inoradde.com/4/4326563/
200 OK 636 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 77a4f57c5daf3a83cd5932eb2950161f
2940f41b25c7f38fe6a77a6865aec4c4f4fcb235
403af1f0f03abf0d4dd7f1dd3d3d5e2eb5c32fc7dccfa95b338944779f2ebfc3
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /4/4326563/ HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 03 Feb 2023 02:57:47 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 3badc047a264a3a08b9842a5181a994b
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://go1.reacheffecti.work>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=29e435e4e550456783f361062099dac6; expires=Sat, 03 Feb 2024 02:57:47 GMT; path=/
oaidts=1675393067; expires=Sat, 03 Feb 2024 02:57:47 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ec47f9eed203ae063b9c210009de54a9
19ff156471b9cffbc2432c5b65543bdd18e36271
3974208ce1840f6c9467287b7e220379ed881d76db64939f411dbc500c103d48
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3974208CE1840F6C9467287B7E220379ED881D76DB64939F411DBC500C103D48"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11521
Expires: Fri, 03 Feb 2023 06:09:48 GMT
Date: Fri, 03 Feb 2023 02:57:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7e05c8461bd2dc5a149f71e2c465ea29
705983959c887e243cb55a8a1796757b579ee977
4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5766
Expires: Fri, 03 Feb 2023 04:33:53 GMT
Date: Fri, 03 Feb 2023 02:57:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 02:43:34 GMT
content-type: application/json
age: 854
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a76feabb767086ae0fa54e0ffbf763f
3655d78994a1e9838340669462728b67c8c12e54
bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4881
Expires: Fri, 03 Feb 2023 04:19:09 GMT
Date: Fri, 03 Feb 2023 02:57:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: N8Yn9iTLwK2YVDMVVrUIyc5u8w9or6GKGdlPmOzh3qDxgVMCYU2GmOLmEbyKmP6S2Gao+ql79Pc=
x-amz-request-id: S7Q906EF2HHYS215
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 02:52:14 GMT
age: 334
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3964c3f15e30cfb789a18a177b04b8ab
ded0bd2f00a7bea442ab647461f92de465442074
0f0e029af2a95452e70783a004009fc1e1fe0ceca1d991a569c387435f0fb3e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0F0E029AF2A95452E70783A004009FC1E1FE0CECA1D991A569C387435F0FB3E3"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4521
Expires: Fri, 03 Feb 2023 04:13:09 GMT
Date: Fri, 03 Feb 2023 02:57:48 GMT
Connection: keep-alive
go1.reacheffecti.work/pop.go?spaceid=1239285&sid2=645207888390001541&subid=4326563&rdk=rk1
200 OK 494 B URL HTTP/2 go1.reacheffecti.work/pop.go?spaceid=1239285&sid2=645207888390001541&subid=4326563&rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c5e635bac9bbc804c54e82302566f51f
48d66519ccd6be8f45231784c5690f00b3fb14f5
8321adc926300e9865ffcd098abfea88f41b676d77bee3f46528cc0d24b203fb
GET /pop.go?spaceid=1239285&sid2=645207888390001541&subid=4326563&rdk=rk1 HTTP/1.1
Host: go1.reacheffecti.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: text/html; charset=utf-8
content-length: 494
content-encoding: gzip
expires: Mon, 03 Jul 2001 06:00:00 GMT
last-modified: Fri, 03 02 2023 02:57:48 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
pragma: no-cache
x-backend-server: nl2-go-web-244
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb0e1ff82ab6199f715e00974b7f6957
74edba6943c202d060b471c30a3c626542bfac84
d982aa0ae1b32ffba27f789ad265b594dfef0bc4c55a0d0489d38b0827e6a7e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D982AA0AE1B32FFBA27F789AD265B594DFEF0BC4C55A0D0489D38B0827E6A7E2"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19181
Expires: Fri, 03 Feb 2023 08:17:29 GMT
Date: Fri, 03 Feb 2023 02:57:48 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=29e435e4e550456783f361062099dac6
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=29e435e4e550456783f361062099dac6
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=29e435e4e550456783f361062099dac6 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=29e435e4e550456783f361062099dac6; expires=Sat, 03 Feb 2024 02:57:48 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 13b034dc6e7f8ca72c3f664ea757ac45
1e75b1ed409c17f3309eea06b454196f18e139d0
24e06e51685b3a113fc85f1fd6d18f2c32e64d116ffaf5e8585d8c7d71c7522f
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117381
Date: Fri, 03 Feb 2023 02:57:48 GMT
Etag: "63db8f7e-1d7"
Expires: Sat, 04 Feb 2023 11:34:09 GMT
Last-Modified: Thu, 02 Feb 2023 10:25:02 GMT
Server: ECS (nyb/1D28)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z7TEwUZdMkaYnThC3zhufCczUk1TB1UTHI7-GtJgpHVzgUrn7f1guQ==
Age: 4147
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 02:07:19 GMT
age: 3029
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
go.aff.betplays.com/3eokxnvq?campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
301 Moved Permanently 0 B URL HTTP/2 go.aff.betplays.com/3eokxnvq?campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3eokxnvq?campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA== HTTP/1.1
Host: go.aff.betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go1.reacheffecti.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 03 Feb 2023 02:57:48 GMT
content-length: 0
location: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
ip: 91.90.42.154
country: NO
city: Oslo
_t: 1
_sr: affiliate01
set-cookie: __tr=egxssfvwuqhiwkxu; Domain=betplays.com; Expires=expires=Sun, 05 Mar 2023 02:57:48 GMT; Path=/; HTTPOnly
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 5c514a4a628f5509aad22508f8f3fa01
7bb74fbf58daf91db135d09785684d23bf7fb7b7
3e06fba8696f2d63400535bf73f7e0b361effe034f4e82da692a5d6d3a9b02e3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=126529
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:48 GMT
Etag: "63dbc36d-117"
Expires: Sat, 04 Feb 2023 14:06:37 GMT
Last-Modified: Thu, 02 Feb 2023 14:06:37 GMT
Server: nginx
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12174
Expires: Fri, 03 Feb 2023 06:20:42 GMT
Date: Fri, 03 Feb 2023 02:57:48 GMT
Connection: keep-alive
betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
200 OK 6.2 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
IP
ASN #201341 trafficforce, UAB
Hash 1cd5b12c347a16685bd9b66df1e75d32
29f27d0a54dd909fc3923d9f96baf646c28f2fac
e57eed32ac47b85a3ab3908f6323d8fbe9748b71063001e21150ce593ddd69e0
GET /Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: text/css
content-length: 6168
cache-control: public, max-age=172800
content-encoding: gzip
last-modified: Tue, 03 Jan 2023 13:26:03 GMT
etag: "f7b4c2ed761fd91:0"
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7937e6b8dc06b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/logo2.png
200 OK 7.6 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/logo2.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash b3bac375ffbde5a5cb34ec11a003cd95
e9f4436a86d11f307c3e467f11c63be88d746ad3
36f97d6d1c80bf6ebac09b65b1aeac458134cd2095631e6ac95cc44fd64b5d58
GET /Promotion/betplays/NB/WB/assets/images/logo2.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 7640
cache-control: public, max-age=172800
last-modified: Fri, 30 Dec 2022 08:32:13 GMT
etag: "7e17737291cd91:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec0ab500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/document.png
200 OK 2.4 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/document.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 67 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash 2166c46d49f8ed539f467f0a3766b389
f7c3b2bfb96c65a4545512052feb1b38cf66ef3a
14f9392cf08a8a71c979c21e77b2d64dcc749e9bcea69b0dcc1856ba35a56416
GET /Promotion/betplays/NB/WB/assets/images/document.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 2374
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:09 GMT
etag: "bf1d8e1f1cbdd81:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec0db500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/css/bootstrap.min.css
200 OK 35 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/css/bootstrap.min.css
IP
ASN #201341 trafficforce, UAB
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash 890a3242ad294313107a0b60318ebedd
69c23a5d1fec04920c9bfd932f8ca7a53795796b
7f25235e41676a467dc2b6bcae567c368ff694886049d844c2e9b4060544b43e
GET /Promotion/betplays/NB/WB/assets/css/bootstrap.min.css HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: text/css
content-length: 34613
cache-control: public, max-age=172800
content-encoding: gzip
last-modified: Wed, 31 Aug 2022 09:27:04 GMT
etag: "7004ad51bbdd81:0"
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7937e6b8ec09b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/business-and-finance.png
200 OK 3.2 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/business-and-finance.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 65 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash b73dec648504fe5b1282712600a3b63f
d27430c22a302be053dcd2078af43ef30c19e119
9082c7435573201aca5850b1b18b8f47cf12083f83288363c4b0a196b50dbc3f
GET /Promotion/betplays/NB/WB/assets/images/business-and-finance.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 3197
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:09 GMT
etag: "bb3b891f1cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec11b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon01.png
200 OK 21 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon01.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 106 x 177, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f112de51d0678955750be8519abde7e
ca87894bbe721602e052eb55c6a5997853dbc45f
d2580d138986f5dacbeb51ab91ebbcaeee47e9e49e17ff2fb087a366956b8145
GET /Promotion/betplays/NB/WB/assets/images/icon01.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 21392
cache-control: public, max-age=172800
last-modified: Thu, 08 Sep 2022 08:29:32 GMT
etag: "1213e91e5dc3d81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec13b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon08.png
200 OK 35 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon08.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 171 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash 12347fc0f7f76ec26761157398ca583e
816ee00c54f6463a075af4b683bd0ab8a41862b4
5dcaed337558f1cd8b27d5125af7f1f91ca10cb6cfa21a1bb4c1fd08db1e9ba3
GET /Promotion/betplays/NB/WB/assets/images/icon08.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 34678
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "dd2a16281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8fc20b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/bet.png
200 OK 7.5 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/bet.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 67 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash 2086806e59fb9e682358614e54bf221d
7c225a3bf370e3f73ecc77d4afcee9f53f0f9265
d4e0d4f68b3a2247b3942cdd44a87b4ac8cb9d817b7a1ff334dd78667cc76c31
GET /Promotion/betplays/NB/WB/assets/images/bet.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 7486
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:09 GMT
etag: "4adc871f1cbdd81:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec12b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/gc-logo.png
200 OK 11 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/gc-logo.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 175 x 71, 8-bit/color RGBA, non-interlaced\012- data
Hash edc7d6e799aa52b95c79e4f688675a96
b595b31ce0b9b9d32754877ec5a2391a576b114f
752eb784837d6f0e8023437c96f78ce9288f248be5c7f3c2d3b0f6ed26d45f42
GET /Promotion/betplays/NB/WB/assets/images/gc-logo.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 10773
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:15 GMT
etag: "2e354b231cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8fc21b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon06.png
200 OK 22 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon06.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 150 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash ab4406cadb1279836f78020c227d9850
3813ceed342e7ec66900ce292da1d6fe99462f24
bc0be32341361c0a2278a6dc6e17d4a756eb73096a5d9b3f30d882715b9d9be5
GET /Promotion/betplays/NB/WB/assets/images/icon06.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 22284
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "ce331b281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8fc1eb500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon02.png
200 OK 30 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon02.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 133 x 171, 8-bit/color RGBA, non-interlaced\012- data
Hash 84815e60897e9799c87c923e43f6f8f4
2c2738fb9d2de6298ed22b37145f9439871ea492
61445a3e07f069a1dcc2b41686e61c2a4bc2c729b692b7a0240cc102b257bea4
GET /Promotion/betplays/NB/WB/assets/images/icon02.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 29908
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:15 GMT
etag: "961b4e231cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec15b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon05.png
200 OK 50 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon05.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 212 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash 3931f080b3ae03a0cd88f9440a10b9d1
f1e32a1d610b0784027d71dac890f21038e9280e
a8861d1be58fa8ce7e44d5223882c9bb2a07723e6b6f841f346fbacfda676878
GET /Promotion/betplays/NB/WB/assets/images/icon05.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 49881
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "29ad19281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec1db500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/image08.png
200 OK 510 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/image08.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 540 x 873, 8-bit/color RGBA, non-interlaced\012- data
Size 510 kB (510513 bytes)
Hash 6a90e4dedfb8fbfa0c5415b2a0d3ec6d
93ccd59b7bc84bff6b8a685206a909e6bf1a9b52
e1d551ae2b468cd708e01292783f4a82c51208e984e47c7b9d40dfd52b5bf622
GET /Promotion/betplays/NB/WB/assets/images/image08.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 510513
cache-control: public, max-age=172800
last-modified: Mon, 12 Sep 2022 13:25:07 GMT
etag: "44c65013abc6d81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec0cb500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon03.png
200 OK 34 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon03.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 147 x 148, 8-bit/color RGBA, non-interlaced\012- data
Hash e9709c0c0def733ba995ad29c92dc704
9bc1044d2dab5d31606e49ec387290c85625b270
00bd901cfac6cc11a0ebf848e83331f3773dff856e3425d320d937539356a6d8
GET /Promotion/betplays/NB/WB/assets/images/icon03.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 34406
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:15 GMT
etag: "13a24f231cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec19b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon07.png
200 OK 24 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon07.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 143 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash d27445fe190e999853b784d9d5fac8a8
6cb2f36b13ad2a589841982e3fdcf1d22a44fc76
10b3f0dc37f956dde7297b578a70cd2c1f7ee9aab2175634235e1bae92ca527f
GET /Promotion/betplays/NB/WB/assets/images/icon07.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 23953
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "fd7c14281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8fc1fb500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon04.png
200 OK 56 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon04.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 203 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash 87cc8ab0b9ae9b77968c00e56339c035
2b1d381f27785d8f9aaddad1974db5c798bb3510
9c018a8427aaa610c2699996234ab1f2bb37d5ba71a43e84bdc081a5a68674f0
GET /Promotion/betplays/NB/WB/assets/images/icon04.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 55784
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "51b117281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8ec1cb500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/footer-logo2.png
200 OK 2.5 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/footer-logo2.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 119 x 27, 8-bit/color RGBA, non-interlaced\012- data
Hash 018711b33780a2810a0f4019771b65a5
87dc8f84219006902bad45bce020e980f1543bf8
7b4f648c8a4d7b05ab5f28c2c501e12d588e7cd209b184120048ffb081c52c42
GET /Promotion/betplays/NB/WB/assets/images/footer-logo2.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: image/png
content-length: 2526
cache-control: public, max-age=172800
last-modified: Fri, 30 Dec 2022 09:00:36 GMT
etag: "6269512e2d1cd91:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b8fc23b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/js/bootstrap.bundle.min.js
200 OK 30 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/js/bootstrap.bundle.min.js
IP
ASN #201341 trafficforce, UAB
File type ASCII text, with very long lines (65299)
Hash f7410323a07ecc5a13c425ede277d4a4
e9f0bad970f58aa7c77a0a008b7b8cef8af8466d
e7557a798d72ef382e818753f3eb940f214c016bee994dfa08c44c019bfc84f1
GET /Promotion/betplays/NB/WB/assets/js/bootstrap.bundle.min.js HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: application/javascript
content-length: 30180
cache-control: public, max-age=172800
content-encoding: gzip
last-modified: Wed, 31 Aug 2022 09:30:08 GMT
etag: "1b1ef9421cbdd81:0"
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 30931
expires: Sun, 05 Feb 2023 02:57:48 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 7937e6b8fc24b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-ExtrabldIt.woff2
200 OK 13 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-ExtrabldIt.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12696, version 1.0\012- data
Hash e2483453cb1f101e863678c85fdea697
53fd1719ae31f1f6c317cea137683617b2cf6335
a9ddc49d51dfeb625554c714b8b1924a35d0059242717e02553bca119700cffd
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-ExtrabldIt.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:49 GMT
content-type: application/octet-stream
content-length: 12696
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:16 GMT
etag: "b29b6ddc1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 136096
expires: Sun, 05 Feb 2023 02:57:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b96c4ab500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-Regular.woff2
200 OK 12 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-Regular.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12420, version 1.0\012- data
Hash 5c4deb544d81af239fff07798e56c1e7
59409922ee31341bc5f2cd56d8473dda72a2802c
7807cbacc4742a4c5f8bf13b7b90569045dc85c301e8a8ef500e6a920e2ac2a4
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-Regular.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:49 GMT
content-type: application/octet-stream
content-length: 12420
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:16 GMT
etag: "fdd73dc1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 136216
expires: Sun, 05 Feb 2023 02:57:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b97c50b500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-Bold.woff2
200 OK 12 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-Bold.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12528, version 1.0\012- data
Hash ceaa41b2ee3715e120ba23f443981527
88f0d814475d95742f66b3017229914048d5cb4b
64bf0062fc2c38f50de6804d03c946d479075e5fd37478fac5b0ec8349b136a4
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-Bold.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:49 GMT
content-type: application/octet-stream
content-length: 12528
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:18 GMT
etag: "28bb76dd1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 136216
expires: Sun, 05 Feb 2023 02:57:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b97c4eb500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-BlackIt.woff2
200 OK 12 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-BlackIt.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12512, version 1.0\012- data
Hash 974d423ab3eb02178d3b385a86e2748a
3f446b97652db3e3b36ff84b4655b24d292d4e8e
c69eb4263ac59e127738e9fb259decb32493230416ff6b8c8e727b42ec5e6823
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-BlackIt.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:49 GMT
content-type: application/octet-stream
content-length: 12512
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:18 GMT
etag: "11d06cdd1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 136096
expires: Sun, 05 Feb 2023 02:57:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b97c4db500-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/banner07.png
200 OK 1.9 MB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/banner07.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 1898 x 1086, 8-bit/color RGBA, non-interlaced\012- data
Size 1.9 MB (1889684 bytes)
Hash eaf342b006def7488fd8841b0dd59b95
a20d7c41cb3ca8f543aeb9b3a39ac01167252cfb
3e0f9366e661c3795fdce16750284df4a7d2e289fd6dcb30f48a1c711cb3bbe0
GET /Promotion/betplays/NB/WB/assets/images/banner07.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu; __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; _cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; btag=egxssfvwuqhiwkxu_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:49 GMT
content-type: image/png
content-length: 1889684
cache-control: public, max-age=172800
last-modified: Thu, 08 Sep 2022 08:29:23 GMT
etag: "4cd970195dc3d81:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 30932
expires: Sun, 05 Feb 2023 02:57:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7937e6b96c46b500-OSL
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Rh/UhZmSzDhT8KmDtYbYOA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KGm34KW9OBF3E0nCfZ/bfxQJg40=
betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
200 OK 3.4 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA==
IP
ASN #201341 trafficforce, UAB
Hash c6c3dd92177dc871b3997b18cb32011d
da0c637936186902eba4b1498959fd41eebc582c
6016f64d776477f34561016fd57c502c1b1938e68333b22b8460ceeda069b850
GET /Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=egxssfvwuqhiwkxu_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645207888390001541,,,|4|0|0|0|0|0|en|1|1532635802|0|1675393068&afp1=f3BjfXZneA== HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go1.reacheffecti.work/
Connection: keep-alive
Cookie: __tr=egxssfvwuqhiwkxu
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: text/html
cache-control: max-age=172800
last-modified: Mon, 30 Jan 2023 15:59:12 GMT
vary: Accept-Encoding
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=7PneSXHS4TqRttBqmO0CsSbesLQuKPkNf5SOdCcQlt0-1675393068-0-AfH+dw4Ka6pvPnYezO+CC4WK44rh7rbwbHJz5Pb0GHJ3UcpwfKN/rnC3TOP5vqEjL4fDEQpRGDzHAqY98W3jSCs=; path=/; expires=Fri, 03-Feb-23 03:27:48 GMT; domain=.betplays.com; HttpOnly; Secure; SameSite=None
_cfuvid=2_xPBirKj08jWPZHFZfpPoIPEj3qPUs6WkhYUiU1a80-1675393068872-0-604800000; path=/; domain=.betplays.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7937e6b81bbeb500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PMP2D5L
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PMP2D5L
IP
File type ASCII text, with very long lines (38447)
Hash fca5886d829d6c162f1b66470f2d1ed3
c55e86ef2d14710bc10cd74e6b2d97581b8af4c5
5dbbdf877ca3f5def0914c702b1c2290c0ad4dbfb7def0069360bdfd26d00fe8
GET /gtm.js?id=GTM-PMP2D5L HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 03 Feb 2023 02:57:49 GMT
expires: Fri, 03 Feb 2023 02:57:49 GMT
cache-control: private, max-age=900
last-modified: Fri, 03 Feb 2023 01:40:14 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77371
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9c45ea25709afbea416f215ee34611b0
117c52c0ee3ff15a2485c0b1e39cc12c7c2021ed
7fbc3c806c7fc6d70d70b55723dbbfc00698b14fcad55014218bc5e03e92a118
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash faf4f516200be2f680a902a26267b984
92dce6e12009cff391e2af7f41ab561ff06949da
b12842ee131f64b56ca0dcd8cc98de1f3cf9c4f497b82d7624388a364d86bf93
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2106
Cache-Control: max-age=94454
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Etag: "63db3de9-117"
Expires: Sat, 04 Feb 2023 05:12:03 GMT
Last-Modified: Thu, 02 Feb 2023 04:36:57 GMT
Server: ECS (amb/6B98)
X-Cache: HIT
Content-Length: 279
widget.intercom.io/widget/yl6n06ex
200 OK 6.0 kB URL HTTP/2 widget.intercom.io/widget/yl6n06ex
IP
File type Unicode text, UTF-8 text, with very long lines (18637), with no line terminators
Hash bfc0da6edb87a4194af5f0db6fbae83d
9387b326aa95c73f268a8f818f54a88b8b978009
878d1402530abec4507623dd8bc526accbe9ba9e35472ec564184206684cd3e3
GET /widget/yl6n06ex HTTP/1.1
Host: widget.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 6046
last-modified: Thu, 02 Feb 2023 16:14:31 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: 8yImfNz2rQQzBQiMoEg1EHaZvRWrM7fv
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 02:43:54 GMT
cache-control: max-age=900, s-maxage=900, public
etag: "bfc0da6edb87a4194af5f0db6fbae83d"
x-cache: Error from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 48UZcnuQUoRnL23C4hXml8sfMwnXYZVzJ8HVLKKg0g7LrvXgPb6k2Q==
age: 835
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Fri, 03 Feb 2023 01:45:20 GMT
expires: Fri, 03 Feb 2023 03:45:20 GMT
cache-control: public, max-age=7200
age: 4349
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.intercomcdn.com/vendor.69a3910c.js
200 OK 108 kB URL HTTP/2 js.intercomcdn.com/vendor.69a3910c.js
IP
File type Unicode text, UTF-8 text, with very long lines (65431)
Size 108 kB (108273 bytes)
Hash cc78f0d0f167e2782e52beed336c235e
8e3342efb45d9047b690ad96568f9dd84bfc138e
19cc596dd145be7071189795d4ec1c8176a88497482247c848f18087fb3037df
GET /vendor.69a3910c.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betplays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 108273
date: Fri, 03 Feb 2023 01:03:12 GMT
last-modified: Thu, 02 Feb 2023 16:12:53 GMT
etag: "cc78f0d0f167e2782e52beed336c235e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, s-maxage=7200, public
content-encoding: gzip
x-amz-version-id: .w2St4N90KvNAOVk7eBR4v2W7B69RwKW
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KDt9fM_3U1Na-foMc2OPouFS0KGCr0mbA-DjbibRxu4w6f36sdbUsA==
age: 6878
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e6463bd26afc96d6550d635a0fe51d11
3163f5ed97a60b507147a2ad6a60d159ff5e8e56
64d6a0e6fff5685bf5e82fca772e0ed76488eaa83f3bab25f6353aeac402b337
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 03 Feb 2023 02:57:49 GMT
Last-Modified: Fri, 03 Feb 2023 01:46:43 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Q1qvqlyKzB4vmnhWS-dlnG5O-v8ri2asqLN_EQqmEvKgwP0pOzwugA==
Age: 4266
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9bfd33253208c9d034988400d66abd5d
8811fd76d9bc56c15431433f8f08d648185992ed
6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 7a84cbade3ea59c2392e301faba996d8
e345947fdc8cb39bd755ff633e346f3adcb718fe
46a7a69a8947a5fa736a88fd29ae904c021567b55185a6bf2298469751cd11f7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=113865
Date: Fri, 03 Feb 2023 02:57:49 GMT
Etag: "63db8593-1d7"
Expires: Sat, 04 Feb 2023 10:35:34 GMT
Last-Modified: Thu, 02 Feb 2023 09:42:43 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: X-GI-fpbr2j8IBLKU-ky6MvR9OK9Atd5hJxA_5DkwUrme4PSPDOpyw==
Age: 3171
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&gjid=1047159239&_gid=205329762.1675393099&_u=YADAAEAAAAAAACAAI~&z=1318885877
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&gjid=1047159239&_gid=205329762.1675393099&_u=YADAAEAAAAAAACAAI~&z=1318885877
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&gjid=1047159239&_gid=205329762.1675393099&_u=YADAAEAAAAAAACAAI~&z=1318885877 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Content-Type: text/plain
Content-Length: 0
Origin: https://betplays.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://betplays.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 03 Feb 2023 02:57:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9bfd33253208c9d034988400d66abd5d
8811fd76d9bc56c15431433f8f08d648185992ed
6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bef39ac599211fe23ad884ceacf1c9b
c19b32a600412658c49a3e55d5d8353a5101c31d
0ff4181df99351d3aa3490540d2f19474531fb07e13ee457b9339efab1a47ad9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4cf0ccf2909be74efd7a89dbe4228ffb
b4993da334b48312584d116a3de4be4cd71962cf
e81c8aa45d0707079d9eba798fb447059042453be4834d14467839688ca66f5d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&_u=YADAAEAAAAAAACAAI~&z=209538535
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&_u=YADAAEAAAAAAACAAI~&z=209538535
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&_u=YADAAEAAAAAAACAAI~&z=209538535 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 02:57:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&_u=YADAAEAAAAAAACAAI~&z=209538535
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&_u=YADAAEAAAAAAACAAI~&z=209538535
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=1203872288.1675393098&jid=1260121657&_u=YADAAEAAAAAAACAAI~&z=209538535 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 03 Feb 2023 02:57:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2bef39ac599211fe23ad884ceacf1c9b
c19b32a600412658c49a3e55d5d8353a5101c31d
0ff4181df99351d3aa3490540d2f19474531fb07e13ee457b9339efab1a47ad9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c15fd84f4711d994724c35236542194
c47d77fe5b373a86bd9a116bd8baac07ec746add
a210a4599baaa980674b456f020282cd470559b319be263fdcf9eaec7cff0d3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 03 Feb 2023 02:57:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-EVCV40XZYB>m=45je3210&_p=454434361&cid=1203872288.1675393098&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=gtm.js&sid=1675393098&sct=1&seg=0&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Degxssfvwuqhiwkxu_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645207888390001541%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675393068%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-EVCV40XZYB>m=45je3210&_p=454434361&cid=1203872288.1675393098&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=gtm.js&sid=1675393098&sct=1&seg=0&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Degxssfvwuqhiwkxu_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645207888390001541%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675393068%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-EVCV40XZYB>m=45je3210&_p=454434361&cid=1203872288.1675393098&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=gtm.js&sid=1675393098&sct=1&seg=0&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Degxssfvwuqhiwkxu_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645207888390001541%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675393068%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Origin: https://betplays.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://betplays.com
date: Fri, 03 Feb 2023 02:57:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12732
Expires: Fri, 03 Feb 2023 06:30:02 GMT
Date: Fri, 03 Feb 2023 02:57:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12732
Expires: Fri, 03 Feb 2023 06:30:02 GMT
Date: Fri, 03 Feb 2023 02:57:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12732
Expires: Fri, 03 Feb 2023 06:30:02 GMT
Date: Fri, 03 Feb 2023 02:57:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:35 GMT
age: 18675
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fde7081-1c8d-41df-98c8-c063731c6202.jpeg
200 OK 3.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fde7081-1c8d-41df-98c8-c063731c6202.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 703c7834618fd34f3d7ce5c82a51abc0
4bdaa7e9e8d6408b73ea457e7aabb26fa2a5c81c
1f467ce5825e3f8b8f841293d1ce945dc7a577abbe2cb8a2caa16ace165f4857
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fde7081-1c8d-41df-98c8-c063731c6202.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3385
x-amzn-requestid: 30717e1a-7a08-4b11-90e7-cd175aa667d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuvzrEo4oAMF1qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ce4-3bc1302b4cf47fa2520e3033;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AnMRlC-rgJLk6OwzHDFeaGBuDfEuRj_n0S2o1o7QSTZqMwCIr-20-A==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:35 GMT
age: 18675
etag: "4bdaa7e9e8d6408b73ea457e7aabb26fa2a5c81c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8458d532-a4e7-4e54-9165-f01ff92729f5.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8458d532-a4e7-4e54-9165-f01ff92729f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe87e986c62630127a7fdd979c802947
28ce91c8643c4bc4dcc4cd26dfc69dc6219ce5bf
770a765c927c0f81d0c41acd45a7a24f5799f9497fcc73489cab4fafbf994bdb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8458d532-a4e7-4e54-9165-f01ff92729f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5256
x-amzn-requestid: b0455eb8-b10c-4328-8abe-65c5184f6654
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frx7uFcooAMFpxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dafd17-553139816e1fb7b65e683dc6;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 00:00:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pwRBB72InX8OP4KXpQKTs9T4iMY0E3hPX8Nko9gd7m1BOm8_DqbRaA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:46:56 GMT
age: 18654
etag: "28ce91c8643c4bc4dcc4cd26dfc69dc6219ce5bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 352e4166a431e781e56cc7f169c7f8ca
866b76c34076cf2e18c6a071336fcf4f581f3c4d
75ba13b601f4b00c5b091eb29e7f6739ffee3e127bd6d3c4b35cc967bb6d354a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d1adf44-5bff-4d36-99c4-8dd0dc2e5ac2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9779
x-amzn-requestid: 101b984b-9c04-4d07-b1fe-3d888f4bcd49
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ftcNRFV_oAMF2_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dba721-72679ba0378015034e17b8ca;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 12:05:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: p74tt3doRE9DKoD5cpPKriYPFEQhq7f3Xf8vhgNNz7QhZNIvdc6NQQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:05:18 GMT
age: 18896
etag: "866b76c34076cf2e18c6a071336fcf4f581f3c4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e706db8a6107758a148463e916f2532d
4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81
673f18036a53f8ff297ef6a63fd094e7c41d90f3960f0e687a741cc7dd3f6172
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda40dcf-1e5b-4e49-bd65-084935f52db9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6791
x-amzn-requestid: 665115ea-728e-4a55-aaf8-b09db3fa67a2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffl96FIzIAMFYGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61d25-0abbd7262ca10b7a7d2bf9eb;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:15:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T-OEFTj1rywKfBhEUUD0Rc6pFbk-gyFsETr_fjDQR5WGHAVOBgrB9A==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 19:18:01 GMT
age: 27589
etag: "4b0b8cb5ced3e3e67b0320a3bbaecd2176e21b81"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 114e345e134986d7451148fcea31b29d
541e878afee68c8802bb52b0cbbe5a5a0a185392
5030244d4babd1023166f39c935029d789a91ba90aa3a44c6f4c88ddc947b678
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F524a46fd-88eb-4539-9d8b-1ac679ae5990.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8211
x-amzn-requestid: 6a1fd567-b34d-4787-aa05-5b7db3fc51c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fflRBHU4IAMFnsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d61c06-2d1ec3206d2ebeb4780a84b4;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 07:11:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lUloQ6xaRWpnvMRh7kFvFIWhFotmILLZHfD_YK01RmrQ2vmYKVh46w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 08:18:46 GMT
age: 67144
etag: "541e878afee68c8802bb52b0cbbe5a5a0a185392"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash e088d49943fc22f5a8c7dfa39456f844
d73e15544314dee56150a4ad718f1000a889a2ad
b45862547b5b55255476755c72eba886fbddb249825dc1e015b98b07943bec5b
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=131798
Date: Fri, 03 Feb 2023 02:57:50 GMT
Etag: "63dbd041-1d7"
Expires: Sat, 04 Feb 2023 15:34:28 GMT
Last-Modified: Thu, 02 Feb 2023 15:01:21 GMT
Server: ECS (nyb/1D05)
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2BhgqdmUFziPphL8zN2UCPTfGBf3_CbtfGhrCH9ub3-Ch4LPEua2PQ==
Age: 1987
nexus-websocket-a.intercom.io/pubsub/5-aUaPd30ciPtGM1wCL-x5LsIXLJfAbXaJ7mRztj5llpysP159QiU_RA1uUZ4PCHez-gxEETHE7q9RZDvyBTj57BxF4wDaOy_D_ckj?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
101 Switching Protocols 0 B URL HTTP/1.1 nexus-websocket-a.intercom.io/pubsub/5-aUaPd30ciPtGM1wCL-x5LsIXLJfAbXaJ7mRztj5llpysP159QiU_RA1uUZ4PCHez-gxEETHE7q9RZDvyBTj57BxF4wDaOy_D_ckj?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pubsub/5-aUaPd30ciPtGM1wCL-x5LsIXLJfAbXaJ7mRztj5llpysP159QiU_RA1uUZ4PCHez-gxEETHE7q9RZDvyBTj57BxF4wDaOy_D_ckj?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined HTTP/1.1
Host: nexus-websocket-a.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://betplays.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9rQwdIRDvTxopR9N75eVDg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 03 Feb 2023 02:57:50 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wArmajWZSkXQoncD6o4ZCu2pL6w=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15f2ebc9-82b4-4f1b-b0b8-978571cb123b.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15f2ebc9-82b4-4f1b-b0b8-978571cb123b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02123eef9faa8560ff66b058d4e13a28
decf26282993d7f0b14cf4112d14fa39c97fa89f
28889ff20f1b2fe0b73f8f97e6569f1d68d77fe436eeb47cc06ee4f0822ff239
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15f2ebc9-82b4-4f1b-b0b8-978571cb123b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9130
x-amzn-requestid: 09ad3fbb-1e71-4455-82df-6e59f65239a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuxiYEkqIAMFVZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2fa8-1dca116e4317f9bd14f6d45a;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:48:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _Bc2svrG-wX63DK9RPUyjh-n6AHVHaQe3QRmEL27L-amwCH2I_f_9g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:05:17 GMT
age: 17560
etag: "decf26282993d7f0b14cf4112d14fa39c97fa89f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn-plat.apidigi.com/plat/prd/Img/partners/1194/favicon.ico
200 OK 0 B URL HTTP/2 cdn-plat.apidigi.com/plat/prd/Img/partners/1194/favicon.ico
IP
GET /plat/prd/Img/partners/1194/favicon.ico HTTP/1.1
Host: cdn-plat.apidigi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:49 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Mon, 18 Jul 2022 09:05:03 GMT
etag: W/"d569c77859ad81:0"
access-control-allow-origin: *
cf-cache-status: HIT
age: 8796
expires: Fri, 03 Feb 2023 06:57:49 GMT
vary: Accept-Encoding
set-cookie: __cfruid=df931e825fc16d059eb49ecdd087726b43350854-1675393069; path=/; domain=.apidigi.com; HttpOnly; Secure; SameSite=None
_cfuvid=Eq1fh72kWn.ll0X4bbygHsa.ubzeLiHoQKVEj0zedBA-1675393069358-0-604800000; path=/; domain=.apidigi.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7937e6bb6930fab4-OSL
content-encoding: br
X-Firefox-Spdy: h2
downloads.intercomcdn.com/i/o/344531/a20ab2847827b1b4b7aee2a5/4440511be208b8dfb8ae5341a33b45ca.png
200 OK 0 B URL HTTP/2 downloads.intercomcdn.com/i/o/344531/a20ab2847827b1b4b7aee2a5/4440511be208b8dfb8ae5341a33b45ca.png
IP
GET /i/o/344531/a20ab2847827b1b4b7aee2a5/4440511be208b8dfb8ae5341a33b45ca.png HTTP/1.1
Host: downloads.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:51 GMT
content-type: image/png
status: 200 OK
last-modified: Thu, 04 Aug 2022 14:40:45 GMT
cache-control: max-age=86400, private
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-intercom-version: b65d31344325638d5598ffebd7f6f2e485c8a8e9
vary: Accept-Encoding
content-encoding: gzip
x-xss-protection: 1; mode=block
x-request-id: 000aa3s1vfbit8udjejg
content-disposition: inline; filename="4440511be208b8dfb8ae5341a33b45ca.png"; filename*=UTF-8''4440511be208b8dfb8ae5341a33b45ca.png
content-transfer-encoding: binary
x-runtime: 0.059785
x-frame-options: deny
x-content-type-options: nosniff
content-security-policy: default-src 'none'; font-src fonts.intercomcdn.com; img-src downloads.intercomcdn.com/images/logo-gray-16x16-at-2x.png; media-src 'self'; style-src downloads.intercomcdn.com/410.css fonts.intercomcdn.com/proxima-nova/proxima-nova-all.css
set-cookie: gtm_id=e9581700-d5d9-483c-af14-9d48da57bc50; domain=intercom.com; path=/; expires=Sat, 03 Feb 2024 02:57:50 GMT; SameSite=None; secure
server: nginx
x-ami-version: ami-0e40581e672c9a67a
X-Firefox-Spdy: h2
go1.reacheffecti.work/favicon.ico
404 Not Found 0 B URL HTTP/2 go1.reacheffecti.work/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: go1.reacheffecti.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go1.reacheffecti.work/pop.go?spaceid=1239285&sid2=645207888390001541&subid=4326563&rdk=rk1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 03 Feb 2023 02:57:48 GMT
content-type: text/html
x-backend-server: nl2-go-web-244
content-encoding: gzip
X-Firefox-Spdy: h2
js.intercomcdn.com/frame.82f4e53b.js
200 OK 0 B URL HTTP/2 js.intercomcdn.com/frame.82f4e53b.js
IP
GET /frame.82f4e53b.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betplays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 139839
last-modified: Thu, 02 Feb 2023 16:12:53 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: lAvP38H4pDEpuV4Md6yiaGhgW0fDbi_3
accept-ranges: bytes
server: AmazonS3
date: Fri, 03 Feb 2023 01:32:05 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "eb9bf63c31a80378acd4de5734ee3994"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 0ZDxpPtnwoSR9Wg3n6HcG92ouhfbtxVnWUktL0c46YFaFb2X2g8lXQ==
age: 5145
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
api-iam.intercom.io/messenger/web/ping
200 OK 0 B URL HTTP/2 api-iam.intercom.io/messenger/web/ping
IP
POST /messenger/web/ping HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 781
Origin: https://betplays.com
Connection: keep-alive
Referer: https://betplays.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 03 Feb 2023 02:57:50 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
x-ratelimit-limit: 13333
x-ratelimit-reset: 1675393080
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-ratelimit-remaining: 13332
access-control-allow-origin: https://betplays.com
vary: Accept,Accept-Encoding
x-intercom-version: b65d31344325638d5598ffebd7f6f2e485c8a8e9
x-xss-protection: 1; mode=block
content-encoding: gzip
x-request-id: 001s4jo5aiv67qm1s6og
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"a963fdea8c813d7db675d89895af19c3"
x-runtime: 0.312332
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0c75d874912a7b35f
X-Firefox-Spdy: h2
139.45.197.238
173.194.222.154
23.36.76.226
217.22.19.196
52.215.118.100
104.18.131.12