co.za/welcome-bonus-bet/>; rel="canonical"
set-cookie: ubpv=d%2C4c98b220-b04b-4e84-8032-3b2fe9376302; Max-Age=15897600; Expires=Tue, 07 Mar 2023 19:54:17 GMT; Path=/welcome-bonus-bet/; SameSite=Lax
ubvs=02c1600a-67c1-4d50-8e51-24aab740ba4a; Max-Age=15552000; Expires=Fri, 03 Mar 2023 19:54:17 GMT; Path=/; SameSite=Lax
ubvt=02c1600a-67c1-4d50-8e51-24aab740ba4a; Max-Age=259200; Expires=Wed, 07 Sep 2022 19:54:17 GMT; Path=/; Domain=bet.co.za; SameSite=Lax
content-encoding: gzip
x-proxy-backend: page-server
connection: close
builder-assets.unbounce.com/published-css/main-7b78720.z.css
200 OK 2.9 kB URL HTTP/2 builder-assets.unbounce.com/published-css/main-7b78720.z.css
IP
File type ASCII text, with very long lines (15017)
Hash e50d1ee693e25d7a1512f9322cc1259e
c301c63f095eead2680480dea91a91b828c25f9c
cd43804d2ae03eebc58becf21420966a41cd900e6a7b866e9fdb1fd6168334a2
GET /published-css/main-7b78720.z.css HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
content-length: 2902
date: Mon, 13 Jun 2022 08:28:37 GMT
last-modified: Mon, 06 Jun 2022 23:24:03 GMT
etag: "e50d1ee693e25d7a1512f9322cc1259e"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: 2AQj3zSW.kdmInzoSdWpR0AQxgxgO5c_
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1606a2eba99dd92136aa6a51577b9426.cloudfront.net (CloudFront)
x-amz-cf-pop: QRO51-C1
x-amz-cf-id: nZxIaQdDJ6aISpUtfEa3k6qtlueUidDjpyfD1NktjWsjVLGzH6fe8A==
age: 7212342
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-N8ZXM7K
200 OK 86 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-N8ZXM7K
IP
File type Unicode text, UTF-8 text, with very long lines (42875)
Hash ddca4f34822702c1d3d5f4e70fe28cb4
0432f7c9b21eef62180abafdffb85285e361feb8
e34a0278911e40507cdffa2ba0c4fdf2043b87d703d6f723338572dd49a99c16
GET /gtm.js?id=GTM-N8ZXM7K HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 04 Sep 2022 19:54:18 GMT
expires: Sun, 04 Sep 2022 19:54:18 GMT
cache-control: private, max-age=900
last-modified: Sun, 04 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85649
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d34qb8suadcc4g.cloudfront.net/ub.js?1618514266
200 OK 1.9 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/ub.js?1618514266
IP
Hash f6420c864830b5860bfaadd47a2bb21b
935d2ed35f43eb0f1aea9b0642df0d7f4770def7
6f36d2d4b4b9df950fd0dd0d57e0eacb7c4217e8086b4ef940cbd6e526930462
GET /ub.js?1618514266 HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 1856
date: Mon, 13 Jun 2022 10:29:43 GMT
last-modified: Thu, 15 Apr 2021 19:15:08 GMT
etag: "f6420c864830b5860bfaadd47a2bb21b"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: bKC28ufbc849z_LglraHgQe9TbPw1SIU
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dFRw_rsugQT8ySH6nP5P9cq3Mmer_n3_HGCh3dznni1ZWvfnos_6Wg==
age: 7205076
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cc6ea3e01d1d6b8c4b28ff64d3b795a7
017457c6f5a63157102485a956c667aad36d33ef
e6fe903f67363d3e92b929e274f0de7c2f6a15b6df1806198199440ed0fe221e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4740
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:54:18 GMT
Connection: keep-alive
d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
200 OK 30 kB URL HTTP/2 d34qb8suadcc4g.cloudfront.net/sp-2.14.0.js
IP
File type ASCII text, with very long lines (64903)
Hash 73de733c308b8b5e44d2a6242dc4bd99
2f43a0cd155124d65ab5ce3574abc5f82b45fcf9
cf4ff4a67675a54e9a9469d967c77fba778ccf839a98119d246012447eb44ea3
GET /sp-2.14.0.js HTTP/1.1
Host: d34qb8suadcc4g.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 30399
date: Mon, 23 May 2022 06:02:31 GMT
last-modified: Wed, 04 Nov 2020 01:35:32 GMT
etag: "73de733c308b8b5e44d2a6242dc4bd99"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: rVTqklA1qqyT_0VdOCY323BKPISR0uej
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kamEmeZ6wywxZ2JG8GvRK4FMDFnAzeKpXtZYRH_eAm_vbNxK4QafCQ==
age: 9035508
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4740
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:54:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4740
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:54:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4740
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:54:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4740
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:54:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8cdd0826b7d8be62cc2ed532e04e137b
383a0661fa09d9b48745b507389d0505303b6182
f2d04cf1ee9b5a885c246060c1036b21af4ecd3e51e5d05a529dbe0d63f7c2ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10713
x-amzn-requestid: d546a12c-c549-4ad3-80ad-6bad452927d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5winGzHIAMFTPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7aa-2060c6611eb4abb777cc17a8;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FRD_E3IP_SmjPQuoVEijMnLszBb5bhc_1PxJXOlmdyufLKzx33joTw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
age: 79571
etag: "383a0661fa09d9b48745b507389d0505303b6182"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bdfdf7e36f78f2f0e4d7ede9fdb76a8
babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:26 GMT
age: 79372
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc4ceb10dd9fcaab21ae58dcf10c401f
6ce530af682094dc5413db9de02565691fab4da7
84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sywGj-wLtW091vZYhx1AbRAgljYQWe6LuffDjwTDhEebqVzxpQuzEQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:58 GMT
age: 57920
etag: "6ce530af682094dc5413db9de02565691fab4da7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:58:42 GMT
age: 78936
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb4b1d74f1443bc3328301ab3ae6464
2768253dacaaad6cb498c6b2eb7694208b0ce0a6
07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8688
x-amzn-requestid: e408351e-ba6c-4e55-815d-449af808282f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5yMEFBLoAMFtqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313ca4d-13831d8572a3b3cf54a0e747;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:42:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: GFM9jerDkTPdhlUTm99E7Lpksw2ZGnV81bNVaZLvWSAiRNDNtkZi4g==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:48:07 GMT
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
content-type: image/jpeg
age: 79571
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: uz2NbcE4AmOvFQkhJALSpXCGizilya0TuFcczfEwtV09cGXtgVNlpQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:04:35 GMT
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
age: 78583
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
zz.connextra.com/dcs/tagController/tag/a30120f74b13/landingpage
200 OK 16 kB URL HTTP/2 zz.connextra.com/dcs/tagController/tag/a30120f74b13/landingpage
IP
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (2407)
Hash 11311ce10b14962054daec4eedf4077d
928eecd1a9dd51a84d2f2889b0b11c051371f50c
afa5710e9be715e151d4f252e6b365d242865689ef081a1343175ab596013e9b
GET /dcs/tagController/tag/a30120f74b13/landingpage HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
content-type: text/javascript;charset=utf-8
content-length: 16458
cache-control: must-revalidate, max-age=300
expires: Sun, 04 Sep 2022 19:59:18 GMT
date: Sun, 04 Sep 2022 19:54:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdda2e81652c70a5141c204dddf562da
d67d2a930f844d1c984f7651d63fc726a9a94e5b
d4e9987251cb71bab81c06a3b28ff91bfe94a783e0377e0c5d4ba19843fd199a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D4E9987251CB71BAB81C06A3B28FF91BFE94A783E0377E0C5D4BA19843FD199A"
Last-Modified: Sat, 03 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1782
Expires: Sun, 04 Sep 2022 20:24:00 GMT
Date: Sun, 04 Sep 2022 19:54:18 GMT
Connection: keep-alive
builder-assets.unbounce.com/published-js/main.bundle-fed11df.z.js
200 OK 33 kB URL HTTP/2 builder-assets.unbounce.com/published-js/main.bundle-fed11df.z.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0baa7928a61eec0ae7b70702e0a16542
e9b92639912795d539833b8d243c1eda96bbcd7c
4c6e30261a5912ceac380879db464143de9ff661ff6da61e2d7f9dc941f5daf6
GET /published-js/main.bundle-fed11df.z.js HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 33154
date: Wed, 10 Aug 2022 09:28:09 GMT
last-modified: Tue, 18 Jan 2022 21:17:50 GMT
etag: "0baa7928a61eec0ae7b70702e0a16542"
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: unUaqO9013Xc011S.3KQRlXYPC3pdAjV
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1606a2eba99dd92136aa6a51577b9426.cloudfront.net (CloudFront)
x-amz-cf-pop: QRO51-C1
x-amz-cf-id: jJZ3OYXSyRrrW4frT0YYrgCurVvuNz67Nd6p0OvXt2lYV7gH9zYtlg==
age: 2197570
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash af26cf75144577c115d800f75cca09db
21f3c27d38fb6ac1ac29e008ca6bb7d539caa00b
9d168c44763c1c7b31c7b6cb78be91132ce76b213fa3d563a40951008927d19d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:54:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 15:29:12 GMT
Expires: Sun, 11 Sep 2022 15:29:11 GMT
Etag: "21f3c27d38fb6ac1ac29e008ca6bb7d539caa00b"
Cache-Control: max-age=588291,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745946bbfcadb527-OSL
sdk-cdn.optimove.net/websdk/sdk-v2.0.js
200 OK 16 kB URL HTTP/2 sdk-cdn.optimove.net/websdk/sdk-v2.0.js
IP
File type ASCII text, with very long lines (48491)
Hash 29d13246b2ba53847a79715d95699630
3ec5c543a282c21c2c7f9a5e1d09a3ca8eeada4d
72c3f3249b441974d9a6c232a6775b7952ebdd237402b1bdb7483691db29160b
GET /websdk/sdk-v2.0.js HTTP/1.1
Host: sdk-cdn.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtapIBTOjkSukkJ-vAUp3IBIVyI9wsjsNMEFynuOqnlnfnfKaeBMcDlR0jJQ7iG5AEs0A-kawLSa8eKdUHz__0qKlItJyTn
x-goog-generation: 1659950707998011
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 16535
content-encoding: gzip
x-goog-hash: crc32c=xz9KiA==, md5=KdEyRrK6U4R6eXFdlWmWMA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 16535
server: UploadServer
date: Sun, 04 Sep 2022 09:38:08 GMT
age: 36971
last-modified: Mon, 08 Aug 2022 09:25:08 GMT
etag: "29d13246b2ba53847a79715d95699630"
content-type: application/javascript
cache-control: public,max-age=3600,no-transform
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bf80c483bb910af19fd5a6dd27c8731d
b98a2f37c6bdd210d9faccb15faa8249b8fe3204
35b99dc855502bd522bd7fbb39d7d0f05c9692403e868e73db782b5add61ea5a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Sep 2022 19:54:19 GMT
Last-Modified: Sun, 04 Sep 2022 18:35:03 GMT
Server: ECS (nyb/1D1B)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BOM48nZ5tuoq72IGB_3ZiWaSmQEs2zpVCXRFUP7xE_g12IOiPGb3MA==
Age: 4757
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9439a7cde73fea464c1463febdda0556
6a0030d4f26b2e9658700708c82e7ce6120ce93c
c3a5a489f4ef8c8cce54dbd819c5cf573740317ea3718ccd6804a03374739199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_zymWc0ld0.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_zymWc0ld0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14820, version 1.0\012- data
Hash 77c05ea57754ac57868ecf43a098d3dc
e46df1f2f6700ec6b4c28f3bf28ea976174f11e1
9c2553c10fe34ec7875f78849e3fc3982217c940c22bb58ba417400e506f1692
GET /s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_zymWc0ld0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 05:04:09 GMT
expires: Thu, 31 Aug 2023 05:04:09 GMT
cache-control: public, max-age=31536000
age: 399010
last-modified: Tue, 26 Apr 2022 15:27:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98125354dbaa891018a9429a7aae3ea1
a692cc9a073c9666971db41444342fc9d7dab2e2
771b96e4fb485d1ef041ee20fc060bb5b4b521043ec7a51ceaccefcbe837bd4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/hindguntur/v12/wXKvE3UZrok56nvamSuJd_QtvXI.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/hindguntur/v12/wXKvE3UZrok56nvamSuJd_QtvXI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14576, version 1.0\012- data
Hash d1c8f0e5c8c7dcc07fe005da69dafee3
4dea03da1ff9ecb612e7da7a5cae5f06ff2e248e
4a26f6e1f0fbda2d57294827680e76a43e80326e496f521cfa4b8be7cb91ba9e
GET /s/hindguntur/v12/wXKvE3UZrok56nvamSuJd_QtvXI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 18:22:18 GMT
expires: Mon, 04 Sep 2023 18:22:18 GMT
cache-control: public, max-age=31536000
age: 5521
last-modified: Tue, 26 Apr 2022 15:51:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25372, version 1.0\012- data
Hash fe424f96cb627d8b835cb001af17f56e
c5b4368fed99812a99036fba86d01367b5549505
35c92598a5f32c018dc630f57b183b0284c211ce9c222e5b36840a62115262f1
GET /s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 21:14:35 GMT
expires: Tue, 29 Aug 2023 21:14:35 GMT
cache-control: public, max-age=31536000
age: 513584
last-modified: Mon, 18 Jul 2022 19:24:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_yGn2c0ld0.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_yGn2c0ld0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14208, version 1.0\012- data
Hash 2e2c412357b8480dfa8de4bec0e2dfc3
98f47a136bed02e51c9f0e366b2bc5b7a4e7e545
cf74bdf0ac826ac76c1bff7c72e33d92e50c50b2006e3e26cce5e0ad9bd76880
GET /s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_yGn2c0ld0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14208
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 19:08:30 GMT
expires: Fri, 01 Sep 2023 19:08:30 GMT
cache-control: public, max-age=31536000
age: 261949
last-modified: Tue, 26 Apr 2022 15:27:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_yWmGc0ld0.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_yWmGc0ld0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14592, version 1.0\012- data
Hash e73399f676c805aee9625585cd4aaa8b
a02f2c0a2f6770444a2caa64862510a99c5207c4
a2b09081efdf5722a0e59a5c8cf1ac350fe067bef14da6b3e6543cb0ca629d65
GET /s/hindguntur/v12/wXKyE3UZrok56nvamSuJd_yWmGc0ld0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14592
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 01:07:14 GMT
expires: Thu, 31 Aug 2023 01:07:14 GMT
cache-control: public, max-age=31536000
age: 413225
last-modified: Tue, 26 Apr 2022 15:27:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/KqvgZwk6sa8
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/KqvgZwk6sa8
IP
Hash 0cf85de854679de4f555d8e502505442
64b2436ddfa9be1a7eda85a0a04fd64608263cfa
d41da2fbeb3d01ce8f50b98e2018f93be37c14f51a6b421212bafae89cdd485d
POST /s/gts1d4/KqvgZwk6sa8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.bet.co.za/imgs/m/appIcon_72.png
200 OK 1.4 kB URL HTTP/2 www.bet.co.za/imgs/m/appIcon_72.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash ce557b9a418d5a475b6e4905e1b416d5
55b1400d77213a8414b962956e42b3de80f0612d
a3a4cc53b49064a765aa1b2b9a3d0aa5b41c69fc1b2e0f289d7a62e09994c5d7
GET /imgs/m/appIcon_72.png HTTP/1.1
Host: www.bet.co.za
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a2430%2c%22BID%22%3a1702%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1662321256978)%5c%2f%22%2c%22CookieTag%22%3a%2217022430451240919C2022941954%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22127087159%7c1%22%7d%5d; ubvt=02c1600a-67c1-4d50-8e51-24aab740ba4a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: image/png
last-modified: Tue, 24 Nov 2020 10:21:52 GMT
etag: "-873419571"
host-name: CIP-I-BETCOZA2
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-length: 1358
cache-control: public, max-age=60589
expires: Mon, 05 Sep 2022 12:44:08 GMT
date: Sun, 04 Sep 2022 19:54:19 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=321
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
events.ub-analytics.com/i?stm=1662321255086&e=pv&url=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&page=Switch%20to%20Bet.co.za%20Online%20Sports%20Betting%20%7C%20Get%20100%25%20first%20deposit%20bonus%20up%20to%20R1000%20%7C%20Bet.co.za&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=3513964b-1afd-43d5-b270-4dd989410c27&dtm=1662321255083&vp=1280x939&ds=1268x2025&vid=1&sid=af4f47fb-49a1-4e7a-86f5-7b213346312c&duid=0166f9dd-7458-4e08-8258-65e3085b7fac&uid=02c1600a-67c1-4d50-8e51-24aab740ba4a&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiNGM5OGIyMjAtYjA0Yi00ZTg0LTgwMzItM2IyZmU5Mzc2MzAyIiwidmFyaWFudElkIjoiZCIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6IndlaWdodGVkIn19XX0
200 OK 43 B URL HTTP/2 events.ub-analytics.com/i?stm=1662321255086&e=pv&url=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&page=Switch%20to%20Bet.co.za%20Online%20Sports%20Betting%20%7C%20Get%20100%25%20first%20deposit%20bonus%20up%20to%20R1000%20%7C%20Bet.co.za&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=3513964b-1afd-43d5-b270-4dd989410c27&dtm=1662321255083&vp=1280x939&ds=1268x2025&vid=1&sid=af4f47fb-49a1-4e7a-86f5-7b213346312c&duid=0166f9dd-7458-4e08-8258-65e3085b7fac&uid=02c1600a-67c1-4d50-8e51-24aab740ba4a&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiNGM5OGIyMjAtYjA0Yi00ZTg0LTgwMzItM2IyZmU5Mzc2MzAyIiwidmFyaWFudElkIjoiZCIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6IndlaWdodGVkIn19XX0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1662321255086&e=pv&url=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&page=Switch%20to%20Bet.co.za%20Online%20Sports%20Betting%20%7C%20Get%20100%25%20first%20deposit%20bonus%20up%20to%20R1000%20%7C%20Bet.co.za&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&eid=3513964b-1afd-43d5-b270-4dd989410c27&dtm=1662321255083&vp=1280x939&ds=1268x2025&vid=1&sid=af4f47fb-49a1-4e7a-86f5-7b213346312c&duid=0166f9dd-7458-4e08-8258-65e3085b7fac&uid=02c1600a-67c1-4d50-8e51-24aab740ba4a&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiNGM5OGIyMjAtYjA0Yi00ZTg0LTgwMzItM2IyZmU5Mzc2MzAyIiwidmFyaWFudElkIjoiZCIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6IndlaWdodGVkIn19XX0 HTTP/1.1
Host: events.ub-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:54:19 GMT
content-type: image/gif
content-length: 43
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: *
access-control-allow-credentials: true
server: akka-http/10.0.9
X-Firefox-Spdy: h2
sdk-cdn.optimove.net/webconfig/58cd0a0291e6bbc7f75259ebd1fe7692312b5bee0bc4c7b12f623d04ad03cab7/web-configuration.1.0.0.js
200 OK 4.5 kB URL HTTP/2 sdk-cdn.optimove.net/webconfig/58cd0a0291e6bbc7f75259ebd1fe7692312b5bee0bc4c7b12f623d04ad03cab7/web-configuration.1.0.0.js
IP
File type ASCII text, with very long lines (50346), with no line terminators
Hash cfe8ff2a473808702717fbe0d40a31c0
adfe736fc3bc92c8d1f1f24f268867eaf71d702d
9f9cf812d136271e72fbed03e9f422238de7b15b5a7c4a1679c82c6a2df88737
GET /webconfig/58cd0a0291e6bbc7f75259ebd1fe7692312b5bee0bc4c7b12f623d04ad03cab7/web-configuration.1.0.0.js HTTP/1.1
Host: sdk-cdn.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdugMbgBD64cpsoOKyBpO-TK4ed5etskqOKYjg1U2Eg1-1_CczAxaUdD6KB2xu_NNpRKqv5N7J5r2ZuUyhL91f1m
x-goog-generation: 1631194615919223
x-goog-metageneration: 3
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 4467
content-encoding: gzip
x-goog-hash: crc32c=lx52LA==, md5=z+j/Kkc4CHAnF/vg1AoxwA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 4467
server: UploadServer
date: Sun, 04 Sep 2022 19:54:19 GMT
last-modified: Thu, 09 Sep 2021 13:36:56 GMT
etag: "cfe8ff2a473808702717fbe0d40a31c0"
content-type: application/json
age: 0
cache-control: public,max-age=300,no-transform
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash af26cf75144577c115d800f75cca09db
21f3c27d38fb6ac1ac29e008ca6bb7d539caa00b
9d168c44763c1c7b31c7b6cb78be91132ce76b213fa3d563a40951008927d19d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:54:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 04 Sep 2022 15:29:12 GMT
Expires: Sun, 11 Sep 2022 15:29:11 GMT
Etag: "21f3c27d38fb6ac1ac29e008ca6bb7d539caa00b"
Cache-Control: max-age=588291,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 745946bd8f41b527-OSL
tracking.bet.co.za/g/collect?v=2&tid=G-HQHZTH2WWK>m=2oe8v0&_p=1900632924&cid=905411234.1662321255&ul=en-us&sr=1280x1024&_fplc=0&ir=1&_uc=NO&_eu=Q&_z=ccd.v9B&_s=1&uid=&sid=1662321255&sct=1&seg=0&dl=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&dt=Switch%20to%20Bet.co.za%20Online%20Sports%20Betting%20%7C%20Get%20100%25%20first%20deposit%20bonus%20up%20to%20R1000%20%7C%20Bet.co.za&en=page_view&_fv=1&_nsi=1&_ss=1&ep.event_id=e869cfee-ba23-4948-bdb3-54a97e05cf16_1662321254815.3&ep.user_data.email_address=undefined&ep.user_data.address.first_name=undefined&ep.user_data.address.last_name=undefined&ep.user_data.address.country=ZA&ep.customer_id=&richsstsse
200 OK 90 B URL HTTP/2 tracking.bet.co.za/g/collect?v=2&tid=G-HQHZTH2WWK>m=2oe8v0&_p=1900632924&cid=905411234.1662321255&ul=en-us&sr=1280x1024&_fplc=0&ir=1&_uc=NO&_eu=Q&_z=ccd.v9B&_s=1&uid=&sid=1662321255&sct=1&seg=0&dl=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&dt=Switch%20to%20Bet.co.za%20Online%20Sports%20Betting%20%7C%20Get%20100%25%20first%20deposit%20bonus%20up%20to%20R1000%20%7C%20Bet.co.za&en=page_view&_fv=1&_nsi=1&_ss=1&ep.event_id=e869cfee-ba23-4948-bdb3-54a97e05cf16_1662321254815.3&ep.user_data.email_address=undefined&ep.user_data.address.first_name=undefined&ep.user_data.address.last_name=undefined&ep.user_data.address.country=ZA&ep.customer_id=&richsstsse
IP
Hash 169015d9a1c4742ef1b19ab13dfac200
5a31df9e8f8d370f893c6f087c5974cb3e4ddd7f
8dfbc19663da6a43557027f2e6d3e94066517ce50334a83f410e0a4853935d40
GET /g/collect?v=2&tid=G-HQHZTH2WWK>m=2oe8v0&_p=1900632924&cid=905411234.1662321255&ul=en-us&sr=1280x1024&_fplc=0&ir=1&_uc=NO&_eu=Q&_z=ccd.v9B&_s=1&uid=&sid=1662321255&sct=1&seg=0&dl=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&dt=Switch%20to%20Bet.co.za%20Online%20Sports%20Betting%20%7C%20Get%20100%25%20first%20deposit%20bonus%20up%20to%20R1000%20%7C%20Bet.co.za&en=page_view&_fv=1&_nsi=1&_ss=1&ep.event_id=e869cfee-ba23-4948-bdb3-54a97e05cf16_1662321254815.3&ep.user_data.email_address=undefined&ep.user_data.address.first_name=undefined&ep.user_data.address.last_name=undefined&ep.user_data.address.country=ZA&ep.customer_id=&richsstsse HTTP/1.1
Host: tracking.bet.co.za
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://promo.bet.co.za/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a2430%2c%22BID%22%3a1702%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1662321256978)%5c%2f%22%2c%22CookieTag%22%3a%2217022430451240919C2022941954%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22127087159%7c1%22%7d%5d; ubvt=02c1600a-67c1-4d50-8e51-24aab740ba4a; _gcl_au=1.1.1790473129.1662321255; _ga_HQHZTH2WWK=GS1.1.1662321255.1.0.1662321255.0.0.0; _ga=GA1.1.905411234.1662321255
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/plain
vary: Accept-Encoding
set-cookie: FPLC=EGCRWqCaLNLHgC6zrtVSDuX%2Ffxp8sB2oZNjnS1puH5nDJy1sP8wgGPrCI1Oa7Ngea4gsv9E9OS6lYKGk46iuoe9488mK3hMo%2BxdKrrZoUKIipWog%2FXxGdugkqtqn9w%3D%3D; Max-Age=72000; Domain=bet.co.za; Path=/; Secure
FPID=FPID2.3.m1igydonPybneVWir89w2PGwq8DebQrv0b3Bma6YLSY%3D.1662321255; Max-Age=63072000; Domain=bet.co.za; Path=/; Secure; HttpOnly
cache-control: no-cache
x-content-type-options: nosniff
access-control-allow-origin: https://promo.bet.co.za
access-control-allow-credentials: true
content-encoding: gzip
x-cloud-trace-context: c6993975a7e4d7a80e3c54f64b068bfc
date: Sun, 04 Sep 2022 19:54:19 GMT
server: Google Frontend
content-length: 90
expires: Sun, 04 Sep 2022 19:54:19 GMT
X-Firefox-Spdy: h2
stream-656.optimove.net/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: stream-656.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-request-id
Referer: https://promo.bet.co.za/
Origin: https://promo.bet.co.za
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: content-type,x-request-id
access-control-max-age: 86400
content-length: 0
date: Sun, 04 Sep 2022 19:54:19 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
set-cookie: visid_incap_2816538=pprZFMR3Rk2pNt1yOxrURmsCFWMAAAAAQUIPAAAAAACf++7ygsRsf76fg+Mh76KS; expires=Sun, 03 Sep 2023 22:14:25 GMT; HttpOnly; path=/; Domain=.optimove.net
incap_ses_275_2816538=rpgBKZgOw1hCoRwVhP/QA2sCFWMAAAAA/jhsVlGFkPzaeS5I6+TGgQ==; path=/; Domain=.optimove.net
x-cdn: Imperva
x-iinfo: 1008-1958524-1958526 NNNN CT(1 4 0) RT(1662321259307 47) q(0 0 0 0) r(0 0) U6
X-Firefox-Spdy: h2
sdkuaservice.optimove.net/
200 OK 348 B URL HTTP/2 sdkuaservice.optimove.net/
IP
File type JSON data\012- , ASCII text
Hash 73353b441b4f27ee202d8e554ee76f4f
f3f8b3037c988a233a83b8c2eb29abe3792803ba
b6bbd24d679c3a509efafb7b48de5f8eb53eb1ddce723ebb0dc836206067caad
GET / HTTP/1.1
Host: sdkuaservice.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: *
content-type: application/json
date: Sun, 04 Sep 2022 19:54:19 GMT
content-length: 348
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/b9879b72-ozow_1029017000000000000028.png
200 OK 835 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/b9879b72-ozow_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash 7986d8ae514f9149bf5b35c3d59e42a2
acc4b7a282e60e3eea138c7b9750106a23ddd861
899aee2f6ff378b148a14aeed4358e74a15541be7a3f129905f3f5a6826c8dd3
GET /promo.bet.co.za/welcome-bonus-bet/b9879b72-ozow_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 835
date: Sat, 03 Sep 2022 09:26:57 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "7986d8ae514f9149bf5b35c3d59e42a2"
cache-control: max-age=31557600
x-amz-version-id: HwqAKUgtR7BP8YVpWJ5laUHqGw_1BrVy
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MI6obDDbD5HFQK7g2khRPNLn3aMfPpLgRU7T_V2dgUI9LyWnARmKvA==
age: 124043
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/02521fad-masterpass_1029017000000000000028.png
200 OK 731 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/02521fad-masterpass_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash c84cc8005c5038d596c0ed3ebe11a804
b9291cc69917b4411e28ac33d8ee3c5e673c68e8
d9c8b0616ec3567fbb94d4df4b97b3e4605bc4d5932bc265ecfcd65ea988a30a
GET /promo.bet.co.za/welcome-bonus-bet/02521fad-masterpass_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 731
date: Tue, 23 Aug 2022 06:16:23 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "c84cc8005c5038d596c0ed3ebe11a804"
cache-control: max-age=31557600
x-amz-version-id: WAvt5c5jKb14HOa0VThc2jhO1C0KgO6V
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gHbDsuGT6JfZ6KRS5iIVrORXWyWyA6nsZC6VJc7lMSwXI8RmnMQsKg==
age: 1085876
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/a5688883-ott_1029017000000000000028.png
200 OK 597 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/a5688883-ott_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash aa89b4989f35ddc6c390c02476ab8b5a
54b4762b8b3350e84cedcefcbf4e62c245d17e34
7665a562213d74535b796a0bd3893681798b8edb6365a5fd92509172c6335bfa
GET /promo.bet.co.za/welcome-bonus-bet/a5688883-ott_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 597
date: Wed, 31 Aug 2022 12:10:50 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "aa89b4989f35ddc6c390c02476ab8b5a"
cache-control: max-age=31557600
x-amz-version-id: OkxqL4KqPfSYaLbGAqtHZgIdXRBt.UBA
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zxnG9P3_jvKptNR20P9z7PLXriiq5q-hJkKKUJHM6Qmo5dNzmwvApg==
age: 373410
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/27833315-tsepo_101b01b00000000000001o.jpeg
200 OK 723 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/27833315-tsepo_101b01b00000000000001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 47x47, components 3\012- data
Hash 23084210429ed6c9b14bbe50443e1cfe
d2d62c9492090aeeaced73e8da8cb6adbbeeec66
f10d11fd74df2a70e2f62409c14fec02881dfc9b5202fe6407c6634ebde05c8b
GET /promo.bet.co.za/welcome-bonus-bet/27833315-tsepo_101b01b00000000000001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 723
date: Wed, 31 Aug 2022 15:37:06 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "23084210429ed6c9b14bbe50443e1cfe"
cache-control: max-age=31557600
x-amz-version-id: 8lLNj0CAjl4NPQAkc6TKglLvdrvaqegn
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bJGrjPpdEX4d6jMcAg2CqBDR7A956VxJAgmnmjvIZAQKhotdqMPoqQ==
age: 361034
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/def719d6-twiceasnice_101b01b00000000000001o.jpeg
200 OK 892 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/def719d6-twiceasnice_101b01b00000000000001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 47x47, components 3\012- data
Hash 0e7b195cccd9e7d658755c887e1f4ba4
bf1ac41bd171490633565ce10e924ae9cd2df9e7
1ea5aab0b2483db1fc4339b16d927e34c3f27f35e32a3ec7681d99646d78ae02
GET /promo.bet.co.za/welcome-bonus-bet/def719d6-twiceasnice_101b01b00000000000001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 892
date: Tue, 02 Aug 2022 10:31:32 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "0e7b195cccd9e7d658755c887e1f4ba4"
cache-control: max-age=31557600
x-amz-version-id: CiH.0XnuFf74XC5gjST7bGREDXSceKKm
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HpkrOtNvfCJ4ee5q-I7fr7q7j2qHMOjzkUHN2xPnduk5PDIMprMxng==
age: 2884968
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6429b930abfde63299f0904d2799142e
7a33a6893301f185e5de5e038574da5e56a3fb6d
2e66f86cab83f1b68b77449fea4c92103f1d850f3da21af5295c3ec75889520a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3456
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Last-Modified: Sun, 04 Sep 2022 18:56:44 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/c4c8bea2-zapper_1029017000000000000028.png
200 OK 691 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/c4c8bea2-zapper_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash b8e39e66c29df2182e7a34d2c4172e7c
6c50f0a3af43f27ba870f1c77f1b1268450a872d
2ea7ec6a576d6cdb0841c284774512ebc18114cd8e4a00ef715e4da60d4203d2
GET /promo.bet.co.za/welcome-bonus-bet/c4c8bea2-zapper_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 691
date: Wed, 31 Aug 2022 15:37:06 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "b8e39e66c29df2182e7a34d2c4172e7c"
cache-control: max-age=31557600
x-amz-version-id: _fny9DOnVFN0FsIWJ.siULniEv2z8vUR
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BQxqSJeF2WzQy_FRUWzZkWdKSQycdxi-C4pWoWmttiaod8xaNcPedQ==
age: 361034
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/dccd6341-vz420_101b01b00000000000001o.jpeg
200 OK 756 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/dccd6341-vz420_101b01b00000000000001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 47x47, components 3\012- data
Hash cf39ea2e5d447edcbaa1f0f1e7c7811a
b9c42c3ab63b48478f7fa8eaee696a514b7adf69
8989878132758fbabfdfb0d490bce0eed58e8f95a1af765d89d37fcf031825d1
GET /promo.bet.co.za/welcome-bonus-bet/dccd6341-vz420_101b01b00000000000001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 756
date: Thu, 01 Sep 2022 11:37:01 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "cf39ea2e5d447edcbaa1f0f1e7c7811a"
cache-control: max-age=31557600
x-amz-version-id: UZM1YQApgLy.lB8wlhaSqlL_aAoDkCks
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TOOv0KOCbYkWCEth7iSlhXuQMSfCc2VPskixCKwDUym2mvS4qg0n4Q==
age: 289039
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/08b73dbd-zac_101b01b00000000000001o.jpeg
200 OK 768 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/08b73dbd-zac_101b01b00000000000001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 47x47, components 3\012- data
Hash 775de967d8ecf7a6b4110063e16528dd
06ce776e1d29b8fafd653f0b0177e1b9bd878230
d878b9d4dff019e8e9ca023a9f09579dc5f206c1c2885a50403934ba344fa804
GET /promo.bet.co.za/welcome-bonus-bet/08b73dbd-zac_101b01b00000000000001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 768
date: Tue, 02 Aug 2022 10:31:32 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "775de967d8ecf7a6b4110063e16528dd"
cache-control: max-age=31557600
x-amz-version-id: 1qOUlcG8_YtyTYApSYRkWPyj4T28zwA7
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cC6g025IF1NcmyIa12TCDL9oRtd5Y9jNHLeiQFd3LcfAbzrelfVi-g==
age: 2884968
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/2c9a5254-epicdeep_101b01b00000000000001o.jpeg
200 OK 799 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/2c9a5254-epicdeep_101b01b00000000000001o.jpeg
IP
File type JPEG image data, baseline, precision 8, 47x47, components 3\012- data
Hash df071f0430eb20f687a59fe0e0e90b29
a44c2d8bdd25b6d6ada123f1ee0a8f6ea57fc287
90eb592a6571cf34051a80d3472fcb40c7513d0ea1a1a650356b157a63889067
GET /promo.bet.co.za/welcome-bonus-bet/2c9a5254-epicdeep_101b01b00000000000001o.jpeg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 799
date: Wed, 31 Aug 2022 15:37:06 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "df071f0430eb20f687a59fe0e0e90b29"
cache-control: max-age=31557600
x-amz-version-id: GPwH6fawy1uyPXzA6rvnk1tYWEHYXyfU
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H9BxZy3p2SPZ3xZkXGOLKxIry5eWEmlJHwDuneFrNst0D0Zb_KFoGw==
age: 361034
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/6969760e-player-small_10cc0aq000000000000028.png
200 OK 46 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/6969760e-player-small_10cc0aq000000000000028.png
IP
File type PNG image data, 444 x 386, 8-bit colormap, non-interlaced\012- data
Hash 6f2abdd4829ce2b3ae5ae2e07a504ccf
e1ce2c330c7c999ac152e25325952cb8bf5121a8
b6aa37b69a190bcdc6abeb2b9926bce849c90eae74e9d0cc1265b8d2d982c412
GET /promo.bet.co.za/welcome-bonus-bet/6969760e-player-small_10cc0aq000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 45569
date: Thu, 01 Sep 2022 12:00:55 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "6f2abdd4829ce2b3ae5ae2e07a504ccf"
cache-control: max-age=31557600
x-amz-version-id: Ou59aE6szy38ZKx9qBlzbLSE6ON9vPS.
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sZdBpujyAIkNiaIrRkgVweLhiCFEVMzKEs9IGwNM5GDP9GQgq30YsQ==
age: 287605
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/cc0d7da1-my-bets_1000000000000000000028.png
200 OK 562 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/cc0d7da1-my-bets_1000000000000000000028.png
IP
File type PNG image data, 59 x 59, 8-bit colormap, non-interlaced\012- data
Hash 7dde3c2850929522fc4713f12f052391
d655719c716c10d37f32e752032267facf7fce07
0e4e90860ca937351d08e1143b57d3f0ccd0cea8a9809878617733d82481a85a
GET /promo.bet.co.za/welcome-bonus-bet/cc0d7da1-my-bets_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 562
date: Sat, 20 Aug 2022 09:44:37 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "7dde3c2850929522fc4713f12f052391"
cache-control: max-age=31557600
x-amz-version-id: xFAgOFz6XHJlJeMdAhpJLsbCbFJVq2Gm
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Rz7gfueTWQJA37vztNhepdUpF2bwPL-UBv54er6ZQ1Mp_Ea1sv0Mxw==
age: 1332583
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/250804d9-market-statistics_1000000000000000000028.png
200 OK 522 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/250804d9-market-statistics_1000000000000000000028.png
IP
File type PNG image data, 59 x 51, 8-bit colormap, non-interlaced\012- data
Hash 0f8d7d70c3122d92e09bb2d1e931c488
e146e62b4b2d55a9fa3a99fc578a65459453d832
b68bfc04aee545a9fee3b498ccb8ce3f498317f8d2b28e39ba1e248f7d729aa2
GET /promo.bet.co.za/welcome-bonus-bet/250804d9-market-statistics_1000000000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 522
date: Fri, 10 Jun 2022 12:30:03 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "0f8d7d70c3122d92e09bb2d1e931c488"
cache-control: max-age=31557600
x-amz-version-id: MVWkAJlLXB7YcRo9TBwD4rEC62lZbFgd
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rThxNVurI2Y9RcC8gr0ImkdNz63dhD-VJmTEXKd5Al8ISvkr1SqErg==
age: 7457057
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/4ff95693-deposit-made_101o01p000000000000028.png
200 OK 761 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/4ff95693-deposit-made_101o01p000000000000028.png
IP
File type PNG image data, 60 x 61, 8-bit colormap, non-interlaced\012- data
Hash 45e16a92783df3f6ce52027abd506c6f
bfd097e9b3bc5f9688af2bc1bad06fa311a9d7f0
57d2cbadf5dc00c5b263d365d0a182c1abdd5b21f73f7ec95ddfd504fcb8d5d7
GET /promo.bet.co.za/welcome-bonus-bet/4ff95693-deposit-made_101o01p000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 761
date: Sun, 19 Jun 2022 12:07:15 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "45e16a92783df3f6ce52027abd506c6f"
cache-control: max-age=31557600
x-amz-version-id: giz6OB7iKV9UcSQq5KI6M4BBc2XboPVL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xw1MwbfpZ1rDPsxY2C50B9m_HWdueumYfmCdSYtPgX6RBKdvw9dOhQ==
age: 6680825
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/105e3674-1foryou_1029017000000000000028.png
200 OK 832 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/105e3674-1foryou_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash c6c16ee7d806e2fcabc1f870ae06077e
79770ec765b0543f61ee24d347c2bde06a54bcc9
b7fe83f3446655aabc0498f24a30233ca4e5d0a510aae831676f69829f741f0c
GET /promo.bet.co.za/welcome-bonus-bet/105e3674-1foryou_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 832
date: Mon, 22 Aug 2022 01:26:18 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "c6c16ee7d806e2fcabc1f870ae06077e"
cache-control: max-age=31557600
x-amz-version-id: AxwmtseHbDB_3z0fxvPumw9lGe8F5ilF
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cZSNsXzI735xVbGfai9hj4h5nWb8DBI9IASVmVKDm3arGDjLXR8Vkw==
age: 1189682
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/8fde9a42-rsz-1iphone_107t0ap000000000000028.png
200 OK 17 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/8fde9a42-rsz-1iphone_107t0ap000000000000028.png
IP
File type PNG image data, 281 x 385, 8-bit colormap, non-interlaced\012- data
Hash fe044b4a377b5ae8d8929ed844ef2a7e
1dd073b94b12979eed44d5161dbed8efc4246f5f
137a97515f05da0772dd06262fc74e4d8ee635a2b217117a3165ed2d0db3ca3a
GET /promo.bet.co.za/welcome-bonus-bet/8fde9a42-rsz-1iphone_107t0ap000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 17075
date: Tue, 02 Aug 2022 09:04:14 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "fe044b4a377b5ae8d8929ed844ef2a7e"
cache-control: max-age=31557600
x-amz-version-id: hWMbwECy4_lvcWAsEQwK_TVJRc5.LIU7
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IogtZEsV1hwkGGh0LW6N4J9V8mmYbHe0wzvLINletBqL3hlQ-14YbA==
age: 2890206
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/f7666089-peach_1029017000000000000028.png
200 OK 1.1 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/f7666089-peach_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash 7491628304b63fd05c1ed74d37eda365
a96d5acdeeae5a7147a1ad86504a71b2ed1af43c
ba7d90313c15a249d12007f5a8f9cec060d640113582de8dc7c6c1a355e54d18
GET /promo.bet.co.za/welcome-bonus-bet/f7666089-peach_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 1098
date: Tue, 30 Aug 2022 08:28:19 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "7491628304b63fd05c1ed74d37eda365"
cache-control: max-age=31557600
x-amz-version-id: TwkhogDN4SS0naKUVe_HRNj0B1xQ7X57
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o70lBRaj2YIkoLHSakfj65XOxfNp3Y70joA2tax544mvRVw2lkpBug==
age: 473161
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/5444902a-sid_1029017000000000000028.png
200 OK 954 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/5444902a-sid_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash 4b9e11c73c674921519b4dfac57baf04
f3bb44e9d2449cddca813d363d8ff1798e056919
9c65895cee16c4463b6826f5c335866e6c41ab62596a01db5835635a258b8e63
GET /promo.bet.co.za/welcome-bonus-bet/5444902a-sid_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 954
date: Sat, 20 Aug 2022 20:01:48 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "4b9e11c73c674921519b4dfac57baf04"
cache-control: max-age=31557600
x-amz-version-id: NF.fCgI7lc11YL7DLsxT2ZNX.BA3NS2x
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vt2hl1scQQdxEFhqOF_Lmm4Bfv9MreFDwNMf6H9NrRCvnBJGYX5kfQ==
age: 1295552
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/084f8a9d-visa_1029017000000000000028.png
200 OK 788 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/084f8a9d-visa_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash 6b482188d274d1daf88d82bae50df30e
571be8153ed3e330ae2ea4c900a0ebf014bfff8a
32b3e5480afd7416cbd57cba12d4d16454f1f9bd37a902ec989a66b9405c992f
GET /promo.bet.co.za/welcome-bonus-bet/084f8a9d-visa_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 788
date: Thu, 01 Sep 2022 11:37:01 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "6b482188d274d1daf88d82bae50df30e"
cache-control: max-age=31557600
x-amz-version-id: 9Hwvo.KYY.mOK5lWMnXQl_H_kgWDhPMP
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: u1jwgfZalwVmRIhpMv4wi4BUbek7Et26bbBdeVTjAdGrF0fhbCaKkQ==
age: 289039
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 04 Sep 2022 18:41:12 GMT
expires: Sun, 04 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 4387
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 53e4933126779cbf269a5819d467ad4b
1c3c6b27a0660a44717be304d90834cf2f9cf3ce
ed5ad968f7d95b37c817e86b54062702bef60b1ffd3977248aad23072af06b87
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: XRzn/tv7a3NqQCCRHJ5kD19w9OB88P7dYjfJvMCk0Yf7FSxktjxeZO+jsFqVkT5DBOhjVeXbmDnv7qQlKoO9+Q==
priority: u=3,i
content-length: 26752
x-fb-trip-id: 1904183273
date: Sun, 04 Sep 2022 19:54:19 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stream-656.optimove.net/
200 OK 15 kB IP
File type JSON data\012- , ASCII text, with very long lines (57492), with no line terminators
Hash 5daca60310148092c5036aefa3bcdce8
79c443e6e5c1c5c5e88dcead5ef54950d9e5246c
90624711d8339cee2dd9245677b4df0d284b0cca321c35fca8053447fda5058c
POST / HTTP/1.1
Host: stream-656.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.bet.co.za/
Content-Type: application/json
X-Request-ID: e1c218bd-fb70-4580-a521-7fb02a625ac5
Origin: https://promo.bet.co.za
Content-Length: 703
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: *
content-type: application/json; charset=utf-8
etag: W/"31-V9lViJZFWrAHw1MgLO9y0f5C020"
date: Sun, 04 Sep 2022 19:54:19 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
set-cookie: visid_incap_2816538=pprZFMR3Rk2pNt1yOxrURmsCFWMAAAAAQUIPAAAAAACf++7ygsRsf76fg+Mh76KS; expires=Sun, 03 Sep 2023 22:14:25 GMT; HttpOnly; path=/; Domain=.optimove.net
incap_ses_275_2816538=KMVuPCvK3i5CoRwVhP/QA2sCFWMAAAAAyOgkVardxKWgLwcj659f+A==; path=/; Domain=.optimove.net
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 8-1958524-1958526 PNYN RT(1662321259307 92) q(0 1 1 0) r(1 1) U6
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/e2940a07-mastercard_1029017000000000000028.png
200 OK 610 B URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/e2940a07-mastercard_1029017000000000000028.png
IP
File type PNG image data, 81 x 43, 8-bit colormap, non-interlaced\012- data
Hash 9983d9c7afbdc09136841e23f3e0714b
3f848aa955bc301394c47f7e4ad194c4c996c1db
b742b87744d2fd0e50fa843bd3042c5de7a378c48ecffc0414431c7fa5752710
GET /promo.bet.co.za/welcome-bonus-bet/e2940a07-mastercard_1029017000000000000028.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 610
date: Sat, 03 Sep 2022 09:26:57 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: "9983d9c7afbdc09136841e23f3e0714b"
cache-control: max-age=31557600
x-amz-version-id: ALx70nqzTKmrit4bZ5F9RQgC.5JxrUh3
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bYHXaxdGf1v4U8Zju5Lfo3uHbh2XMM3Tq_6_-bv3Mq1trO-wJ_Zsjg==
age: 124043
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6429b930abfde63299f0904d2799142e
7a33a6893301f185e5de5e038574da5e56a3fb6d
2e66f86cab83f1b68b77449fea4c92103f1d850f3da21af5295c3ec75889520a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3456
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Last-Modified: Sun, 04 Sep 2022 18:56:44 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
realtime-656.optimove.net/reportEvent
204 No Content 0 B URL HTTP/2 realtime-656.optimove.net/reportEvent
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /reportEvent HTTP/1.1
Host: realtime-656.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-request-id
Referer: https://promo.bet.co.za/
Origin: https://promo.bet.co.za
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: content-type,x-request-id
access-control-max-age: 86400
content-length: 0
date: Sun, 04 Sep 2022 19:54:19 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
set-cookie: visid_incap_2819049=traWJSyEQM+kxZuFhnYE/GsCFWMAAAAAQUIPAAAAAADb+4vdDZ8JHrWspSZydCYM; expires=Sun, 03 Sep 2023 22:14:25 GMT; HttpOnly; path=/; Domain=.optimove.net
incap_ses_275_2819049=RFXhfRZmcDpRoRwVhP/QA2sCFWMAAAAAcx0+YGLGIhagfmDtX47Ikg==; path=/; Domain=.optimove.net
x-cdn: Imperva
x-iinfo: 1008-1958524-1958530 NNNN CT(2 3 0) RT(1662321259307 269) q(0 1 1 5) r(1 1) U6
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 604b5eee9c115b3d83f891c8b68298c9
0fb04d16951b8ddcade7ca786ac480951daeea71
c1220494d88f011ceca376b1653182aff0b0ba4d342dd9175d7cee7cfad87109
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5880
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:19 GMT
Last-Modified: Sun, 04 Sep 2022 18:16:19 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 313
t.co/i/adsct?bci=3&eci=2&event_id=507f13ca-f3fd-4290-92a8-33abac73ef2a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bf3b0af8-a07a-4835-bf96-6b185562ef79&tw_document_href=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nzizw&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=507f13ca-f3fd-4290-92a8-33abac73ef2a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bf3b0af8-a07a-4835-bf96-6b185562ef79&tw_document_href=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nzizw&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=507f13ca-f3fd-4290-92a8-33abac73ef2a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bf3b0af8-a07a-4835-bf96-6b185562ef79&tw_document_href=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nzizw&type=javascript&version=2.3.27 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:54:19 GMT
server: tsa_o
set-cookie: muc_ads=554c5cf8-07e7-4a09-81e8-1ac739802c1d; Max-Age=63072000; Expires=Tue, 03 Sep 2024 19:54:19 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=0
x-response-time: 105
x-connection-hash: 0b93106c79e49b1f76640d99cd523346c28f6d512e8f9179865729b4f8c21988
X-Firefox-Spdy: h2
stream-656.optimove.net/
200 OK 21 kB IP
File type JSON data\012- , ASCII text, with very long lines (60036)
Hash c008aeab0a4755e03971639a8d5570b1
56a60ccbe17db76ab93308be235c1f2ab715500a
e776ad65771a56f7b70d54bc2eca0468a39c963dba05ee43d54c195e48bb58a4
POST / HTTP/1.1
Host: stream-656.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.bet.co.za/
Content-Type: application/json
X-Request-ID: 78593a67-14a6-4232-8cf4-327e6e140393
Origin: https://promo.bet.co.za
Content-Length: 625
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: *
content-type: application/json; charset=utf-8
etag: W/"31-EAywTM/mr9OoYf2oGwMLAryKQYk"
date: Sun, 04 Sep 2022 19:54:19 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
set-cookie: visid_incap_2816538=pprZFMR3Rk2pNt1yOxrURmsCFWMAAAAAQUIPAAAAAACf++7ygsRsf76fg+Mh76KS; expires=Sun, 03 Sep 2023 22:14:25 GMT; HttpOnly; path=/; Domain=.optimove.net
incap_ses_275_2816538=D9JpCzYstU9CoRwVhP/QA2sCFWMAAAAAk1AnaenXcd2tRZcpShWbsw==; path=/; Domain=.optimove.net
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 8-1958524-1958526 PNYN RT(1662321259307 401) q(0 0 0 0) r(0 0) U6
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/3b68372e-logo.svg
200 OK 5.8 kB URL HTTP/2 d9hhrg4mnvzow.cloudfront.net/promo.bet.co.za/welcome-bonus-bet/3b68372e-logo.svg
IP
Hash f294e7ecf6ad696b1eacc1402c222586
77a3e85d3ece1819ddc050bdc42a358b80be6ce0
026167e229e05f6c320dae94369769b9538dcdd1dcdee5e4ac2a5d7f1e294871
GET /promo.bet.co.za/welcome-bonus-bet/3b68372e-logo.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 19 Aug 2022 08:17:40 GMT
last-modified: Tue, 07 Dec 2021 08:59:25 GMT
etag: W/"ea8c0a7f517e3f99981d5f9d67a6bc27"
cache-control: max-age=31557600
x-amz-version-id: uN5AvnBiQiiAVgsX_hJ9YeTmp.xXtiSg
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UO6OSwni3tbOt5oneYkUizw9Pm5ewAQpiYhR1sZ9ARHAgxKYnCd0rQ==
age: 1424200
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1931a32d83e4feb5268887bcb07fcc1e
6fb75c21ced29544dd6d7c3b0ef79adf65718a39
d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&gjid=1794511058&_gid=1621892964.1662321256&_u=YADAAEAAAAAAAC~&z=205205332
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&gjid=1794511058&_gid=1621892964.1662321256&_u=YADAAEAAAAAAAC~&z=205205332
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&gjid=1794511058&_gid=1621892964.1662321256&_u=YADAAEAAAAAAAC~&z=205205332 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://promo.bet.co.za
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 04 Sep 2022 19:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1278db78948279716d72ac203ad8fb0d
1746b9863b781ed9a0c26a126b9b80d36c903974
8d9e31a35490bc2ebef4c4c2152c89b62491c0cdfc31ec0594bc21fd2e9f43f6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cebfe28b301ffe9583a29d4e2e787a07
c312300cb020f4f61edaf4b51394aa889bc815e8
faf415663681aab7051de03f75a3163352ff9cffa4f72e38f56d4e0eb337af4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3f5b4e778429d4ba70b497cc9fbb1127
db17f774a14f160caa77eb0222152767a364bba7
64da763bf84ec2d6284a112f50392f15a8b11122f3875317c52bd6c5e8e8d894
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&_u=YADAAEAAAAAAAC~&z=1258030571
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&_u=YADAAEAAAAAAAC~&z=1258030571
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&_u=YADAAEAAAAAAAC~&z=1258030571 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 04 Sep 2022 19:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&_u=YADAAEAAAAAAAC~&z=1258030571
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&_u=YADAAEAAAAAAAC~&z=1258030571
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-17246780-8&cid=905411234.1662321255&jid=619916945&_u=YADAAEAAAAAAAC~&z=1258030571 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 04 Sep 2022 19:54:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=507f13ca-f3fd-4290-92a8-33abac73ef2a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bf3b0af8-a07a-4835-bf96-6b185562ef79&tw_document_href=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nzizw&type=javascript&version=2.3.27
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=507f13ca-f3fd-4290-92a8-33abac73ef2a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bf3b0af8-a07a-4835-bf96-6b185562ef79&tw_document_href=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nzizw&type=javascript&version=2.3.27
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=507f13ca-f3fd-4290-92a8-33abac73ef2a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=bf3b0af8-a07a-4835-bf96-6b185562ef79&tw_document_href=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nzizw&type=javascript&version=2.3.27 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Sep 2022 19:54:19 GMT
server: tsa_o
set-cookie: personalization_id="v1_MBLHJI7mEuJnfny8pb0snw=="; Max-Age=63072000; Expires=Tue, 03 Sep 2024 19:54:20 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
strict-transport-security: max-age=631138519
x-response-time: 105
x-connection-hash: cd63f538ac8d4033f05e66c7e58f4259d662c59ccbcc74c2806b37a5f9b15a76
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cebfe28b301ffe9583a29d4e2e787a07
c312300cb020f4f61edaf4b51394aa889bc815e8
faf415663681aab7051de03f75a3163352ff9cffa4f72e38f56d4e0eb337af4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 51df98c169fb7de773301d014bcea4b8
9bdf9bdb9b5eee378e9ac4ec68ca07c665ae4819
c8336f3a2e16c9390b610c612ce9be7c19286f04a6328a29200cbf65db5801c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=773914780695503&ev=PageView&dl=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&rl=&if=false&ts=1662321256411&sw=1280&sh=1024&ud[country]=3c42d9ac9807bbf91745b921d4887371b41b4a52e4e78f0dd127358e967dd4e0&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.2.1662321256411.599381200&it=1662321255931&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=773914780695503&ev=PageView&dl=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&rl=&if=false&ts=1662321256411&sw=1280&sh=1024&ud[country]=3c42d9ac9807bbf91745b921d4887371b41b4a52e4e78f0dd127358e967dd4e0&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.2.1662321256411.599381200&it=1662321255931&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=773914780695503&ev=PageView&dl=https%3A%2F%2Fpromo.bet.co.za%2Fwelcome-bonus-bet%2F%3Fbtag%3D654648_9E16D016B3F34B1D972829EFC9CFE9D7%26sub1%3Dwl650dqe9okg3bqii9435n8s&rl=&if=false&ts=1662321256411&sw=1280&sh=1024&ud[country]=3c42d9ac9807bbf91745b921d4887371b41b4a52e4e78f0dd127358e967dd4e0&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.2.1662321256411.599381200&it=1662321255931&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Sun, 04 Sep 2022 19:54:20 GMT
expires: Sun, 04 Sep 2022 19:54:20 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zz.connextra.com/Betcoza/dcs/tagController/tagData/a30120f74b13
200 OK 0 B URL HTTP/2 zz.connextra.com/Betcoza/dcs/tagController/tagData/a30120f74b13
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /Betcoza/dcs/tagController/tagData/a30120f74b13 HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 44
Origin: https://promo.bet.co.za
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://promo.bet.co.za
vary: Origin
p3p: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR SAMa BUS IND UNI PUR COM NAV
content-type: text/plain
content-length: 0
date: Sun, 04 Sep 2022 19:54:20 GMT
set-cookie: CxtId=f5572fd7-506c-4cbd-9e1e-cba44077683d; Domain=.connextra.com; Expires=Tue, 03-Sep-2024 19:54:20 GMT; Path=/; Secure; SameSite=None
Betcoza=P%7Clandingpage%7C1%7C202209042054; Domain=.connextra.com; Expires=Mon, 04-Sep-2023 19:54:20 GMT; Path=/; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 21498eafb8e626a5ca1518f52f8172b8
397cd23a315474fdb39eea823fe029d27d51909b
e0b65e1827fd5944575e98850970290327800e198f3eb67b78693bdb48b8cba2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4930
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 04 Sep 2022 19:54:20 GMT
Last-Modified: Sun, 04 Sep 2022 18:32:11 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
pixel.mathtag.com/event/js?mt_id=1593781&mt_adid=254183&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=
200 OK 1.4 kB URL HTTP/1.1 pixel.mathtag.com/event/js?mt_id=1593781&mt_adid=254183&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3=
IP
Hash 151c4695c5ea949b98fcd62a93823cb4
aab23194c8b58dfc39d04c846b41dd5c27993891
84b66c5da4c761d937561287514bb17e433cdb628c96195b6a29238fff86259f
GET /event/js?mt_id=1593781&mt_adid=254183&mt_exem=&mt_excl=&v1=&v2=&v3=&s1=&s2=&s3= HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/javascript
Content-Length: 1411
Access-Control-Allow-Origin: *
Server: MT3 4447 e18e916 master iad-pixel-x15 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sun, 04 Sep 2022 19:54:19 GMT
Date: Sun, 04 Sep 2022 19:54:20 GMT
Connection: keep-alive
Set-Cookie: uuid=e9206315-026c-4200-a387-de0e678c23a4; domain=.mathtag.com; path=/; expires=Mon, 02-Oct-2023 19:54:20 GMT; SameSite=None; Secure
secure.adnxs.com/getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID
200 OK 43 B URL HTTP/1.1 secure.adnxs.com/getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:54:20 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 02b27471-f4db-434f-8860-6240e29e5fa5
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/seg?add=30211879&t=2
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=30211879&t=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=30211879&t=2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:54:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D30211879%26t%3D2
AN-X-Request-Uuid: d4c568a0-8be9-47df-af3e-4d0ec2830eb8
Set-Cookie: uuid2=9139416142620485452; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 03-Dec-2022 19:54:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
sync.mathtag.com/sync/img?redir=https%3A%2F%2Fzz.connextra.com%2Fsync%2Fdata%2Fuid%2F6c883bd680%2F%5BMM_UUID%5D
302 Moved Temporarily 0 B URL HTTP/1.1 sync.mathtag.com/sync/img?redir=https%3A%2F%2Fzz.connextra.com%2Fsync%2Fdata%2Fuid%2F6c883bd680%2F%5BMM_UUID%5D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/img?redir=https%3A%2F%2Fzz.connextra.com%2Fsync%2Fdata%2Fuid%2F6c883bd680%2F%5BMM_UUID%5D HTTP/1.1
Host: sync.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Date: Sun, 04 Sep 2022 19:54:20 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=360
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master zrh-pixel-x31 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
set-cookie: uuid=67e66315-026c-4900-8b2d-31433ee08661; domain=.mathtag.com; path=/; expires=Mon, 02-Oct-2023 19:54:20 GMT; SameSite=None; Secure
location: https://zz.connextra.com/sync/data/uid/6c883bd680/67e66315-026c-4900-8b2d-31433ee08661
Expires: Sun, 04 Sep 2022 19:54:19 GMT
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D30211879%26t%3D2
200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D30211879%26t%3D2
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D30211879%26t%3D2 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.bet.co.za/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 04 Sep 2022 19:54:20 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 8df89f05-081b-44d1-ab65-0c9790d5eac3
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2E>uJ5cXn!@wnf-Te9(>wL5L!!'>+$[w*j; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 03-Dec-2022 19:54:20 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
zz.connextra.com/sync/data/uid/6c883bd680/67e66315-026c-4900-8b2d-31433ee08661
200 OK 64 B URL HTTP/2 zz.connextra.com/sync/data/uid/6c883bd680/67e66315-026c-4900-8b2d-31433ee08661
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28eef568735b80a8332521d787dd86bb
28f5f77711609381a229447f8560d374d0eadc62
09cf0142653a98e763b6a79dae28efd223810b8fb099beb9f573306fd626fc02
GET /sync/data/uid/6c883bd680/67e66315-026c-4900-8b2d-31433ee08661 HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.bet.co.za/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
p3p: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR SAMa BUS IND UNI PUR COM NAV
vary: accept-encoding
content-encoding: gzip
x-envoy-upstream-service-time: 13
server: istio-envoy
expires: Sun, 04 Sep 2022 19:54:20 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 04 Sep 2022 19:54:20 GMT
content-length: 64
set-cookie: CxtId=8b2d3454-9109-489e-a716-75cf770dba6b; Domain=.connextra.com; Expires=Tue, 03-Sep-2024 19:54:20 GMT; Path=/; Secure
ex_uuid=6c883bd680%2C67e66315-026c-4900-8b2d-31433ee08661; Domain=.connextra.com; Expires=Tue, 03-Sep-2024 19:54:20 GMT; Path=/; Secure
X-Firefox-Spdy: h2
pixel.mathtag.com/sync/iframe?mt_uuid=e9206315-026c-4200-a387-de0e678c23a4&no_iframe=1&mt_adid=254183&source=mathtag
200 OK 713 B URL HTTP/1.1 pixel.mathtag.com/sync/iframe?mt_uuid=e9206315-026c-4200-a387-de0e678c23a4&no_iframe=1&mt_adid=254183&source=mathtag
IP
File type HTML document text\012- HTML document, ASCII text
Hash f853f2ecf3f2d763c4057f4ff5c3e4e8
0f9ca6de16aa4261f1202443311462a81717dd85
8040be8c28a19b0f78481f2da17e7220e75adde27eb9713ff626652a066f92da
GET /sync/iframe?mt_uuid=e9206315-026c-4200-a387-de0e678c23a4&no_iframe=1&mt_adid=254183&source=mathtag HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 713
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x19 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sun, 04 Sep 2022 19:54:19 GMT
Date: Sun, 04 Sep 2022 19:54:20 GMT
Connection: keep-alive
src.webpu.sh/gvCYIEgRYF61D2o7q2qFlZRZvzu3a6Rd/sdk.js
200 OK 36 kB URL HTTP/1.1 src.webpu.sh/gvCYIEgRYF61D2o7q2qFlZRZvzu3a6Rd/sdk.js
IP
File type ASCII text, with very long lines (62095)
Hash c591f30ccb0c2a569acd1708098fd60f
832ec38316b10e01c51ade698a3e683c8c32e1ad
37cd9054a4ab85833dc31eb0b3c11e7c5b3be09d241cab779e481c1dd4bf71f4
GET /gvCYIEgRYF61D2o7q2qFlZRZvzu3a6Rd/sdk.js HTTP/1.1
Host: src.webpu.sh
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Sep 2022 19:54:20 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-amz-id-2: ECOoH7fPDOaeykO7rdm0RHiXBvh/xV3gAoiddtKsbNcmf+IVui6xO7bsa0ybh21kesUTtRVOfuY=
x-amz-request-id: 73GTNT9NYXE8RE8P
Last-Modified: Fri, 27 Mar 2020 08:48:36 GMT
ETag: W/"6bf024f250768f83524b2c77ea9a812d"
Cache-Control: max-age=21600
Content-Encoding: gzip
pixel.mathtag.com/misc/img?mm_bnc&bcdv=0
200 OK 43 B URL HTTP/1.1 pixel.mathtag.com/misc/img?mm_bnc&bcdv=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /misc/img?mm_bnc&bcdv=0 HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x14 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sun, 04 Sep 2022 19:54:19 GMT
Date: Sun, 04 Sep 2022 19:54:20 GMT
Connection: keep-alive
Set-Cookie: uuid=d7d86315-026c-4500-9c97-b5968766d9b6; domain=.mathtag.com; path=/; expires=Mon, 02-Oct-2023 19:54:20 GMT; SameSite=None; Secure
pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv=0
200 OK 0 B URL HTTP/1.1 pixel.mathtag.com/comp/img?mt_id=99&ns=xx&bcdv=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /comp/img?mt_id=99&ns=xx&bcdv=0 HTTP/1.1
Host: pixel.mathtag.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pixel.mathtag.com/sync/iframe?mt_uuid=e9206315-026c-4200-a387-de0e678c23a4&no_iframe=1&mt_adid=254183&source=mathtag
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 0
Access-Control-Allow-Origin: *
Server: MT3 4505 5b23575 master iad-pixel-x31 config:1.0.0
Cache-Control: no-cache
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
Expires: Sun, 04 Sep 2022 19:54:19 GMT
Date: Sun, 04 Sep 2022 19:54:20 GMT
Connection: keep-alive
Set-Cookie: uuid=46426315-026c-4a00-ad72-9bc01f218806; domain=.mathtag.com; path=/; expires=Mon, 02-Oct-2023 19:54:20 GMT; SameSite=None; Secure
fonts.googleapis.com/css?family=Hind+Guntur:regular,600,300,700%7COswald:700,300
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Hind+Guntur:regular,600,300,700%7COswald:700,300
IP
GET /css?family=Hind+Guntur:regular,600,300,700%7COswald:700,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://promo.bet.co.za/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Sep 2022 19:54:19 GMT
date: Sun, 04 Sep 2022 19:54:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
realtime-656.optimove.net/reportEvent
200 OK 0 B URL HTTP/2 realtime-656.optimove.net/reportEvent
IP
POST /reportEvent HTTP/1.1
Host: realtime-656.optimove.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://promo.bet.co.za/
Content-Type: application/json
X-Request-ID: de001b88-b8d4-4fd4-b3a2-8a1c723423d8
Origin: https://promo.bet.co.za
Content-Length: 703
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,Content-Type
content-type: application/json
date: Sun, 04 Sep 2022 19:54:19 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
set-cookie: visid_incap_2819049=traWJSyEQM+kxZuFhnYE/GsCFWMAAAAAQUIPAAAAAADb+4vdDZ8JHrWspSZydCYM; expires=Sun, 03 Sep 2023 22:14:25 GMT; HttpOnly; path=/; Domain=.optimove.net
incap_ses_275_2819049=qvNoDydWLihRoRwVhP/QA2sCFWMAAAAAlOlcrRmJDuElObKgxiFVVg==; path=/; Domain=.optimove.net
x-cdn: Imperva
content-encoding: gzip
x-iinfo: 8-1958524-1958530 PNYN RT(1662321259307 347) q(0 0 0 0) r(0 0) U6
X-Firefox-Spdy: h2
18.193.146.82
93.184.220.29
142.251.1.154
23.36.79.16
52.18.219.182
31.13.72.36
104.18.32.68