r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 507011ccb9124dcd57e84a90a0965cc4
1a6575d0ac979c7184490cc9836ac4812ad2afd1
01626c18e1e68507aa33ef7448dbc3311901ab6f29adc2f51d449409b0680dce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "01626C18E1E68507AA33EF7448DBC3311901AB6F29ADC2F51D449409B0680DCE"
Last-Modified: Sun, 05 Feb 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21429
Expires: Mon, 06 Feb 2023 00:54:34 GMT
Date: Sun, 05 Feb 2023 18:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5254
Expires: Sun, 05 Feb 2023 20:24:59 GMT
Date: Sun, 05 Feb 2023 18:57:25 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 05 Feb 2023 18:36:21 GMT
content-type: application/json
age: 1264
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12854
Expires: Sun, 05 Feb 2023 22:31:39 GMT
Date: Sun, 05 Feb 2023 18:57:25 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LcDku87JRiZ+I+UpskSSKNMzk4+qr5E1Qn0NNLNmGZQiAdSrTRtQ2jCwOIn0BZ+5PY8MFGr+fDo=
x-amz-request-id: JSFNYYCQC19MTFR2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 05 Feb 2023 18:53:24 GMT
age: 241
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 Feb 2023 18:57:26 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mejoresbonosbet.com/apuestas-deportivas.html
200 OK 16 kB URL HTTP/1.1 mejoresbonosbet.com/apuestas-deportivas.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2067), with CRLF line terminators
Hash 0ec0c3d64da0c8b39785f412b6f5d11a
a2fb92a2a794325132e597a7f5034d7daefe6968
7c3a68394307ca20d9103b97bdcd610649d79dacd2c24c5d265d01faa96faddb
GET /apuestas-deportivas.html HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 02 Feb 2023 07:45:21 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2FXCGlvkT8V1g0zvQVpNb6oIeZn840HsPBlh8na9J57NOawfiWqlLIYyE6DY6jC%2BbCXh%2FIEUntr%2BrtXNL5LFqDHdv6KHfJ5EvwXN6IMkCZ6xeY7KtqxYCukRNCiKw6f6dZIXPpSG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 794ddf27a9fcb50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9206c3ba6d5a17d62244c438fd03496e
069e8257aebe618953434b1299d065540125a512
937d395fed398e9410f75945e80f607f3146458b48cd47ba7249536ca2195817
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 18:57:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-THZQMGBHYQ
200 OK 80 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-THZQMGBHYQ
IP
File type ASCII text, with very long lines (25667)
Hash 232dc1f20064b2acd8c835cb2d3d2ff5
8eb6a574a6e87b8788166eccf0533be8a4b9d874
bd20a0a48b873d6f5f9ba6b2245497355e726f73038a71cdcd94322ce9d7aa7a
GET /gtag/js?id=G-THZQMGBHYQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 Feb 2023 18:57:26 GMT
expires: Sun, 05 Feb 2023 18:57:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79807
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 18:57:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mejoresbonosbet.com/css/zr3-classic-themes.min.css
200 OK 188 B URL HTTP/1.1 mejoresbonosbet.com/css/zr3-classic-themes.min.css
IP
Hash 8ac085745a5bcc97c54f8088973df029
4e065566e82d4623d0f5b4d9275d3ee29e15acd1
a0b69c3418ce7d86bcd33d370dec1ba31f2d9c143d932f52de7c4f98427a813f
GET /css/zr3-classic-themes.min.css HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:32 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FrLL%2FYWzTVInnLkxKSmgjhwjqA5qCxA6duhhtN56jYSJRajeHG%2BYQk7aguzAwczWW25ksHKATFDqc2GAHGYNOjaPktVV52XUphoeA6ChBQRJYm46SKsRUh0PmeOyLBgf7nkxKYNG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2a2f98b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/css/doubledown-includes-css-shortcode.css
200 OK 1.1 kB URL HTTP/1.1 mejoresbonosbet.com/css/doubledown-includes-css-shortcode.css
IP
File type ASCII text, with CRLF line terminators
Hash d4c928cdf115b95648262f8ce3e946a0
975d57162138abe6598686132cfe15f63fdd4533
864c2132e1c8db3359b985fa26077df4d39c50b18ba0d655f3d867962de6b644
GET /css/doubledown-includes-css-shortcode.css HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u4eKfCBJCijK4n5QN9NpIODxoQpsh%2FAADaPi6WC4OYfYNu3Y7OP%2BU%2BayzESYfLThbV4%2F3U3tHDDZl6i5i3BAvEG18KIATKnKmkQXIGLpom2xl9OxAyxEyWRI0s7fvnz5EeHj6G%2Bm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2a89d31bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
analytics.aweber.com/js/awt_analytics.js?id=1mrfz
200 OK 1.6 kB URL HTTP/1.1 analytics.aweber.com/js/awt_analytics.js?id=1mrfz
IP
File type HTML document, ASCII text, with very long lines (3351)
Hash 2dca79d9c09f60ad301e0edbb294b3d4
20e92587d18c89017dd351dd026e1b22e45db145
a57acc0a68f4890c64f0261d69d35cb6ea15cc0e6f59f4ba8b59b74d2ec93f78
GET /js/awt_analytics.js?id=1mrfz HTTP/1.1
Host: analytics.aweber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
HTTP/1.1 200 OK
Vary: User-Agent, Accept-Encoding
Expires: Tue, 07 Mar 2023 18:57:26 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Last-Modified: Thu, 02 Feb 2023 19:48:36 GMT
ETag: "3145996224"
Content-Type: text/javascript
Accept-Ranges: bytes
Content-Length: 1554
Date: Sun, 05 Feb 2023 18:57:26 GMT
mejoresbonosbet.com/css/doubledown-flexslider.css
200 OK 1.5 kB URL HTTP/1.1 mejoresbonosbet.com/css/doubledown-flexslider.css
IP
File type ASCII text, with CRLF line terminators
Hash f5876776fbf1e33efbddb28a439ea866
9bf657bcf7e3b5370ef1c58c733d4d26f794759f
6be9d5b54782d216405fd8e6a8267b6d4bd0144a552ee4b20fd885077909f231
GET /css/doubledown-flexslider.css HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:33 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C7cok20k8f1cfVQ9MxBPrLBLZnpFPKIuG%2F9r7Pni4HX603YddqdNd0ioz03c1UKsuw6rhWBIx2a9AK%2BSTjo96vSe5niLjyENKp%2BcyLgvZAaT7zC15Ke8sCQibn3hBvLCdo9xt1ys"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2a8cfe1c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/s/gts1p5/vv2FF9Zd5cI
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/vv2FF9Zd5cI
IP
Hash 5ebba4412f83a81b15b795e2fa520e57
b42046661ba6b1ab508c83d0471a35575ba2480f
3f13def67399893543c5dfc94c7249d21aa7562685420360cd2867fc56f0cf27
POST /s/gts1p5/vv2FF9Zd5cI HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 18:57:26 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mejoresbonosbet.com/css/doubledown-font-awesome.min.css
200 OK 5.3 kB URL HTTP/1.1 mejoresbonosbet.com/css/doubledown-font-awesome.min.css
IP
File type ASCII text, with very long lines (23504), with CRLF line terminators
Hash a07d467a8aea472847ad0ad14f13c450
3be83c8cd65a4e396c47a8236b9b65128f70c2af
3bbc447354dd4c8ada8278df7c510f3811e48b0b57785205cdc2db3b0f9fc0b3
GET /css/doubledown-font-awesome.min.css HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D1Oobd1ikWo%2B%2FguX3GVpPkQIxhRE0bzDHI0NumBx6bLiauP47OQe4%2F4%2B8O5uD3Z2C5fcyr0a9F85v1hLJAxdKeuUhHTF4DoxS8R1QkancmRetpi69bhUhqI9OQIspqzsCpN%2Byarl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2a8e93b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 05 Feb 2023 18:49:07 GMT
age: 499
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
mejoresbonosbet.com/css/dist-block-library-style.min.css
200 OK 12 kB URL HTTP/1.1 mejoresbonosbet.com/css/dist-block-library-style.min.css
IP
File type ASCII text, with very long lines (47826)
Hash 7e9e687043fdd4b588771cdee5a77722
1ab50c2316fddfc06a6ea7b6758c5aab94abe0e1
5c8b185b1081a3ecd3ecd89c65ebb80a0e5cbb55d5b1eec84b5b59e8fbc5dc3e
GET /css/dist-block-library-style.min.css HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:31 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cx%2F5X3MDc0v0dkrRRuyfJ4B6QZ3w6TYFSEJSg1z18C1Qk3IsJoYaqjhk06jvAUY6Lpm4hd0l0IHMn1KHbLx9L4cX1T4bMbtfBULN%2Fhaazi%2BgIG2h0AL0pAHRFxolBs0uE%2Fx1yeX4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2a2840b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/css/doubledown-includes-custom.css
200 OK 98 B URL HTTP/1.1 mejoresbonosbet.com/css/doubledown-includes-custom.css
IP
File type ASCII text, with CRLF line terminators
Hash a0601deccb4b25d86201bc53799c30cd
c37893dedead0c370bb85703e3e3a11dd6842b44
0306ecde00e4d40ceb265fc37de8484ea07a5cbf96517cbdaeba65c6e277a31c
GET /css/doubledown-includes-custom.css HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:32 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n8z0wriZB3qP4iQl15s1Uk5bTkKUFkK9qHvD3wSuuX5zQNUP0UmyFFydI5aeKz2GED4CfoRQXvD%2B0EB7SNAL%2BbsXe%2FA4Z%2F4978tUmp0AoUoh4Bj4k%2BTYUn18O26%2FL8ePl2tAcU4z"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2ba9a9b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/css/doubledown-style.css
200 OK 12 kB URL HTTP/1.1 mejoresbonosbet.com/css/doubledown-style.css
IP
File type ASCII text, with very long lines (1688)
Hash ac0862a3533386295bac75d22beabdc4
c6aa9ff724bda48fee0c00fc0ef46936af6c2866
96257d7557dc16cfe22e332b856e5bb1eead1c9350d94a37bcdbf5db1638955e
GET /css/doubledown-style.css HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:34 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9aioRM5bLBKeJWZ7rEnuSPM%2FE0H12OuUGvMSHgIQSK1X70tfoDLbqCuLruBuiWrKz72fzo9bCPfQ2VevIIB88qr5dyQ7iw7LrGcecefi50eoF1%2FcNPqBmRungc8%2F%2BGSDD6gX0csS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2a8f69b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/js/jquery-jquery-migrate.min.js
200 OK 4.2 kB URL HTTP/1.1 mejoresbonosbet.com/js/jquery-jquery-migrate.min.js
IP
File type ASCII text, with very long lines (11126)
Hash 0d5bb2a36d1fc2e095235bc201eb5579
98f0154e2ed5322a9f65077f954868d6c800b337
fe6382620c35c12aa4f3f96fe395e5813defe330c1d95fd3de1e94f8f5d1f0a5
GET /js/jquery-jquery-migrate.min.js HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sxFM%2FNbvuJfVUl2d4xtiYpBvZK66x1hyGriTIICEr9TXCr%2BRia8b6K7NlK%2FOqtyliS0YEXT7Bixv%2B%2BkK7%2BPmgetOzeRDeF%2Fl51CsdzbmPxceM4Phx3DkV6l%2FU7aNjh8N9Xk%2BaC5V"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2c1ebd1c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
go1.reacheffecti.work/trk.go
200 OK 1.8 kB URL HTTP/1.1 go1.reacheffecti.work/trk.go
IP
File type ASCII text, with very long lines (3589), with no line terminators
Hash 4b4a68ef3d3f295e6a292cc48608da90
f84e10feea4de1e46a42a0d4afc43abf51e9bd02
ef7d111ed60bf7b8ecbe5b6745e54a93fba66c3a6eb2b3d593d4b10bf29de81a
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.work Domain
GET /trk.go HTTP/1.1
Host: go1.reacheffecti.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: application/javascript
Content-Length: 1775
Connection: keep-alive
Content-Encoding: gzip
Expires: Mon, 03 Jul 2001 06:00:00 GMT
Last-Modified: Sun, 05 02 2023 18:57:26 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
Pragma: no-cache
X-Backend-Server: nl2-go-web-240
mejoresbonosbet.com/js/pixel.js?v=1278
200 OK 278 B URL HTTP/1.1 mejoresbonosbet.com/js/pixel.js?v=1278
IP
Hash 195113096cf015ffc5175305e47733b3
9d1a4fc7720ab3cff2a09c3a56aca4163060f92a
19e4b11461f7685e9bdb473b719ec21650d8b0e033bd47a5e4aa81d222f33408
GET /js/pixel.js?v=1278 HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 08 Jan 2023 21:05:38 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BI%2BEmpyvNe8%2B2%2Bh1udkNvMFDdCKsbEt9kpcAvmmzfvZfrbPaqQX%2BNNg3LYqqhvaTOV7P1Dkx%2F%2B6B6NF0cRhxNItrw%2FNzapxTq3ZCUTtkhA%2FwAhg5EuSIaghg%2FoBFvVwsyl%2BXOrOm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2ca9f6b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2527
Expires: Sun, 05 Feb 2023 19:39:33 GMT
Date: Sun, 05 Feb 2023 18:57:26 GMT
Connection: keep-alive
mejoresbonosbet.com/js/doubledown-includes-js-theme_scripts.js
200 OK 746 B URL HTTP/1.1 mejoresbonosbet.com/js/doubledown-includes-js-theme_scripts.js
IP
Hash b53a5d7223f31c3b4f39e7dd621867e6
853fdf8b47adf42937e0ebc961f47460b0058540
30cbf0242ce2da9e771b2308da16a1e8ad8913c6e06d9dfc95e29e1493fd181a
GET /js/doubledown-includes-js-theme_scripts.js HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 08 Jan 2023 21:05:57 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fYh9mvZL89rWKins9sYfOdVQA%2FgUpxwIcCz0IBFkVmR2igOX8P9h1H46skhYQbzGFvIXtLvHqg%2BrI5VDuDi4b%2FgBUZEpB%2FCsjPqlG41YTI7hpgxzpzk%2FAqKN7repNEoScoupkHQg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2cec0fb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/js/aweber-web-form-widget-src-js-aweber-wpn-script.js
200 OK 513 B URL HTTP/1.1 mejoresbonosbet.com/js/aweber-web-form-widget-src-js-aweber-wpn-script.js
IP
Hash 8c224ebe641a9ab105c709d6b831d736
d7a6003f6ee185f41096d6bb916b58f24e5eb890
69b3a7b7bca0d4185dd272ce250b570ba3e5e5fd51781e53e6bc9cf48356e5f4
GET /js/aweber-web-form-widget-src-js-aweber-wpn-script.js HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:55 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QQAlUp%2BNZaAXLobGVQ4g7pheY9X5z5rHcVlRM2od42iYEFqPigsRwVSr6lyC53glcVysH9HWbxvW5hMa4AfXfUd1amYZl6jr%2F0V17%2FwNfQEes3p3s%2FZNdA02NL76rpjf%2FDJ26QDb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2d1b76b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/js/jquery-jquery.min.js
200 OK 31 kB URL HTTP/1.1 mejoresbonosbet.com/js/jquery-jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 25a014e67e9b2eafb7ecc86f1e30d77d
f4227f827cba0c787a4e08ccc6427d27c95873e2
63a06e24fbd59edc5ca7cff61c8cbb3f67c2a684c2a407ba891af34f737f15b9
GET /js/jquery-jquery.min.js HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:26 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BnFOJTvmv7hpdWyDhisFIm8CrH1cdLF1cPiJL6l0%2BlgVJC8Zn3m4rE%2F1QtRolUFS0s%2Ftl1SjK5eSZAtrpJS3AuzQXKqyg6Qu0HEqH%2BNUDJJLQAA1CoqhWQA%2BFZY4%2FZxMhQsaxEPZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2bfb7d1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
region1.google-analytics.com/g/collect?v=2&tid=G-THZQMGBHYQ>m=45je3210&_p=2017179469&cid=649283860.1675623488&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675623487&sct=1&seg=0&dl=http%3A%2F%2Fmejoresbonosbet.com%2Fapuestas-deportivas.html&dt=Las%2010%20mejores%20ofertas%20de%20bienvenida%20de%20casino%20en%20l%C3%ADnea&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-THZQMGBHYQ>m=45je3210&_p=2017179469&cid=649283860.1675623488&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675623487&sct=1&seg=0&dl=http%3A%2F%2Fmejoresbonosbet.com%2Fapuestas-deportivas.html&dt=Las%2010%20mejores%20ofertas%20de%20bienvenida%20de%20casino%20en%20l%C3%ADnea&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-THZQMGBHYQ>m=45je3210&_p=2017179469&cid=649283860.1675623488&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675623487&sct=1&seg=0&dl=http%3A%2F%2Fmejoresbonosbet.com%2Fapuestas-deportivas.html&dt=Las%2010%20mejores%20ofertas%20de%20bienvenida%20de%20casino%20en%20l%C3%ADnea&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mejoresbonosbet.com
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://mejoresbonosbet.com
date: Sun, 05 Feb 2023 18:57:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: iaN9Nl889lzSahrnOxpe/g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AD5sUClO3Lt8u1qrzhTsFT0IdIE=
mejoresbonosbet.com/images/star_rate.png
200 OK 529 B URL HTTP/1.1 mejoresbonosbet.com/images/star_rate.png
IP
File type PNG image data, 100 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash f422fe0191f1e539de2d1d5a0273437e
b1e77350ffc7e45b103429565e2585b07817ace5
7253cc9c21f72d79ec66e4adea9d0fa3674d9fceb5b4d135c866a17d93c1c759
GET /images/star_rate.png HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/css/doubledown-style.css
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/png
Content-Length: 529
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:49 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y5mY5LhS7poYvaBF8pVSOQgBnFyHwGcbfT7kvM%2Fc4hsh4fBq0BDl5U4fRFF6sHg9JWTogdBe8Mk8GwYU%2BT54Z69QNDf4LqBNvpbv3tQUeO6YeMXE73p0lshdYG7Bkt3pg%2Fw2mugm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2f1dcfb512-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/2020-04-22bet-logo-120x61.jpg
200 OK 2.1 kB URL HTTP/1.1 mejoresbonosbet.com/images/2020-04-22bet-logo-120x61.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 120x61, components 3\012- data
Hash 43c16495e90be300f9dfb81f584de7e3
8a3cd2ddc0a1793746166a95a012e579467fa041
681ac579f6e594e09b94c2572203ce290e04fd964742f8678cae0cb4d9fd5b16
GET /images/2020-04-22bet-logo-120x61.jpg HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/jpeg
Content-Length: 2090
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:47 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2BqcWIbDZxRRS5L3ocgQ3ngT2CkdxxTdjtdYwcXI2A1mZqJu6YhplkE7v1RG%2Bx8ZQixh%2Fr1YZbOxPzuj1z65KGFVgzUGnNa5U87mGdexkXX2KtmRfcKn%2FjPdMcSlGo%2BzdeTx%2B%2F5b"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2f5a531c0e-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/coderecasino.png
200 OK 4.4 kB URL HTTP/1.1 mejoresbonosbet.com/images/coderecasino.png
IP
File type PNG image data, 200 x 101, 8-bit/color RGBA, non-interlaced\012- data
Hash 30b0d227b4c62eccf245cda0ec94167a
b45cb9a782142def025348375baf0e2eb8ac9a52
21264ce69d88e14e880bfea2b7c432af79eabf76eca62908ae71fa331dad9509
GET /images/coderecasino.png HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/png
Content-Length: 4362
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 10:42:12 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sE36FMu%2FmkEVh50BZjq%2B89XPBALJFmBPELVdPhw8XKo%2BD%2BCLKarD8ume2MT5AwyYfowJlKjz8RiroeD405oGGVsFNMXfs1ziojO0tsHZwbGZY5PSRfkeqHXYUYqrm0ultIVNiDUy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2f5eb0b518-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/betway-logo.jpeg
200 OK 21 kB URL HTTP/1.1 mejoresbonosbet.com/images/betway-logo.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 2048x942, components 3\012- data
Hash 6c27fa8127152d79cc9ca2a915e9b0c2
69b7a2d51d86b731ede5e9ef3f8e8bab610ae548
a874b2af2d1b0a8068ad2f7c10961883d4433ec25b7c2399c8727a8631fb02ca
GET /images/betway-logo.jpeg HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/jpeg
Content-Length: 20660
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 13:04:06 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iXj4EyR%2Bi6QRctjx8crG1NCGjxNzxnKKcI%2BU%2BsEuyR1x%2BGSAyefsJQ1ct3rgSuu4qnwIHxyINMRKbwzX%2FrqiA9iX8qeZVj7af9Oahs7a%2FqZzRwrzVuNuplcUlrc4rLCqopOHv4TO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2ebec4b50f-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/megaparicasino.jpeg
200 OK 19 kB URL HTTP/1.1 mejoresbonosbet.com/images/megaparicasino.jpeg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2020:06:29 15:27:42], progressive, precision 8, 200x101, components 3\012- data
Hash ddbd6ef9afec75ac49606e627f992730
e772496f7ed24e6fc7cc2526ebb85ab935c2709a
ce7f3d1a3601d176cbca0c35983f4dac4131e7874a7596c4d7417b39a6e724d6
GET /images/megaparicasino.jpeg HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/jpeg
Content-Length: 18957
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 11:18:14 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kQNWn8zKBzQQuOegL81EtLdkTrRhLjy%2FkzhzAN3wDOCe4cC1EUJIHMnfAx4ZTcgvZSdUwp8W5dDWSCQsY3FJynaBipnZsnsjbxVkd4QxIsg7%2FNuGr3LRpWqKJdDa3%2F69Yz94nSx4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2f5fd1b50c-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/casino-com.webp
200 OK 4.0 kB URL HTTP/1.1 mejoresbonosbet.com/images/casino-com.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 09c13899ff549ca3be1bd916ca755fd0
a58fde93e46453c788b9eda2ee99c70ab6976496
01a5d7431505e3ee57e6883ff6695915bcdfe00b985b0e474342563e1bec1aed
GET /images/casino-com.webp HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/webp
Content-Length: 4048
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 12:17:42 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3CxlRDfYA0mCmxb81fZ%2FAr49olrKB5Ik8SIWIoCbHu7rh1JhO8J%2BCNJg%2BuHILUQ3Df3vr6AMlR7OPHVNeuVUfzxYZUwNmawrxoWz9xCaAHmd2uR7F%2By8uIk6nLhMNs3EHeXLhcgn"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf30bbf61c0e-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/1xSlots-Casinoo.webp
200 OK 27 kB URL HTTP/1.1 mejoresbonosbet.com/images/1xSlots-Casinoo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1fef1ebb3fbdd84b30ac74f69b5438ca
411681fe722d0c18a3f76bf529534ec75f878c45
f108965f8d0085481793368b5c479cda47cc886c2b48f4d4a6a07ab730c83942
GET /images/1xSlots-Casinoo.webp HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/webp
Content-Length: 27204
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 11:43:25 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eQmqtADok0L%2BJ2WFAnPqcyqmEXj1a1yvs4dNKxF0S5i%2FUkwklFcpE6NFQ%2FV17OyM7%2BquuNSbbgIt%2BrbgCtkSc4ORzU5nkhA8uO85shQ9Js4N5k8nrf04v7Vhf38ztQRIdv8doAa%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf30783db512-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/bg4.jpg
200 OK 709 kB URL HTTP/1.1 mejoresbonosbet.com/images/bg4.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 8534x4267, components 3\012- data
Size 709 kB (708817 bytes)
Hash 8abdee45922d801f05887339fd4881ea
a090fea8f63767e6163f375486fc7d9c57c509e0
87c03c3d5250b5196fc83788fff578ea6097687edac0824bfdb06a060b590a29
GET /images/bg4.jpg HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/jpeg
Content-Length: 708817
Connection: keep-alive
Last-Modified: Wed, 01 Feb 2023 15:32:09 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7CO2%2BHRmOKygzRPjFPI6umLbbyzIe2G8%2BHVM6Si0t%2FxnCspqShVf%2BMPqXao5TCZpHZ1DglpRGu%2FmojIujGy0eZYTZuzQInZz7Jpmaci4YBJ8bf%2BCWLwDUJIueT%2FbmmbPAs88ziuD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf2f1e631bfe-OSL
alt-svc: h2=":443"; ma=60
mejoresbonosbet.com/images/casinoonlinetop-com-br.png
200 OK 727 B URL HTTP/1.1 mejoresbonosbet.com/images/casinoonlinetop-com-br.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 22858e2384b95a0bd21d6ca552c30789
5db56ee2dbaf10d72ad60c4dcd1b5c85ddea3723
1f60e95fe3c27f5fd37c6c5eb6da753f0ef5434efd36fd9aaf06649664c14079
GET /images/casinoonlinetop-com-br.png HTTP/1.1
Host: mejoresbonosbet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mejoresbonosbet.com/apuestas-deportivas.html
Cookie: _ga_THZQMGBHYQ=GS1.1.1675623487.1.0.1675623487.0.0.0; _ga=GA1.1.649283860.1675623488
HTTP/1.1 200 OK
Date: Sun, 05 Feb 2023 18:57:27 GMT
Content-Type: image/png
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 23:15:49 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oJPddlkTCh88pPNEGzJjjEAqfALghCwHQOlcadTJ2dHohO6rn0umZ0T7z8ty0%2Fw9q4L5BQTQ0Wnj7NitxFhoR79AMSBa54z2%2Fm02CcKv86lvi5o%2FnAZLF6hhtfGl1%2BFrwI6s4QAS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794ddf332c47b512-OSL
alt-svc: h2=":443"; ma=60
forms.aweber.com/form/03/2049608603.js
200 OK 3.9 kB URL HTTP/2 forms.aweber.com/form/03/2049608603.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (13078)
Hash 2ae210839ab58e529c09c6d8b5ec7eb8
32c9f85bbbc510844618debe8db8bb0ee207d8f3
48ecc2e5b651bba8d57a21e175bf9bccde3c5f87cf4255e5788210b21c6258af
GET /form/03/2049608603.js HTTP/1.1
Host: forms.aweber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
p3p: policyref="http://www.aweber.com/w3c/p3p.xml", CP="NOI DSP COR NID IND"
content-type: application/x-javascript
accept-ranges: bytes
date: Sun, 05 Feb 2023 18:57:28 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1643-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675623448.580124,VS0,VE430
vary: Accept-Encoding
referrer-policy: no-referrer-when-downgrade
content-length: 3905
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/o5lPn_ewGpk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/o5lPn_ewGpk
IP
Hash e4a31ac3686d4aeb55d5273985f81e26
e6db79c12475d45134b9c9e6693230b208d86038
5a2e76fdf5861d54ff5fa611a733d8a5a6ab7dbd05f9a3ad92770948efa85391
POST /s/gts1p5/o5lPn_ewGpk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 05 Feb 2023 18:57:28 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7333
Expires: Sun, 05 Feb 2023 20:59:41 GMT
Date: Sun, 05 Feb 2023 18:57:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7333
Expires: Sun, 05 Feb 2023 20:59:41 GMT
Date: Sun, 05 Feb 2023 18:57:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7333
Expires: Sun, 05 Feb 2023 20:59:41 GMT
Date: Sun, 05 Feb 2023 18:57:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7333
Expires: Sun, 05 Feb 2023 20:59:41 GMT
Date: Sun, 05 Feb 2023 18:57:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7333
Expires: Sun, 05 Feb 2023 20:59:41 GMT
Date: Sun, 05 Feb 2023 18:57:28 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGg5oAMFV-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:05:45 GMT
age: 75103
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a4eed23b240d04a3cd6b085cfa93375
f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00
93e8371f80c12d3753842e36001dbb8d3dc2223b10a594639752cd816c492d4e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10905
x-amzn-requestid: 093778fc-231c-452f-a6fc-15f4eb41ade0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmNJCEDzIAMFmxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8c239-7f56d6e56392f373541db219;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:24:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WVfpilnwhnRXBhJkHBWjxxoP09f7SqlRk8CdWRWOubIIwe0CX89bUA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:09:58 GMT
age: 74850
etag: "f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5beaead015b2b4fb6d36009926ba0378
67e7c49ea7648fc6d1dffc22588862c993b785b7
6ae0cec9ade23fd53e9c1407b0324a8060892a65a6b675ccffa4a4c82b66f1ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0def934-b27d-4612-bab8-84bfb73a9960.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 280f7003-2696-4a82-bd50-82b0a2b66faf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsSpoEA0oAMFSBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db3170-35dcb9513c891af201b973d1;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 03:43:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IxfTibTq6T_wq9a5YCIBZLBb70BI7AOLEAYMYYuMZPhvVKjDbFfrvA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:52:08 GMT
etag: "67e7c49ea7648fc6d1dffc22588862c993b785b7"
content-type: image/jpeg
age: 75920
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5b6c30ad03669b66bf2f63b3edd69882
e630bd132b52b965a5ade646ea8a165d1abf6d7b
f8233d879ec17fd91909655ff8881f2ebfad84272fde3ed5e5be37580378a989
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37422a56-a7de-4ab8-ac8a-650de9dae97c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5014
x-amzn-requestid: a434aae4-fe4b-4fc7-9b7e-eeb552484e8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bIE0aoAMF6YQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c47-5556d14757190c842bbc6b06;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: k6YqagXr3Wr-u1uDKojEnIGW0CxU5yvWPtlzNpzoIvmg9F-rJb9uFQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 11:24:01 GMT
age: 27207
etag: "e630bd132b52b965a5ade646ea8a165d1abf6d7b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8e0be7db14d930d6227443314bcd1747
4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d
baedfbdb08a67f9ff4c698f7e65b08d7e4c5078d0a4233e6bff529b44812735a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6718344-fcb4-4366-9239-8921034a7114.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12967
x-amzn-requestid: 013fa296-a431-410b-b3fb-7417b3e877eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fpIQAFCMIAMF0Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9ed99-2e1daa8b75977de07c48b8fc;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 04:42:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UzQGDCYe_8AuYYLaLSAWzHQhwJMpzpXWbjE5AwukevW6G6SLDxDjmA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 05 Feb 2023 03:42:59 GMT
age: 54869
etag: "4e42e2ad289dfe5bd9a55d34fd768f7532bdf71d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7a466d89c75ff3459b7328591db52cf
c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 21:51:26 GMT
age: 75962
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
forms.aweber.com/form/displays.htm?id=TAwsnGwMHGwMzA==
200 OK 43 B URL HTTP/2 forms.aweber.com/form/displays.htm?id=TAwsnGwMHGwMzA==
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6d22e4f2d2057c6e8d6fab098e76e80f
b80b11203d97fe01c5597ca3be70406ea48f5709
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277
GET /form/displays.htm?id=TAwsnGwMHGwMzA== HTTP/1.1
Host: forms.aweber.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="http://www.aweber.com/w3c/p3p.xml", CP="NOI DSP COR NID IND"
cache-control: No-Cache
content-type: image/gif
pragma: No-Cache
accept-ranges: bytes
date: Sun, 05 Feb 2023 18:57:28 GMT
via: 1.1 varnish
x-served-by: cache-bma1643-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1675623448.030135,VS0,VE326
vary: Accept-Encoding
referrer-policy: no-referrer-when-downgrade
content-length: 43
X-Firefox-Spdy: h2
latam-casino.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
404 Not Found 0 B URL HTTP/2 latam-casino.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: latam-casino.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sun, 05 Feb 2023 18:57:26 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lzs97ZJNRHZJNtlkbKwpjkx9Hlpkr9Q7nFVDsZNlo7s2dXVyolFQcdDvdLOHEamt%2FApkg5F5%2FU8xhkk4n5ehVOFdT9OEms%2FbFSwLxaScHwhYFfzczROYtjhAxFPSjoVngJo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794ddf2c294ffac4-OSL
content-encoding: br
X-Firefox-Spdy: h2
melhorbonusbet.com.br/wp-content/uploads/2020/03/form-bg.jpg
404 Not Found 0 B URL HTTP/2 melhorbonusbet.com.br/wp-content/uploads/2020/03/form-bg.jpg
IP
GET /wp-content/uploads/2020/03/form-bg.jpg HTTP/1.1
Host: melhorbonusbet.com.br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mejoresbonosbet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sun, 05 Feb 2023 18:57:28 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LjhFEmHqwtqVnlRdhl0QNzAwuFemRtnocxAOy0YXSn7k2nzKVo%2Bd0nNyA6%2FxQm0J5%2BNb2pjw0s0DL%2F0KFY1PTGaTK3E6x2zsvwRS8m%2BklcJbWpJ%2B59wxTaZkbpgqn%2B6%2Bwof7Ocqggg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 794ddf37ba3a0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
188.114.96.1
34.117.237.239
23.33.119.27
217.22.19.197