pdxx-7fmavzpxk2xlm-4-2.lowsea.fun/emw/v1/dt?sid=67.2_nojs.us.&k=bfb&url=trk37.zzzperform.com&xrw=&lid=641b9f2d7f989c6df9784045&fid=67
307 Temporary Redirect 164 B URL HTTP/1.1 pdxx-7fmavzpxk2xlm-4-2.lowsea.fun/emw/v1/dt?sid=67.2_nojs.us.&k=bfb&url=trk37.zzzperform.com&xrw=&lid=641b9f2d7f989c6df9784045&fid=67
IP
ASN #213230 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 813f9846b49c0ada805648edf1b2fdbd
caa24890460f73e6a72bb49426351e67e83b053d
8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3
GET /emw/v1/dt?sid=67.2_nojs.us.&k=bfb&url=trk37.zzzperform.com&xrw=&lid=641b9f2d7f989c6df9784045&fid=67 HTTP/1.1
Host: pdxx-7fmavzpxk2xlm-4-2.lowsea.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 307 Temporary Redirect
Date: Thu, 23 Mar 2023 00:37:11 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Keep-Alive: timeout=10
Set-Cookie: emwxcid_4_1=3T1Ov2gdxlEgmACyb56F9Pwju5FQIdJZWityZKPvvxBD9Xi6Qj; expires=Fri, Mar 22 2024 00:37:11 GMT; Max-Age=31536000; path=/; domain=lowsea.fun; SameSite=Lax
Location: https://t5.lowtid.com/d.php?p=c:ub_a64rij70pog14q&d=6351542976534b739b5850d5&pid=641b9f2d7f989c6df9784045&source=67.2_nojs.us.
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15456
Expires: Thu, 23 Mar 2023 04:54:47 GMT
Date: Thu, 23 Mar 2023 00:37:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65fc860bc043f3fb83bdc3debdcd322d
418010755deae099ef1284e402813c5837a10f42
d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12834
Expires: Thu, 23 Mar 2023 04:11:05 GMT
Date: Thu, 23 Mar 2023 00:37:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a5d4696a6090c295850554508b51ce
c44e143c2223546e64b19f543b8101aaf3b11e97
8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8721
Expires: Thu, 23 Mar 2023 03:02:32 GMT
Date: Thu, 23 Mar 2023 00:37:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 00:15:04 GMT
content-type: application/json
age: 1327
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eHRAY8n7mzPyiI99v1zH2UCy5bb33H5mHXD4UH4qDZ6nW0wSs2p+zOpsgStKvcusAwbWZyXtWU0=
x-amz-request-id: 71F96QBV0Q6NDF3Z
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Mar 2023 23:53:50 GMT
age: 2601
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 00:37:11 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 59adc161209902bc93a7b0d7c5abfbc0
eda0106b2eedda47482e11d963f6a3371fc6acb0
401847ffedaca8fa6d7b0a8bb1450bef51448a63311e178741c428db95eece84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "401847FFEDACA8FA6D7B0A8BB1450BEF51448A63311E178741C428DB95EECE84"
Last-Modified: Tue, 21 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20204
Expires: Thu, 23 Mar 2023 06:13:55 GMT
Date: Thu, 23 Mar 2023 00:37:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 00:17:23 GMT
age: 1188
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
t5.lowtid.com/d.php?p=c:ub_a64rij70pog14q&d=6351542976534b739b5850d5&pid=641b9f2d7f989c6df9784045&source=67.2_nojs.us.
302 Found 0 B URL HTTP/1.1 t5.lowtid.com/d.php?p=c:ub_a64rij70pog14q&d=6351542976534b739b5850d5&pid=641b9f2d7f989c6df9784045&source=67.2_nojs.us.
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d.php?p=c:ub_a64rij70pog14q&d=6351542976534b739b5850d5&pid=641b9f2d7f989c6df9784045&source=67.2_nojs.us. HTTP/1.1
Host: t5.lowtid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 23 Mar 2023 00:37:11 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 12mw6ufnb4
Raund: 24t
Location: https://go.c4ptainn3lson.xyz/redirect?feed=465513&url=t5.lowtid.com&subid=custom_12pi87zjm9.no.windows.firefox&query=67.2_nojs.us.&pub_clickid=641b9f3769db9e4b4d377ba0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 18b877ebbad1529e4bd91e12220d91c4
a3d64fb3d9cc1fe3a29b261c4ec9acfe134dfedc
7001d3ef847c7002ac15155f0dfcc0a369f19860e85c8e90530f1e7b2dd88f09
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7001D3EF847C7002AC15155F0DFCC0A369F19860E85C8E90530F1E7B2DD88F09"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7931
Expires: Thu, 23 Mar 2023 02:49:22 GMT
Date: Thu, 23 Mar 2023 00:37:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 52db9d63a058af3931117faecc81471c
c59856ecf1fb806f3be97392c28e4a81a93fccdf
b6bb6ea164bf5870d068f03505830f169b638543454aeb55ffbca43e8e2736fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B6BB6EA164BF5870D068F03505830F169B638543454AEB55FFBCA43E8E2736FC"
Last-Modified: Mon, 20 Mar 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4685
Expires: Thu, 23 Mar 2023 01:55:17 GMT
Date: Thu, 23 Mar 2023 00:37:12 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XxtEeMtPDpTUpWa4KSsQzg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: JJG99PxTZax45/ryKNbpmrprRAs=
go.c4ptainn3lson.xyz/redirect?feed=465513&url=t5.lowtid.com&subid=custom_12pi87zjm9.no.windows.firefox&query=67.2_nojs.us.&pub_clickid=641b9f3769db9e4b4d377ba0
302 Found 0 B URL HTTP/1.1 go.c4ptainn3lson.xyz/redirect?feed=465513&url=t5.lowtid.com&subid=custom_12pi87zjm9.no.windows.firefox&query=67.2_nojs.us.&pub_clickid=641b9f3769db9e4b4d377ba0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=465513&url=t5.lowtid.com&subid=custom_12pi87zjm9.no.windows.firefox&query=67.2_nojs.us.&pub_clickid=641b9f3769db9e4b4d377ba0 HTTP/1.1
Host: go.c4ptainn3lson.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 23 Mar 2023 00:37:12 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://track.trackingtraffo.com/pop/imp?auth=mz3u78&c=IsV7bZs-_FZcr7O20UxTGYL16Ibjzc5RyO39KPuyLQm3BUl4WxYMnfCbdkHKPqW9JNY7i_1HMh_zJ-R-A8fIqkCwEz3LQP_kxs7xEIUPwzRHA0mlDlqUSKjrBmDsGk66AbtwNGq1ZUzFnroxfMzkXM7fIMztHtImgmDKD0YJzQT9o8ayrVUW065bBhM1GlhwLfnHBo8dmJKelqbbrK7gLfOomn0I5FWh-iVjof2waO0R1Dcvz3k64_OYrgMdMNyUObpk0w8PXU2uxhud-k7WyuNtqEGx3MuN8-9dVVIJkz7HF-azxU9jrBDZtDI3XLX27H3vBSkCXHe87vVIERhc4Hp6RafH-80isiZUSupcaflK9JdZzDY_Af16OOszjdsZZqaRQJVgHL31KZjL9w4lI0G78hk1l85dW-KrUasTgC9Joikzz8KiW9NeomqWnD0xoI-TmYJEoo_9o_xNIiXVJqtNI9q8nGSxBvKJ8muW8JoKfwr86Gq1_oHqxakcluWIWYCiSYg1Y0PwojUeJaQhDbjnGgQKWL2GFTrON_wsEbJucycBgcncfWIjpXd5J6UVyMzv7MzBhQJYg1ChVFyUTro043C2Dcurvw4vQoNb8FDU5YpfC28UxHh_VTEsxsFCIgmwcxzhLfvThJa3-GtIUbB90nLpFeMO3Kz7co3POda-UOIIRevRoCqVWc8
Pragma: no-cache
ocsp.sectigo.com/
200 OK 471 B IP
Hash 56fc35df6599ed4d6500d37adacc6968
f0fb1b295a5331b9dd0531581a26a927f6c9bed4
2a1b5cdd4fd037ef1a8ad060bcc1bed0d8cbb0c95bcb87e0e1e9446445afd47a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 00:37:13 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 22 Mar 2023 06:28:18 GMT
Expires: Wed, 29 Mar 2023 06:28:17 GMT
Etag: "f0fb1b295a5331b9dd0531581a26a927f6c9bed4"
Cache-Control: max-age=538864,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ac29ac30ad2b51e-OSL
track.trackingtraffo.com/pop/imp?auth=mz3u78&c=IsV7bZs-_FZcr7O20UxTGYL16Ibjzc5RyO39KPuyLQm3BUl4WxYMnfCbdkHKPqW9JNY7i_1HMh_zJ-R-A8fIqkCwEz3LQP_kxs7xEIUPwzRHA0mlDlqUSKjrBmDsGk66AbtwNGq1ZUzFnroxfMzkXM7fIMztHtImgmDKD0YJzQT9o8ayrVUW065bBhM1GlhwLfnHBo8dmJKelqbbrK7gLfOomn0I5FWh-iVjof2waO0R1Dcvz3k64_OYrgMdMNyUObpk0w8PXU2uxhud-k7WyuNtqEGx3MuN8-9dVVIJkz7HF-azxU9jrBDZtDI3XLX27H3vBSkCXHe87vVIERhc4Hp6RafH-80isiZUSupcaflK9JdZzDY_Af16OOszjdsZZqaRQJVgHL31KZjL9w4lI0G78hk1l85dW-KrUasTgC9Joikzz8KiW9NeomqWnD0xoI-TmYJEoo_9o_xNIiXVJqtNI9q8nGSxBvKJ8muW8JoKfwr86Gq1_oHqxakcluWIWYCiSYg1Y0PwojUeJaQhDbjnGgQKWL2GFTrON_wsEbJucycBgcncfWIjpXd5J6UVyMzv7MzBhQJYg1ChVFyUTro043C2Dcurvw4vQoNb8FDU5YpfC28UxHh_VTEsxsFCIgmwcxzhLfvThJa3-GtIUbB90nLpFeMO3Kz7co3POda-UOIIRevRoCqVWc8
302 Found 0 B URL HTTP/1.1 track.trackingtraffo.com/pop/imp?auth=mz3u78&c=IsV7bZs-_FZcr7O20UxTGYL16Ibjzc5RyO39KPuyLQm3BUl4WxYMnfCbdkHKPqW9JNY7i_1HMh_zJ-R-A8fIqkCwEz3LQP_kxs7xEIUPwzRHA0mlDlqUSKjrBmDsGk66AbtwNGq1ZUzFnroxfMzkXM7fIMztHtImgmDKD0YJzQT9o8ayrVUW065bBhM1GlhwLfnHBo8dmJKelqbbrK7gLfOomn0I5FWh-iVjof2waO0R1Dcvz3k64_OYrgMdMNyUObpk0w8PXU2uxhud-k7WyuNtqEGx3MuN8-9dVVIJkz7HF-azxU9jrBDZtDI3XLX27H3vBSkCXHe87vVIERhc4Hp6RafH-80isiZUSupcaflK9JdZzDY_Af16OOszjdsZZqaRQJVgHL31KZjL9w4lI0G78hk1l85dW-KrUasTgC9Joikzz8KiW9NeomqWnD0xoI-TmYJEoo_9o_xNIiXVJqtNI9q8nGSxBvKJ8muW8JoKfwr86Gq1_oHqxakcluWIWYCiSYg1Y0PwojUeJaQhDbjnGgQKWL2GFTrON_wsEbJucycBgcncfWIjpXd5J6UVyMzv7MzBhQJYg1ChVFyUTro043C2Dcurvw4vQoNb8FDU5YpfC28UxHh_VTEsxsFCIgmwcxzhLfvThJa3-GtIUbB90nLpFeMO3Kz7co3POda-UOIIRevRoCqVWc8
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pop/imp?auth=mz3u78&c=IsV7bZs-_FZcr7O20UxTGYL16Ibjzc5RyO39KPuyLQm3BUl4WxYMnfCbdkHKPqW9JNY7i_1HMh_zJ-R-A8fIqkCwEz3LQP_kxs7xEIUPwzRHA0mlDlqUSKjrBmDsGk66AbtwNGq1ZUzFnroxfMzkXM7fIMztHtImgmDKD0YJzQT9o8ayrVUW065bBhM1GlhwLfnHBo8dmJKelqbbrK7gLfOomn0I5FWh-iVjof2waO0R1Dcvz3k64_OYrgMdMNyUObpk0w8PXU2uxhud-k7WyuNtqEGx3MuN8-9dVVIJkz7HF-azxU9jrBDZtDI3XLX27H3vBSkCXHe87vVIERhc4Hp6RafH-80isiZUSupcaflK9JdZzDY_Af16OOszjdsZZqaRQJVgHL31KZjL9w4lI0G78hk1l85dW-KrUasTgC9Joikzz8KiW9NeomqWnD0xoI-TmYJEoo_9o_xNIiXVJqtNI9q8nGSxBvKJ8muW8JoKfwr86Gq1_oHqxakcluWIWYCiSYg1Y0PwojUeJaQhDbjnGgQKWL2GFTrON_wsEbJucycBgcncfWIjpXd5J6UVyMzv7MzBhQJYg1ChVFyUTro043C2Dcurvw4vQoNb8FDU5YpfC28UxHh_VTEsxsFCIgmwcxzhLfvThJa3-GtIUbB90nLpFeMO3Kz7co3POda-UOIIRevRoCqVWc8 HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 23 Mar 2023 00:37:13 GMT
Content-Length: 0
Connection: keep-alive
Location: https://binotraf.com/click.php?key=qcopnrbsgld1lpyq4gqz&clickid=f821d06e-a9b2-4d70-8f6f-56fd6eeeb449&cost=0.0036&PUB_ID=118&SUB_ID=465513&KEYWORD=67.2_nojs.us.&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-03-23&BID_PUB=0.0036&CR_ID=36456
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9110
Expires: Thu, 23 Mar 2023 03:09:03 GMT
Date: Thu, 23 Mar 2023 00:37:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9110
Expires: Thu, 23 Mar 2023 03:09:03 GMT
Date: Thu, 23 Mar 2023 00:37:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9110
Expires: Thu, 23 Mar 2023 03:09:03 GMT
Date: Thu, 23 Mar 2023 00:37:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d837d4e-ce18-46d7-b240-75b9b4a896bd.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d837d4e-ce18-46d7-b240-75b9b4a896bd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba2db8d73f3c451a15890457345a7f44
fc3a53367d844a13ec4b9742fd86954e8c187245
da47b2bde2a7bbca671b6d39f193ff4aaf4ef64d7e6586a62a8c026094ade6c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d837d4e-ce18-46d7-b240-75b9b4a896bd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12642
x-amzn-requestid: 4bd678ba-79b1-4dc1-a58a-a7fe6e2e933b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFV8EQfoAMFs5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b5bf-3a673c87370eede03c329782;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:11:59 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: KOg5BN0h_1GUN1VZwRZGujervaMsYOVLKZuOMX9Ccu4tNkopImo4mg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 de2dd11312f7d5ad3bcd0cb112c7fd0e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 10:38:51 GMT
age: 50302
etag: "fc3a53367d844a13ec4b9742fd86954e8c187245"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91bd3d66-c15a-489f-a066-7fc0aaa2f508.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91bd3d66-c15a-489f-a066-7fc0aaa2f508.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d6e44089e37d1db52bccdaa78bf9dc30
b5ba66ebc4e07d83bb698736a81a2b7316a0e178
91e722a8374fafc556911cf9767eb67107de540d96b3eb0f0932e131d99f2893
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91bd3d66-c15a-489f-a066-7fc0aaa2f508.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10034
x-amzn-requestid: 7975aeb0-15ce-45a7-a088-9bed5af69fc4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8v9FAmoAMFjHQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b74cc-401b308c459c247e76ab5643;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:36:12 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: mQBKW2-nNlrm1gXBZG4V7rhteAvKjpeCmHIUQEabNmXV2HfMgijWaQ==
via: 1.1 ffc1e24c06bfbb135c0a4d240b382048.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 23:07:18 GMT
age: 5395
etag: "b5ba66ebc4e07d83bb698736a81a2b7316a0e178"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9024651c-3847-4a12-9650-405ea99fd1b9.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9024651c-3847-4a12-9650-405ea99fd1b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f29db357e8536a4aeccdd3df67d3205
391c43d349b943ea9af4aa6e3b6910c07370ee78
b0ee1cab104b785c33aca9f3caae8f9c1abd856af3cfe1603b2b7036727468ae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9024651c-3847-4a12-9650-405ea99fd1b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5753
x-amzn-requestid: d2538544-4f4c-4de0-a438-a48642dd0f17
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8pDGqyIAMFwRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b74a0-339c26cd16208aae5c47dc2f;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:35:28 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: k8CxAaBFdfMb2TwytWOL1Xy9SRucuMEqX_YZ3dN1-RmI3rligms_oA==
via: 1.1 4b800f7fa2c3fbb9f4f3c505b0df315e.cloudfront.net (CloudFront), 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:51 GMT
age: 10162
etag: "391c43d349b943ea9af4aa6e3b6910c07370ee78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05c7970e81559904d05b6e8cf693f085
709b01a360624eceafb1876f56378824aa4936b3
a4fd80c9bdce27961560d7c31e216706e9e32d42d1edd883e283c149505b3db0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7424
x-amzn-requestid: 4d4097db-ae95-4a34-8f92-a56c29e836e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CENb6FKDoAMF_cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417f5e5-772b562b3176f7ca0740db72;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 05:57:57 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: KfvwQv6CzrS1gbsqurHb4C_KGfAtJtBZFPUzx6z-IQ19s2WNeMdz5w==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 02:46:22 GMT
age: 78651
etag: "709b01a360624eceafb1876f56378824aa4936b3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32536e34-d62f-40f1-b196-c4bbe784cca6.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32536e34-d62f-40f1-b196-c4bbe784cca6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f148d2e3cd5679fe5cb9cd58630517c7
b312f7c6526254709a0f7424502952e9eaff9c78
6e98a90935a53caa8871238088e77269e5d7215d16dccabe7e9e4af09f39f7b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32536e34-d62f-40f1-b196-c4bbe784cca6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5356
x-amzn-requestid: a49dca74-54fa-457c-a5b6-e347fd139d1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8ovEgAIAMFcnA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b749e-673461e13b7d2f4e7ad66e7f;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:35:26 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: ATbmD8auxaSsKlj6KDtI9biU-euAHDVEIVMiHR7hmroViIWghZUsKQ==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 7514e5e25722778fd4b1744d4ecc67e0.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:43:45 GMT
age: 10408
etag: "b312f7c6526254709a0f7424502952e9eaff9c78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba4910e6-683b-4c06-94c1-4e4a3314f2f7.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba4910e6-683b-4c06-94c1-4e4a3314f2f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fdf1ed2958d8db65b7e247e1584eb841
a6385a641fbb1445ca73e632d06d691970b1e3f8
49fda09ea2e648aa8a09b7e72735a3402e8e87572cc188155c292a0d9fd6159b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba4910e6-683b-4c06-94c1-4e4a3314f2f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5971
x-amzn-requestid: a3b249e1-616a-492b-bfc5-12df811361cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFV9H5XIAMFb9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b5bf-4d51c9467af0c8485d7d98c0;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:11:59 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Qv0F14NgbMfCze9mmFykEDHdCG8yCNvFNa4smLDa1Tmg3_aaZakVoQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 10:34:59 GMT
age: 50534
etag: "a6385a641fbb1445ca73e632d06d691970b1e3f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
promo.20bet.partners/redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
307 Temporary Redirect 0 B URL HTTP/2 promo.20bet.partners/redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788 HTTP/1.1
Host: promo.20bet.partners
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 307 Temporary Redirect
content-type: text/html
content-length: 0
location: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop BonWheel-1042&subid=d16cfh9b7usibh9788
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Thu, 23 Mar 2023 00:37:13 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 23 Mar 2023 00:37:13 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a174581%2c%22BID%22%3a1971%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1679531833845)%5c%2f%22%2c%22CookieTag%22%3a%221971174581451240919C2023323037%22%7d%5d; SameSite=None;; domain=.20bet.partners; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%221201898296%7c1%22%7d%5d; domain=.20bet.partners; expires=Sat, 23-Mar-3022 00:37:13 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=21, origin; dur=34, ak_p; desc="466536_388255509_302402502_5459_4140_1_0";dur=1
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1da02aab6c43f6a9886d052c714522ca
48e1fa6e583dcb36f223bc230902b14e9d5e7c47
6f7d2828ccf46ada5533aeaa64950d6d53f11fe2d195a395a8eb929fb3728393
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F7D2828CCF46ADA5533AEAA64950D6D53F11FE2D195A395A8EB929FB3728393"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1780
Expires: Thu, 23 Mar 2023 01:06:54 GMT
Date: Thu, 23 Mar 2023 00:37:14 GMT
Connection: keep-alive
20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
200 OK 1.9 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (474)
Hash 680cf4daa1a31b9192a9601e715c7b89
8dee29aa12049a16081e0746d8c18e4d48fbb63d
b18680631feed7054f7251f542ef888fe486c5e04cc610e6ea98292d4c650feb
GET /bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788 HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 14 Nov 2022 15:18:46 GMT
ETag: W/"1580-5ed6fc1775dec"
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/css/reset.css
200 OK 758 B URL HTTP/1.1 20betlp.com/bonus-wheel-en/css/reset.css
IP
Hash 4efd21f2a250eb9c74738efd20649c5f
d2b04957878a7eb16378885edc870e5d4ed85e0a
854bdd447667d255572764fe724efa5b6f97d9e66452e28010eb850dad46dbb1
GET /bonus-wheel-en/css/reset.css HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: text/css
Last-Modified: Mon, 08 Nov 2021 13:54:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61892bf9-6a6"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/css/main.css
200 OK 1.8 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/css/main.css
IP
Hash 49e5413a26bd3d4d13d60f414dba76de
8aeeb9927881cc873b8b70511122200c6b859343
7322def013c20cef26baa26179065e114db85f87206566dd8be65eb664bfd4db
GET /bonus-wheel-en/css/main.css HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: text/css
Last-Modified: Tue, 09 Nov 2021 09:29:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"618a3f92-2071"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/css/media.css
200 OK 683 B URL HTTP/1.1 20betlp.com/bonus-wheel-en/css/media.css
IP
Hash 62eeedcb147782e36e45fdc1b729986f
a313491431992254578f66c453aeb13cfb74d32f
34fa0adb22eeb0e39ad94be91ec1bc92e2dd12f86695510aec7fbfdd91660bf2
GET /bonus-wheel-en/css/media.css HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: text/css
Last-Modified: Tue, 09 Nov 2021 09:35:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"618a40c6-a4f"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/js/main.js
200 OK 337 B URL HTTP/1.1 20betlp.com/bonus-wheel-en/js/main.js
IP
Hash 2a749c98673b6fd39be2b6f98dbac273
f536836a45df4c8fed6b667c674e1ec708aa9efe
0638e3aeb297166e0175dcf1abbab179e655196a653682196c7a8e794598fa47
GET /bonus-wheel-en/js/main.js HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: application/javascript; charset=UTF-8
Last-Modified: Thu, 11 Nov 2021 10:29:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"618cf09e-40a"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/css/animation.css
200 OK 942 B URL HTTP/1.1 20betlp.com/bonus-wheel-en/css/animation.css
IP
Hash 750d918201188f29886c58f10d4146a4
efc731484d3b10f60de17baf34a4f85c42464a6a
6ca0c67d84ee7da96eef03e0a696ced35ac4d44b6f752a363861a9034b8f560e
GET /bonus-wheel-en/css/animation.css HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: text/css
Last-Modified: Wed, 10 Nov 2021 14:37:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"618bd933-2f55"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/js/jquery-3.3.1.min.js
200 OK 30 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/js/jquery-3.3.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 8c94335279b4912ce3f2d6806ce9687a
81f77bfa6a35e3d8260d083074c92a99b8893a36
9075f5a34529dd0bbb9edb86c011a755f5138e2ba7006a12c5c57e87c588c1b8
GET /bonus-wheel-en/js/jquery-3.3.1.min.js HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: application/javascript; charset=UTF-8
Last-Modified: Mon, 08 Nov 2021 13:54:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61892bfa-1538e"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/js/refers.js
200 OK 388 B URL HTTP/1.1 20betlp.com/bonus-wheel-en/js/refers.js
IP
Hash 1a02133cce7b2f9786a3d14737b7acbe
940b4a4f62322d164c6f1ca888ccfbd975839105
3d53e0fdccc953658e13bfe3523749c55818cab7dc61f26b954657b0b1543ec0
GET /bonus-wheel-en/js/refers.js HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: application/javascript; charset=UTF-8
Last-Modified: Fri, 12 Nov 2021 10:15:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"618e3eb7-29e"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Encoding: gzip
20betlp.com/bonus-wheel-en/images/logo/sticpay_new.png
200 OK 5.9 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/sticpay_new.png
IP
File type PNG image data, 156 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 915e8659fe4104a9edca936e3b64af6f
237f1ddfabd6ed0654923ac52f65ed2853479004
37b66b4f7682f3d582194a6509946b7fab719aa66a16e576793abc5402c4fecc
GET /bonus-wheel-en/images/logo/sticpay_new.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 5850
Last-Modified: Tue, 09 Nov 2021 09:14:18 GMT
Connection: keep-alive
ETag: "618a3bea-16da"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/copyright.png
200 OK 3.4 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/copyright.png
IP
File type PNG image data, 50 x 49, 8-bit/color RGBA, non-interlaced\012- data
Hash 773e24b3c400ffb8bf6619fa6b2a0430
2ed762770d5f3f257df2f648e80e6376b09c8823
d1ecd9f01b462dcd82ae6c90908dbf63d02c35c0eae9b65a17570dd361fe74e4
GET /bonus-wheel-en/images/copyright.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 3443
Last-Modified: Mon, 08 Nov 2021 15:54:19 GMT
Connection: keep-alive
ETag: "6189482b-d73"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/crypto.png
200 OK 3.9 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/crypto.png
IP
File type PNG image data, 112 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a02abf14ae557f358e5ad08779e5c63
ca1255e1af637643cfc37819686205fa98e52ab7
6b9c714743ae2b5fed2333459c1e6c5c092673ff7243a3b08427abea21b306f2
GET /bonus-wheel-en/images/logo/crypto.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 3940
Last-Modified: Tue, 09 Nov 2021 09:12:36 GMT
Connection: keep-alive
ETag: "618a3b84-f64"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/skrill_new.png
200 OK 3.1 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/skrill_new.png
IP
File type PNG image data, 105 x 37, 8-bit/color RGBA, non-interlaced\012- data
Hash f7f53770508e4524d76a646e42489eed
b5b3ee0f8d851744947d03675426f297c9f1dd53
be653dca4bc909851e0ef709ec9ae0feeb50e3a67c8e4454bfff01c6a85b0757
GET /bonus-wheel-en/images/logo/skrill_new.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 3056
Last-Modified: Tue, 09 Nov 2021 09:12:46 GMT
Connection: keep-alive
ETag: "618a3b8e-bf0"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/ecopayz.png
200 OK 5.2 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/ecopayz.png
IP
File type PNG image data, 146 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d4dbdc5ecb23f1a8798513f2f728155
f8693c37c36af34771b0d188aed78fd289767e65
1b31125b4beb00232b1566676ff8dda6d68b5dabb2b4471296cc7c10d009b000
GET /bonus-wheel-en/images/logo/ecopayz.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 5161
Last-Modified: Tue, 09 Nov 2021 09:14:25 GMT
Connection: keep-alive
ETag: "618a3bf1-1429"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/visamc_new.png
200 OK 3.4 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/visamc_new.png
IP
File type PNG image data, 100 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 42ae8796fddaf0636035e39d98c4f15a
de35eaaf6df81c0570ec58833581617ad2099a60
4b9dc457817a3a2578a394834ecd291c8a352ad280e35e62024dda1f2dab73e9
GET /bonus-wheel-en/images/logo/visamc_new.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 3374
Last-Modified: Tue, 09 Nov 2021 09:12:17 GMT
Connection: keep-alive
ETag: "618a3b71-d2e"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/neteller_new.png
200 OK 4.2 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/neteller_new.png
IP
File type PNG image data, 185 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d4d7708d1139fd4793741e35d091d6d
3a12ff356a277abc12418a656fdd973ea496bac0
464604486ca20b0d844cc62b4af2a8550942aa2972f402d7a8da06e332f7702a
GET /bonus-wheel-en/images/logo/neteller_new.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 4162
Last-Modified: Tue, 09 Nov 2021 09:13:00 GMT
Connection: keep-alive
ETag: "618a3b9c-1042"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo.png
200 OK 17 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo.png
IP
File type PNG image data, 254 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash 78def5eabf59675b4f0ee3e6649a03f7
67a6dafdbea7d307b9dfb3b18718e282e46fd219
f1a1ffabc45b0570df933b634a743941db677176ad0a917de8e95848b36f4a47
GET /bonus-wheel-en/images/logo.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 17049
Last-Modified: Tue, 09 Nov 2021 08:59:54 GMT
Connection: keep-alive
ETag: "618a388a-4299"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/net_banking.png
200 OK 2.5 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/net_banking.png
IP
File type PNG image data, 120 x 49, 8-bit/color RGBA, non-interlaced\012- data
Hash c46d90c5747589b5c68afcd95356c976
7bd5c560be0c147e709fb7836e2b5045bce8aae3
db740d8801f6dc3c0500c5e398b6a8e00a3f15fcf9cb1adbb1e5ae7b4f8c4fd1
GET /bonus-wheel-en/images/logo/net_banking.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 2465
Last-Modified: Tue, 09 Nov 2021 09:13:17 GMT
Connection: keep-alive
ETag: "618a3bad-9a1"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/stopper.png
200 OK 6.9 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/stopper.png
IP
File type PNG image data, 69 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash ccdaf73595b088b4fc63428f9fe100e2
081fc4e5f0d9f0b519d40e5dd760ea28f1b7c444
d7d9fcc51b3da99da21f8be521d60b994ef891ee083e68e93c8f76de755ce966
GET /bonus-wheel-en/images/stopper.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 6945
Last-Modified: Mon, 08 Nov 2021 14:28:44 GMT
Connection: keep-alive
ETag: "6189341c-1b21"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/flexepin_new.png
200 OK 2.8 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/flexepin_new.png
IP
File type PNG image data, 100 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash f49c033c892d92fe21bbbd093216f94c
cd6648cc417b11747dcc1071c619ee133445abba
b12fb0ae0a41fb3dc4a379f1bae8344cf7b3b093b6f336005964e3c8b298197c
GET /bonus-wheel-en/images/logo/flexepin_new.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 2827
Last-Modified: Tue, 09 Nov 2021 09:13:40 GMT
Connection: keep-alive
ETag: "618a3bc4-b0b"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/make-a-spin.png
200 OK 127 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/make-a-spin.png
IP
File type PNG image data, 744 x 201, 8-bit/color RGBA, non-interlaced\012- data
Size 127 kB (126955 bytes)
Hash 2cab480711ffc79de987c81449ae9eaa
8ac2d4324e60cebaacd09aaa5c58b54b26d12fca
12ffa9a312269979d2cc05b4b553e54570a8149d6ebc0671d263662bd3dce225
GET /bonus-wheel-en/images/make-a-spin.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 126955
Last-Modified: Mon, 08 Nov 2021 14:47:19 GMT
Connection: keep-alive
ETag: "61893877-1efeb"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/muchbetter.png
200 OK 4.7 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/muchbetter.png
IP
File type PNG image data, 161 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash 909e39a66412fc4b6687e293a69057dd
71b11cf1d7631f1febae4eba3ce40ae0483f8dd6
c6842348624c6b4fa14e6134b46d06ff4f204b86e22cfe0247347643be257cc4
GET /bonus-wheel-en/images/logo/muchbetter.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 4712
Last-Modified: Tue, 09 Nov 2021 09:13:32 GMT
Connection: keep-alive
ETag: "618a3bbc-1268"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/perfectmoney_new.png
200 OK 5.2 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/perfectmoney_new.png
IP
File type PNG image data, 168 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash d29926bb1a723d10d6b5154e6801b6b4
a876e717672fa93ab89e88761e0a2f7585e90b60
6a4a985776ed324898260272af353d531ecd717db104a1d62a49bb64f64f3b19
GET /bonus-wheel-en/images/logo/perfectmoney_new.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 5175
Last-Modified: Tue, 09 Nov 2021 09:13:48 GMT
Connection: keep-alive
ETag: "618a3bcc-1437"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
20betlp.com/bonus-wheel-en/images/wheel-fg.png
200 OK 236 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/wheel-fg.png
IP
File type PNG image data, 528 x 527, 8-bit/color RGBA, non-interlaced\012- data
Size 236 kB (236388 bytes)
Hash d2e97dbd7ae4c54b415a151f39be0887
9d38dd892fbd1a93e7a61788498f72824e3b9ada
905712289eb6fa7638607e41d96ad085d59a0748f52f6068df99fb8a894b4f47
GET /bonus-wheel-en/images/wheel-fg.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 236388
Last-Modified: Mon, 08 Nov 2021 04:17:16 GMT
Connection: keep-alive
ETag: "6188a4cc-39b64"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/wheel-bg.png
200 OK 212 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/wheel-bg.png
IP
File type PNG image data, 601 x 601, 8-bit/color RGBA, non-interlaced\012- data
Size 212 kB (211550 bytes)
Hash 77f3339675a5bf3bca71968782a857a9
31a4c7cbeba109adfafd495cac9f9a5b33d76652
221badfcf9c1a76ed140fe77ada496f91140c841efd09bf2335bbfb336d876bf
GET /bonus-wheel-en/images/wheel-bg.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 211550
Last-Modified: Mon, 08 Nov 2021 14:06:03 GMT
Connection: keep-alive
ETag: "61892ecb-33a5e"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/fonts/Roboto-Regular.woff2
200 OK 63 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/fonts/Roboto-Regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 63212, version 1.0\012- data
Hash ac35bf2f313045353c04a3803608fec3
131f8a84c9daa2a8245f0e16dc90ef4a295d0d2a
0aff3d001df2f4a793cb90be4ef4b9b79d0c8d661e568aff19d9c1f0050f2d6b
GET /bonus-wheel-en/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: font/woff2
Content-Length: 63212
Connection: keep-alive
Last-Modified: Mon, 08 Nov 2021 13:53:58 GMT
ETag: "f6ec-5d047530a6980"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000;
20betlp.com/bonus-wheel-en/images/spin-btn.png
200 OK 51 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/spin-btn.png
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 618d28fd139fa818dd979927def57561
fb2e676d80e87ba983e8bd6975f0c698829dab04
959554bbe25ce29001bbe2e2b4ba8e862c4a1b962765bf6b179e11fb4b1dea29
GET /bonus-wheel-en/images/spin-btn.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 51216
Last-Modified: Mon, 08 Nov 2021 14:26:51 GMT
Connection: keep-alive
ETag: "618933ab-c810"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/main-bg.png
200 OK 2.6 MB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/main-bg.png
IP
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 2.6 MB (2577577 bytes)
Hash 2d4ab198ac7a6dce01ac7edd60989fc5
9b549e73d6f54a81950adf3b8d636b2e8f15657b
8929ccea9d65858ea6428174d8ca029dd52ff1a020d20e10b9ddeac3a33ae5e7
GET /bonus-wheel-en/images/main-bg.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 2577577
Last-Modified: Tue, 09 Nov 2021 08:57:20 GMT
Connection: keep-alive
ETag: "618a37f0-2754a9"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/audio/fanfare-1.mp3
206 Partial Content 101 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/audio/fanfare-1.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo\012- data
Size 101 kB (101007 bytes)
Hash 54d91dc77f4e905b3d90b66441f6333a
c213f2c642c93ac76191e61d9fe530f39340b361
ae6d928ca56dcdb0635db0cfad425de2edeafb27fa4053eb8e9f30d07ee787c5
GET /bonus-wheel-en/audio/fanfare-1.mp3 HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 206 Partial Content
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: audio/mpeg
Content-Length: 101007
Last-Modified: Mon, 08 Nov 2021 13:54:03 GMT
Connection: keep-alive
ETag: "61892bfb-18a8f"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Range: bytes 0-101006/101007
20betlp.com/bonus-wheel-en/audio/fanfare-2.mp3
206 Partial Content 101 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/audio/fanfare-2.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo\012- data
Size 101 kB (101007 bytes)
Hash 88da6b9ed0e64ef406ab5e7b3474b227
92068d14a2c4cf93de697cf9abc9496c3c5c481b
1210732e4a4fa21a700492498829f6370b9d2a3343bfd5382af9f42b1158d4e3
GET /bonus-wheel-en/audio/fanfare-2.mp3 HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 206 Partial Content
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: audio/mpeg
Content-Length: 101007
Last-Modified: Mon, 08 Nov 2021 13:54:03 GMT
Connection: keep-alive
ETag: "61892bfb-18a8f"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Range: bytes 0-101006/101007
20betlp.com/bonus-wheel-en/audio/wheel.mp3
206 Partial Content 126 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/audio/wheel.mp3
IP
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo\012- data
Size 126 kB (126084 bytes)
Hash 20e886554f6b25f85110df851f55a460
0a94793f9bd1866580d62b70a2826904b7e167b0
6fd75847fcb250dd04d637286da58286cf472482af2840f9aabbf5845bb941ca
GET /bonus-wheel-en/audio/wheel.mp3 HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 206 Partial Content
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: audio/mpeg
Content-Length: 126084
Last-Modified: Mon, 08 Nov 2021 13:54:03 GMT
Connection: keep-alive
ETag: "61892bfb-1ec84"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Content-Range: bytes 0-126083/126084
www.googletagmanager.com/gtm.js?id=GTM-55HKBB7
200 OK 60 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-55HKBB7
IP
File type ASCII text, with very long lines (25725)
Hash 02819e6ea3144f7a34350a2dd230fc28
d58a5cd388d25a5cbc56757a80b639f3738a36a5
293dcb7c95a7a13297d94b52cdbdb0689467739c29fa6c2d8c90a4f588c4e46a
GET /gtm.js?id=GTM-55HKBB7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 00:37:14 GMT
expires: Thu, 23 Mar 2023 00:37:14 GMT
cache-control: private, max-age=900
last-modified: Thu, 23 Mar 2023 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 60151
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
20betlp.com/bonus-wheel-en/images/logo/jeton.png
200 OK 7.1 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/jeton.png
IP
File type PNG image data, 123 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 615d8d9fe9f2056b2fbcd00cb25312cf
57278c236bb6559f44c3e9b64663973ba8317e5b
abab9115e653ee3830e6fe4c0b226a21b4aceb78afd01246aec384d2783633f8
GET /bonus-wheel-en/images/logo/jeton.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 7056
Last-Modified: Tue, 09 Nov 2021 09:13:59 GMT
Connection: keep-alive
ETag: "618a3bd7-1b90"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/logo/GPay.png
200 OK 2.6 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/logo/GPay.png
IP
File type PNG image data, 93 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash 17d672ffde367ad80132340957c887c5
4f712364b138c122c7a00b65c14f683f96fe3bd2
232c254eaaf82129dc93368897f25f1c82161dbeb3f7676d7fabaff1b9e542fa
GET /bonus-wheel-en/images/logo/GPay.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 2570
Last-Modified: Tue, 09 Nov 2021 09:14:10 GMT
Connection: keep-alive
ETag: "618a3be2-a0a"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
20betlp.com/bonus-wheel-en/images/favicon.png
200 OK 2.2 kB URL HTTP/1.1 20betlp.com/bonus-wheel-en/images/favicon.png
IP
File type PNG image data, 32 x 29, 8-bit colormap, non-interlaced\012- data
Hash 036e0f36b5a13f1fa5ab0dd3241693ff
603c662bc6f6df4adfc53b0ee2b46c2e37bf8e61
432c7a05fd30a114d2edad7833b393a3a5077ca364fbbca7eb256385072f844e
GET /bonus-wheel-en/images/favicon.png HTTP/1.1
Host: 20betlp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/bonus-wheel-en/?btag=655020_618CE7A73B544D25A9D83E3B70E2C926&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: image/png
Content-Length: 2161
Last-Modified: Thu, 07 Oct 2021 12:51:34 GMT
Connection: keep-alive
ETag: "615eed56-871"
Expires: Thu, 23 Mar 2023 00:37:44 GMT
Cache-Control: max-age=30
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 23c054d3aee551b6fdc42a5a472a7040
b1a46c12ac7d65c979fd1998bdb243f3dba8f956
9e8b91ab91da9ea20dfb5f90c1c06239d2872b0eb80785534d0c59c3b51de404
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zz.connextra.com/dcs/tagController/tag/d3ea3fb1f9d4/homepage
200 OK 16 kB URL HTTP/2 zz.connextra.com/dcs/tagController/tag/d3ea3fb1f9d4/homepage
IP
File type HTML document text\012- exported SGML document, ASCII text, with very long lines (2407)
Hash f5c6ed464a100daeec24c257b81aeba4
f73b688dfff651a1342f8f36b2763f16e8fa976e
c62f6ae2fe15b2279beb5110c4d7827a39865b01b4b53caabcbe5686c8eae626
GET /dcs/tagController/tag/d3ea3fb1f9d4/homepage HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript;charset=utf-8
content-length: 16263
content-encoding: gzip
x-envoy-upstream-service-time: 2
server: istio-envoy
vary: Accept-Encoding
cache-control: must-revalidate, max-age=106
expires: Thu, 23 Mar 2023 00:39:00 GMT
date: Thu, 23 Mar 2023 00:37:14 GMT
X-Firefox-Spdy: h2
secure.adnxs.com/seg?add=32401244&t=1
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=32401244&t=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=32401244&t=1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D32401244%26t%3D1
AN-X-Request-Uuid: 709e8936-2988-480f-ac28-1abe8f1d60e3
Set-Cookie: uuid2=4403585210686683949; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Jun-2023 00:37:14 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/seg?add=30613014&t=1
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=30613014&t=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=30613014&t=1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D30613014%26t%3D1
AN-X-Request-Uuid: d566255f-caf1-4b8a-855e-9ab2a58f5b98
Set-Cookie: uuid2=1276365349261410548; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Jun-2023 00:37:14 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
200 OK 471 B IP
Hash 1c5e16c75d7472b35c52eed951815303
67206961b17b582b331b6c9d35a2b6408bfbdb9f
9d4de1f20846759acf766cd78bd2bcf6701a98648684dd46f304e74aad0f2f82
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5622
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:14 GMT
Last-Modified: Wed, 22 Mar 2023 23:03:32 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
zz.connextra.com/20Bet/dcs/tagController/tagData/d3ea3fb1f9d4
200 OK 20 B URL HTTP/2 zz.connextra.com/20Bet/dcs/tagController/tagData/d3ea3fb1f9d4
IP
Hash 163be0a88c70ca629fd516dbaadad96a
c8830ccf3a863e489ca37f4da572bad0e05d077b
ac73670af3abed54ac6fb4695131f4099be9fbe39d6076c5d0264a6bbdae9d83
POST /20Bet/dcs/tagController/tagData/d3ea3fb1f9d4 HTTP/1.1
Host: zz.connextra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 41
Origin: https://20betlp.com
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
access-control-allow-credentials: true
access-control-allow-origin: https://20betlp.com
vary: origin,accept-encoding
p3p: CP=NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR SAMa BUS IND UNI PUR COM NAV
content-encoding: gzip
x-envoy-upstream-service-time: 3
server: istio-envoy
expires: Thu, 23 Mar 2023 00:37:14 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 23 Mar 2023 00:37:14 GMT
content-length: 20
set-cookie: CxtId=b1ed1f97-959a-4a2a-ac5e-e67761541c00; Domain=.connextra.com; Expires=Fri, 22-Mar-2024 00:37:14 GMT; Path=/; Secure; SameSite=None
20Bet=P%7Chomepage%7C1%7C202303230037; Domain=.connextra.com; Expires=Fri, 22-Mar-2024 00:37:14 GMT; Path=/; Secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D32401244%26t%3D1
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D32401244%26t%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fseg%3Fadd%3D32401244%26t%3D1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20betlp.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: b25c73ec-1707-4c16-90c4-d1dc8c679ead
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2In6hckaR!]tbP6j2F-XstGt!@E@7%2yug; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Jun-2023 00:37:14 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
a.exoclick.com/tag_gen.js
200 OK 515 B URL HTTP/1.1 a.exoclick.com/tag_gen.js
IP
File type ASCII text, with very long lines (1030), with no line terminators
Hash 628e0302068ade64b5f411f39d5ce7e5
ff1a609269f34bad5ae67ed1678df3f7b905d018
c583ceaeae2e9a05e25c27b61520710f16b8b98ca7f9087a75ae90a040b8bc3f
GET /tag_gen.js HTTP/1.1
Host: a.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 23 Mar 2023 00:37:14 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 515
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"a56c0470b9aa925085e51a6271a"
X-HW: 1679531834.dop215.sk1.t,1679531834.cds235.sk1.shn,1679531834.dop215.sk1.t,1679531834.cds251.sk1.c
Access-Control-Allow-Origin: *, *
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 23 Mar 2023 00:05:11 GMT
expires: Thu, 23 Mar 2023 02:05:11 GMT
cache-control: public, max-age=7200
age: 1923
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6e965ba75b84abf96ca0d83da48d2fbb
4c2eb4c06cabee4d0f0606e88e9e074e2f767168
4b39bfe671df590e9c5baf75008d76f4272d8ffbafd7108e7592f8165b6806c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5196
Cache-Control: max-age=140534
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:14 GMT
Etag: "641b0ce4-1d7"
Expires: Fri, 24 Mar 2023 15:39:28 GMT
Last-Modified: Wed, 22 Mar 2023 14:12:52 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash 8fff77135574c041be112da0abca2426
b934d0e2dc038730c7e0561bf507a98ab7dddf84
e260889bd7ef2e522c81fe382719ab28fca917b155e382a9b1fd9f721306e339
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1411
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:14 GMT
Last-Modified: Thu, 23 Mar 2023 00:13:43 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 313
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D30613014%26t%3D1
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D30613014%26t%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fseg%3Fadd%3D30613014%26t%3D1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20betlp.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 00:37:14 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 42a4489e-897d-4fc0-97cf-3863d3b04ccc
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2In6hckaR!]tbP6j2F-XstGt!@E@7%2yug; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Jun-2023 00:37:14 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID
200 OK 43 B URL HTTP/1.1 secure.adnxs.com/getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /getuidnb?https%3A//zz.connextra.com/sync/data/uid/3bc1d7fd2e/%24UID HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 23 Mar 2023 00:37:15 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 886eab26-b495-4384-b1aa-8b74bc87f31e
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 961.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash e5f5bf796d91f271e383cf1ff3ee5af4
70ead02da19095ca752d55e89a48fcdf59d44d33
247f023e282f1556e668df0033858196d682f31f659d1b53ea6dcaeff56c401a
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: opUyQ6gHW86lZxO3eXLu1q4Vh/CN/MUu2OOTMiMt6O6yjt9hym0xlkBy+a+MxX17ygpaKHzppkP8tWsf4JEzbA==
content-length: 27907
x-fb-trip-id: 1679558926
date: Thu, 23 Mar 2023 00:37:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered&context=20bet.com&cookiename=notregistered&age=262800&maxcookiecount=10
200 OK 35 B URL HTTP/1.1 ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered&context=20bet.com&cookiename=notregistered&age=262800&maxcookiecount=10
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /ctrack?action=list&type=add&id=notregistered&context=20bet.com&cookiename=notregistered&age=262800&maxcookiecount=10 HTTP/1.1
Host: ctrack.trafficjunky.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: openresty
date: Thu, 23 Mar 2023 00:37:15 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Sun, 22 Jan 1984 03:00:00 GMT
p3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
pragma: no-cache
set-cookie: tj_UUID=631cd2ee2b4f4cf89a98c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 22 Apr 2023 00:37:15 GMT; Secure; SameSite=None
tj_UUID_v2=631cd2ee-2b4f-4cf8-9a98-c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 22 Apr 2023 00:37:15 GMT; Secure; SameSite=None
1918bc62c1a6d87456120b5ac922270e=notregistered; Path=/; Domain=trafficjunky.net; Expires=Thu, 21 Sep 2023 12:37:15 GMT; Secure; SameSite=None
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Content-Type
access-control-max-age: 86400
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
x-request-id: 641B9F3A-42FE725901BB4B79-12A25F25
ocsp.digicert.com/
200 OK 471 B IP
Hash 6e965ba75b84abf96ca0d83da48d2fbb
4c2eb4c06cabee4d0f0606e88e9e074e2f767168
4b39bfe671df590e9c5baf75008d76f4272d8ffbafd7108e7592f8165b6806c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5155
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:15 GMT
Last-Modified: Wed, 22 Mar 2023 23:11:20 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3fc4e9daccaf6beba5e0040abdfd8a99
56361f3b2357d888f563867db70a247b5b4a05cc
46529a849d6e8452a307fd5ef79933553a9a49efee2c623b71af52ebdda7edd0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46529A849D6E8452A307FD5EF79933553A9A49EFEE2C623B71AF52EBDDA7EDD0"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12296
Expires: Thu, 23 Mar 2023 04:02:11 GMT
Date: Thu, 23 Mar 2023 00:37:15 GMT
Connection: keep-alive
main.exdynsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
200 OK 20 B URL HTTP/1.1 main.exdynsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2 HTTP/1.1
Host: main.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 00:37:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-03-22%22%3B%7D%7D; expires=Fri, 22 Mar 2024 00:37:15 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
main.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
200 OK 20 B URL HTTP/1.1 main.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2 HTTP/1.1
Host: main.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 00:37:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-03-22%22%3B%7D%7D; expires=Fri, 22 Mar 2024 00:37:15 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash 1c5e16c75d7472b35c52eed951815303
67206961b17b582b331b6c9d35a2b6408bfbdb9f
9d4de1f20846759acf766cd78bd2bcf6701a98648684dd46f304e74aad0f2f82
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5623
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:15 GMT
Last-Modified: Wed, 22 Mar 2023 23:03:32 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
my.rtmark.net/p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a
IP
Hash 50bd6e5705d2521bca2b787e709a056b
6216f7e6fce68eba983e254863c86f29248531b0
0f9b337808a018383c64035060134c4bbf0d8de9e9541284ab5ffaa9f42cd434
GET /p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 00:37:15 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
main.exoclick.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
200 OK 20 B URL HTTP/1.1 main.exoclick.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2 HTTP/1.1
Host: main.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 00:37:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-03-22%22%3B%7D%7D; expires=Fri, 22 Mar 2024 00:37:15 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
main.exosrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
200 OK 20 B URL HTTP/1.1 main.exosrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2 HTTP/1.1
Host: main.exosrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 23 Mar 2023 00:37:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-03-22%22%3B%7D%7D; expires=Fri, 22 Mar 2024 00:37:15 GMT; path=/; domain=.exosrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered-new&context=20bet.com&cookiename=notregistered-new&age=259200&maxcookiecount=10
200 OK 35 B URL HTTP/1.1 ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered-new&context=20bet.com&cookiename=notregistered-new&age=259200&maxcookiecount=10
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /ctrack?action=list&type=add&id=notregistered-new&context=20bet.com&cookiename=notregistered-new&age=259200&maxcookiecount=10 HTTP/1.1
Host: ctrack.trafficjunky.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: openresty
date: Thu, 23 Mar 2023 00:37:15 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Sun, 22 Jan 1984 03:00:00 GMT
p3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
pragma: no-cache
set-cookie: tj_UUID=631cd2ee2b4f4cf89a98c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 22 Apr 2023 00:37:15 GMT; Secure; SameSite=None
tj_UUID_v2=631cd2ee-2b4f-4cf8-9a98-c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 22 Apr 2023 00:37:15 GMT; Secure; SameSite=None
614ac6550300bc7c00c3f821d11e0512=notregistered-new; Path=/; Domain=trafficjunky.net; Expires=Tue, 19 Sep 2023 00:37:15 GMT; Secure; SameSite=None
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Content-Type
access-control-max-age: 86400
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
x-request-id: 641B9F3B-42FE725901BB4B79-12A25F79
tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331
200 OK 35 B URL HTTP/2 tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 00:37:15 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 705fdc10174f56ad
set-cookie: ts_rt_45d3301c-de08-443f-9716-ba31e2632331=AAMC; expires=Fri, 22 Mar 2024 00:37:15 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5cd8c9b1a21861daf74c130682cea34e
32ceecbbe8fdfc999e4169771cf7633fdaa1f083
328369b9dcb3b3b19b031dd350a02c7cbe5fb250ba4748bf8d055da5342f0837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-179168354-1&cid=1401814166.1679531842&jid=555228002&gjid=79873397&_gid=1155751974.1679531842&_u=YADAAEAAAAAAACAAI~&z=331175033
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-179168354-1&cid=1401814166.1679531842&jid=555228002&gjid=79873397&_gid=1155751974.1679531842&_u=YADAAEAAAAAAACAAI~&z=331175033
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-179168354-1&cid=1401814166.1679531842&jid=555228002&gjid=79873397&_gid=1155751974.1679531842&_u=YADAAEAAAAAAACAAI~&z=331175033 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://20betlp.com
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://20betlp.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 23 Mar 2023 00:37:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trc.taboola.com/1460267/log/3/unip?item-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&ref=&en=20betcom_notreg
204 No Content 0 B URL HTTP/2 trc.taboola.com/1460267/log/3/unip?item-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&ref=&en=20betcom_notreg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1460267/log/3/unip?item-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&ref=&en=20betcom_notreg HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
content-type: image/gif
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
accept-ranges: bytes
date: Thu, 23 Mar 2023 00:37:15 GMT
via: 1.1 varnish
x-served-by: cache-bma1630-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1679531835.280063,VS0,VE94
x-vcl-time-ms: 94
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5cd8c9b1a21861daf74c130682cea34e
32ceecbbe8fdfc999e4169771cf7633fdaa1f083
328369b9dcb3b3b19b031dd350a02c7cbe5fb250ba4748bf8d055da5342f0837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 00:37:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=4565082360183930&ev=PageView&dl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&rl=&if=false&ts=1679531842024&sw=1280&sh=1024&v=2.9.99&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679531842023.1716256793&it=1679531841811&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=4565082360183930&ev=PageView&dl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&rl=&if=false&ts=1679531842024&sw=1280&sh=1024&v=2.9.99&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679531842023.1716256793&it=1679531841811&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=4565082360183930&ev=PageView&dl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&rl=&if=false&ts=1679531842024&sw=1280&sh=1024&v=2.9.99&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1679531842023.1716256793&it=1679531841811&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 23 Mar 2023 00:37:15 GMT
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 4b8af959ec0e3f094fde89a41610d8b9
12bf801db32f8acec5f915abec59292d8c6669fe
3fca65c5faea2a565b831d71841c1379af7da61f9f0f758d2bd113ffc6a1af8d
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 940
Server: nginx
Content-Type: application/ocsp-response
Expires: Sun, 26 Mar 2023 22:14:53 GMT
ETag: "12bf801db32f8acec5f915abec59292d8c6669fe"
Last-Modified: Wed, 22 Mar 2023 22:14:54 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Thu, 23 Mar 2023 00:37:15 GMT
Age: 3086
X-Served-By: cache-qpg1234-QPG, cache-bma1654-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 19, 1
X-Timer: S1679531835.038922,VS0,VE364
region1.google-analytics.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=45je33k0&_p=1948381540&cid=1401814166.1679531842&ul=en-us&sr=1280x1024&_s=1&sid=1679531841&sct=1&seg=0&dl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=45je33k0&_p=1948381540&cid=1401814166.1679531842&ul=en-us&sr=1280x1024&_s=1&sid=1679531841&sct=1&seg=0&dl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-J9LNZYMXZE>m=45je33k0&_p=1948381540&cid=1401814166.1679531842&ul=en-us&sr=1280x1024&_s=1&sid=1679531841&sct=1&seg=0&dl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&dt=20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20betlp.com
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://20betlp.com
date: Thu, 23 Mar 2023 00:37:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a2ae63b62d5190215ac362d454449e8c
92708e196ffd55dbeafc08e56cf677b84dc24d3a
71f36d9e26a859ce63d263639f2a1edc1b332578a253d573d14e5f4900e809f9
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73977
date: Thu, 23 Mar 2023 00:37:15 GMT
access-control-allow-origin: *
etag: "641965ea-120f9"
expires: Thu, 23 Mar 2023 01:37:15 GMT
last-modified: Tue, 21 Mar 2023 11:08:10 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 00:37:15 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=8c728151093b46ae810d8dd0e03ee879; expires=Fri, 22 Mar 2024 00:37:15 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 23 Mar 2023 00:37:15 GMT
access-control-allow-origin: *
etag: "641965ea-2b"
expires: Thu, 23 Mar 2023 01:37:15 GMT
accept-ranges: bytes
last-modified: Tue, 21 Mar 2023 11:08:10 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/73094056/1?wmode=7&page-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A3328%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1650208956844%3Ahid%3A593856513%3Az%3A0%3Ai%3A20230323003722%3Aet%3A1679531842%3Ac%3A1%3Arn%3A1055163762%3Arqn%3A1%3Au%3A1679531842423187044%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A35%2C131%2C7%2C2%2C2881%2C0%2C%2C257%2C4%2C3639%2C3639%2C0%2C3338%3Aco%3A0%3Ans%3A1679531837720%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679531842%3At%3A20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/73094056/1?wmode=7&page-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A3328%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1650208956844%3Ahid%3A593856513%3Az%3A0%3Ai%3A20230323003722%3Aet%3A1679531842%3Ac%3A1%3Arn%3A1055163762%3Arqn%3A1%3Au%3A1679531842423187044%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A35%2C131%2C7%2C2%2C2881%2C0%2C%2C257%2C4%2C3639%2C3639%2C0%2C3338%3Aco%3A0%3Ans%3A1679531837720%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679531842%3At%3A20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 5d882150b997bba73095f0c186b216d0
9b3edc91d363b7f7357a015d2a00d7399c5e2517
a250d8efde83f3d2d3ade70d090dbe4c3478450bf06f80cb8552ea352b5c25f2
GET /watch/73094056/1?wmode=7&page-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A3328%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1650208956844%3Ahid%3A593856513%3Az%3A0%3Ai%3A20230323003722%3Aet%3A1679531842%3Ac%3A1%3Arn%3A1055163762%3Arqn%3A1%3Au%3A1679531842423187044%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A35%2C131%2C7%2C2%2C2881%2C0%2C%2C257%2C4%2C3639%2C3639%2C0%2C3338%3Aco%3A0%3Ans%3A1679531837720%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679531842%3At%3A20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20betlp.com
Referer: https://20betlp.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 23 Mar 2023 00:37:15 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://20betlp.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 00:37:15 GMT
last-modified: Thu, 23-Mar-2023 00:37:15 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa9cba5-a508-44d3-b8ad-393590528e8b.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa9cba5-a508-44d3-b8ad-393590528e8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a774aa1a206523471dfa75b624be2af
e41ca3e0550e74562b0374565225444ffb977c4e
208ea0f25d7bde64057701891811cdb8c0a67b6f60899ca514fbaf2e04d595bc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa9cba5-a508-44d3-b8ad-393590528e8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9550
x-amzn-requestid: 0c3d2b49-9407-4d12-930a-83e585c165b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBF7kFvwIAMF43g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b6b0-59461f0119abb54f773150a0;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:16:00 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: wVn33PkqDp-KFwzsDiNz8uSRuW2lwBLllYsQevboO6qidq1OkL-X5Q==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 0a2ce08fa1ec3c33302a7547d3305978.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 22:33:44 GMT
age: 7416
etag: "e41ca3e0550e74562b0374565225444ffb977c4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
binotraf.com/click.php?key=qcopnrbsgld1lpyq4gqz&clickid=f821d06e-a9b2-4d70-8f6f-56fd6eeeb449&cost=0.0036&PUB_ID=118&SUB_ID=465513&KEYWORD=67.2_nojs.us.&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-03-23&BID_PUB=0.0036&CR_ID=36456
302 Found 0 B URL HTTP/2 binotraf.com/click.php?key=qcopnrbsgld1lpyq4gqz&clickid=f821d06e-a9b2-4d70-8f6f-56fd6eeeb449&cost=0.0036&PUB_ID=118&SUB_ID=465513&KEYWORD=67.2_nojs.us.&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-03-23&BID_PUB=0.0036&CR_ID=36456
IP
ASN #24940 Hetzner Online GmbH
GET /click.php?key=qcopnrbsgld1lpyq4gqz&clickid=f821d06e-a9b2-4d70-8f6f-56fd6eeeb449&cost=0.0036&PUB_ID=118&SUB_ID=465513&KEYWORD=67.2_nojs.us.&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-03-23&BID_PUB=0.0036&CR_ID=36456 HTTP/1.1
Host: binotraf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: nginx/1.18.0
date: Thu, 23 Mar 2023 00:37:13 GMT
content-type: text/html; charset=UTF-8
location: https://promo.20bet.partners/redirect.aspx?pid=174581&bid=1971&lpid=1042&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&utm_term=Ubidex-20bet-EU-NotReg-pop%20BonWheel-1042&subid=d16cfh9b7usibh9788
set-cookie: uclick=h9b7usibh9; expires=Fri, 24-Mar-2023 00:37:13 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=h9b7usibh9-h9b7usibh9-slvc-0-2t1mwj-52a8wj-52a8vr-6184da; expires=Fri, 24-Mar-2023 00:37:13 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
dsp-media.eskimi.com/assets/js/e/gtr.min.js?_=0.0.0.3
200 OK 0 B URL HTTP/2 dsp-media.eskimi.com/assets/js/e/gtr.min.js?_=0.0.0.3
IP
ASN #34989 ServeTheWorld AS
GET /assets/js/e/gtr.min.js?_=0.0.0.3 HTTP/1.1
Host: dsp-media.eskimi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 00:37:14 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 692289
cdn-uid: ce2848ff-13c5-49e5-873d-af24ad423612
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31536000
etag: W/"63f8a8c3-19cc"
expires: Tue, 27 Feb 2024 09:14:58 GMT
last-modified: Fri, 24 Feb 2023 12:08:35 GMT
x-content-type-options: nosniff
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 02/27/2023 09:14:58
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 4310f0c5206e23be3bcc658d38bcceb8
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
dsp-trk.eskimi.com/tracking/cssession?tst&id=22441&url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&t=1679531841680
200 OK 0 B URL HTTP/2 dsp-trk.eskimi.com/tracking/cssession?tst&id=22441&url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&t=1679531841680
IP
GET /tracking/cssession?tst&id=22441&url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&t=1679531841680 HTTP/1.1
Host: dsp-trk.eskimi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20betlp.com
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://20betlp.com
access-control-allow-credentials: true
date: Thu, 23 Mar 2023 00:37:14 GMT
content-type: text/plain; charset=UTF-8
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dsp-ap.eskimi.com/v2/gtr?id=22441&url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&t=1679531841681
200 OK 0 B URL HTTP/2 dsp-ap.eskimi.com/v2/gtr?id=22441&url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&t=1679531841681
IP
GET /v2/gtr?id=22441&url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&t=1679531841681 HTTP/1.1
Host: dsp-ap.eskimi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20betlp.com
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
set-cookie: __eConsent=1; Expires=Sat, 22 Apr 2023 00:37:15 GMT; Max-Age=2592000; Domain=.eskimi.com; Path=/; Secure; SameSite=None
__eDId=286af951-c50a-4d9c-bde6-71df4cf47497; Expires=Sat, 22 Apr 2023 00:37:15 GMT; Max-Age=2592000; Domain=.eskimi.com; Path=/; Secure; SameSite=None
__eP=1; Expires=Thu, 06 Apr 2023 00:37:15 GMT; Max-Age=1209600; Domain=.eskimi.com; Path=/; Secure; SameSite=None
access-control-allow-origin: https://20betlp.com
access-control-allow-credentials: true
cache-control: no-cache
date: Thu, 23 Mar 2023 00:37:14 GMT
content-type: application/json
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/73094056?wmode=7&page-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A3328%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1650208956844%3Ahid%3A593856513%3Az%3A0%3Ai%3A20230323003722%3Aet%3A1679531842%3Ac%3A1%3Arn%3A1055163762%3Arqn%3A1%3Au%3A1679531842423187044%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A35%2C131%2C7%2C2%2C2881%2C0%2C%2C257%2C4%2C3639%2C3639%2C0%2C3338%3Aco%3A0%3Ans%3A1679531837720%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679531842%3At%3A20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/73094056?wmode=7&page-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A3328%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1650208956844%3Ahid%3A593856513%3Az%3A0%3Ai%3A20230323003722%3Aet%3A1679531842%3Ac%3A1%3Arn%3A1055163762%3Arqn%3A1%3Au%3A1679531842423187044%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A35%2C131%2C7%2C2%2C2881%2C0%2C%2C257%2C4%2C3639%2C3639%2C0%2C3338%3Aco%3A0%3Ans%3A1679531837720%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679531842%3At%3A20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/73094056?wmode=7&page-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A3328%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1650208956844%3Ahid%3A593856513%3Az%3A0%3Ai%3A20230323003722%3Aet%3A1679531842%3Ac%3A1%3Arn%3A1055163762%3Arqn%3A1%3Au%3A1679531842423187044%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A35%2C131%2C7%2C2%2C2881%2C0%2C%2C257%2C4%2C3639%2C3639%2C0%2C3338%3Aco%3A0%3Ans%3A1679531837720%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679531842%3At%3A20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20betlp.com
Connection: keep-alive
Referer: https://20betlp.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/73094056/1?wmode=7&page-url=https%3A%2F%2F20betlp.com%2Fbonus-wheel-en%2F%3Fbtag%3D655020_618CE7A73B544D25A9D83E3B70E2C926%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26utm_term%3DUbidex-20bet-EU-NotReg-pop%2520BonWheel-1042%26subid%3Dd16cfh9b7usibh9788&charset=utf-8&browser-info=pv%3A1%3Avf%3A1l80sle48p8z49iczwckpz%3Afp%3A3328%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A983%3Acn%3A1%3Adp%3A0%3Als%3A1650208956844%3Ahid%3A593856513%3Az%3A0%3Ai%3A20230323003722%3Aet%3A1679531842%3Ac%3A1%3Arn%3A1055163762%3Arqn%3A1%3Au%3A1679531842423187044%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A35%2C131%2C7%2C2%2C2881%2C0%2C%2C257%2C4%2C3639%2C3639%2C0%2C3338%3Aco%3A0%3Ans%3A1679531837720%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-5cbccea2ed3dd5c7a75380ef1cbfadf6-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679531842%3At%3A20BET%20%7C%20Best%20Online%20Casino%20to%20Win%20Real%20Money&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 23 Mar 2023 00:37:15 GMT
access-control-allow-origin: https://20betlp.com
set-cookie: yabs-sid=1562810191679531835; Path=/; SameSite=None; Secure
i=7ukTTyYUs5JcmQcgNRGOYNLbmNM8FMGq9S9u7e0+jDnwaYtt9YcPDuGioX//JGdT3/dDo4exHwxaCv5XOF60TUZcfP0=; Expires=Sun, 20-Mar-2033 00:37:11 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=5117283631679531835; Expires=Sun, 20-Mar-2033 00:37:11 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
yuidss=5117283631679531835; Expires=Fri, 22-Mar-2024 00:37:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1711067835.yc.1679531835#1711067835.yrts.1679531835#1711067835.yrtsi.1679531835; Expires=Fri, 22-Mar-2024 00:37:15 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 23-Mar-2023 00:37:15 GMT
last-modified: Thu, 23-Mar-2023 00:37:15 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
5.161.78.177
23.36.79.25
95.211.229.248
93.158.134.119
51.161.115.163
37.252.8.95
185.89.211.132
104.18.32.68
157.240.200.14
139.45.195.8