Report - waufooke.com/4/3466025/

Report Overview

Submitted URL
waufooke.com/4/3466025/
IP
139.45.197.238
ASN
#9002 RETN Limited
Submitted
2022-12-30 07:55:18
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
region1.google-analytics.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	706 B	561 B	216.239.32.36
waufooke.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	12 kB	139.45.197.238
members.bet365.com	59337	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	694 B	742 B	5.226.179.10
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.0 kB	8.0 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
my.rtmark.net	9054	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	421 B	678 B	139.45.195.8
ocsp.sectigo.com	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	340 B	963 B	104.18.32.68
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	380 B	39 kB	142.250.74.168
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.2 kB	93.184.220.29
www.bet365.com	28225	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	429 kB	5.226.179.10
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	686 B	1.4 kB	142.250.74.131
content001.bet365.com	80047	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4.2 kB	39 kB	5.226.179.10
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.89.136.7
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	50 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2022-12-30 07:55:02	medium	Client IP	139.45.197.238	ET ADWARE_PUP Win32/Adware.Agent.NSU CnC Activity M2

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-12-30	medium	waufooke.com	Sinkholed
2022-12-30	medium	waufooke.com	Sinkholed

JavaScript (10)

	URL	Size	First Seen	Last Seen
	waufooke.com/4/3466025/	13 kB	2023-03-08	2023-03-12
Pretty URL waufooke.com/4/3466025/ IP 139.45.197.238 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:08:26 Last Seen2023-03-12 21:33:36 Times Seen1 Hash 248eaee13703e09c4cab966314566d5b 278a9b889682ebbd97afcb7f55d70a0adbeec20e 208b96767be990c8572f780e96ed5b69eb9412a698317162e5f669584c443741 Loading...

	waufooke.com/4/3466025/	7.7 kB	2023-03-12	2023-03-12
Pretty URL waufooke.com/4/3466025/ IP 139.45.197.238 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 11:16:32 Last Seen2023-03-12 11:16:32 Times Seen1 Hash 8d3ba6f62faa0c0ae9852e8307665b88 a014fc3460a541a0279304cb7c917ae0cb119728 af49e33d0228339f6df289c5b441e7213f10173e4ce50388c8f4c1407df27457 Loading...

	www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3	265 B	2023-03-12	2023-03-13
Pretty URL www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3 IP 5.226.179.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 10:45:07 Last Seen2023-03-13 06:01:55 Times Seen1 Hash eee9f80b2da08d2cc9106cbad637ce2a 447e1259f11775ee18c81eb4cd20b64a3bdedc87 c67171599af509f2d3ea6437e79f64318587cc11db3b5768702118626a881ce9 Loading...

	www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3	170 B	2023-03-12	2023-03-25
Pretty URL www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3 IP 5.226.179.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 11:16:32 Last Seen2023-03-25 23:22:51 Times Seen4 Hash dd4fa87b5485fb73dbba93ba2379d7c3 9c04ee6b24330c954a918cec3f68b8322460a193 df093229535011bb0f53ea063fb593e8930212f75ad0e46e8ebc14a62c8de9e7 Loading...

	www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?async	989 B	2023-03-12	2023-03-12
Pretty URL www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?async IP 5.226.179.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 11:16:32 Last Seen2023-03-12 11:16:32 Times Seen1 Hash d64505b1ede770ff8cec611fe0337b4d ce9a1cdf8a623403d8de641782d664375f537a18 e6efe26dd966e879b7a95d42da6ec1ef4fa76bb1e684ce0771660a00c4afe1fe Loading...

	unknown	0 B	2023-03-07	2024-04-16
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-16 06:57:05 Times Seen36891589 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3	1.2 kB	2023-03-07	2023-03-17
Pretty URL www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3 IP 5.226.179.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:27:51 Last Seen2023-03-17 12:44:47 Times Seen1 Hash 0b31bca2a6466c4402da08bec41172ec b4946280a0d749e47302e47067ded685ef08d9e2 f4c4f30dc2df5d1a64d10c327e237845e2f35721b73e8c39eaf999baa938d8ac Loading...

	www.bet365.com/olpc/olpc-scripts.js?v=rFtYSQymHsg1Oi3u_Pek5p3y3x-FAFn_GxqtcGwAakg1	22 kB	2023-03-12	2023-03-13
Pretty URL www.bet365.com/olpc/olpc-scripts.js?v=rFtYSQymHsg1Oi3u_Pek5p3y3x-FAFn_GxqtcGwAakg1 IP 5.226.179.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 10:45:07 Last Seen2023-03-13 01:41:37 Times Seen1 Hash 4b7abea341a3be81e00f62d618876842 22f4f41d48879a81b1dc7ee884663f8a7987bafa 921ee52b2045f30e5f94e878104f45002015a89bcf48fba1ea82725e08eecf93 Loading...

	www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js	9.9 kB	2023-03-08	2023-09-09
Pretty URL www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js IP 5.226.179.10 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:47:05 Last Seen2023-09-09 22:59:51 Times Seen513 Hash a36241f1a0a722542a61d6001ab074a4 0c137bba1e20a7c0264025dc6ab0506871643e3d 938be9a666ad7c7f2d3433915964417613c1a0a3a7de7261f7f9420747f9702e Loading...

	www.googletagmanager.com/gtag/js?id=G-45M1DQFW2B&l=dataLayer&cx=c	230 kB	2023-03-12	2023-03-12
Pretty URL www.googletagmanager.com/gtag/js?id=G-45M1DQFW2B&l=dataLayer&cx=c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 11:15:08 Last Seen2023-03-12 11:16:32 Times Seen1 Hash 9bce39f661a7949b6f78c48a30b2bc0f 91bfb6afc5c6bd38dbcdb5dfd5e6329e7cf5f0b9 a478f5763cca980257c73c56763ee9f2f8d640f48aebb3c956c264fe0375e72a Loading...

HTTP Transactions (54)

URL IP Response Size

waufooke.com/4/3466025/

139.45.197.238

200 OK

9.4 kB

URL HTTP/1.1
waufooke.com/4/3466025/
IP
139.45.197.238:0
ASN
#9002 RETN Limited

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12966)
Size
9.4 kB (9364 bytes)
Hash
9ad98c0b0e054d4558a30bc67d134f50
1bf67ad0b73cc1552acbbcb25c0df82a92a67a40
7e4b48eaab715780804f3841f85f0550461e51f3e0c8e543cfc27047031d82a7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /4/3466025/ HTTP/1.1
Host: waufooke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 30 Dec 2022 07:55:07 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: f45bded1886d4f72e6bbcb2b8d2c2fc7
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=cb03b66e8c6a48cf998fca924b9e9150; expires=Sat, 30 Dec 2023 07:55:07 GMT; path=/
oaidts=1672386907; expires=Sat, 30 Dec 2023 07:55:07 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e717435470c9f4f06b174d7100c6a98f
292150251495b243c384e0c676a258597ba7f4d8
91ce8257662cb8cea9cc3c74cda1d95dba421daa466b0ac231fa433e0c58e6c6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91CE8257662CB8CEA9CC3C74CDA1D95DBA421DAA466B0AC231FA433E0C58E6C6"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4321
Expires: Fri, 30 Dec 2022 09:07:08 GMT
Date: Fri, 30 Dec 2022 07:55:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
78f1f94544ef06b96bb43283f59d100f
fa2f1a3730a98c6fa5ebf976143fb6093a7298be
889af22ee304adea2e23491acbc89ebdcaf322e8c45af2bebf7520e3e9b0a6a9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "889AF22EE304ADEA2E23491ACBC89EBDCAF322E8C45AF2BEBF7520E3E9B0A6A9"
Last-Modified: Tue, 27 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10653
Expires: Fri, 30 Dec 2022 10:52:40 GMT
Date: Fri, 30 Dec 2022 07:55:07 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 30 Dec 2022 07:35:33 GMT
content-type: application/json
age: 1174
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
428881081ad357fb55af33ebf9d12c16
29b7be72f76da07db4a03fb1bc57ffe16d520a22
9adff7f91b147b0d93166bc4ece0dd31fd19fd8b2c269a6a596a1e902f49a1fe

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9ADFF7F91B147B0D93166BC4ECE0DD31FD19FD8B2C269A6A596A1E902F49A1FE"
Last-Modified: Wed, 28 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4905
Expires: Fri, 30 Dec 2022 09:16:52 GMT
Date: Fri, 30 Dec 2022 07:55:07 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: jxAnJMlq7hhR2VyJIylcwVTpqMTp5t1PCnoMqmRykR3aoKTUEPGJAGcarJ7iq9JcGtnorkL+O5o=
x-amz-request-id: RZAJ2GCCK9V939TC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 30 Dec 2022 06:56:55 GMT
age: 3492
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 07:55:07 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
51a8eeb119d5241f64b04c1a14f21b89
d1a1206a03398e86e91bd239e192012c1936ffa1
40fe1908ebb71f90b83ca88e3d94b1531653c144bf1e74ffc7036f1fc73f66b8

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40FE1908EBB71F90B83CA88E3D94B1531653C144BF1E74FFC7036F1FC73F66B8"
Last-Modified: Tue, 27 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10593
Expires: Fri, 30 Dec 2022 10:51:40 GMT
Date: Fri, 30 Dec 2022 07:55:07 GMT
Connection: keep-alive

my.rtmark.net/img.gif?f=merge&userId=cb03b66e8c6a48cf998fca924b9e9150

139.45.195.8

200 OK

43 B

URL HTTP/2
my.rtmark.net/img.gif?f=merge&userId=cb03b66e8c6a48cf998fca924b9e9150
IP
139.45.195.8:0
ASN
#9002 RETN Limited

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

HTTP Headers

GET /img.gif?f=merge&userId=cb03b66e8c6a48cf998fca924b9e9150 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waufooke.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 30 Dec 2022 07:55:07 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=cb03b66e8c6a48cf998fca924b9e9150; expires=Sat, 30 Dec 2023 07:55:07 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

waufooke.com/?z=3466025&syncedCookie=true&rhd=false

139.45.197.238

302 Found

0 B

URL HTTP/1.1
waufooke.com/?z=3466025&syncedCookie=true&rhd=false
IP
139.45.197.238:0
ASN
#9002 RETN Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

NIDS	Severity	Alert
suricata	medium	ET ADWARE_PUP Win32/Adware.Agent.NSU CnC Activity M2

HTTP Headers

POST /?z=3466025&syncedCookie=true&rhd=false HTTP/1.1
Host: waufooke.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 442
Origin: http://waufooke.com
Connection: keep-alive
Referer: http://waufooke.com/afu.php?zoneid=3466025&var=3466025&rid=BlV06HYB84_q667R8LxxtQ%3D%3D&rhd=false
Cookie: OAID=cb03b66e8c6a48cf998fca924b9e9150; oaidts=1672386907
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Server: nginx
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Length: 0
Connection: keep-alive
X-Trace-Id: d2cb6f3137ad3ec2ef242c5898df8569
Link: <https://www.bet365.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Referrer-Policy: no-referrer
Location: https://www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3
Access-Control-Allow-Origin: http://waufooke.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=cb03b66e8c6a48cf998fca924b9e9150; expires=Sat, 30 Dec 2023 07:55:08 GMT; path=/
oaidts=1672386907; expires=Sat, 30 Dec 2023 07:55:08 GMT; path=/
syncedCookie=true; expires=Fri, 06 Jan 2023 07:55:08 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
505906c53b890d47fa50d6b92ff0af65
b619451c87d83f981642f8637e6ce940242098cc
b2cd44612bc2d7cd9ecc7fac5516b6838240212becc5e5420b904f996d62de78

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5662
Cache-Control: max-age=151461
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 07:55:08 GMT
Etag: "63ae2fe3-117"
Expires: Sun, 01 Jan 2023 01:59:29 GMT
Last-Modified: Fri, 30 Dec 2022 00:25:07 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279

www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3

5.226.179.10

200 OK

3.5 kB

URL HTTP/1.1
www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Size
3.5 kB (3480 bytes)
Hash
9fd67031672f5668ad13d33a8f66ddc8
cf6ebfc65214e4f1162c421743f72ef2234cc3cc
e3309cc4378ece3b72e58e83e0efb48ddc61d824592302a81971317ebce937d2

HTTP Headers

GET /olp/open-account/?affiliate=365_00976072&rdk=rk3 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ServerDetails: <!--2P1 - 79-->
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; path=/; expires=Fri, 30-Dec-22 08:25:08 GMT; domain=.bet365.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 78193620097ab4ed-OSL

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 30 Dec 2022 07:33:31 GMT
age: 1297
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
8ca720003d6936139e0f9038f38c6b2f
608889df545dca484ec357dbdd9a6d2e2669cd35
d2078638655684965a12965bf29346008139e1cf2f5356c2c22a49d15006632f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Dec 2022 14:07:08 GMT
Expires: Thu, 05 Jan 2023 14:07:07 GMT
Etag: "608889df545dca484ec357dbdd9a6d2e2669cd35"
Cache-Control: max-age=540118,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7819361ebbb7b517-OSL

www.bet365.com/olpc/nn/143/0/1/open-account

5.226.179.10

200 OK

13 kB

URL HTTP/1.1
www.bet365.com/olpc/nn/143/0/1/open-account
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2285), with CRLF line terminators
Size
13 kB (12877 bytes)
Hash
cd21ef5df66f043d37db7785f271cd92
33d4d26260b2a3d1589009ac62c38bf2bf6be467
8e429ecf6fa394a2d557c42e68c13e016a0adeccca948f23228defe81c258e36

HTTP Headers

GET /olpc/nn/143/0/1/open-account HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 12877
Connection: keep-alive
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' https://www.googletagmanager.com;frame-src 'self' http://members.bet365.com 'nonce-koCH+zK5glVKFEjEvR2zZAPTPFT1yEVREuY0JR02PdE=';style-src 'self' 'unsafe-inline';img-src 'self' data: https://content001.bet365.com/ https://content001.bet365.com/SportsContent/ 'nonce-koCH+zK5glVKFEjEvR2zZAPTPFT1yEVREuY0JR02PdE=';connect-src 'self' https://www.google-analytics.com http://members.bet365.com https://extra.bet365.com 'nonce-koCH+zK5glVKFEjEvR2zZAPTPFT1yEVREuY0JR02PdE=';font-src 'self' data: 'nonce-koCH+zK5glVKFEjEvR2zZAPTPFT1yEVREuY0JR02PdE=';
Last-Modified: Fri, 30 Dec 2022 00:21:33 GMT
CF-Cache-Status: HIT
Age: 12328
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 781936214a6bb4ed-OSL

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
a9c3c5a25ef2f0e01da19a721b44d68a
22e5ed6e03356da5cbbd821eb29f4ee78f6752ac
1028de63563e8f7d7d72edb102f6d2172a8e895d43e57c784091080f392edd3e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6261
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 07:55:08 GMT
Last-Modified: Fri, 30 Dec 2022 06:10:47 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280

www.bet365.com/olpc/Content/Fonts/FTN45__W.woff2

5.226.179.10

200 OK

46 kB

URL HTTP/1.1
www.bet365.com/olpc/Content/Fonts/FTN45__W.woff2
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
Web Open Font Format (Version 2), TrueType, length 45892, version 1.590\012- data
Size
46 kB (45892 bytes)
Hash
e3596a29429736364ebfef73786a55ab
7bd9b6b18b0985c080d520610c0ab74a128d71bd
6e28311fc68644a88a32df782c7371991894bc6a6a81f8ff70f971b4470c3751

HTTP Headers

GET /olpc/Content/Fonts/FTN45__W.woff2 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Length: 45892
Connection: keep-alive
Last-Modified: Fri, 30 Dec 2022 04:21:01 GMT
CF-Cache-Status: HIT
Age: 10560
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936218a9db4ed-OSL

www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1

5.226.179.10

200 OK

115 kB

URL HTTP/1.1
www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
Unicode text, UTF-8 text, with very long lines (335), with CRLF line terminators
Size
115 kB (114679 bytes)
Hash
40d8063215d762c042003cec5b4f145a
1781da2af5195cd32afb1275003322f00ef5b2d4
92114dbf4b62f0dfdb9097790aa00ab51904b2456f1efe0ea9c39da378c8033f

HTTP Headers

GET /olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Expires: Fri, 29 Dec 2023 16:20:50 GMT
Last-Modified: Thu, 29 Dec 2022 16:20:50 GMT
Vary: User-Agent,Accept-Encoding
CF-Cache-Status: HIT
Age: 12787
Server: cloudflare
CF-RAY: 78193621980db4e8-OSL

www.bet365.com/olpc/olpc-scripts.js?v=rFtYSQymHsg1Oi3u_Pek5p3y3x-FAFn_GxqtcGwAakg1

5.226.179.10

200 OK

7.6 kB

URL HTTP/1.1
www.bet365.com/olpc/olpc-scripts.js?v=rFtYSQymHsg1Oi3u_Pek5p3y3x-FAFn_GxqtcGwAakg1
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
ASCII text, with very long lines (21910), with no line terminators
Size
7.6 kB (7634 bytes)
Hash
b67c3ce5e8cbbca3fab865a90d284113
2afa9bf3970312d52bb5f93d546c89ee6d4902f5
68f0811836f6d0b1d4d9a9cf428154b7c0594a6ac88a1a5f527d2dae88bdadb1

HTTP Headers

GET /olpc/olpc-scripts.js?v=rFtYSQymHsg1Oi3u_Pek5p3y3x-FAFn_GxqtcGwAakg1 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 7634
Connection: keep-alive
Cache-Control: public
Content-Encoding: gzip
Expires: Fri, 29 Dec 2023 16:20:50 GMT
Last-Modified: Thu, 29 Dec 2022 16:20:50 GMT
Vary: User-Agent,Accept-Encoding
CF-Cache-Status: HIT
Age: 12787
Accept-Ranges: bytes
Server: cloudflare
CF-RAY: 78193621ac82b51b-OSL

www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?async

5.226.179.10

200 OK

697 B

URL HTTP/1.1
www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?async
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
ASCII text, with very long lines (989), with no line terminators
Size
697 B (697 bytes)
Hash
60a64fa53a271e9033c1a187704c3419
1c4503d7c3fbf0eede44fffb8f0dc20ba803d80d
bbde93585020e17635b224a4f3835d7df7687288043108eb35bb2b8c82874550

HTTP Headers

GET /members/services/host/Scripts/js/ProductCommon_v1.js?async HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
x-bet-hop: 1
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 07:55:08 GMT
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78193621aab7b4ed-OSL

www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js

5.226.179.10

200 OK

3.6 kB

URL HTTP/1.1
www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
ASCII text, with very long lines (9857), with no line terminators
Size
3.6 kB (3619 bytes)
Hash
8526418443f6bcfead67615247d3e38a
6935cb6ce3e37192afcd3d08ec3b2d9c18035d20
49fa8353e8973f41c38723a669bd3200fd658ba87d6c121eb45da4af631825aa

HTTP Headers

GET /members/services/host/Scripts/js/ProductCommon_v1.js HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: 0
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
x-bet-hop: 1
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 07:55:08 GMT
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78193621a965b4ff-OSL

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
76cbec9f16aa86443ee15e71d84ff8ee
5553f619cf45df21a74d1b5b0fb65e1a5717be45
0afb9710c22630969ad33eece17100dfb136820bd2ccad92c47435e5d3969ab0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.bet365.com/favicon.ico

5.226.179.10

200 OK

2.2 kB

URL HTTP/1.1
www.bet365.com/favicon.ico
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
MS Windows icon resource - 2 icons, 16x16, 32x32\012- data
Size
2.2 kB (2233 bytes)
Hash
b066420b9f56610b2b3dfbe85ff7193d
fff8a03249f2ca6e0b015d17f59dfb024be46555
24d23c47ffaa0cb739d8589cbf65eefa45d22ee155af5739d0dc318fc425ca77

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olp/open-account/?affiliate=365_00976072&rdk=rk3
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=172800, s-maxage=86400, stale-while-revalidate=1
Last-Modified: Thu, 29 Dec 2022 16:20:50 GMT
CF-Cache-Status: HIT
Age: 56048
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78193622086fb4e8-OSL
Content-Encoding: gzip

www.googletagmanager.com/gtm.js?id=GTM-5DJNXMC

142.250.74.168

200 OK

38 kB

URL HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-5DJNXMC
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1921)
Size
38 kB (38519 bytes)
Hash
c3a82083677f696ed2012e095267b349
581137a2ad35a79f80d84930ec62dddcb54fd7d2
333c7927a1e51d3fc7a882e2bbbbb9b4c0b9b2df8cc3a02ad903fbd40c6d9981

HTTP Headers

GET /gtm.js?id=GTM-5DJNXMC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 30 Dec 2022 07:55:08 GMT
expires: Fri, 30 Dec 2022 07:55:08 GMT
cache-control: private, max-age=900
last-modified: Fri, 30 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38519
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

content001.bet365.com/SportsContent/Global/Footer/bet365%20grey%20footer%20logo.png

5.226.179.10

200 OK

7.9 kB

URL HTTP/1.1
content001.bet365.com/SportsContent/Global/Footer/bet365%20grey%20footer%20logo.png
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
PNG image data, 255 x 53, 8-bit/color RGBA, non-interlaced\012- data
Size
7.9 kB (7868 bytes)
Hash
51325bd6f5ada6b0eba71b19dda89dd7
4c67ca4f77680cd5acdcf04cac6b9a673e5ccc70
6ad4d67eed235fafc8ddfab188fa2e968ba4345718c8338bd7f4fbfafa6f8a2b

HTTP Headers

GET /SportsContent/Global/Footer/bet365%20grey%20footer%20logo.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/png
Content-Length: 7868
Connection: keep-alive
Last-Modified: Thu, 11 Jun 2015 14:13:32 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Wed, 04 Jan 2023 07:55:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936221c55b509-OSL

content001.bet365.com/SportsContent/Global/Footer/eCogra-Horizontal2x.png

5.226.179.10

200 OK

1.7 kB

URL HTTP/1.1
content001.bet365.com/SportsContent/Global/Footer/eCogra-Horizontal2x.png
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
PNG image data, 206 x 48, 8-bit colormap, non-interlaced\012- data
Size
1.7 kB (1671 bytes)
Hash
9c970e4a7854f871873d7b1401701536
2236689845834104a586507057840c7229c7353c
d0438c85b7b5f9c21ac9a1975ccd12464f5f8cbf15d3353ee700e2617f913349

HTTP Headers

GET /SportsContent/Global/Footer/eCogra-Horizontal2x.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/png
Content-Length: 1671
Connection: keep-alive
Last-Modified: Wed, 11 Aug 2021 10:23:12 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Wed, 04 Jan 2023 07:55:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936221e48b4f7-OSL

content001.bet365.com/SportsContent/Global/Footer/SPORTSX2-18.png

5.226.179.10

200 OK

4.4 kB

URL HTTP/1.1
content001.bet365.com/SportsContent/Global/Footer/SPORTSX2-18.png
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Size
4.4 kB (4400 bytes)
Hash
097b1799e6f2ab026f137f91b4627384
fd6a5222f5743cccc954a311b6d30b4125179244
5af616c5e6ad0d97aa233ed4644776ca94de0cfb1a653844d8a5d9ee46e756af

HTTP Headers

GET /SportsContent/Global/Footer/SPORTSX2-18.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/png
Content-Length: 4400
Connection: keep-alive
Last-Modified: Fri, 20 Mar 2015 09:13:01 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Wed, 04 Jan 2023 07:55:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936221b10b4ed-OSL

content001.bet365.com/SportsContent/Global/Footer/GordonMoody/GordonMoody-GT-x2_Grey99.png

5.226.179.10

200 OK

5.3 kB

URL HTTP/1.1
content001.bet365.com/SportsContent/Global/Footer/GordonMoody/GordonMoody-GT-x2_Grey99.png
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
PNG image data, 188 x 60, 8-bit gray+alpha, non-interlaced\012- data
Size
5.3 kB (5324 bytes)
Hash
40ed9c8ae714b944f87008ab90bb071d
32bbf71529809e6ea3521c5636838a76c7488fae
b163877ec48382be73ffdf62c6a5dc5ded37443856dde414e591dfe85b61f070

HTTP Headers

GET /SportsContent/Global/Footer/GordonMoody/GordonMoody-GT-x2_Grey99.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/png
Content-Length: 5324
Connection: keep-alive
Last-Modified: Mon, 11 Oct 2021 13:13:24 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Wed, 04 Jan 2023 07:55:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936221f08b50b-OSL

www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?seed=AMAM8GGFAQAA_Ginl_5NHsT6fYpYozUDAq89naXh-f-517o4y8SILt9Axq3D&PIRXTcSdwp--z=q

5.226.179.10

200 OK

179 kB

URL HTTP/1.1
www.bet365.com/members/services/host/Scripts/js/ProductCommon_v1.js?seed=AMAM8GGFAQAA_Ginl_5NHsT6fYpYozUDAq89naXh-f-517o4y8SILt9Axq3D&PIRXTcSdwp--z=q
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
ASCII text, with very long lines (65536), with no line terminators
Size
179 kB (178628 bytes)
Hash
2af5167fd336e1cc77ab9efe42fd7d5a
a4f6da509ba241da91225d21668062d78b098e7e
d0d5a7fbaee450d898723349b826b5ed08ed54dfc4663a764016093b3ce59a6c

HTTP Headers

GET /members/services/host/Scripts/js/ProductCommon_v1.js?seed=AMAM8GGFAQAA_Ginl_5NHsT6fYpYozUDAq89naXh-f-517o4y8SILt9Axq3D&PIRXTcSdwp--z=q HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=3600, immutable
x-bet-hop: 1
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 07:30:00 GMT
CF-Cache-Status: HIT
Age: 1508
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7819362258a1b4e8-OSL

www.bet365.com/olpc/Content/images/LandingPages/Chevron_Down.svg

5.226.179.10

200 OK

174 B

URL HTTP/1.1
www.bet365.com/olpc/Content/images/LandingPages/Chevron_Down.svg
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size
174 B (174 bytes)
Hash
74198e20fe38ec5ad36427013e4fde04
0f61bde066d7e435afc62c2473473eb9b880794e
75b2538509fbd6d7c328e7ed7f58144e41f5db7255372727d2bf790917869a9b

HTTP Headers

GET /olpc/Content/images/LandingPages/Chevron_Down.svg HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/svg+xml
Content-Length: 174
Connection: keep-alive
ntCoent-Length: 199
Cache-Control: private
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 04:20:53 GMT
CF-Cache-Status: HIT
Age: 12787
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936226b49b4ed-OSL

members.bet365.com/Members/Helpers/DefaultAff.aspx?affiliate=365_00976072&rdk=rk3

5.226.179.10

200 OK

177 B

URL HTTP/1.1
members.bet365.com/Members/Helpers/DefaultAff.aspx?affiliate=365_00976072&rdk=rk3
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
177 B (177 bytes)
Hash
475774a26d4f30240a3534bcbd2fd161
9fd7b986673786b4fc80943b330bd1c03256049e
f7541d6ca43b4da74a89ec05885dceabf1a4af132d36326cf7974a47c904c811

HTTP Headers

GET /Members/Helpers/DefaultAff.aspx?affiliate=365_00976072&amp;rdk=rk3 HTTP/1.1
Host: members.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 177
Connection: keep-alive
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
ME-Redirect: PQB
Set-Cookie: Affiliates=Code=365_00976072%2f161180872498&prd=Sports; domain=.bet365.com; expires=Mon, 13-Feb-2023 07:55:08 GMT; path=/; secure
session=processform=0; path=/; secure
pstk=337E3342532746DF98AD47B3D3F9E024000003; domain=.bet365.com; path=/; secure
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 781936217f110b61-OSL

www.bet365.com/olpc/Content/images/landingpage-bet365logo.svg

5.226.179.10

200 OK

958 B

URL HTTP/1.1
www.bet365.com/olpc/Content/images/landingpage-bet365logo.svg
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1799), with no line terminators
Size
958 B (958 bytes)
Hash
cb93cff01bc8b853c484ce95045f317e
be9ebc41b05015b629fd37b5b5c141fb86d95cde
6091a2292e480291d51a72396700406306b6a82fcc271ad141a52897be8627c6

HTTP Headers

GET /olpc/Content/images/landingpage-bet365logo.svg HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/svg+xml
Content-Length: 958
Connection: keep-alive
ntCoent-Length: 1799
Cache-Control: private
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 04:20:53 GMT
CF-Cache-Status: HIT
Age: 12787
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936226d03b51b-OSL

www.bet365.com/olpc/Content/images/LandingPages/1.svg

5.226.179.10

200 OK

369 B

URL HTTP/1.1
www.bet365.com/olpc/Content/images/LandingPages/1.svg
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (608), with no line terminators
Size
369 B (369 bytes)
Hash
4e4e58b2d258479fbf7ab122f4cea16d
00ab199f76f33aec85bb554e77e9e59babd9eace
75665ca8f5ea92a78293e4f00b0c5a925546f350479f7f20c831a578bd16d6f5

HTTP Headers

GET /olpc/Content/images/LandingPages/1.svg HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/svg+xml
Content-Length: 369
Connection: keep-alive
ntCoent-Length: 608
Cache-Control: private
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 04:20:53 GMT
CF-Cache-Status: HIT
Age: 12328
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936226a17b4ff-OSL

www.bet365.com/olpc/Content/images/LandingPages/Steps-chevron.svg

5.226.179.10

200 OK

151 B

URL HTTP/1.1
www.bet365.com/olpc/Content/images/LandingPages/Steps-chevron.svg
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size
151 B (151 bytes)
Hash
a072ce4b0ba97bae3e79f9cd7d6c493a
6364577f392258f4244dae7723e1fc0a3c8a1b07
097b28d8fbed17e741ae4b48ee372a5b471f8816d0397690f6d8429122c5626b

HTTP Headers

GET /olpc/Content/images/LandingPages/Steps-chevron.svg HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/svg+xml
Content-Length: 151
Connection: keep-alive
ntCoent-Length: 162
Cache-Control: private
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 04:20:53 GMT
CF-Cache-Status: HIT
Age: 12328
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936226f60b4f9-OSL

content001.bet365.com/SportsContent/Global/Footer/MGALICENSED.png

5.226.179.10

200 OK

2.0 kB

URL HTTP/1.1
content001.bet365.com/SportsContent/Global/Footer/MGALICENSED.png
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
PNG image data, 88 x 44, 8-bit/color RGBA, non-interlaced\012- data
Size
2.0 kB (1979 bytes)
Hash
d8cb8a91c78942815c69aaeea7c79162
0a36fd477b2c7d88bb67d95e806bf5838d1b39cd
057c251de5bc8825df293db443b8c9a99e01f856abe658c741a89c86b6bfa2e1

HTTP Headers

GET /SportsContent/Global/Footer/MGALICENSED.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/png
Content-Length: 1979
Connection: keep-alive
Last-Modified: Wed, 10 Jul 2019 13:20:52 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Wed, 04 Jan 2023 07:55:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936221919b4f1-OSL

content001.bet365.com/SportsContent/Global/Footer/SPORTSX1-ESSA_2.png

5.226.179.10

200 OK

6.4 kB

URL HTTP/1.1
content001.bet365.com/SportsContent/Global/Footer/SPORTSX1-ESSA_2.png
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
PNG image data, 162 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size
6.4 kB (6386 bytes)
Hash
1b8c19b189cccdda7105465a474c9b4d
6ef1cecd283f484606c987259e06a22ff3aff7ae
101ca051649af6826119108f51311f70b4d58e94242c8877a2b8a9247b90f54f

HTTP Headers

GET /SportsContent/Global/Footer/SPORTSX1-ESSA_2.png HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/png
Content-Length: 6386
Connection: keep-alive
Last-Modified: Tue, 04 Jun 2019 13:21:41 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Wed, 04 Jan 2023 07:55:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936223f4ab506-OSL

www.bet365.com/olpc/Content/images/LandingPages/3.svg

5.226.179.10

200 OK

592 B

URL HTTP/1.1
www.bet365.com/olpc/Content/images/LandingPages/3.svg
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1073), with no line terminators
Size
592 B (592 bytes)
Hash
8537aa71e83ce49e1349f681ee3887bb
3fc016fa16412b5f461b756b7cb06615172bbe93
4f6236d60ecdb190f56eb5ad1a783fc749acbd98c98f3d7d838ecaa81e5c3cec

HTTP Headers

GET /olpc/Content/images/LandingPages/3.svg HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/svg+xml
Content-Length: 592
Connection: keep-alive
ntCoent-Length: 1073
Cache-Control: private
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 04:20:53 GMT
CF-Cache-Status: HIT
Age: 12328
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936229b71b4ed-OSL

www.bet365.com/olpc/Content/images/LandingPages/2.svg

5.226.179.10

200 OK

519 B

URL HTTP/1.1
www.bet365.com/olpc/Content/images/LandingPages/2.svg
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (895), with no line terminators
Size
519 B (519 bytes)
Hash
36822f1e5d89c47cd4b7b1adb06eb139
4da21fd185f48276afa1529eb3f51d664ccb208a
d82ea891016ef2d517c7638e7c19dbe09672de5239f0257a4f5f06bc09cdf65c

HTTP Headers

GET /olpc/Content/images/LandingPages/2.svg HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/svg+xml
Content-Length: 519
Connection: keep-alive
ntCoent-Length: 895
Cache-Control: private
Content-Encoding: gzip
Last-Modified: Fri, 30 Dec 2022 04:20:53 GMT
CF-Cache-Status: HIT
Age: 12328
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7819362298deb4e8-OSL

www.bet365.com/olpc/Content/Fonts/FTN65__W.woff2

5.226.179.10

200 OK

48 kB

URL HTTP/1.1
www.bet365.com/olpc/Content/Fonts/FTN65__W.woff2
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
Web Open Font Format (Version 2), TrueType, length 47732, version 1.590\012- data
Size
48 kB (47732 bytes)
Hash
413ebfe90e21457bd6794c69a3333486
ce7c84f4852d4c360b223b73a07fd2ac1e7b01ee
972d79302a870930285d018117ee9631df364aa903e7a9606592532389f7f82a

HTTP Headers

GET /olpc/Content/Fonts/FTN65__W.woff2 HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.bet365.com/olpc/olpc-styles.css?v=5JVgaRvxahqoHr3sJ3ZYc9SSkTHVceCxBhqPgEeJ5DE1
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Length: 47732
Connection: keep-alive
Last-Modified: Fri, 30 Dec 2022 04:20:55 GMT
CF-Cache-Status: HIT
Age: 12703
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78193622cd46b51b-OSL

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
76cbec9f16aa86443ee15e71d84ff8ee
5553f619cf45df21a74d1b5b0fb65e1a5717be45
0afb9710c22630969ad33eece17100dfb136820bd2ccad92c47435e5d3969ab0

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Dec 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.bet365.com/olpc/nn/143/0/1/cookieconsentajax?

5.226.179.10

200 OK

1.4 kB

URL HTTP/1.1
www.bet365.com/olpc/nn/143/0/1/cookieconsentajax?
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
Unicode text, UTF-8 text, with very long lines (489), with CRLF, LF line terminators
Size
1.4 kB (1362 bytes)
Hash
41bc7a3cb016ed2e39c03d0cc8be6b42
b18485bc2f7d8bb65434447040e3b6a7125a0509
6b68a474dc9ab3d547c5584d6a1de4360570147384669553d528ee80495e9f57

HTTP Headers

POST /olpc/nn/143/0/1/cookieconsentajax? HTTP/1.1
Host: www.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bet365.com
Connection: keep-alive
Referer: https://www.bet365.com/olpc/nn/143/0/1/open-account
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=; aps03=lng=9&ct=143&cst=0; Affiliates=Code=365_00976072%2f161180872498&prd=Sports; pstk=337E3342532746DF98AD47B3D3F9E024000003
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 1362
Connection: keep-alive
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 781936247abfb4e8-OSL

push.services.mozilla.com/

52.89.136.7

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.89.136.7:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: jLkVo+eRfF8JUTKIgk+QBQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: U5kbrO2Dxu92aQ5+b7/BzlgAvfU=

region1.google-analytics.com/g/collect?v=2&tid=G-45M1DQFW2B&gtm=2oebu0&_p=1542065333&gcs=G1-0&cid=140696622.1672386903&ul=en-us&sr=1280x1024&_s=1&sid=1672386903&sct=1&seg=0&dl=https%3A%2F%2Fwww.bet365.com%2Folp%2Fopen-account%2F%3Faffiliate%3D365_00976072%26rdk%3Drk3&dt=%C3%85pningstilbud&en=page_view&_fv=1&_nsi=1&_ss=1

216.239.32.36

204 No Content

0 B

URL HTTP/2
region1.google-analytics.com/g/collect?v=2&tid=G-45M1DQFW2B&gtm=2oebu0&_p=1542065333&gcs=G1-0&cid=140696622.1672386903&ul=en-us&sr=1280x1024&_s=1&sid=1672386903&sct=1&seg=0&dl=https%3A%2F%2Fwww.bet365.com%2Folp%2Fopen-account%2F%3Faffiliate%3D365_00976072%26rdk%3Drk3&dt=%C3%85pningstilbud&en=page_view&_fv=1&_nsi=1&_ss=1
IP
216.239.32.36:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-45M1DQFW2B&gtm=2oebu0&_p=1542065333&gcs=G1-0&cid=140696622.1672386903&ul=en-us&sr=1280x1024&_s=1&sid=1672386903&sct=1&seg=0&dl=https%3A%2F%2Fwww.bet365.com%2Folp%2Fopen-account%2F%3Faffiliate%3D365_00976072%26rdk%3Drk3&dt=%C3%85pningstilbud&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bet365.com
Connection: keep-alive
Referer: https://www.bet365.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: https://www.bet365.com
date: Fri, 30 Dec 2022 07:55:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4436
Expires: Fri, 30 Dec 2022 09:09:05 GMT
Date: Fri, 30 Dec 2022 07:55:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4436
Expires: Fri, 30 Dec 2022 09:09:05 GMT
Date: Fri, 30 Dec 2022 07:55:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4436
Expires: Fri, 30 Dec 2022 09:09:05 GMT
Date: Fri, 30 Dec 2022 07:55:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4436
Expires: Fri, 30 Dec 2022 09:09:05 GMT
Date: Fri, 30 Dec 2022 07:55:09 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
563a71326245b9544f7051f983f4d897
7293247391520689fb7aeac14ee6c984d82d7de3
17c444592282f17c3eb8a0d8e10ae9b3be096d621bdf2bbd8e12faf13ff4999c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "17C444592282F17C3EB8A0D8E10AE9B3BE096D621BDF2BBD8E12FAF13FF4999C"
Last-Modified: Tue, 27 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4436
Expires: Fri, 30 Dec 2022 09:09:05 GMT
Date: Fri, 30 Dec 2022 07:55:09 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4833 bytes)
Hash
a9d1857128ab6a237e6854c7a3532b51
702ab1eb38be637f012e1454201b9a7561c29081
48fbf5b5aa1cf66fcdaafe68c72ac073d2ba9b6dedf76ebfaafdc88836fa0fde

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab5cb9e-53fc-4a70-831a-6d6bd503103e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4833
x-amzn-requestid: 46ef49d7-dadb-4665-84bf-1c331ed8fce6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7ZU2E3IIAMFxAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae08eb-28af0ab9094d7c21560a60db;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:38:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YyIKd_GHAixWYqzjn0XD2Jwal3Jt62L90StfgPkCkJWU3RQml-u6oA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:01:39 GMT
age: 35610
etag: "702ab1eb38be637f012e1454201b9a7561c29081"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

content001.bet365.com/SportsContent/Promotions/LandingPages/BasketballSoccerTennis_1440-2x.jpg

5.226.179.10

200 OK

8.5 kB

URL HTTP/1.1
content001.bet365.com/SportsContent/Promotions/LandingPages/BasketballSoccerTennis_1440-2x.jpg
IP
5.226.179.10:0
ASN
#209242 Cloudflare London, LLC

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.5 kB (8494 bytes)
Hash
d0f02288213f270c5a4a8944107c81e9
d17f3594e4aa86aa1b28849bbc3c7f1d45d938ea
770e6cc997aafc1c0485af4fa413fa255868a5d333e8e60e7de90b4c74bf29bf

HTTP Headers

GET /SportsContent/Promotions/LandingPages/BasketballSoccerTennis_1440-2x.jpg HTTP/1.1
Host: content001.bet365.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.bet365.com/
Cookie: __cf_bm=wqH1F3ExcydCyr_vL7oKyuYeTivYza8bzBglvZTau4M-1672386908-0-AXnSU+ut5/68cZxMoIfwpswtKnrLTy5m9jrUHFKhK4xhH72qWnxfGkku+Y2utWEYVeoxg0SG73xa3JuGt3iXRWM=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

HTTP/1.1 200 OK
Date: Fri, 30 Dec 2022 07:55:08 GMT
Content-Type: image/jpeg
Content-Length: 303798
Connection: keep-alive
Cf-Bgj: h2pri
Last-Modified: Tue, 11 Aug 2020 07:55:11 GMT
Timing-Allow-Origin: *
CF-Cache-Status: HIT
Expires: Wed, 04 Jan 2023 07:55:08 GMT
Cache-Control: public, max-age=432000
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 781936226c95b509-OSL

34.120.237.76

200 OK

8.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdace6689-97a8-4bcf-90a0-c223ba35cd6d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.1 kB (8071 bytes)
Hash
2c0d5fb3791917c41549447f9de79803
1b2c18e9474133539ec54b2e77112256aefadda8
f81084ebe03cff7659902d1afdd44c0f95ecffa96b880550b6a0b51191348222

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdace6689-97a8-4bcf-90a0-c223ba35cd6d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8071
x-amzn-requestid: 0085b429-3682-43ad-a47b-be03cbe32c53
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7Zx1FOfoAMF-DQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae09a5-450206562924e25e363b1ccc;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:41:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S_FfIgQU5dbZ4B8xhnYGgKIWaZ03PUrzbD5qdV7ASZegKf6TWwpAgw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:29:29 GMT
age: 33941
etag: "1b2c18e9474133539ec54b2e77112256aefadda8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9607c6-9a7f-483e-afc4-9004ad7691ab.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11775 bytes)
Hash
6e270e4d21abb133d068a56a552b1708
2d5c698f982dcdb9a86de4e45e30d7caf9b42336
723573f9908c5a2aa1d3dfe1146a764d7052c866ff2076a9096daccf5697328b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9607c6-9a7f-483e-afc4-9004ad7691ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11775
x-amzn-requestid: 5a37b577-ac86-4cab-a580-865059074844
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7aqKGzTIAMFmIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0b0d-7de39bba5583d757794dbd9e;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:47:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4OqJ-KiLeDe3iVqhLUhzcqiWrDHc3sZa808qTuPMDLdhP6FOFdGhkg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:10:15 GMT
etag: "2d5c698f982dcdb9a86de4e45e30d7caf9b42336"
content-type: image/jpeg
age: 35095
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcce559ba-ede8-48f0-8bf2-1c6a0c1d4c83.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.1 kB (8101 bytes)
Hash
9d21812b8907c0410fcf07b8a245fd97
f9f4289b4f79af75f646f2c72de68dcb679f0c10
7c720ceaf934e04af379535b8fe63685314abc18033e95ed24deb29b3e34e744

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcce559ba-ede8-48f0-8bf2-1c6a0c1d4c83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8101
x-amzn-requestid: cdcbc49a-d707-4123-ade4-cb15af5c87d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d7a21FInoAMFfQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ae0b5e-3e9cf62117217e6a1157f231;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 21:49:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WUUKdG7_nEJW5qtYxQBep_w_ySyzsDOIu-3ToocqJi47NWnfvGTueg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 22:23:09 GMT
etag: "f9f4289b4f79af75f646f2c72de68dcb679f0c10"
content-type: image/jpeg
age: 34321
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12054 bytes)
Hash
244b2a2a5b176fb3117248a872e2a37a
f451963e96d330a8dcd28ebcf5e63791e90b75ba
c01075e3836684e57b87d1feaf148e5c0dc35e273b8519c342c90e44dfc1e54a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b05264c-5ed0-4ad4-996c-58fc36048283.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12054
x-amzn-requestid: c24868ab-bcf2-4f9c-b7a3-83df6a1fb11a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: do5InGjRIAMFWtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a6a236-539fdd2919bdc153159156ef;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 06:54:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WQ2TnGkAeLlisFSiN2rI45ImsUR0xjSsEI0pMXBFzl8dMoeVb4EnRw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Dec 2022 09:34:32 GMT
age: 80438
etag: "f451963e96d330a8dcd28ebcf5e63791e90b75ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP