r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7456
Expires: Sun, 29 Jan 2023 03:39:05 GMT
Date: Sun, 29 Jan 2023 01:34:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9725
Expires: Sun, 29 Jan 2023 04:16:54 GMT
Date: Sun, 29 Jan 2023 01:34:49 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4773
Expires: Sun, 29 Jan 2023 02:54:22 GMT
Date: Sun, 29 Jan 2023 01:34:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 00:35:32 GMT
content-type: application/json
age: 3557
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jY/M6bjoxUtYeo0ZlRZgnWH+cHtz9fu9qPo0vfYN4hLEH/BaLDArzN9OwSh4+GpJ+FC006AF9EI=
x-amz-request-id: 1XHJ741FGY4AZ94D
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 01:21:12 GMT
age: 817
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 01:34:49 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
plugdosplugins.com/torrent/spectrasonics-omnisphere-250d-keygen/
301 Moved Permanently 707 B URL HTTP/1.1 plugdosplugins.com/torrent/spectrasonics-omnisphere-250d-keygen/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
GET /torrent/spectrasonics-omnisphere-250d-keygen/ HTTP/1.1
Host: plugdosplugins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 29 Jan 2023 01:34:49 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
location: https://plugdosplugins.com/torrent/spectrasonics-omnisphere-250d-keygen/
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9cUVW6f52VpMatp3%2BrAw0d%2BiSjbyh%2FNJQT2fPHOCJufMsKynyuPy2nZMbCdfIp7OR2rfZkIFcKnQkOxTpsQ73wkM7hdZJ3Ms%2F65u0uSLe8yo8CjhqXBil%2BApPA4TAgxRIZgiOIE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 790e3a45ceec0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 00:41:40 GMT
age: 3189
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8462
Expires: Sun, 29 Jan 2023 03:55:52 GMT
Date: Sun, 29 Jan 2023 01:34:50 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NH951rDO+PQqE1bB8af4uQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e9HMeW0oS+HjwAFd4uQJd6SRWvo=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 4.8 kB IP
Hash d451d8beec4222fead0be62aa3b8d93a
b5141b8c07a60ebf2358a2851082fdd89fb5cc5f
7514d205f95513f1b166699b23cabb989948d121687dda1d964ac2b5f3a2973d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash a10c6e58c3b2d93009af0bbf0c1b9876
e1770e14d56bf4f92719aeaf44dc21933230a7d2
ed84c78a7315e66162a609a32a50ebb016243e8f8516248e09531eeef0c3b5ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2692
Cache-Control: max-age=127013
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:50 GMT
Etag: "63d50fdb-116"
Expires: Mon, 30 Jan 2023 12:51:43 GMT
Last-Modified: Sat, 28 Jan 2023 12:06:51 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 580 B IP
Hash 444cc37e558f66d9c3a414c987e5b024
89d9d92a75abea849ceafe2a3ec3ec6c504a13dc
c3cdee341d9b799fc6705a4810fc4dce963da9bf9bafbd0981e615d5c0d2d5d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6099
Cache-Control: max-age=130420
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:50 GMT
Etag: "63d50fdb-116"
Expires: Mon, 30 Jan 2023 13:48:30 GMT
Last-Modified: Sat, 28 Jan 2023 12:06:51 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278
www.googletagmanager.com/gtag/js?id=G-6RT3LP13EK
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-6RT3LP13EK
IP
File type ASCII text, with very long lines (19467)
Hash a04c0471383e0354605b33a958ce9a46
273495476ff36629eb0a86e9fadfe9bf0fed63a2
4999b331e9be0bf5affbf856c3b30e082b5b6a467b0b0e3170af8f8c7a58edd7
GET /gtag/js?id=G-6RT3LP13EK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 29 Jan 2023 01:34:50 GMT
expires: Sun, 29 Jan 2023 01:34:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77195
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 5.3 kB IP
Hash 3249a2dae561afb2a8357dc3be9f4ed9
caf7b39cdd2fe5a1a771d77b867fa8b311fc9f5c
498da2f32034340699d18460af5d469cfaaddc6e1e601b73a1157174f0b2fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
200 OK 2.6 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1
IP
Hash 3ea43ea7a3c9eebead53cc76271d5a67
8bb7066f155107df322e0a7b0fad75a3f48ad9ef
168d53efabc8f0d884463b4bd188c15ce92cc04b449bce3193c47425c80c6f9b
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 29 Jan 2023 01:34:50 GMT
date: Sun, 29 Jan 2023 01:34:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 5.3 kB IP
Hash c93d54c96fc19ce51e4d5eef26b67a97
9feac4985dcae10e682cadc7eca7667b620bf640
e819aa1f889729e0e5024b726381bcf5e7af78fb6897182030e87574af3fe8e2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1704
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:50 GMT
Etag: "63d54c60-118"
Last-Modified: Sun, 29 Jan 2023 01:06:26 GMT
Server: ECS (amb/6B71)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash a10c6e58c3b2d93009af0bbf0c1b9876
e1770e14d56bf4f92719aeaf44dc21933230a7d2
ed84c78a7315e66162a609a32a50ebb016243e8f8516248e09531eeef0c3b5ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6099
Cache-Control: max-age=130420
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:50 GMT
Etag: "63d50fdb-116"
Expires: Mon, 30 Jan 2023 13:48:30 GMT
Last-Modified: Sat, 28 Jan 2023 12:06:51 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
200 OK 738 B IP
ASN #20940 Akamai International B.V.
Hash 31a968e00a0dfbab5f4d2ea61313e58f
0ad896bb8a2f551393e5d3295a88910460ebec9e
574171f6fb4973306e9e0a00d8e60f3fd76c997693efd17adf3ab460f282b451
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "252552F41CC93A25532BAB429AFA8D5C37FE828B3B17EC577B49043EF61FA235"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7342
Expires: Sun, 29 Jan 2023 03:37:12 GMT
Date: Sun, 29 Jan 2023 01:34:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 15 kB IP
ASN #20940 Akamai International B.V.
Hash 480877a9ddb31938f94f5cb71561db32
635b1e2b8e5ca3f52a0ab9110a6f4289e8de645e
dd955dbce0b7677f54c9d12367891ad2c4391d02a293052024681124e31e1d57
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "252552F41CC93A25532BAB429AFA8D5C37FE828B3B17EC577B49043EF61FA235"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12293
Expires: Sun, 29 Jan 2023 04:59:43 GMT
Date: Sun, 29 Jan 2023 01:34:50 GMT
Connection: keep-alive
augailou.com/tag.min.js
200 OK 36 kB IP
File type ASCII text, with very long lines (57726)
Hash 9244fc577afaac2362cbf7a3844683d8
df2d5ef74819ae804f3c49165ac436a40bf1f3b6
c61e44e907623d2965b8a3b98800af56be61269028b44fc651ff3a72950ce8cf
Analyzer Verdict Alert quad9 Sinkholed
GET /tag.min.js HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 01:34:50 GMT
content-type: text/javascript; charset=utf-8
content-length: 23483
content-encoding: br
x-trace-id: 48341bed98750f3cf9fe85cdebad16aa
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 27 Jan 2023 14:24:37 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
augailou.com/5/4962411/?oo=1&aab=1
200 OK 34 kB URL HTTP/2 augailou.com/5/4962411/?oo=1&aab=1
IP
Hash 406a80148b9f5d9b597f505603140256
6d99cfb705e1bfa518489debbd7bf80c83d8dc52
6530b1435818e62a78513f93a32d7eb4c7e368b22996275f6ada8eb7ec431788
Analyzer Verdict Alert quad9 Sinkholed
GET /5/4962411/?oo=1&aab=1 HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 01:34:50 GMT
content-type: application/json
x-trace-id: eb537b6238fc36c4f25febb595df2f89
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://plugdosplugins.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=d9fd87fbdbbe4e6988652a10e808d52d; expires=Mon, 29 Jan 2024 01:34:50 GMT; path=/; secure; SameSite=None
oaidts=1674956090; expires=Mon, 29 Jan 2024 01:34:50 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 7.1 kB IP
ASN #20940 Akamai International B.V.
Hash 54c086cea031aa11b9d5d957bcb508c8
8353e58ca002950c75f504075e69061ae139d225
1fbacb64f3241125ab8e16398010f547089d2253e2684b4a2a44e6ae3d6a37fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0199705CEA37A9F4F61E761775D099368FAC44C6E0C7032FE65B9C3B0441400A"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1664
Expires: Sun, 29 Jan 2023 02:02:35 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
cdn.adf.ly/js/display.js
200 OK 5.8 kB IP
File type ASCII text, with very long lines (15999)
Hash e149217d65efcf53cc382af7c60f461c
6de97c3f773cf9b21e4373097f5f5cddf37d872e
4d30ac5f2c0ab10e25b4c39eb646e9cb86d66394775d77ba7b88a34720f85b27
GET /js/display.js HTTP/1.1
Host: cdn.adf.ly
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:51 GMT
content-type: application/x-javascript
content-length: 5775
cache-control: public, max-age=604800
expires: Sun, 05 Feb 2023 01:34:51 GMT
last-modified: Thu, 29 Jul 2021 14:08:58 GMT
etag: "3e81-6102b67a-1a029ed62bba2563;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 790e3a4f8e8fb512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 1.3 kB IP
ASN #20940 Akamai International B.V.
Hash 4b53bf81e54c5014ddf227177d028d61
19b67df6d4b8edd5d20a4a18bc72e0f779e19284
2a58e2484e6b30b3d90579f06544f0bd251d0a4626a2efdde6ffc9e17585a8e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92FCB57AFD01DBDC56CDD37FF2EBFB8807A286936093B1A863D334A3826ACEB3"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5278
Expires: Sun, 29 Jan 2023 03:02:49 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 8.7 kB IP
Hash 6403e14afbc086ea721cbdb666f79cfd
935dfef7d838609568989b388a214cf29afc7ee0
30f567ee6052571c9113d0b1f8e9a471211847288bc81ca7a3b8a1bf2f540cfc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1705
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:51 GMT
Last-Modified: Sun, 29 Jan 2023 01:06:26 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 280
my.rtmark.net/gid.js?userId=d9fd87fbdbbe4e6988652a10e808d52d
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=d9fd87fbdbbe4e6988652a10e808d52d
IP
File type JSON data\012- , ASCII text
Hash a3d63fcc81373d664b3a4a2fd3ac53fa
f45da8486510774aa89e844ea42fc8130a49e641
d76f7dcf1ae331e65907a57ad539fc98bec97e0b3bba5c15c3be0b8220dcea64
GET /gid.js?userId=d9fd87fbdbbe4e6988652a10e808d52d HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 01:34:51 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://plugdosplugins.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d9fd87fbdbbe4e6988652a10e808d52d; expires=Mon, 29 Jan 2024 01:34:51 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.effectivecreativeformat.com/75174a3d150850b915d414045ddf1e76/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectivecreativeformat.com/75174a3d150850b915d414045ddf1e76/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26937), with no line terminators
Hash 3d408c5f439a5dd84a6476fb1711dd0e
c0175d1bf37bd52e489272541ce64229e424745f
65c6c60aa659ce9452057c3c6902b594d48a581ebf2013041a5c0a0247f7b1f9
Analyzer Verdict Alert quad9 Sinkholed
GET /75174a3d150850b915d414045ddf1e76/invoke.js HTTP/1.1
Host: www.effectivecreativeformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9a1acaee4ece1c1f0565e735fa638a61
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pl17128665.highcpmrevenuenetwork.com/48/1f/4d/481f4d7743c4550009ef4cef3ca85ca0.js
200 OK 21 kB URL HTTP/1.1 pl17128665.highcpmrevenuenetwork.com/48/1f/4d/481f4d7743c4550009ef4cef3ca85ca0.js
IP
Hash 976a3e918e4e83aecfdde2c4e4d469fc
37710d25c0946be56a50f2ea61ad38e20419e0ab
b17b0b22f8a414e228081b93fb24dbe5878cff3b1b611899bcb6db20789e861b
Analyzer Verdict Alert quad9 Sinkholed
GET /48/1f/4d/481f4d7743c4550009ef4cef3ca85ca0.js HTTP/1.1
Host: pl17128665.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5893045687471f268000a08fd10a0cf6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 3.3 kB IP
Hash dae9fe98c543f75c343b6f3fae1c20e5
39080e23f949db1d989f962bb8d158bfa7f9152f
d236dafce734d292a2b6681b614ac08d22ce7ea6fe36359b96232e887415226c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
plugdosplugins.com/torrent/spectrasonics-omnisphere-250d-keygen/
301 Moved Permanently 43 kB URL HTTP/2 plugdosplugins.com/torrent/spectrasonics-omnisphere-250d-keygen/
IP
Hash 7f1cc97bec395c4438cdf195718a8271
48024e09c838da9d2d8ee3b1c6afda259aca63a4
b508b74a817229cd16231a4d52a85cd2c4b8de9437e2158bb8c12e47d63bfe11
Analyzer Verdict Alert fortinet Malware
GET /torrent/spectrasonics-omnisphere-250d-keygen/ HTTP/1.1
Host: plugdosplugins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Sun, 29 Jan 2023 01:34:50 GMT
content-type: text/html; charset=UTF-8
location: https://plugdosplugins.com/torrent/spectrasonics-omnisphere-250d-keygen
x-powered-by: PHP/7.4.33
expires: Sat, 28 Jan 2023 20:24:25 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
x-litespeed-cache: hit
platform: hostinger
content-security-policy: upgrade-insecure-requests
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cpMsGmdBglI56yFK6I9URByLfHz70%2BGeDJlPX%2FwGobBWsGr9DB7W5UBvkG%2BRxSPfk5%2Fxn5wddy%2BI3ecJKbMh%2FAq7NGpRhza7NrSWHLHIZGEYlYjmRwREsK92NkbWu0Dpd4hEq2I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790e3a48ff27b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 03:37:22 GMT
expires: Thu, 25 Jan 2024 03:37:22 GMT
cache-control: public, max-age=31536000
age: 338249
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:33:54 GMT
expires: Thu, 25 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 280857
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.effectivecreativeformat.com/ede24ccca358f870b3d8760d995ed9ca/invoke.js
200 OK 13 kB URL HTTP/1.1 www.effectivecreativeformat.com/ede24ccca358f870b3d8760d995ed9ca/invoke.js
IP
Hash fd9c3febb932270712587f0b90a45c02
6a46b7dceb4984628bf3cf2ff2af5b1b55d45b6f
dc3e36fcb546d8d4f967686fdd1dc2e9de1dbc325767826c25fd952264931d3b
Analyzer Verdict Alert quad9 Sinkholed
GET /ede24ccca358f870b3d8760d995ed9ca/invoke.js HTTP/1.1
Host: www.effectivecreativeformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 36770397d7a57f4ff2c505aa0a0cb104
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c2d37fd4f1678643fc9f53dd026cd7e3
1dd8510cd853835d82892664350acccfc6715f16
6506e317135169829b64f503a456bdd7d1a28dab8985bf20c2c5534d033779af
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 29 Jan 2023 01:34:51 GMT
Last-Modified: Sun, 29 Jan 2023 00:54:59 GMT
Server: ECS (nyb/1D31)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bXFjN4kX251GweN9-3uEzLo0r_DMJoK5F_6jrGHZ4rD1Nkuf3NvcWQ==
Age: 2392
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 062be473b9ee7df311bfca4f38b7c7fc
6bde7cfb2bec3630308852a1a16023a966e15dd0
a753759d4b25c1f028d4fabaa7ff8303dfa8cc52676d09ec50bb3f46dd97b066
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://plugdosplugins.com
access-control-allow-credentials: true
set-cookie: uid_id2=cd0a7a79-02c7-4cd8-b867-79efc46c3ae2:3:1; expires=Wed, 26 Jan 2033 01:34:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 5242458315bbd44d925c77faaba0c61d
651e0f262af7fd6f44b1a7f3dd1777ac7bb2eecc
269ea9a9e97c32b56727cb38624f8ee48bd2bea1393c54aa3aaf516992227fd2
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://plugdosplugins.com
access-control-allow-credentials: true
set-cookie: uid_id2=1518b5cf-50ab-48ab-9389-f0239bf7a902:2:1; expires=Wed, 26 Jan 2033 01:34:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-6RT3LP13EK>m=2oe1p0&_p=1464177867&cid=1479637711.1674956096&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674956096&sct=1&seg=0&dl=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&dt=Spectrasonics%20-%20Omnisphere%202.5.0d%20%2B%20Keygen%20-%20Torrent&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-6RT3LP13EK>m=2oe1p0&_p=1464177867&cid=1479637711.1674956096&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674956096&sct=1&seg=0&dl=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&dt=Spectrasonics%20-%20Omnisphere%202.5.0d%20%2B%20Keygen%20-%20Torrent&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-6RT3LP13EK>m=2oe1p0&_p=1464177867&cid=1479637711.1674956096&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674956096&sct=1&seg=0&dl=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&dt=Spectrasonics%20-%20Omnisphere%202.5.0d%20%2B%20Keygen%20-%20Torrent&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://plugdosplugins.com
date: Sun, 29 Jan 2023 01:34:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.effectivecreativeformat.com/0dab9faba839334463e93e712d0d5755/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.effectivecreativeformat.com/0dab9faba839334463e93e712d0d5755/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26963), with no line terminators
Hash f5b4a4f688db0b584222f89331dea0e9
246dc865a96591446d5787965c472217e52aba4d
a57301c0568917c0c03cd39e5dc1138640913e958d95cac0227c297595230c25
Analyzer Verdict Alert quad9 Sinkholed
GET /0dab9faba839334463e93e712d0d5755/invoke.js HTTP/1.1
Host: www.effectivecreativeformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9118a3efa5bf54e4ab3d988170a8f6d0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4281
Expires: Sun, 29 Jan 2023 02:46:12 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4281
Expires: Sun, 29 Jan 2023 02:46:12 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4281
Expires: Sun, 29 Jan 2023 02:46:12 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4281
Expires: Sun, 29 Jan 2023 02:46:12 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 17315
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: d56c9b84-dc1f-4d5c-91bf-7db55058bf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLyeEGOloAMFpzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce3126-5013a6b971d6800c5c85a4eb;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:03:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uPJu2SzvWcfqukF9t0PKG5iK7LrTnk1Cn5nioD4MklQgDAZnbiH8Gw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 14:55:48 GMT
age: 38343
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6021d6a06bff2826eb341747e82484f7
a817ff1ba206234627706551820d0d9856b398de
f0ba6de8709fdb73e94dbdace635232c76b9d70dad73badaca0542d9ad49604d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8f2806c-ec5e-41a0-85d8-007f6d34d108.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11624
x-amzn-requestid: 09cf15e8-9e34-48d8-98e6-f698e3db09a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIhl7Hv7oAMFozg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce2f2-0c3acc173da3ccf164b4c412;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:17:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0-OYl8IX1kTRNxA8_kGXbD-yV4DeqDgN4qkCcvKxTW7VVz2FTQgalw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 06:42:55 GMT
age: 67916
etag: "a817ff1ba206234627706551820d0d9856b398de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e59316e1b1333c42d9d120fa88619bc2
669cdc8dfeba9d64f93f260adbb5f493a5649bb0
c4e78ec96322f1f151b07f9a45d51e6ca3fd46613472cf627f53bf399193a533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48d5b4-7f5e-41cd-a7b2-c3007235b59c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9398
x-amzn-requestid: 5083c66c-ad64-4f73-b915-d29ddabcdb4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIf6XEc1IAMFsbQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce042-0779693a5da31eae195989d1;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:05:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2MPzkEPg3JESo6g5D7E2LN53G-zYF__aFQmDg9DzSRxg0E19j1Iwkw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 03:19:05 GMT
age: 80146
etag: "669cdc8dfeba9d64f93f260adbb5f493a5649bb0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61dd48155b70501a72ec13f79745433d
4efc3d15f04a290a590b54122822d55a9d3fa1ca
9345056c111439b34aff08323fc99a2d315fa91293039dc5acf67affb50636d3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e63fa9f-a982-4d0a-ac29-9acbfe59f503.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4202
x-amzn-requestid: d33bee10-9642-4138-8dde-3486ec7f6535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa9ABFFvIAMFbqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d441ff-3b3a99db469e3f8c068d553c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:28:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RIvTaBE3RpB7sP9Bb1Ku1ItsiaCFKNmyHArESR1FuqDIHXt2uOLG6A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 05:22:38 GMT
age: 72733
etag: "4efc3d15f04a290a590b54122822d55a9d3fa1ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6af6f32397882f56d14d22348e44a9f1
5a626376807e7507fa3a204c4e4e9e44aa074a37
478f32e98c0a1f0d62fa337795ca88b7927e14b684b681f7629b648bc2d709a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62d5a25c-3219-4061-b58b-b783bc3a37fb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7417
x-amzn-requestid: 8dca6752-c548-4526-ae81-4626843ade3e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYbDjGREoAMFxiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d33ee3-1c097c131b91c34b4e7df1be;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i8JJruxoRfordb6WFNf67-GLWrA_Q930x3GCCQoUmDwXrfZtBXvsZg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 03:16:34 GMT
age: 80297
etag: "5a626376807e7507fa3a204c4e4e9e44aa074a37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5f59c9a1c91957d6d5e5cffd6beddd92
55399dd9caf65759afacea2328abb26c924c0554
b7bb5e0ea0f386593d1f63c2eb474abcbf20564aabcc6f9d1b5bd8335f2b7379
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7BB5E0EA0F386593D1F63C2EB474ABCBF20564AABCC6F9D1B5BD8335F2B7379"
Last-Modified: Sat, 28 Jan 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17220
Expires: Sun, 29 Jan 2023 06:21:51 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
www.intellipopup.com/progress.min.js
200 OK 10 kB URL HTTP/2 www.intellipopup.com/progress.min.js
IP
ASN #60068 Datacamp Limited
Hash 3579a1bc769b769f0d36dd2a44407c6e
e2f831a4a188e29b80af4621044aa4d3124ef352
2ab38736b4b428f75a34b4c3a12a84af40ffb21f4a56eb4af6c26924142f07ce
GET /progress.min.js HTTP/1.1
Host: www.intellipopup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:51 GMT
content-type: application/x-javascript
alt-svc: quic="185.76.9.13:443"; ma=2592000; v="44,43,39"
expires: Fri, 03 Feb 2023 15:54:43 GMT
access-control-allow-origin: *
link: <https://intellipopup.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preconnect,<https://adsco.re/>;rel=preconnect
cache-control: public, max-age=604800
x-accel-expires: @1675439683
server: CDN77-Turbo
x-77-nzt: AblMCQ1Ann/veNkBAA
x-77-nzt-ray: c0a4cc284743cee13bcdd5630e115034
x-cache: HIT
x-age: 121208
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e69a9acad872f734a2f2d9c200e1a693
1359758abfdf80b2cfc8ff8602886d53daa85b07
59b1fd194fc0923625d27a8f5eda3e72a24929359a6f537781d42985818d259a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59B1FD194FC0923625D27A8F5EDA3E72A24929359A6F537781D42985818D259A"
Last-Modified: Fri, 27 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8401
Expires: Sun, 29 Jan 2023 03:54:52 GMT
Date: Sun, 29 Jan 2023 01:34:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 99445b37b433d9fa39f40f668af63fef
8bf0cc7b81630f2af46c9f922a999030f94b8887
bcbaa36a617209fc54f1a7171e9b694c4b31f804ceda1157b860ccdcbb4cc3d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCBAA36A617209FC54F1A7171E9B694C4B31F804CEDA1157B860CCDCBB4CC3D0"
Last-Modified: Fri, 27 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8983
Expires: Sun, 29 Jan 2023 04:04:35 GMT
Date: Sun, 29 Jan 2023 01:34:52 GMT
Connection: keep-alive
prototypewailrubber.com/watch.1373232214035.js?key=ede24ccca358f870b3d8760d995ed9ca&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 prototypewailrubber.com/watch.1373232214035.js?key=ede24ccca358f870b3d8760d995ed9ca&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1373232214035.js?key=ede24ccca358f870b3d8760d995ed9ca&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1 HTTP/1.1
Host: prototypewailrubber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://plugdosplugins.com
Access-Control-Allow-Origin: https://plugdosplugins.com
Access-Control-Allow-Credentials: true
Location: https://prototypewailrubber.com/watch.1373232214035.js?key=ede24ccca358f870b3d8760d995ed9ca&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=3216b05fe80463e072533dc11fb567803a01849cd7922580cc8bd4d99179cea29815b0d35750f4c133b571cb21245307618adaf70ee655fa36993c0e6289611973c30230c312a7307aee7caba8fca07ac5ce8ad30469eb7981ac91ee8ca274&pst=1674956152&rmtc=t
Set-Cookie: u_pl=18204550; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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._Xn8aSaBj_nuXbMBHtJJaEPad4hSjTom4BO2Ty9EWh4; expires=Sun, 29 Jan 2023 01:35:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b91ba3a6bcd4f2f4473642ddb5775211
Strict-Transport-Security: max-age=0; includeSubdomains
augailou.com/?rb=gb_C52oFV3DIElGDNIJgcyIpO_sfWo_eZfKzXRP2T9u2ShEgB8eMAMaEGDN9eQY52dix20GaPZ6SkDqOGMMaSKdesdCOhdbOehNloRL6RFBgOwskoPMP5KyKgnQJ4QSl5TLQu10U1nbO_NHrYhqbMwpe_O5xvneqvE3TOpHBKY77FhrTrLJ8fwLcySw-OwoV-trSDURS-7dpHTakRu07gT8IBmclTVO0_mkNAmWimzMSevN1&request_ab2=0&zoneid=4962411&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=df3795c4-0b2c-466b-897d-9ced9378ddfb&userId=d9fd87fbdbbe4e6988652a10e808d52d&m=link
200 OK 1.3 kB URL HTTP/2 augailou.com/?rb=gb_C52oFV3DIElGDNIJgcyIpO_sfWo_eZfKzXRP2T9u2ShEgB8eMAMaEGDN9eQY52dix20GaPZ6SkDqOGMMaSKdesdCOhdbOehNloRL6RFBgOwskoPMP5KyKgnQJ4QSl5TLQu10U1nbO_NHrYhqbMwpe_O5xvneqvE3TOpHBKY77FhrTrLJ8fwLcySw-OwoV-trSDURS-7dpHTakRu07gT8IBmclTVO0_mkNAmWimzMSevN1&request_ab2=0&zoneid=4962411&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=df3795c4-0b2c-466b-897d-9ced9378ddfb&userId=d9fd87fbdbbe4e6988652a10e808d52d&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (1676), with no line terminators
Hash d193fa80915c517fd4985a7a2f2d11fe
fb6493c21748e197ce039e639876f4fe36073a0c
7a0a53a044e39d8f9ef9acac546d73b80104f47c49bd8d349ef91e7d0cf23155
Analyzer Verdict Alert quad9 Sinkholed
GET /?rb=gb_C52oFV3DIElGDNIJgcyIpO_sfWo_eZfKzXRP2T9u2ShEgB8eMAMaEGDN9eQY52dix20GaPZ6SkDqOGMMaSKdesdCOhdbOehNloRL6RFBgOwskoPMP5KyKgnQJ4QSl5TLQu10U1nbO_NHrYhqbMwpe_O5xvneqvE3TOpHBKY77FhrTrLJ8fwLcySw-OwoV-trSDURS-7dpHTakRu07gT8IBmclTVO0_mkNAmWimzMSevN1&request_ab2=0&zoneid=4962411&js_build=iclick-v1.474.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=939&wiw=1280&wfc=1&pl=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.474.0&bs=df3795c4-0b2c-466b-897d-9ced9378ddfb&userId=d9fd87fbdbbe4e6988652a10e808d52d&m=link HTTP/1.1
Host: augailou.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://plugdosplugins.com/
Origin: https://plugdosplugins.com
Connection: keep-alive
Cookie: OAID=d9fd87fbdbbe4e6988652a10e808d52d; oaidts=1674956090
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 01:34:51 GMT
content-type: application/json
x-trace-id: 16ecabf47bd0cee5ebc7913bc8228b40
access-control-allow-origin: https://plugdosplugins.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=d9fd87fbdbbe4e6988652a10e808d52d; expires=Mon, 29 Jan 2024 01:34:51 GMT; path=/; secure; SameSite=None
oaidts=1674956091; expires=Mon, 29 Jan 2024 01:34:51 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Sun, 05 Feb 2023 01:34:51 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
prototypewailrubber.com/watch.1373232214035.js?key=ede24ccca358f870b3d8760d995ed9ca&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=3216b05fe80463e072533dc11fb567803a01849cd7922580cc8bd4d99179cea29815b0d35750f4c133b571cb21245307618adaf70ee655fa36993c0e6289611973c30230c312a7307aee7caba8fca07ac5ce8ad30469eb7981ac91ee8ca274&pst=1674956152&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 prototypewailrubber.com/watch.1373232214035.js?key=ede24ccca358f870b3d8760d995ed9ca&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=3216b05fe80463e072533dc11fb567803a01849cd7922580cc8bd4d99179cea29815b0d35750f4c133b571cb21245307618adaf70ee655fa36993c0e6289611973c30230c312a7307aee7caba8fca07ac5ce8ad30469eb7981ac91ee8ca274&pst=1674956152&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2637)
Hash 94699ba27f049cacc4bff35e969d46e9
d85d9d5266c343a38c7a2e7cceb2a6839a790c0b
0d9827dc5c6717dc7840cb0d006585cbc8675ef6744c889791175c86048ae72a
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1373232214035.js?key=ede24ccca358f870b3d8760d995ed9ca&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=3216b05fe80463e072533dc11fb567803a01849cd7922580cc8bd4d99179cea29815b0d35750f4c133b571cb21245307618adaf70ee655fa36993c0e6289611973c30230c312a7307aee7caba8fca07ac5ce8ad30469eb7981ac91ee8ca274&pst=1674956152&rmtc=t HTTP/1.1
Host: prototypewailrubber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Referer: https://plugdosplugins.com/
Connection: keep-alive
Cookie: u_pl=18204550; ain=eyJhbGciOiJIUzI1NiJ9.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._Xn8aSaBj_nuXbMBHtJJaEPad4hSjTom4BO2Ty9EWh4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://plugdosplugins.com
Access-Control-Allow-Origin: https://plugdosplugins.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1518b5cf-50ab-48ab-9389-f0239bf7a902:2:1; expires=Sun, 05 Feb 2023 01:34:52 GMT; secure; SameSite=None
iprcac2d5cb02bbe24a2039bf3115f0e9770=3569804; expires=Sun, 29 Jan 2023 05:34:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
pdhtkv26=true; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
uncs26=1; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 418c490555407f64f8344ac2f876da50
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
feignthat.com/pixel/purst?dl=0&th=0&sc=0&rs=2221&rd=2221&fd=699&bv=22.10.v.9&tmpl=70
200 OK 0 B URL HTTP/1.1 feignthat.com/pixel/purst?dl=0&th=0&sc=0&rs=2221&rd=2221&fd=699&bv=22.10.v.9&tmpl=70
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2221&rd=2221&fd=699&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: feignthat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
sweepfrequencydissolved.com/watch.1291913869485.js?key=0dab9faba839334463e93e712d0d5755&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 sweepfrequencydissolved.com/watch.1291913869485.js?key=0dab9faba839334463e93e712d0d5755&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1291913869485.js?key=0dab9faba839334463e93e712d0d5755&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1 HTTP/1.1
Host: sweepfrequencydissolved.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://plugdosplugins.com
Access-Control-Allow-Origin: https://plugdosplugins.com
Access-Control-Allow-Credentials: true
Location: https://sweepfrequencydissolved.com/watch.1291913869485.js?key=0dab9faba839334463e93e712d0d5755&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=7c5bcef0e881ca6c8ad50e6185f1890123e3756875956063aa5d837601c4b71246c94da06e0cc5785d601811e650c5f6640caa5492df36b1141237c2e64a413a0aeb72bba685e8cf5a96228d413a8b09e14a3c1a&pst=1674956152&rmtc=t
Set-Cookie: u_pl=17028172; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.X_6O_xon80sI3WCY-ew_oTA0O5IprHF8bJWei_6GbUc; expires=Sun, 29 Jan 2023 01:35:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8b25b93bae0c10340ef4df6894af9edc
Strict-Transport-Security: max-age=0; includeSubdomains
solemnvine.com/watch.811613374812.js?key=75174a3d150850b915d414045ddf1e76&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=cd0a7a79-02c7-4cd8-b867-79efc46c3ae2%3A3%3A1&shu=df11c4d4b0ce896c4e29dfda4f07cfc4dde240a58f8b108f3af5f486e8c6f66b802ec83051a65d1b4e83b92970b64b658b9b20873ca416ac9ba0d8102e13bea9be8ed5f0b2599ef890b20e84b10e5e1cbe9adb4d&pst=1674956152&rmtc=t
200 OK 636 B URL HTTP/1.1 solemnvine.com/watch.811613374812.js?key=75174a3d150850b915d414045ddf1e76&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=cd0a7a79-02c7-4cd8-b867-79efc46c3ae2%3A3%3A1&shu=df11c4d4b0ce896c4e29dfda4f07cfc4dde240a58f8b108f3af5f486e8c6f66b802ec83051a65d1b4e83b92970b64b658b9b20873ca416ac9ba0d8102e13bea9be8ed5f0b2599ef890b20e84b10e5e1cbe9adb4d&pst=1674956152&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (582)
Hash cf9381ee27053206ad6397c41c30fa4a
8c9bd4875676c841fa3ce10d6e0caf7e49011388
3e1023fa5e518ae4885bd18b48411d97363d4bc53806d33b4343188f5c81cb89
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.811613374812.js?key=75174a3d150850b915d414045ddf1e76&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=cd0a7a79-02c7-4cd8-b867-79efc46c3ae2%3A3%3A1&shu=df11c4d4b0ce896c4e29dfda4f07cfc4dde240a58f8b108f3af5f486e8c6f66b802ec83051a65d1b4e83b92970b64b658b9b20873ca416ac9ba0d8102e13bea9be8ed5f0b2599ef890b20e84b10e5e1cbe9adb4d&pst=1674956152&rmtc=t HTTP/1.1
Host: solemnvine.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Referer: https://plugdosplugins.com/
Connection: keep-alive
Cookie: u_pl=17028173; ain=eyJhbGciOiJIUzI1NiJ9.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.SFNY1YTYZ9UeqzKG4PKh2iB1_oiVmyPKAQEwLbpovyI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://plugdosplugins.com
Access-Control-Allow-Origin: https://plugdosplugins.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=cd0a7a79-02c7-4cd8-b867-79efc46c3ae2:3:1; expires=Sun, 05 Feb 2023 01:34:52 GMT; secure; SameSite=None
iprcade98c9fc03599e066d2360b91039068=2717340; expires=Mon, 30 Jan 2023 03:34:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9225a334b11925ed780c34bdf6aea3a0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
6.adsco.re/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:52 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://plugdosplugins.com
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a58ae05b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e715f4b3d6203337ae6dd8d49084bbf
26dbf6b4ddd31cfd6503e73dbdf8f6ed1ff710c0
64297ca762c862009d82dbba9d082fdc6a69bd37cc27297b8fd8e016def5ed84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "64297CA762C862009D82DBBA9D082FDC6A69BD37CC27297B8FD8E016DEF5ED84"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10497
Expires: Sun, 29 Jan 2023 04:29:49 GMT
Date: Sun, 29 Jan 2023 01:34:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 728246afd5fbed2d58a1c482f73f6f54
1959c9947165a2ae813ba1ea5621899bbc12780a
031df385fbec25082680255028082f5d2a02538c7328f0e34c0674960166f2b8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "031DF385FBEC25082680255028082F5D2A02538C7328F0E34C0674960166F2B8"
Last-Modified: Thu, 26 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6259
Expires: Sun, 29 Jan 2023 03:19:11 GMT
Date: Sun, 29 Jan 2023 01:34:52 GMT
Connection: keep-alive
dswsfzs7gkpx.l4.adsco.re/
200 OK 0 B URL HTTP/1.1 dswsfzs7gkpx.l4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: dswsfzs7gkpx.l4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Tue, 31 Jul 2018 22:16:15 GMT
Connection: close
ETag: "5b60dfaf-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
4.adsco.re/
200 OK 62 B IP
File type ASCII text, with no line terminators
Hash adde5febc7b5b6c2c759ec735cce83a0
77ec17be8a9970ff04663294d41c590d0d24fde4
ce2b9f2e5005195de7add565505005be6f2ef0d37521771e15106d1e1b9260ff
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://plugdosplugins.com
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eab24a463706bad685a0edab8d653537
Strict-Transport-Security: max-age=0; includeSubdomains
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 07:51:59 GMT
expires: Thu, 25 Jan 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 322973
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sweepfrequencydissolved.com/watch.1291913869485.js?key=0dab9faba839334463e93e712d0d5755&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=7c5bcef0e881ca6c8ad50e6185f1890123e3756875956063aa5d837601c4b71246c94da06e0cc5785d601811e650c5f6640caa5492df36b1141237c2e64a413a0aeb72bba685e8cf5a96228d413a8b09e14a3c1a&pst=1674956152&rmtc=t
200 OK 636 B URL HTTP/1.1 sweepfrequencydissolved.com/watch.1291913869485.js?key=0dab9faba839334463e93e712d0d5755&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=7c5bcef0e881ca6c8ad50e6185f1890123e3756875956063aa5d837601c4b71246c94da06e0cc5785d601811e650c5f6640caa5492df36b1141237c2e64a413a0aeb72bba685e8cf5a96228d413a8b09e14a3c1a&pst=1674956152&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (582)
Hash 1f0db6ff4fe74199e45effcff711dbf4
f2b859bbd5d1d7edbb081ef66c8a624e6914fefb
42b4e5dd9f7064b6f5281d77a6f90f7ab7f688e7a01918643d52e15b158ce51c
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1291913869485.js?key=0dab9faba839334463e93e712d0d5755&kw=%5B%22spectrasonics%22%2C%22-%22%2C%22omnisphere%22%2C%222%22%2C%225%22%2C%220d%22%2C%22%2B%22%2C%22keygen%22%2C%22-%22%2C%22torrent%22%5D&refer=https%3A%2F%2Fplugdosplugins.com%2Ftorrent%2Fspectrasonics-omnisphere-250d-keygen&tz=0&dev=e&res=12.1055&uuid=1518b5cf-50ab-48ab-9389-f0239bf7a902%3A2%3A1&shu=7c5bcef0e881ca6c8ad50e6185f1890123e3756875956063aa5d837601c4b71246c94da06e0cc5785d601811e650c5f6640caa5492df36b1141237c2e64a413a0aeb72bba685e8cf5a96228d413a8b09e14a3c1a&pst=1674956152&rmtc=t HTTP/1.1
Host: sweepfrequencydissolved.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Referer: https://plugdosplugins.com/
Connection: keep-alive
Cookie: u_pl=17028172; ain=eyJhbGciOiJIUzI1NiJ9.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.X_6O_xon80sI3WCY-ew_oTA0O5IprHF8bJWei_6GbUc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://plugdosplugins.com
Access-Control-Allow-Origin: https://plugdosplugins.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=1518b5cf-50ab-48ab-9389-f0239bf7a902:2:1; expires=Sun, 05 Feb 2023 01:34:52 GMT; secure; SameSite=None
iprc71e739f8080e3f5c864b888a7f489941=2717339; expires=Mon, 30 Jan 2023 03:34:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
pdhtkv25=true; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
uncs25=1; expires=Mon, 30 Jan 2023 01:34:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 121c310119c3a1330319a0a7c4e0c440
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00f26c78e5a8029c5a5dd730d95272d0
ae1592d154dce3ad4433fed8ace1120900701dc0
c4c80cfb42f03c7481f1ab10b5b708b045ddfb8fbf4947d777da77ebfbd21a29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C4C80CFB42F03C7481F1AB10B5B708B045DDFB8FBF4947D777DA77EBFBD21A29"
Last-Modified: Thu, 26 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6168
Expires: Sun, 29 Jan 2023 03:17:40 GMT
Date: Sun, 29 Jan 2023 01:34:52 GMT
Connection: keep-alive
dswsfzs7gkpx.n4.adsco.re/
200 OK 0 B URL HTTP/1.1 dswsfzs7gkpx.n4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: dswsfzs7gkpx.n4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 01:34:52 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:32:42 GMT
Connection: close
ETag: "5b5f2f9a-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ee545433fc455bd9987f628755305a60
26d861ed51e2e4d864cbf51f59f8553a7936fe76
73918e35ea537c5e5422872d19580ae0b1a71311052ba4ea5a97a7acda546665
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73918E35EA537C5E5422872D19580AE0B1A71311052BA4EA5A97A7ACDA546665"
Last-Modified: Sun, 29 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19669
Expires: Sun, 29 Jan 2023 07:02:41 GMT
Date: Sun, 29 Jan 2023 01:34:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f32a7006b8b40885116dbfb75f96ccb8
cb015cec60fb4bc33aa7a3750fbb1ddf41ae3bc7
9c3d0bf41e413722c40827d8f7762e70ff324bee00e3f2e6049666b13cfab328
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C3D0BF41E413722C40827D8F7762E70FF324BEE00E3F2E6049666B13CFAB328"
Last-Modified: Thu, 26 Jan 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6890
Expires: Sun, 29 Jan 2023 03:29:42 GMT
Date: Sun, 29 Jan 2023 01:34:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b8952329edccbd2082672416f31dbdc9
cd75c85d77a7cd817ad4f157b98728a32ea61c49
bd2dca750e6a25abca44ce57bfaf06f2049cc9be3fb8156300ce18fcc16dbd93
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD2DCA750E6A25ABCA44CE57BFAF06F2049CC9BE3FB8156300CE18FCC16DBD93"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10183
Expires: Sun, 29 Jan 2023 04:24:36 GMT
Date: Sun, 29 Jan 2023 01:34:53 GMT
Connection: keep-alive
jennyvisits.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17028172
200 OK 1.3 kB URL HTTP/1.1 jennyvisits.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17028172
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 345dfc8472ef389adc0b36ca61a84967
6f0b86447b95443dba350287815633c29e9d912a
ebe4bea1d0dc3db609973c85e3145fd7a7fbf7072b70646aedfd1b53f2b7dd50
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17028172 HTTP/1.1
Host: jennyvisits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Mon, 30 Jan 2023 01:34:53 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.-hkY_sA_3VJEek_9oo9f9Dg_MGtdyDMr0Eq3wQpa7ok; expires=Sun, 29 Jan 2023 01:35:53 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5970a521a88374c381dbaec3f0c76b2b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
dswsfzs7gkpx.s4.adsco.re/
200 OK 0 B URL HTTP/1.1 dswsfzs7gkpx.s4.adsco.re/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: dswsfzs7gkpx.s4.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 01:34:53 GMT
Content-Type: text/html
Content-Length: 0
Last-Modified: Mon, 30 Jul 2018 15:38:01 GMT
Connection: close
ETag: "5b5f30d9-0"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Expose-Headers: Content-Length,Content-Range
Accept-Ranges: bytes
jennyvisits.com/dyfc1k09?shu=e2b8e60281cac49c258e3ceb78f8e652f62dd11d5c80ff7541425e7c1ad4938ba0d133223fde3489d7672d8f0688e30847039ad7e6f841cd71b33a5c2db6078efe6116fc1d004aa7afcc4dcf3f33417cbb3de76c0cc27ff6b4a26f95c4dce6&pst=1674956153&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fplugdosplugins.com%2F&psid=17028172
302 Found 0 B URL HTTP/1.1 jennyvisits.com/dyfc1k09?shu=e2b8e60281cac49c258e3ceb78f8e652f62dd11d5c80ff7541425e7c1ad4938ba0d133223fde3489d7672d8f0688e30847039ad7e6f841cd71b33a5c2db6078efe6116fc1d004aa7afcc4dcf3f33417cbb3de76c0cc27ff6b4a26f95c4dce6&pst=1674956153&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fplugdosplugins.com%2F&psid=17028172
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?shu=e2b8e60281cac49c258e3ceb78f8e652f62dd11d5c80ff7541425e7c1ad4938ba0d133223fde3489d7672d8f0688e30847039ad7e6f841cd71b33a5c2db6078efe6116fc1d004aa7afcc4dcf3f33417cbb3de76c0cc27ff6b4a26f95c4dce6&pst=1674956153&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fplugdosplugins.com%2F&psid=17028172 HTTP/1.1
Host: jennyvisits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jennyvisits.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.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.-hkY_sA_3VJEek_9oo9f9Dg_MGtdyDMr0Eq3wQpa7ok; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Sun, 29 Jan 2023 01:34:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: http://adpointrtb.com/script/s2iurl.php?stamat=m%7C%2C%2CAhZ7YiIqtGU3Bv-GH0dEdHP3xP.2df%2C54nGlWysM3feEiNUykRCnjKiEB3E6aNUOswPkwLW0_AlQ3MeeCRh3dv-8UPZ_dwz3q-eQio_eJdqkGuX7SZtDBsH-f5oXnPO8mCpR6o8SJ1_PlZNqv_jE3q25zk5HY4pWrjgDujoZGrcavSBhNsC3tL_wVAL58qrdFV4E_hVRF6elrnmHArAfF3JlzzNu3pZ-JXzmX6Uzwq9et7Flt3RnCVLU7K1uNHkgObe-s7O7uXa_xfcCQw20_pdy83DPisRS8TGUl_bqvr0WvZGI4c9urhCEqgkLO9H_7MrPx7BRshg7DT4Ghp3oP4Bk4ZuRKfT_c-5fo_ga9VopIhVpbErNIIG_iYpIOY82Ihsj22_Pl34ra4Bu3zzoNHhSuNASWKt_gdKSq652qvVclZh_bF8Z5wBesYIwPtdjSMxNd8XkwMjcSANvhA6XteQohpSnGEiHQYMBDoe7-YgqIXYpuA66l7VsdJcxqiHOLFNMr5mmX1J9w_ubghQ-Reyqlzx1yJL&csid=1506755&s1=16122660&md=0&crid=23494906
Set-Cookie: pdhtkv=true; expires=Mon, 30 Jan 2023 01:34:53 GMT
uncs=1; expires=Mon, 30 Jan 2023 01:34:53 GMT
pdhtkv28=true; expires=Mon, 30 Jan 2023 01:34:53 GMT
uncs28=1; expires=Mon, 30 Jan 2023 01:34:53 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3e00c57773283a7ad3fb8ac62e532de5
Strict-Transport-Security: max-age=0; includeSubdomains
adpointrtb.com/script/s2iurl.php?stamat=m%7C%2C%2CAhZ7YiIqtGU3Bv-GH0dEdHP3xP.2df%2C54nGlWysM3feEiNUykRCnjKiEB3E6aNUOswPkwLW0_AlQ3MeeCRh3dv-8UPZ_dwz3q-eQio_eJdqkGuX7SZtDBsH-f5oXnPO8mCpR6o8SJ1_PlZNqv_jE3q25zk5HY4pWrjgDujoZGrcavSBhNsC3tL_wVAL58qrdFV4E_hVRF6elrnmHArAfF3JlzzNu3pZ-JXzmX6Uzwq9et7Flt3RnCVLU7K1uNHkgObe-s7O7uXa_xfcCQw20_pdy83DPisRS8TGUl_bqvr0WvZGI4c9urhCEqgkLO9H_7MrPx7BRshg7DT4Ghp3oP4Bk4ZuRKfT_c-5fo_ga9VopIhVpbErNIIG_iYpIOY82Ihsj22_Pl34ra4Bu3zzoNHhSuNASWKt_gdKSq652qvVclZh_bF8Z5wBesYIwPtdjSMxNd8XkwMjcSANvhA6XteQohpSnGEiHQYMBDoe7-YgqIXYpuA66l7VsdJcxqiHOLFNMr5mmX1J9w_ubghQ-Reyqlzx1yJL&csid=1506755&s1=16122660&md=0&crid=23494906
200 OK 1.9 kB URL HTTP/1.1 adpointrtb.com/script/s2iurl.php?stamat=m%7C%2C%2CAhZ7YiIqtGU3Bv-GH0dEdHP3xP.2df%2C54nGlWysM3feEiNUykRCnjKiEB3E6aNUOswPkwLW0_AlQ3MeeCRh3dv-8UPZ_dwz3q-eQio_eJdqkGuX7SZtDBsH-f5oXnPO8mCpR6o8SJ1_PlZNqv_jE3q25zk5HY4pWrjgDujoZGrcavSBhNsC3tL_wVAL58qrdFV4E_hVRF6elrnmHArAfF3JlzzNu3pZ-JXzmX6Uzwq9et7Flt3RnCVLU7K1uNHkgObe-s7O7uXa_xfcCQw20_pdy83DPisRS8TGUl_bqvr0WvZGI4c9urhCEqgkLO9H_7MrPx7BRshg7DT4Ghp3oP4Bk4ZuRKfT_c-5fo_ga9VopIhVpbErNIIG_iYpIOY82Ihsj22_Pl34ra4Bu3zzoNHhSuNASWKt_gdKSq652qvVclZh_bF8Z5wBesYIwPtdjSMxNd8XkwMjcSANvhA6XteQohpSnGEiHQYMBDoe7-YgqIXYpuA66l7VsdJcxqiHOLFNMr5mmX1J9w_ubghQ-Reyqlzx1yJL&csid=1506755&s1=16122660&md=0&crid=23494906
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (710)
Hash 7490eba62522b2db12a1ccbd5aa13817
8c35dbf66bb926ea9370917b3d7de87e1757bc71
15ec8524daf04a4133a15c9cd27441ed9845c0decab55e641ca9852b784ade90
GET /script/s2iurl.php?stamat=m%7C%2C%2CAhZ7YiIqtGU3Bv-GH0dEdHP3xP.2df%2C54nGlWysM3feEiNUykRCnjKiEB3E6aNUOswPkwLW0_AlQ3MeeCRh3dv-8UPZ_dwz3q-eQio_eJdqkGuX7SZtDBsH-f5oXnPO8mCpR6o8SJ1_PlZNqv_jE3q25zk5HY4pWrjgDujoZGrcavSBhNsC3tL_wVAL58qrdFV4E_hVRF6elrnmHArAfF3JlzzNu3pZ-JXzmX6Uzwq9et7Flt3RnCVLU7K1uNHkgObe-s7O7uXa_xfcCQw20_pdy83DPisRS8TGUl_bqvr0WvZGI4c9urhCEqgkLO9H_7MrPx7BRshg7DT4Ghp3oP4Bk4ZuRKfT_c-5fo_ga9VopIhVpbErNIIG_iYpIOY82Ihsj22_Pl34ra4Bu3zzoNHhSuNASWKt_gdKSq652qvVclZh_bF8Z5wBesYIwPtdjSMxNd8XkwMjcSANvhA6XteQohpSnGEiHQYMBDoe7-YgqIXYpuA66l7VsdJcxqiHOLFNMr5mmX1J9w_ubghQ-Reyqlzx1yJL&csid=1506755&s1=16122660&md=0&crid=23494906 HTTP/1.1
Host: adpointrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 29 Jan 2023 01:34:53 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 google
adpointrtb.com/script/s2iurl.php?stamat=m%7C%2C%2CAhZ7YiIqtGU3Bv-GH0dEdHP3xP.2df%2C54nGlWysM3feEiNUykRCnjKiEB3E6aNUOswPkwLW0_AlQ3MeeCRh3dv-8UPZ_dwz3q-eQio_eJdqkGuX7SZtDBsH-f5oXnPO8mCpR6o8SJ1_PlZNqv_jE3q25zk5HY4pWrjgDujoZGrcavSBhNsC3tL_wVAL58qrdFV4E_hVRF6elrnmHArAfF3JlzzNu3pZ-JXzmX6Uzwq9et7Flt3RnCVLU7K1uNHkgObe-s7O7uXa_xfcCQw20_pdy83DPisRS8TGUl_bqvr0WvZGI4c9urhCEqgkLO9H_7MrPx7BRshg7DT4Ghp3oP4Bk4ZuRKfT_c-5fo_ga9VopIhVpbErNIIG_iYpIOY82Ihsj22_Pl34ra4Bu3zzoNHhSuNASWKt_gdKSq652qvVclZh_bF8Z5wBesYIwPtdjSMxNd8XkwMjcSANvhA6XteQohpSnGEiHQYMBDoe7-YgqIXYpuA66l7VsdJcxqiHOLFNMr5mmX1J9w_ubghQ-Reyqlzx1yJL&csid=1506755&s1=16122660&md=0&crid=23494906&treqn=42346345&rpn=1&cbrandom=0.09436870195479574&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=
302 Moved Temporarily 1 B URL HTTP/1.1 adpointrtb.com/script/s2iurl.php?stamat=m%7C%2C%2CAhZ7YiIqtGU3Bv-GH0dEdHP3xP.2df%2C54nGlWysM3feEiNUykRCnjKiEB3E6aNUOswPkwLW0_AlQ3MeeCRh3dv-8UPZ_dwz3q-eQio_eJdqkGuX7SZtDBsH-f5oXnPO8mCpR6o8SJ1_PlZNqv_jE3q25zk5HY4pWrjgDujoZGrcavSBhNsC3tL_wVAL58qrdFV4E_hVRF6elrnmHArAfF3JlzzNu3pZ-JXzmX6Uzwq9et7Flt3RnCVLU7K1uNHkgObe-s7O7uXa_xfcCQw20_pdy83DPisRS8TGUl_bqvr0WvZGI4c9urhCEqgkLO9H_7MrPx7BRshg7DT4Ghp3oP4Bk4ZuRKfT_c-5fo_ga9VopIhVpbErNIIG_iYpIOY82Ihsj22_Pl34ra4Bu3zzoNHhSuNASWKt_gdKSq652qvVclZh_bF8Z5wBesYIwPtdjSMxNd8XkwMjcSANvhA6XteQohpSnGEiHQYMBDoe7-YgqIXYpuA66l7VsdJcxqiHOLFNMr5mmX1J9w_ubghQ-Reyqlzx1yJL&csid=1506755&s1=16122660&md=0&crid=23494906&treqn=42346345&rpn=1&cbrandom=0.09436870195479574&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref=
IP
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /script/s2iurl.php?stamat=m%7C%2C%2CAhZ7YiIqtGU3Bv-GH0dEdHP3xP.2df%2C54nGlWysM3feEiNUykRCnjKiEB3E6aNUOswPkwLW0_AlQ3MeeCRh3dv-8UPZ_dwz3q-eQio_eJdqkGuX7SZtDBsH-f5oXnPO8mCpR6o8SJ1_PlZNqv_jE3q25zk5HY4pWrjgDujoZGrcavSBhNsC3tL_wVAL58qrdFV4E_hVRF6elrnmHArAfF3JlzzNu3pZ-JXzmX6Uzwq9et7Flt3RnCVLU7K1uNHkgObe-s7O7uXa_xfcCQw20_pdy83DPisRS8TGUl_bqvr0WvZGI4c9urhCEqgkLO9H_7MrPx7BRshg7DT4Ghp3oP4Bk4ZuRKfT_c-5fo_ga9VopIhVpbErNIIG_iYpIOY82Ihsj22_Pl34ra4Bu3zzoNHhSuNASWKt_gdKSq652qvVclZh_bF8Z5wBesYIwPtdjSMxNd8XkwMjcSANvhA6XteQohpSnGEiHQYMBDoe7-YgqIXYpuA66l7VsdJcxqiHOLFNMr5mmX1J9w_ubghQ-Reyqlzx1yJL&csid=1506755&s1=16122660&md=0&crid=23494906&treqn=42346345&rpn=1&cbrandom=0.09436870195479574&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=939&cbdescription=&cbkeywords=&cbref= HTTP/1.1
Host: adpointrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Sun, 29 Jan 2023 01:34:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
Location: https://adserving.unibet.com/redirect.aspx?bid=37935&pid=2100237&sref=ADC&ADC=1506755-640691165-0_Adsterra
Via: 1.1 google
adpointrtb.com/favicon.ico
200 OK 0 B URL HTTP/1.1 adpointrtb.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: adpointrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 29 Jan 2023 01:34:54 GMT
Content-Type: image/x-icon
Content-Length: 0
Last-Modified: Thu, 10 Dec 2020 09:27:58 GMT
ETag: "5fd1ea1e-0"
Accept-Ranges: bytes
Via: 1.1 google
adserving.unibet.com/redirect.aspx?bid=37935&pid=2100237&sref=ADC&ADC=1506755-640691165-0_Adsterra
307 Temporary Redirect 0 B URL HTTP/2 adserving.unibet.com/redirect.aspx?bid=37935&pid=2100237&sref=ADC&ADC=1506755-640691165-0_Adsterra
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?bid=37935&pid=2100237&sref=ADC&ADC=1506755-640691165-0_Adsterra HTTP/1.1
Host: adserving.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html
content-length: 0
location: https://nl.unibet.be/stan/campaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sun, 29 Jan 2023 01:34:54 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 29 Jan 2023 01:34:54 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74340067%2c%22BID%22%3a37935%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1674956094344)%5c%2f%22%2c%22CookieTag%22%3a%223793574340067451240919C2023129134%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228750049669%7c1%22%7d%5d; domain=.unibet.com; expires=Tue, 29-Jan-3022 01:34:54 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=20, origin; dur=42
X-Firefox-Spdy: h2
nl.unibet.be/stan/campaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935
301 Moved Permanently 0 B URL HTTP/2 nl.unibet.be/stan/campaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935
IP
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/campaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935 HTTP/1.1
Host: nl.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 29 Jan 2023 01:34:54 GMT
content-length: 0
location: https://nl.unibet.be:443/stan/redirecttocampaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935&landingPageUrl=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935
set-cookie: JSESSIONID=node09hymiezg4qvv1fmaw2vo20lz04929044.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict
__ucbt=node09hymiezg4qvv1fmaw2vo20lz0; Path=/; Domain=.unibet.be; Expires=Tue, 28-Jan-2025 01:34:54 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr=ST.0.T; Path=/; Domain=.unibet.be; Expires=Tue, 28-Jan-2025 01:34:54 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr_ref=; Path=/; Domain=.unibet.be; Expires=Tue, 28-Jan-2025 01:34:54 GMT; Max-Age=63072000; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affid=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
netwid=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
CLAIM_CODE=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affiliateId=1; Path=/; Domain=.unibet.be; Secure; SameSite=None
B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; Path=/; Domain=.unibet.be; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BID=37935; Path=/; Domain=.unibet.be; Secure; SameSite=None
PID=74340067; Path=/; Domain=.unibet.be; Secure; SameSite=None
CHID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REFERER=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BOCAID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
PRODUCT_ID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; Path=/; Domain=.unibet.be; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=; Path=/; Domain=.unibet.be; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
clientId=polopoly_desktop; Domain=nl.unibet.be; Path=/; SameSite=None; Secure
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Sun, 29 Jan 2023 01:34:54 GMT
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
server: kindred-loadbalancer
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/nl.unibet.be/index.html
X-Firefox-Spdy: h2
nl.unibet.be/stan/redirecttocampaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935&landingPageUrl=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935
301 Moved Permanently 0 B URL HTTP/2 nl.unibet.be/stan/redirecttocampaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935&landingPageUrl=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935
IP
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/redirecttocampaign.do?cmpId=2804373&affiliateId=1&unibetTarget=/be-nl/pop/sportsbook/football/live/index.html&targetDomain=https://welcome.unibet.be&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&sref=ADC&ADC=1506755-640691165-0_Adsterra&affiliateId=1&pid=74340067&bid=37935&landingPageUrl=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935 HTTP/1.1
Host: nl.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sun, 29 Jan 2023 01:34:54 GMT
content-length: 0
location: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Sun, 29 Jan 2023 01:34:54 GMT
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
server: kindred-loadbalancer
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/nl.unibet.be/index.html
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 511 B IP
ASN #20940 Akamai International B.V.
Hash a348804861d876217ff38a0b26741684
536a5c4a4d7ed347624d08f8164c21e6c83beeb6
60496a5561e374954c3d29acf739763d112b35a8e6e172e45d6c81de03da338e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D49DC9D4092CF22D2064B3BC32E8F68B625325D8EBFC21A46D4DD89193410F"
Last-Modified: Sat, 28 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12349
Expires: Sun, 29 Jan 2023 05:00:43 GMT
Date: Sun, 29 Jan 2023 01:34:54 GMT
Connection: keep-alive
c.bannerflow.net/accounts/unibet/55dacb16e347271ec0d5101b/images/ca4bf41b-2ee9-4af9-b150-f3931ce5d618.png
200 OK 4.8 kB URL HTTP/2 c.bannerflow.net/accounts/unibet/55dacb16e347271ec0d5101b/images/ca4bf41b-2ee9-4af9-b150-f3931ce5d618.png
IP
File type PNG image data, 200 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 6867ee2c877432f1c744df71d93f8629
1ad47077945442b4cd271a3b50e868bb21e916ef
7edd6449a4be5372d0ea121f65559df228165a21cd3da2697494d7b05a6f4c2b
GET /accounts/unibet/55dacb16e347271ec0d5101b/images/ca4bf41b-2ee9-4af9-b150-f3931ce5d618.png HTTP/1.1
Host: c.bannerflow.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/png
content-length: 4779
content-md5: aGfuLId0MvHHRN9x2T+GKQ==
last-modified: Thu, 01 Sep 2022 15:07:53 GMT
etag: "0x8DA8C2BBE98C715"
x-ms-request-id: d336de4c-a01e-0036-45e9-246056000000
x-ms-version: 2011-08-18
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Accept-Ranges,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 2059
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6a48010b41-OSL
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/gambling-commission.png
404 Not Found 37 kB URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/gambling-commission.png
IP
Hash a2ab2a609679ea8c63b3e99c44e21987
36cd48958beaf654bd52eec0f6609f58fa4d61b6
fc8380e90c32ca709d027801e53a6362555a737e9618dcc9e504419c5ae2ca06
GET /be-nl/pop/sportsbook/football/live/gambling-commission.png HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/xml
x-ms-request-id: b9322bbb-701e-001b-4f81-332c01000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 76
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6a0e430afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/1-styles.css
200 OK 5.5 kB URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/1-styles.css
IP
Hash e20ca8613c5df986d84dc015c64cc7b0
3880d4f97dbb7ce34bb9a555594d9ed5d5878bd8
b4abf6c8f9dec46a8ea61def51f415eab8fe46a84b11cd5b9d392453c0307a45
GET /be-nl/pop/sportsbook/football/live/1-styles.css HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: 7YNgI7c5I8CY9RCA6Yo59g==
last-modified: Mon, 16 Jan 2023 09:47:16 GMT
etag: W/"0x8DAF7A6A6BF79CD"
x-ms-request-id: 894e2bc9-d01e-002d-2298-29a171000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 455174
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe2d0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
200 OK 956 B URL HTTP/2 a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
IP
ASN #47171 Unibet Services Limited
Hash fd48e87ecd4d06d9c5df490b91dc813e
a65a437db44444634e4f41732c590c1d14433b3f
2f786ae3f4577ed970f60aa7a9edf726300a740fdb360a8364db7ff4b7ca8e47
GET /unibet/bannerflow/scripts/master_tag.js HTTP/1.1
Host: a1s-cdn.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/javascript
content-length: 956
last-modified: Mon, 25 Apr 2022 12:19:34 GMT
etag: "3bc-5dd7996cc0ce1"
cache-control: max-age=1800, public, must-revalidate
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s-cdn.unibet.com; Path=/; SameSite=None; Secure
accept-ranges: bytes
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/sports.svg
200 OK 3.3 kB URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/sports.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (6761), with no line terminators
Hash 7a1a7744dc9fb2f675c839bd35ea5e77
46038d6da9ab7935c750b3e84ee8683cb5ee4931
7b5d62aa2e5679138d9bea5561542a64bf74b19a08095da128ca543825aaf29d
GET /be-nl/pop/sportsbook/football/live/sports.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: PFpPzOXLQADQvHS/jXtXpA==
last-modified: Mon, 16 Jan 2023 09:47:18 GMT
etag: W/"0x8DAF7A6A80D9A2B"
x-ms-request-id: cb43b404-d01e-0002-70c1-29acba000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453177
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6a0e3f0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 0f83cadc148d2ad7e53c91f6c4ee05bb
90035c5fffedf4b0f099465f6b929a030b46c92b
3f59aa77bbbed7760a9968af27d3c19ffddda021c948edf0bf0c0f828dd308ae
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 07:28:22 GMT
expires: Fri, 26 Jan 2024 07:28:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 237993
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/com-payments.svg
404 Not Found 1.1 MB URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/com-payments.svg
IP
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Size 1.1 MB (1117187 bytes)
Hash 97ba2167f8394056ba01de51d0e591f2
57dc98719aa661e46f789b1fe6fe787c931bca9c
8755d30721335018a8cf31eb0200b75ddeb8631146db2fc38189da311d34bc3e
GET /be-nl/pop/sportsbook/football/live/com-payments.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/xml
x-ms-request-id: 50c2cab3-401e-0062-6981-33d025000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 76
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6a0e440afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/com-payments.svg
404 Not Found 11 kB URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/com-payments.svg
IP
File type XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Hash 7e4c358fa5e49f7c7e61f3cea08c0acd
81efdea2cd20b09d5cb1062423812bb07a470b14
d0ed240bd07e37d81c63faa674430345ebbda89b17012f816b6c5f4f1b2a0b59
GET /be-nl/pop/sportsbook/football/live/com-payments.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/xml
x-ms-request-id: 50c2cab3-401e-0062-6981-33d025000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 76
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6afeae0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bab8a4c1e6bb2e6c9cc00222eef1235d
1a5dd108e9f9aaf33bc048b0097a9f510d295cad
fd182297a143655a9142e3ee5bbafefd76ca974094f43fb695611f6876f3ab63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.unibet.be/be-nl/pop/sportsbook/football/live/app-store-ro.svg
200 OK 79 kB URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/app-store-ro.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1356)
Hash b41a58b0726dbb6e14b687dbec69e11e
3383d74658e50cbb1074177587ef9636aac00095
da49045564c80d29ef234959b18c10282ed8a0f78224cbde7ece1ec6624d3909
GET /be-nl/pop/sportsbook/football/live/app-store-ro.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: epgiRapjJpA7DniTiF5C+w==
last-modified: Mon, 16 Jan 2023 09:47:18 GMT
etag: W/"0x8DAF7A6A7F115AF"
x-ms-request-id: e67f5075-a01e-0055-7dc1-290289000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453178
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe370afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8cf65fcdafa84b63cf7005fe57927fcb
3f7d163a96e7f00eb2de9828624ec46e22b4b40a
dfcf629cc49444f646f3a014014a91e36251b4b43655ce2e2eca55263dd196e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash f449ceaa28586bb9836a6b472b583c94
fdab1eb0547bcdac485314fee08805fbb00d0852
3c17e2e1e96cc47d490d891ce7be971ade1c632d6d6172397779416d303a7068
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4204
Cache-Control: max-age=132838
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Etag: "63d520b9-117"
Expires: Mon, 30 Jan 2023 14:28:53 GMT
Last-Modified: Sat, 28 Jan 2023 13:18:49 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash f449ceaa28586bb9836a6b472b583c94
fdab1eb0547bcdac485314fee08805fbb00d0852
3c17e2e1e96cc47d490d891ce7be971ade1c632d6d6172397779416d303a7068
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4678
Cache-Control: max-age=133311
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Etag: "63d520b9-117"
Expires: Mon, 30 Jan 2023 14:36:46 GMT
Last-Modified: Sat, 28 Jan 2023 13:18:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.be
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 19:33:54 GMT
expires: Thu, 25 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 280861
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.be
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 28 Jan 2023 10:26:49 GMT
expires: Sun, 28 Jan 2024 10:26:49 GMT
cache-control: public, max-age=31536000
age: 54486
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/unibet-logo.svg
200 OK 17 kB URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/unibet-logo.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (3207), with no line terminators
Hash e798b3490657eb91a24e4f9b58cda227
3227b4de781387dd8c68fec06da8be684ffce7b5
92f2a504d4374d060204244e8453837e3875c9085665ec9bdc0e57cd7d937135
GET /be-nl/pop/sportsbook/football/live/unibet-logo.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: cw5jdwcrd9gLyjDZb7Y7Jw==
last-modified: Mon, 16 Jan 2023 09:47:16 GMT
etag: W/"0x8DAF7A6A74CD7C3"
x-ms-request-id: f1a97eb5-d01e-0060-7ec1-296e9d000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453178
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe340afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/css/all.css
200 OK 93 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.1/css/all.css
IP
File type ASCII text, with very long lines (54456), with no line terminators
Hash 76061155c4eaa7445fd2f0631eaad881
2ba8f9d6908392a574272b5d5dfe01c6a4923782
f691a93703a17d793f08e260f957d2e98a6642c915363a6325f647052363dc91
GET /releases/v5.7.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.be
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: text/css
x-amz-id-2: 056VXm4U95XDkV2dviyus5LGzE5UCoZMG7T5tXkF6zF0bCvQ613aN2Uyx6WGYeHXAm3CqkL+c1M=
x-amz-request-id: JMMB6W2K7HW0Q0E8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:37 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 2336381
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6xxZ0zA%2Fs2iHR9BsqOd65y%2BroV7m91RTqwxZR8VZxuV%2BdVrYpkYD%2F%2FHkBndGtfV%2BF%2BbCkWOOoF3lJNog5lGN7wtQx%2BZMq6y%2F2XJhG3G%2BgWFL6K1sjlGGPmnOa15%2BzojnXg4c0eyT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790e3a6a8a5871d4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c61a659fc21720e8eb04f7acf8c1f04
749627b6730b74e25c4795e4d11ea49a77a4b5ac
7e8953d316bc55cf5ffe967bffacf9f1cdd9cf41b1a51cc04143a0f0c84c31bd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5141
Cache-Control: max-age=107862
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Etag: "63d4bb80-1d7"
Expires: Mon, 30 Jan 2023 07:32:37 GMT
Last-Modified: Sat, 28 Jan 2023 06:06:56 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=F431E3BC5593E3887F000101%40AdobeOrg&d_nsid=0&ts=1674956100591
200 OK 498 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=F431E3BC5593E3887F000101%40AdobeOrg&d_nsid=0&ts=1674956100591
IP
File type JSON data\012- , ASCII text, with very long lines (791), with no line terminators
Hash ddf92c1a32184ef4d177df29e6b061ca
a57a5314e48252e3447efb230940eb0f3b6b7462
84d044591f84725fd1924762508a249a53e5c7e3ff015a140d771087444a1e0c
GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=F431E3BC5593E3887F000101%40AdobeOrg&d_nsid=0&ts=1674956100591 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://welcome.unibet.be
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://welcome.unibet.be
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-09f6df340.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=28831024091481566562291448372198541149; Max-Age=15552000; Expires=Fri, 28 Jul 2023 01:34:55 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: RWEGLNcORZE=
Content-Length: 498
Connection: keep-alive
cdn.bannerflow.com/resources/18-21-02b18105-d7fb-4feb-b595-f30912c30d8c.svg
200 OK 1.2 kB URL HTTP/2 cdn.bannerflow.com/resources/18-21-02b18105-d7fb-4feb-b595-f30912c30d8c.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1528), with no line terminators
Hash bc69db3d259a76d105945cf52371344e
7a514e5c57d127f0c7e2d50b04ea1730c15885a2
d8c443abe9967e4dcd2e1b80c10010b8bbb6b4c4677e17f70777e1ff87254ae6
GET /resources/18-21-02b18105-d7fb-4feb-b595-f30912c30d8c.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: gzKRUG+DeLKTZhReg8ARSg==
last-modified: Mon, 07 Dec 2020 10:28:47 GMT
etag: W/"0x8D89A9AE1C4C6D6"
x-ms-request-id: b88e3dd4-001e-003e-7d84-1d857d000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 204
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6dbd31b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
unibetlondonltd.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&mid=28857118859121273392288411150166653638&ts=1674956100747
200 OK 2 B URL HTTP/2 unibetlondonltd.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&mid=28857118859121273392288411150166653638&ts=1674956100747
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&mid=28857118859121273392288411150166653638&ts=1674956100747 HTTP/1.1
Host: unibetlondonltd.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://welcome.unibet.be
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://welcome.unibet.be
access-control-allow-credentials: true
date: Sun, 29 Jan 2023 01:34:55 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 7078b1d21bbac26012d93fc9501fbbb0
412189ffa7980709edc28b87a820aa1ae64fa3a7
6db1d0d3f3924d7e75e1fd087553cf4ec5fa938ecc52adf3f149570551eaf7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5093
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Last-Modified: Sun, 29 Jan 2023 00:10:02 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 541db4f3f0ba067bfb58cdac34cb86f4
20e6883f068568888ce37c6b9ef8f5d12be257c0
83898f3b2da2a11996d2eb3a5115ef301255030fdf231b8bf7971916769bc7be
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 0/Vhjtg1+28bPMqSxTewl3g2D9ojjjRTamu5iGZgfDQiLsZpM/Aml7m5aXD09EpgDS2iADAscZFqxwT1dwPm9Q==
content-length: 27815
x-fb-trip-id: 2050670934
date: Sun, 29 Jan 2023 01:34:55 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unibet.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 unibet.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: unibet.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Sun, 29 Jan 2023 01:34:55 GMT
DCS: dcs-prod-irl1-2-v045-0f9127447.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Fri, 28 Oct 2022 11:22:23 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: EsbrQzFwSTM=
Content-Length: 2791
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7078b1d21bbac26012d93fc9501fbbb0
412189ffa7980709edc28b87a820aa1ae64fa3a7
6db1d0d3f3924d7e75e1fd087553cf4ec5fa938ecc52adf3f149570551eaf7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5093
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 01:34:55 GMT
Last-Modified: Sun, 29 Jan 2023 00:10:02 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
secure.adnxs.com/seg?add=9755599
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=9755599
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sun, 29 Jan 2023 01:34:55 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
AN-X-Request-Uuid: 0c294a95-b072-4b85-95a0-66aa21463e43
Set-Cookie: uuid2=4371993644114049073; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 29-Apr-2023 01:34:55 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.be/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sun, 29 Jan 2023 01:34:55 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 6bf3885b-7296-49d0-bec9-6bca6d40e71e
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2IllgM^EP!]tbP6j2F-XstGt!@DmU$r*+/; SameSite=None; Path=/; Max-Age=7776000; Expires=Sat, 29-Apr-2023 01:34:55 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 954.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
unibetlondonltd.d3.sc.omtrdc.net/b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s89349739868379?AQB=1&ndh=1&pf=1&t=29%2F0%2F2023%201%3A35%3A0%200%200&mid=28857118859121273392288411150166653638&aamlh=6&ce=UTF-8&pageName=LP%3A2022%20-%20Global%20-%20Football%20Bet%20Stream&g=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&cc=GBP&ch=bf_landingpage&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&v1=welcome.unibet.be%3A%3A%3Adesktop%3Abe-nl%3Apop%3Asportsbook%3Afootball%3Alive%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.be&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=1%3A35%20AM%7CSunday&v6=1%3A35%20AM%7CSunday&v11=GBP&c14=New&v14=New&c16=1674956101&v21=Not%20Logged-In&c73=unibet&v120=popunder&v121=1%3A81750185%3A74340067-37935&v122=NONE&v124=2804373&v125=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&v126=74340067&v127=37935&v134=1674956100&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 unibetlondonltd.d3.sc.omtrdc.net/b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s89349739868379?AQB=1&ndh=1&pf=1&t=29%2F0%2F2023%201%3A35%3A0%200%200&mid=28857118859121273392288411150166653638&aamlh=6&ce=UTF-8&pageName=LP%3A2022%20-%20Global%20-%20Football%20Bet%20Stream&g=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&cc=GBP&ch=bf_landingpage&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&v1=welcome.unibet.be%3A%3A%3Adesktop%3Abe-nl%3Apop%3Asportsbook%3Afootball%3Alive%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.be&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=1%3A35%20AM%7CSunday&v6=1%3A35%20AM%7CSunday&v11=GBP&c14=New&v14=New&c16=1674956101&v21=Not%20Logged-In&c73=unibet&v120=popunder&v121=1%3A81750185%3A74340067-37935&v122=NONE&v124=2804373&v125=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&v126=74340067&v127=37935&v134=1674956100&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s89349739868379?AQB=1&ndh=1&pf=1&t=29%2F0%2F2023%201%3A35%3A0%200%200&mid=28857118859121273392288411150166653638&aamlh=6&ce=UTF-8&pageName=LP%3A2022%20-%20Global%20-%20Football%20Bet%20Stream&g=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&cc=GBP&ch=bf_landingpage&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c1=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&v1=welcome.unibet.be%3A%3A%3Adesktop%3Abe-nl%3Apop%3Asportsbook%3Afootball%3Alive%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.be&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=1%3A35%20AM%7CSunday&v6=1%3A35%20AM%7CSunday&v11=GBP&c14=New&v14=New&c16=1674956101&v21=Not%20Logged-In&c73=unibet&v120=popunder&v121=1%3A81750185%3A74340067-37935&v122=NONE&v124=2804373&v125=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&v126=74340067&v127=37935&v134=1674956100&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=939&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: unibetlondonltd.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Sun, 29 Jan 2023 01:34:55 GMT
expires: Sat, 28 Jan 2023 01:34:55 GMT
last-modified: Mon, 30 Jan 2023 01:34:55 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3596940826825687040-4619784831547282228
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 3318f3ce266982e9ca04132154f85931
aa95981f362787a92ae1906680bce75ed5067061
dc3d7bad64fda990a000bec7dbd866588a50a495144c46968eca0b380aa16308
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=136957
Date: Sun, 29 Jan 2023 01:34:55 GMT
Etag: "63d52a9c-1d7"
Expires: Mon, 30 Jan 2023 15:37:32 GMT
Last-Modified: Sat, 28 Jan 2023 14:01:00 GMT
Server: ECS (bsa/EB1F)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7KbLyGiRl-JM-wwBx7rI2NehE0i0CPTNTmgQBW1Xa3SJKhso9FjWcg==
Age: 5792
cm.everesttech.net/cm/dd?d_uuid=28831024091481566562291448372198541149
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=28831024091481566562291448372198541149
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=28831024091481566562291448372198541149 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Sun, 29 Jan 2023 01:34:55 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y9XNPwAAAF7RPANx; Domain=.everesttech.net; Expires=Mon, 29-Jan-2024 01:34:55 GMT; Path=/
everest_session_v2=Y9XNPwAAAF7RPQNx; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y9XNPwAAAF7RPANx
Server: AMO-cookiemap/1.1
dpm.demdex.net/ibs:dpid=411&dpuuid=Y9XNPwAAAF7RPANx
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y9XNPwAAAF7RPANx
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y9XNPwAAAF7RPANx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.be/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-06cd512cb.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9XNPwAAAF7RPANx
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=18289825863332834804525126085735636147; Max-Age=15552000; Expires=Fri, 28 Jul 2023 01:34:55 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: ALFi4AnGQ0c=
Content-Length: 0
Connection: keep-alive
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9XNPwAAAF7RPANx
200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9XNPwAAAF7RPANx
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y9XNPwAAAF7RPANx HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.be/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-0168100b3.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: EuHNTUsXQ+w=
Content-Length: 59
Connection: keep-alive
www.facebook.com/tr/?id=922725971072024&ev=PageView&dl=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&rl=&if=false&ts=1674956101287&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1674956101286.1797196746&it=1674956100976&coo=false&rqm=GET
200 OK 110 kB URL HTTP/2 www.facebook.com/tr/?id=922725971072024&ev=PageView&dl=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&rl=&if=false&ts=1674956101287&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1674956101286.1797196746&it=1674956100976&coo=false&rqm=GET
IP
File type gzip compressed data, from Unix\012- data
Size 110 kB (110048 bytes)
Hash a1e157504266ee94f20c5a700e34ec03
95de01cea4a8ec1750c6dabab3a399a7fb92d1f6
0f83a834320acc22f0004a5e4938eb0a315881f711376e9d9a9298614b8adaec
GET /tr/?id=922725971072024&ev=PageView&dl=https%3A%2F%2Fwelcome.unibet.be%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%3Fmktid%3D1%3A81750185%3A74340067-37935%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26bid%3D37935%26campaignId%3D2804373%26pid%3D74340067&rl=&if=false&ts=1674956101287&sw=1280&sh=1024&v=2.9.92&r=stable&ec=0&o=30&fbp=fb.1.1674956101286.1797196746&it=1674956100976&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sun, 29 Jan 2023 01:34:56 GMT
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/star.svg
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/star.svg
IP
GET /be-nl/pop/sportsbook/football/live/star.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: Vy723Ry7R35gqWLktmPWGg==
last-modified: Mon, 16 Jan 2023 09:47:18 GMT
etag: W/"0x8DAF7A6A81476F5"
x-ms-request-id: a1ade3de-201e-0016-70c1-29e4d5000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453178
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6a0e400afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/favicon.ico
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/favicon.ico
IP
GET /be-nl/pop/sportsbook/football/live/favicon.ico HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; AMCV_F431E3BC5593E3887F000101%40AdobeOrg=1585540135%7CMCIDTS%7C19387%7CMCMID%7C28857118859121273392288411150166653638%7CMCAAMLH-1675560900%7C6%7CMCAAMB-1675560900%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1674963300s%7CNONE%7CvVersion%7C4.4.0; sessionPageNumber=1; campaignId=2804373; AMCVS_F431E3BC5593E3887F000101%40AdobeOrg=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/x-icon
cache-control: public, max-age=900, immutable
content-md5: rS2fRBxmkqgGx7Qnuz5TbQ==
last-modified: Mon, 16 Jan 2023 09:47:16 GMT
etag: W/"0x8DAF7A6A6D85548"
x-ms-request-id: 63fd27ec-501e-001c-68d8-294062000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 441291
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6e58190afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
IP
GET /be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067 HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:54 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: kQUsGXWAeJQAxpfv5vXH8A==
last-modified: Mon, 16 Jan 2023 09:47:15 GMT
x-ms-request-id: 939e3e57-b01e-0004-7381-339f05000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: MISS
vary: Accept-Encoding
set-cookie: btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0;max-age=2592000; domain=.unibet.be;path=/;secure;samesite=none;httponly
server: cloudflare
cf-ray: 790e3a680d980afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/1-main.js
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/1-main.js
IP
GET /be-nl/pop/sportsbook/football/live/1-main.js HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: BPxI3njL/F0VV+nfOZx3Mw==
last-modified: Mon, 16 Jan 2023 09:47:16 GMT
etag: W/"0x8DAF7A6A6E265E9"
x-ms-request-id: 7054f69f-201e-0029-2598-292c76000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 455174
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe300afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/read_json_bf.js
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/read_json_bf.js
IP
GET /be-nl/pop/sportsbook/football/live/read_json_bf.js HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: XxICnHLRI6OIpN78945Pqg==
last-modified: Mon, 16 Jan 2023 09:47:17 GMT
etag: W/"0x8DAF7A6A7E70525"
x-ms-request-id: 9c463d33-901e-004e-1798-293c8a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 455174
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe320afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/google-play-ro.svg
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/google-play-ro.svg
IP
GET /be-nl/pop/sportsbook/football/live/google-play-ro.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: 2fR27yW0b9kBp/ebW9u59A==
last-modified: Mon, 16 Jan 2023 09:47:18 GMT
etag: W/"0x8DAF7A6A7F81987"
x-ms-request-id: cb43b357-d01e-0002-52c1-29acba000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453178
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe380afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/be-club-brugge-09db41d8-38ae-42b7-80d6-7228b134ad46.svg
200 OK 0 B URL HTTP/2 cdn.bannerflow.com/resources/be-club-brugge-09db41d8-38ae-42b7-80d6-7228b134ad46.svg
IP
GET /resources/be-club-brugge-09db41d8-38ae-42b7-80d6-7228b134ad46.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: k2zK5IBVfvDIsSWoIdzEyg==
last-modified: Mon, 07 Dec 2020 10:24:08 GMT
etag: W/"0x8D89A9A3B65FC10"
x-ms-request-id: 4f91a569-801e-0030-7c22-fcaccd000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 204
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6dbd2cb500-OSL
content-encoding: br
X-Firefox-Spdy: h2
c.adsco.re/
200 OK 0 B IP
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:52 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Wed, 01 Mar 2023 01:34:52 GMT
etag: W/"xkCBFtC0Wl/JiS60JFipuQ=="
cf-cache-status: HIT
age: 2346053
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a579dbcb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.4/css/v4-shims.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.15.4/css/v4-shims.css
IP
GET /releases/v5.15.4/css/v4-shims.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:50 GMT
content-type: text/css
x-amz-id-2: Vay5AuWzPgBJibTWZvUdFjdkk5a24dT2BMXeMTQrofhDnXxnWS/tpOBSyePDM80Ar0pNa4Wivl4=
x-amz-request-id: 6CGFX2D421WQ099Q
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 20:43:22 GMT
etag: W/"a034d3c71bee546f625877d7932917f8"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 206599
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nCxD2%2FM8FNdvGJgxC9J9nb4Ny%2FOgpVacLvH8f%2BckA35WIalczsOC0fYprs28%2B2omWRyT5XBXQ9npCWgj9hS93VLlzwtVHmKN3NC3dlmqxIvPB2G0wAn6hWcbQt920v48c1VVoODi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790e3a4eec3a8e2d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a1s.unibet.com/orval/tracking/lastclick.min.js
200 OK 0 B URL HTTP/2 a1s.unibet.com/orval/tracking/lastclick.min.js
IP
ASN #47171 Unibet Services Limited
GET /orval/tracking/lastclick.min.js HTTP/1.1
Host: a1s.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 05 Aug 2022 12:55:42 GMT
etag: W/"705-5e57dfbd5830d"
cache-control: max-age=1800, public, must-revalidate
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s.unibet.com; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/utv-logo.svg
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/utv-logo.svg
IP
GET /be-nl/pop/sportsbook/football/live/utv-logo.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: QazcDvviTF55mXL/M8kCWQ==
last-modified: Mon, 16 Jan 2023 09:47:16 GMT
etag: W/"0x8DAF7A6A745D3ED"
x-ms-request-id: 8ca0656a-401e-005d-23c1-291886000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453178
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe350afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/royal-charleroi-sporting-club-logo-abcbf5e0-7afb-4c5e-a3ea-2eb51a6edfb7.svg
200 OK 0 B URL HTTP/2 cdn.bannerflow.com/resources/royal-charleroi-sporting-club-logo-abcbf5e0-7afb-4c5e-a3ea-2eb51a6edfb7.svg
IP
GET /resources/royal-charleroi-sporting-club-logo-abcbf5e0-7afb-4c5e-a3ea-2eb51a6edfb7.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: y/shOK/BJsGuIu9Vy6hkww==
last-modified: Fri, 13 Aug 2021 08:40:40 GMT
etag: W/"0x8D95E360822E083"
x-ms-request-id: f94a4a4f-701e-000b-1022-fce969000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 204
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6dbd2db500-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
200 OK 0 B URL HTTP/2 cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
IP
GET /resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: DtBEzXf8HuXNecd90Rx/1w==
last-modified: Fri, 27 Nov 2020 14:00:01 GMT
etag: W/"0x8D892DCBC244A27"
x-ms-request-id: f9c36029-201e-0105-665e-a57399000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 5
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6bdc28b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/be-payments-5084c330-5add-45ba-9ed8-800141a2ee08.svg
200 OK 0 B URL HTTP/2 cdn.bannerflow.com/resources/be-payments-5084c330-5add-45ba-9ed8-800141a2ee08.svg
IP
GET /resources/be-payments-5084c330-5add-45ba-9ed8-800141a2ee08.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: Qw6pFRcEwys6azPYkbbILg==
last-modified: Mon, 07 Dec 2020 10:22:34 GMT
etag: W/"0x8D89A9A03164A99"
x-ms-request-id: 944c5673-601e-0038-2f22-fcb6c2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 204
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6dbd28b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.15.4/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.15.4/css/all.css
IP
GET /releases/v5.15.4/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://plugdosplugins.com
Connection: keep-alive
Referer: https://plugdosplugins.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:50 GMT
content-type: text/css
x-amz-id-2: UG3vAODt3/qrb3vONRTFxrUHsQu9gC9xV+PgTQ+xqhDBIcw5IsEGvPWgMP1F2le0rZ7X3OQHvh8=
x-amz-request-id: STTJ2053ZN9NFT2F
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 04 Aug 2021 20:43:22 GMT
etag: W/"ecd507b3125edc4d2a03aa6ae5d07da9"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 786987
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IwhTouoKQqrYO2ltKB%2Bek2JpeEZvTuA7o1Z7zifnCpYqEtBN%2B1dKtSQkbMtQfcMCAG2BfGosfy1QAfM5pJ6fjO130oyaK2PHSa%2FuIRYAyaFaJ0AA70W7Z8J82UV7ge510LFw9o82"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 790e3a4efc418e2d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.bannerflow.net/sfeeds/55dacb16e347271ec0d5101b/612e108bb7697481ec778535.json?cb=1674956100442
200 OK 0 B URL HTTP/2 c.bannerflow.net/sfeeds/55dacb16e347271ec0d5101b/612e108bb7697481ec778535.json?cb=1674956100442
IP
GET /sfeeds/55dacb16e347271ec0d5101b/612e108bb7697481ec778535.json?cb=1674956100442 HTTP/1.1
Host: c.bannerflow.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.be/
Origin: https://welcome.unibet.be
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=60, stale-if-error=28800, stale-while-revalidate=28800
request-context: appId=cid-v1:ab2f42fc-6a35-4ceb-b810-86e88366fb0b
last-modified: Sun, 29 Jan 2023 01:34:55 GMT
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6ba8a00b41-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/cherry.svg
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/cherry.svg
IP
GET /be-nl/pop/sportsbook/football/live/cherry.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: 5r9vOEzT38zHCX9vzbxgcA==
last-modified: Mon, 16 Jan 2023 09:47:18 GMT
etag: W/"0x8DAF7A6A7FF446A"
x-ms-request-id: a3f6e6bc-f01e-0067-40c1-2902fe000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453177
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6a0e420afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/person.svg
200 OK 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/person.svg
IP
GET /be-nl/pop/sportsbook/football/live/person.svg HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: hFfOTexsP04F5TNWA0YvEg==
last-modified: Mon, 16 Jan 2023 09:47:18 GMT
etag: W/"0x8DAF7A6A806E463"
x-ms-request-id: e78f9709-001e-0011-64c1-2988b6000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 453178
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6a0e410afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/be-nl/pop/sportsbook/football/live/gambling-commission.png
404 Not Found 0 B URL HTTP/2 welcome.unibet.be/be-nl/pop/sportsbook/football/live/gambling-commission.png
IP
GET /be-nl/pop/sportsbook/football/live/gambling-commission.png HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/xml
x-ms-request-id: b9322bbb-701e-001b-4f81-332c01000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 76
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6afead0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/play-safe-9cad46bf-831e-455e-bdd1-3d7478d0aefb.svg
200 OK 0 B URL HTTP/2 cdn.bannerflow.com/resources/play-safe-9cad46bf-831e-455e-bdd1-3d7478d0aefb.svg
IP
GET /resources/play-safe-9cad46bf-831e-455e-bdd1-3d7478d0aefb.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: +oi0kN6qUkPB33fAVT4kLg==
last-modified: Mon, 07 Dec 2020 10:26:06 GMT
etag: W/"0x8D89A9A817D8589"
x-ms-request-id: ae958062-701e-0069-2519-182b4e000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 204
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a6bdc24b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.be/custom.js
200 OK 0 B URL HTTP/2 welcome.unibet.be/custom.js
IP
GET /custom.js HTTP/1.1
Host: welcome.unibet.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/be-nl/pop/sportsbook/football/live/index.html?mktid=1:81750185:74340067-37935&btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0&bid=37935&campaignId=2804373&pid=74340067
Cookie: __ucbt=node09hymiezg4qvv1fmaw2vo20lz0; uniattr=ST.0.T; uniattr_ref=; affiliateId=1; B-TAG=81750185_4D2293AED2354203A0ECF6AF51DB1EF0; BID=37935; PID=74340067; AFFILIATE_REQUEST_URL=https%3A%2F%2Fnl.unibet.be%2Fstan%2Fcampaign.do%3FcmpId%3D2804373%26affiliateId%3D1%26unibetTarget%3D%2Fbe-nl%2Fpop%2Fsportsbook%2Ffootball%2Flive%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.be%26btag%3D81750185_4D2293AED2354203A0ECF6AF51DB1EF0%26sref%3DADC%26ADC%3D1506755-640691165-0_Adsterra%26affiliateId%3D1%26pid%3D74340067%26bid%3D37935; btag=81750185_4D2293AED2354203A0ECF6AF51DB1EF0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 29 Jan 2023 01:34:55 GMT
content-type: application/javascript
content-md5: e/Aekt1V1fopj1X7y5r9MA==
last-modified: Tue, 29 Mar 2022 08:25:09 GMT
etag: W/"0x8DA115DA300B0C1"
x-ms-request-id: 0a125bdf-501e-000c-4984-1d850a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 580434
vary: Accept-Encoding
server: cloudflare
cf-ray: 790e3a69fe330afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500
IP
GET /css?family=Roboto:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.be/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 29 Jan 2023 01:34:55 GMT
date: Sun, 29 Jan 2023 01:34:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
104.21.46.26
173.233.139.164
85.184.96.5
52.18.129.71
139.45.197.243
3.120.47.42
15.236.117.205
23.36.79.43
157.240.200.35
31.13.72.12
185.200.116.90