playmaster.co.zm/en/ucasino_ms
172.67.149.121200 OK 2.7 kB URL HTTP/1.1 playmaster.co.zm/en/ucasino_ms
IP 172.67.149.121:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1066)
Hash 2c31e3c9e9c2e07afa5336926a854512
ab50bd174da912163d2b49e7d6a3b8739a1d282e
3a8310d2fc7d97c125e2b7fc6812f749f73e132989b2b95a855bae61b17c613e
GET /en/ucasino_ms HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Origin
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Access-Control-Allow-Credentials: true
Set-Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk; Path=/; HttpOnly
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3r79RwCM6A%2Brha3ZPq8xsBahsHLmyu7jh4u%2FKzVsGeu%2BPcKg8K%2BS%2BJfeeHMGBqjnNAArn%2FVfppwf4ZHQ6eXtqaMB8dcERvLHno5YDJXcPWtAq%2FBwtNHoqSrxM2EOZBbgRN4d"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c0c9a71c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5423
Expires: Wed, 30 Nov 2022 05:39:28 GMT
Date: Wed, 30 Nov 2022 04:09:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10429
Expires: Wed, 30 Nov 2022 07:02:54 GMT
Date: Wed, 30 Nov 2022 04:09:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6558
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:05 GMT
Last-Modified: Wed, 30 Nov 2022 02:19:47 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZxRbX+Wem3rWzmtyg59lYMpb0aGiIdCjKR2nDXgdOYbk/X7NmEIWLky11l8py35nXUo14x4sOE8=
x-amz-request-id: 0Y76D1FE6W3K4XV5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 03:45:04 GMT
age: 1441
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 03:17:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3067
alt-svc: clear
X-Firefox-Spdy: h2
playmaster.co.zm/styles.17094742bcc91e713bed.css
172.67.149.121200 OK 111 kB URL HTTP/1.1 playmaster.co.zm/styles.17094742bcc91e713bed.css
IP 172.67.149.121:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 111 kB (110744 bytes)
Hash 2cd09f9d1b5d01b19709cb7ca87f83b0
3d53236222a86f493a7c2252dd99a5e3a8c54872
f59a074720697b2fd13a5ce2e5e5dbb7b927bf59104d60f1c39be6c884d20b30
GET /styles.17094742bcc91e713bed.css HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:05 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:15:32 GMT
Vary: Accept-Encoding
ETag: W/"63764204-99d51"
Expires: Wed, 28 Dec 2022 17:51:53 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 123432
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mrFbYA6COLbHDKpB8mqowcxrouSJxyPbjRlHivPXY4IbyBW6Wyx3%2BllSlbiteSu5Gszrn2hgvWpAUlfBIQfY%2FIOMmWkGdz50WK2EO7%2BarSbG%2B37%2FwkIaEYf0V7i7Qv%2Bcs8kJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c2ba0e1c06-OSL
alt-svc: h2=":443"; ma=60
playmaster.co.zm/polyfills.0688af4a18ec3a51fe8c.js
172.67.149.121200 OK 21 kB URL HTTP/1.1 playmaster.co.zm/polyfills.0688af4a18ec3a51fe8c.js
IP 172.67.149.121:0
File type ASCII text, with very long lines (63231), with no line terminators
Hash e6b86928ea69508888ba59f9d8f6ec44
bd993e433cf15fb4aa0c28dce04f90ac6e6f171f
43b3e09ebc851135d0ff3d18893cd6afa3b5706537e342409275a8caa1d3c91e
GET /polyfills.0688af4a18ec3a51fe8c.js HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:15:32 GMT
ETag: W/"63764204-f6ff"
Expires: Wed, 28 Dec 2022 17:51:53 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 123432
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xdF7ORrphbMfWy560xqA0accdDetdqQ0WLl%2FskuXDITJvdsUf00Ey0BaAKdxjMbsptz2fgUqq4g%2FHHdGksIMKU1d2hFVJzlj15X5dhWZ6gAE0hejh3yY9PBVk%2FUvvz%2FfOFlo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9c2dcd1b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:09:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 96ba40be4ad9ed57887bc3d9d39b9ee2
bd3b5d8943ab7741bfa5c18c8766013b80519424
19e5f58133b52dbd7ab629ad02f9a38ed2b69909b797ff3722f09fb811085362
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6563
Cache-Control: max-age=103295
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:05 GMT
Etag: "6385ae3d-117"
Expires: Thu, 01 Dec 2022 08:50:40 GMT
Last-Modified: Tue, 29 Nov 2022 07:01:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 1e258d2d97dc1a2c884f27040ee7ce5e
fd1009422b0736848e10d0d72ed079c711fc7944
106002bf0a4504a5148fd13443cf5b29a83887da7ee321595f48c661d309416b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6522
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:05 GMT
Last-Modified: Wed, 30 Nov 2022 02:20:23 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 07b8296613be09905e34b09dce4a203f
c97c67e8c4b1247423d089c028c31e05734f124e
c8c7b7cd00d5818bbe4a4ddb1b734a1b766dc6474cce300171bd5a0947adc6b2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 02ca4292c31c0c0caa2ed7401af8d5bd
16ced3b6956cea150f608c9848bfa2f31e0a3e18
e90eff9a37ae4b3dff3bf24081ff3f110c45619703129b1b3f3f8bd3e0df9da0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6556
Cache-Control: max-age=121625
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:05 GMT
Etag: "6385f5de-117"
Expires: Thu, 01 Dec 2022 13:56:10 GMT
Last-Modified: Tue, 29 Nov 2022 12:06:54 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
playmaster.co.zm/runtime.ec2944dd8b20ec099bf3.js
172.67.149.121200 OK 715 B URL HTTP/1.1 playmaster.co.zm/runtime.ec2944dd8b20ec099bf3.js
IP 172.67.149.121:0
File type ASCII text, with very long lines (1440), with no line terminators
Hash ee784e7134c6b2f93c4e7121d85ba8d8
fac5820a631e7637a362e7d873bf454e0eae551d
1d37f1212759602ea97330c4ff65c7ec942bc2a6e08f9ecf23eb59407ceed3b2
GET /runtime.ec2944dd8b20ec099bf3.js HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:15:32 GMT
ETag: W/"63764204-5a0"
Expires: Fri, 30 Dec 2022 04:09:05 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zsx31thwRjqV48RcIfFfmRXhZASQScEFNdjelRE1cUSxVDuECQM2latZiZnzR9x6BpUSmJqMWZSQbKGYO8vXK4Bfr%2Ft9Hy5%2BuA0Xny9BZI6BxSfXzOqctKxJTqectdlJsifV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9c2ce9eb523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 1e258d2d97dc1a2c884f27040ee7ce5e
fd1009422b0736848e10d0d72ed079c711fc7944
106002bf0a4504a5148fd13443cf5b29a83887da7ee321595f48c661d309416b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6522
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:05 GMT
Last-Modified: Wed, 30 Nov 2022 02:20:23 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
playmaster.co.zm/main.4584292a52069cedd36b.js
172.67.149.121200 OK 1.1 MB URL HTTP/1.1 playmaster.co.zm/main.4584292a52069cedd36b.js
IP 172.67.149.121:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.1 MB (1110726 bytes)
Hash da4dc0c4a2772d52f0dfdd4147240674
06972415d741d5d3c7335644d435e088bb97384f
7cd2ffd81e28af94003d3e561116d0f6d90a05a078a6facfbdb8cc8aa7edf2a4
GET /main.4584292a52069cedd36b.js HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:15:32 GMT
ETag: W/"63764204-57ed71"
Expires: Wed, 28 Dec 2022 17:51:53 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 123432
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H6Q44mUpp2WeBrJ4gPQ1I2JrXGKNL5QlaDQFI%2FTVTadi4OuJXi1rQFfqhdzsdKGNBUFg5ljtpegslkwoHc54jUAxF7s6xNYSzDNaoHpu8%2BPhK8HZuh%2BXf7K4tCOwqpsIjA89"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9c2ccc7b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 96ba40be4ad9ed57887bc3d9d39b9ee2
bd3b5d8943ab7741bfa5c18c8766013b80519424
19e5f58133b52dbd7ab629ad02f9a38ed2b69909b797ff3722f09fb811085362
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6563
Cache-Control: max-age=103295
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:05 GMT
Etag: "6385ae3d-117"
Expires: Thu, 01 Dec 2022 08:50:40 GMT
Last-Modified: Tue, 29 Nov 2022 07:01:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 03:11:13 GMT
cache-control: public,max-age=3600
age: 3473
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6558
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:06 GMT
Last-Modified: Wed, 30 Nov 2022 02:19:49 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
34.216.88.5101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.216.88.5:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: r67Am+2i9LI0WW5gZ0Ba1w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jF6eMuZiN7QGt9lDJKY0ITK1a5o=
playmaster.co.zm/files/webexIconsDesktop/assets/image/header/logoZambiaNew.svg
172.67.149.121200 OK 4.8 kB URL HTTP/1.1 playmaster.co.zm/files/webexIconsDesktop/assets/image/header/logoZambiaNew.svg
IP 172.67.149.121:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (19478), with no line terminators
Hash 914a2a35b41b3613f167e81f42f16913
bf330cd27eb10f28cc4043cc2cba463746b9fc65
8e36bc4b4cb0bb2bf68008a88632ec77c9a44a40243d8f6507ea6a7dbc6667c5
GET /files/webexIconsDesktop/assets/image/header/logoZambiaNew.svg HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:57 GMT
ETag: W/"637640b5-4c16"
Expires: Wed, 28 Dec 2022 17:51:56 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 123430
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LarI4qbRRX%2Bi0y8lzh2w484tNEoAvlytmYLmBbQuNKtqQjV7vpAepvtQZk5fWJgXKjPC6A6UuXxaHkJugpFMW2WaVhO0bvG5CWgUExAch6RVasYT4%2Fz1fR5vrHEXLFFVjB%2Bp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9c92f41b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/v2/multi
172.67.149.121200 OK 392 B URL HTTP/1.1 playmaster.co.zm/api/v2/multi
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (769), with no line terminators
Hash 0d02b6257710c867edde600c97f42d77
da63bb5bf16ada84b6a659015cacb69cbec2638d
550796f5cb26cda08c2013ef12441935f4205af7b797a626280e928c7f3fc35a
POST /api/v2/multi HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 83
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FyYZp0QL6dS%2F6oybzGjv25aDmR7RCPC0wp20drHe8jmTNOCi88XaGxKeaS%2BJ6mOoNy1fnvPPdHvnRYTGtcz4d%2F5nhB9AOlm1qvIoGTh37EwG3zJD3CMm5r5dVnF6DiyeABjT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c908eab523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 63554b60bb305a45c430613fd013bbc3
8767dfe76ea8295d596eadc765eabc8a5475ee11
d22618294684c21f2bfdc38a141702c6f08e32a0fbcf0862427c3d9dd849e1f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6537
Cache-Control: max-age=133484
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:06 GMT
Etag: "63862445-117"
Expires: Thu, 01 Dec 2022 17:13:50 GMT
Last-Modified: Tue, 29 Nov 2022 15:24:53 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
playmaster.co.zm/api/v2/multi
172.67.149.121200 OK 748 B URL HTTP/1.1 playmaster.co.zm/api/v2/multi
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (1393), with no line terminators
Hash efef64508b8e7006e5036f3ba375808c
e0c2fab0ca26102e388ed354482d0425562522d8
a1a234918ecff96106b75787101144c6aeaf6ab504a5ccacccd91adb50f888d0
POST /api/v2/multi HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 40
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tkRxTcdLGvkt%2FJ1fxg6l%2BpwaRKthqcF11Cc7ssFNAMPrd6r0%2Fn94veMbjX0vZEy%2B9wkyqaueyBDOYHD7GOt4uYye6HwkRcvfTFE2JQaNywAqIg%2FZ8n%2BaA9HFt6AYj0aOzst%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c90c3a1c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/files/i18n/en.json
172.67.149.121200 OK 3 B URL HTTP/1.1 playmaster.co.zm/files/i18n/en.json
IP 172.67.149.121:0
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /files/i18n/en.json HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/json
Content-Length: 3
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:55 GMT
ETag: "637640b3-3"
Expires: Fri, 30 Dec 2022 04:09:06 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
Accept-Ranges: bytes
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LErrg%2BPou%2BOwSSwmmQaj75GNnJ0ZO7ZvoM4IwEGteKxYXIFSOqpAkLE1fD1dP8cwVpwDrFZ0gDcIANmCW44KxQx2S9MIIgjNWEDs1FuKl9Bcc7QMxgAL3UGNru%2FIbjMGtZJS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c8ef28b4f4-OSL
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/v2/multi
172.67.149.121200 OK 748 B URL HTTP/1.1 playmaster.co.zm/api/v2/multi
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (1393), with no line terminators
Hash efef64508b8e7006e5036f3ba375808c
e0c2fab0ca26102e388ed354482d0425562522d8
a1a234918ecff96106b75787101144c6aeaf6ab504a5ccacccd91adb50f888d0
POST /api/v2/multi HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 40
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bkqb3JPi4DzNpwl3hAm1IcAvIJcdrnH7gydOnWQo%2FVSRWqM9x%2BANDZdsOzeXyk8HosSu4uM7vD9LVSU5oRZvKtsV7DzySnVP%2F7C2xx0MTjrczHF9gmvHBEDHP5V2wphKhJ5i"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c8ff2db4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/v2/multi
172.67.149.121200 OK 265 B URL HTTP/1.1 playmaster.co.zm/api/v2/multi
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (395), with no line terminators
Hash d23a5a5f0e1bbe3c2ae910789ba40171
0e076941dbc276f3a1ab9e2da7cb0fa6a8720a8c
661c699d4e6b01b8ea411085d7fa666ea02183a26eea056440241343a3a6d020
POST /api/v2/multi HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 71
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fayKGvFksxr6wEJO4lP2bxfNAEtQy2iwy48fcAwOZ121BQNo1DIUTZYjU6K%2FjFZj8LGpu4GE4h5lfaXnFK2XkFQsPr5NYRD%2FfYZNh4flKVOO01ju76YgL5Muq%2FbPHr%2FDQbbI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c90870fabc-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/v2/multi
172.67.149.121200 OK 109 B URL HTTP/1.1 playmaster.co.zm/api/v2/multi
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 76490670ed7af1d23b8bdd74f9fb060f
2a0bf6dbcd02583faf22a8c43aeb4760370993e7
bdb2d2bc5df81eea142d7b3baad1cf74bf7de14d91915cfb267212bb57e84bba
POST /api/v2/multi HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 107
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1BXGun0FGB4U3w2zwno%2B6BAvTrUs3uUXTRMQDqVdSNfnuleOl2MQz0hHwTYwc9qsCUDJOb%2FnYvlLlmjZfokqAWFLG5rrd%2BkXTqtki6tJzPNTz0pio1CYL6Jy068w7%2F9q4Eyb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c96f52b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/files/webexIconsDesktop/image/header/label.svg
172.67.149.121200 OK 195 B URL HTTP/1.1 playmaster.co.zm/files/webexIconsDesktop/image/header/label.svg
IP 172.67.149.121:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 017c43a3cf2d2451844ef55c6b25bb03
5c841a9a36ecd037088f3950f87c8fd1818de0bd
550c7759740b206e871c7773a85a0882ef1285c97425acae7ec79d5f21f84cc1
GET /files/webexIconsDesktop/image/header/label.svg HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/styles.17094742bcc91e713bed.css
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:57 GMT
ETag: W/"637640b5-122"
Expires: Fri, 30 Dec 2022 04:09:06 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=og9bV%2FY2GnauGvVmWpYV7HXzTA%2Bo%2FxZj7gy3J0PS1RugTr14%2BWVQ%2B2DvYMzascLvsSEPK2krnjJWjwl37nnMF%2BJUXrylwqhykflbCHW78t1pIem4uoxuJFbMsgZGgT8%2FrU%2F3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9c9991eb523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/united-casino/get-providers
172.67.149.121200 OK 542 B URL HTTP/1.1 playmaster.co.zm/api/united-casino/get-providers
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (2315), with no line terminators
Hash 4d138bd9ace029851bb4d2342d859816
9859763cd344839c8e3c3634172f103a2d6adafc
0ec2236ea451fb29342389473e654ec720f868ffc97fca0cb1002e7f88707043
POST /api/united-casino/get-providers HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 83
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k0i3KFH5KdXF2E9v0%2BsTXZdtEkKPNzJfKtwtbsWxjAMvvSsQHPrprbavHzgmBJlMTxQhyauXTm%2FKToJWszkTis1kirGNkWcTMpthAC98AVLiIoLaJpEXp25Nh6sPesprnvpW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9c9af72b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 0379df9b5cab177bf437ac41f2268be4
56db4d2ed92e1cbd13a3950ca0cc72969fbcc354
155885d99d8a1e961d92f649f6838d9bd7039c019930d76ad170a3c5b39e27bc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 08:20:01 GMT
Expires: Sun, 04 Dec 2022 08:20:00 GMT
Etag: "56db4d2ed92e1cbd13a3950ca0cc72969fbcc354"
Cache-Control: max-age=360053,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7720b9c9ece0b4f9-OSL
playmaster.co.zm/files/webexIconsDesktop/image/header/fire-01.svg
172.67.149.121200 OK 2.3 kB URL HTTP/1.1 playmaster.co.zm/files/webexIconsDesktop/image/header/fire-01.svg
IP 172.67.149.121:0
Hash 256fdf19c57d8f92dd477d114d586c44
c6242e118c159e76f2fc13b5e0302bf2acaa54ce
96e7ccb0329163adf138302a26f4b2010ae7d8e236ed3f7014d11111e8522344
GET /files/webexIconsDesktop/image/header/fire-01.svg HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/styles.17094742bcc91e713bed.css
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:06 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:57 GMT
ETag: W/"637640b5-547"
Expires: Fri, 30 Dec 2022 04:09:06 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=stDir3EYzrnJrHL2I29YxjNwXML5rzdG5iqL%2BMvqJHic7jj5pv8cvTo%2FubJvlxvUpFLr2%2FAW0vz5EoIlXz3BPuK716WbKd1zq5BcvcntvHfDL%2B4HSMsustrLDSkZzWxajRkr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9c99c661c06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/files/fonts/google/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
172.67.149.121200 OK 15 kB URL HTTP/1.1 playmaster.co.zm/files/fonts/google/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 172.67.149.121:0
File type Web Open Font Format (Version 2), TrueType, length 15332, version 1.0\012- data
Hash 587de8ec039052f50e69c9654439b991
dd26304e3095c1ec9f8860e3c5f094d2826f6074
0f961c62a5d3faf422bafd5ce3c490a54b95c68a1bb5aaca37b66a8257fe02ea
GET /files/fonts/google/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://playmaster.co.zm/styles.17094742bcc91e713bed.css
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: font/woff2
Content-Length: 15332
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:55 GMT
ETag: "637640b3-3be4"
Expires: Fri, 30 Dec 2022 04:09:06 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b5ieqyrXp%2F1RihA3OmQBUsoxz4Elny%2FNCnaR15FTjAmn%2F4c%2BCAtV4eXAhl2pfnelG69LwoOlKp0KmbfdyBKi%2BYSBifo%2FcGmol5Io15iRgFDXfPpUwgSVTy1Yq7BiDKdBWHpo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9c9cf77b4f4-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 614da8f925b88a5a7b662acd4eadffc2
024547cda47a0ae4b4fd9aa1b3637e1b4fcce46f
85177a491b51d70649cd6a7d6bc40f71bafd26f63ad522650f777fa733ebe498
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85177A491B51D70649CD6A7D6BC40F71BAFD26F63AD522650F777FA733EBE498"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5998
Expires: Wed, 30 Nov 2022 05:49:05 GMT
Date: Wed, 30 Nov 2022 04:09:07 GMT
Connection: keep-alive
unphionetor.com/vctx?t=102362
139.45.197.236204 No Content 0 B URL HTTP/2 unphionetor.com/vctx?t=102362
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /vctx?t=102362 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Wed, 30 Nov 2022 04:09:07 GMT
access-control-allow-origin: http://playmaster.co.zm
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 231455fa264b33cde6fe9d691de0e5c0
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/logo.png
172.67.149.121200 OK 20 kB URL HTTP/1.1 playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/logo.png
IP 172.67.149.121:0
File type PNG image data, 142 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash bd7bcf8a27de6eb0ca4b88bfacc70ac0
84db6daeb3b1d08779e2c2e55ac80b25bb08d3dc
9e54e943fec4b06137b9587197b444f9ff888bc7dca221730156cdffce34e560
GET /files/webexIconsDesktop/assets/image/royal-win/logo.png HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: image/png
Content-Length: 19721
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:57 GMT
ETag: "637640b5-4d09"
Expires: Wed, 28 Dec 2022 17:51:57 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 123430
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01elFWO0xzXKjqbf9eqyBa8RJKNecBZCBgdwOSbjiIZwFG%2FHSPAmLkoHcZt57vKhg%2Ft%2FABYdouT2NaQ38vBaRWjDHcOAPng43OV8tHDVkhA%2BnvusSy%2B65Qu2kWv%2BRfxxYdud"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9cb6806b4f4-OSL
alt-svc: h2=":443"; ma=60
playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/closebtnroyalwin.png
172.67.149.121200 OK 736 B URL HTTP/1.1 playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/closebtnroyalwin.png
IP 172.67.149.121:0
File type PNG image data, 84 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash c6a07c630b2b0f04912f2976556bd4ae
7cf0820924432f7087cae52aa1f17fe2c3855153
95297c1b17a44e794cc4c04614574f2b0c29ee25ac73e4cc48eb857ab5e30117
GET /files/webexIconsDesktop/assets/image/royal-win/closebtnroyalwin.png HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: image/png
Content-Length: 736
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:57 GMT
ETag: "637640b5-2e0"
Expires: Wed, 28 Dec 2022 17:51:57 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 123430
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KAF1zl6Iskh5nmK20hXxXrtEvy9RMxPQlI19esSj2aRnkP7SF2adpSPI2eXfKfPS59ccQ%2BiX4gJIUnKwyfDIl7rp8P3TOz0b2fg74Ex2UZfAmQl1QWeH5xO3TOSYgvC%2FZ8Ea"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9cb69ecb523-OSL
alt-svc: h2=":443"; ma=60
playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/popupbackgroundroyalwin.png
172.67.149.121200 OK 411 kB URL HTTP/1.1 playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/popupbackgroundroyalwin.png
IP 172.67.149.121:0
File type PNG image data, 1083 x 629, 8-bit/color RGBA, non-interlaced\012- data
Size 411 kB (411181 bytes)
Hash 60f5e8780f21b2ccd7640cf68d09e5bf
6c81b2316588c6df88ba0b26a024d947b00af6b9
8698951599b843e5147f60f9ecf6c2f75540d892480c5dce37fa9e4e5ddaf43c
GET /files/webexIconsDesktop/assets/image/royal-win/popupbackgroundroyalwin.png HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/styles.17094742bcc91e713bed.css
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: image/png
Content-Length: 411181
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:57 GMT
ETag: "637640b5-6462d"
Expires: Wed, 28 Dec 2022 17:51:57 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 123430
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jix%2BeK%2FcMpUR831vWLVR09aEXflXmKBEtYsfI47iwz9dBXNg82f%2FgBYosabl25uBIxzKdKtbbni8dKPKoxYBKXbareiSLKvz2Q323wHRdLcfi6SVQpd8tPJJrFwlSYh7eC7d"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9cb6cf21c06-OSL
alt-svc: h2=":443"; ma=60
playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/userroyalwin.png
172.67.149.121200 OK 1.1 kB URL HTTP/1.1 playmaster.co.zm/files/webexIconsDesktop/assets/image/royal-win/userroyalwin.png
IP 172.67.149.121:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 2393c01db2d367b20af71c96dcdb0959
954806468c1ac2dccdfc612d36b139420b81415d
eea8194f4170027e6fbbce7ef6f4a32bc5df662218bf05bd37da12a0acd54183
GET /files/webexIconsDesktop/assets/image/royal-win/userroyalwin.png HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: image/png
Content-Length: 1096
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:57 GMT
ETag: "637640b5-448"
Expires: Wed, 28 Dec 2022 17:51:57 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 123430
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4kV%2BsU02sOE4TkS2m5lWRF6Z%2BnSJUtp8OyWfGQKur7XlNyPCt15bcfWAiXHM7JSUnhOj7oweOWmJLVopPr8rtDx2YM%2B74oc5gCl4hHed7Q%2FRFACZakkAFDFxC0LoJX5iHGye"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9cb68e8fabc-OSL
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/v2/multi
172.67.149.121200 OK 325 B URL HTTP/1.1 playmaster.co.zm/api/v2/multi
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (446), with no line terminators
Hash f62b2d83edc4e6294967668a6e3e960a
6b2babda4882e2dd6fafd0b851884b814c833991
613e9b90f6b042b0726b5df56d03a0a6c6d724e74116494b6d9f388266d8e85d
POST /api/v2/multi HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 109
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uo8zuCWj61Tuq5R8CZNllathHB1y%2FopDuNNBSqhHF%2Bjmff%2Blk5PXA%2BnnaRHoL8K1oSZ7rLcuFa%2FVyzxnwg4LnbYUIUgK82boBK3h3yzg2W0fWpox9bcstVjtxd7BpsYwCZme"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9cb5800b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/v2/multi
172.67.149.121200 OK 1.5 kB URL HTTP/1.1 playmaster.co.zm/api/v2/multi
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (8670), with no line terminators
Hash 7e0bf4b317eabf290f8452de9897559e
f07606ad8cb623c68315afab481d18dd7fb1d3e6
22e99ccf4179909f1fde4ae51402ee735dee2ebf36f464aaf79f9c622aac7b6e
POST /api/v2/multi HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 87
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lxpgf%2BUxh7%2BnIhgCKMZ7%2BOce4ZLA9TbKcSwAV4BKqseEkztqYDBfl6RjZrP3d138si3gIbOrYQs2RX45RMGh%2BR1zdbTyq2EdGznlOW9Oqoi9LPLGDVa44NdJ1e56bBFBtvgt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9cb6804b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
playmaster.co.zm/api/united-casino/get-games
172.67.149.121200 OK 1.3 kB URL HTTP/1.1 playmaster.co.zm/api/united-casino/get-games
IP 172.67.149.121:0
File type JSON data\012- , ASCII text, with very long lines (4905), with no line terminators
Hash 118cf3ee921d0dfd25a5e5efa4e6a178
86d1b3453177444d15f8a8708a9aafd8114e7d62
38409c21a05722c4d14b5f7ee65bc60db2cda27f9fe37481829e05f7bfc46b28
POST /api/united-casino/get-games HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
authorization:
Content-Type: application/json
Content-Length: 108
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-XSS-Protection: 1
Strict-Transport-Security: max-age=3600
Access-Control-Allow-Origin: http://localhost:9999
Vary: Origin
Access-Control-Allow-Credentials: true
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vQhudgSSgdf0uk%2F3ZoLTqMuDyxJ27zxB2xegQrt1gkYGxfgh%2FHAcQMgBhr20D8xOxUTVVQf6Kx0R5TGM9ifpDgEE%2FGMlOSYSOCj5qQftAogkm7JcHyhiTIQjfKYz5UpHHzV2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9cb880fb4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5ae03dd5ffb20b4262d67e0651ef95c6
66c99bc6f0ff7f848670e9949dbf97318e7199a8
3567f9b0fd2440ac9bfee2c99eb3f7f9f0d499dcfbd4043df10b11e42f82fa1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "6385de05-117"
Server: ECS (amb/6B80)
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5ae03dd5ffb20b4262d67e0651ef95c6
66c99bc6f0ff7f848670e9949dbf97318e7199a8
3567f9b0fd2440ac9bfee2c99eb3f7f9f0d499dcfbd4043df10b11e42f82fa1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=108962
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "6385de05-117"
Expires: Thu, 01 Dec 2022 10:25:09 GMT
Last-Modified: Tue, 29 Nov 2022 10:25:09 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5ae03dd5ffb20b4262d67e0651ef95c6
66c99bc6f0ff7f848670e9949dbf97318e7199a8
3567f9b0fd2440ac9bfee2c99eb3f7f9f0d499dcfbd4043df10b11e42f82fa1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "6385de05-117"
Server: ECS (amb/6BC8)
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5ae03dd5ffb20b4262d67e0651ef95c6
66c99bc6f0ff7f848670e9949dbf97318e7199a8
3567f9b0fd2440ac9bfee2c99eb3f7f9f0d499dcfbd4043df10b11e42f82fa1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=108962
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "6385de05-117"
Expires: Thu, 01 Dec 2022 10:25:09 GMT
Last-Modified: Tue, 29 Nov 2022 10:25:09 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 5ae03dd5ffb20b4262d67e0651ef95c6
66c99bc6f0ff7f848670e9949dbf97318e7199a8
3567f9b0fd2440ac9bfee2c99eb3f7f9f0d499dcfbd4043df10b11e42f82fa1b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=108962
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "6385de05-117"
Expires: Thu, 01 Dec 2022 10:25:09 GMT
Last-Modified: Tue, 29 Nov 2022 10:25:09 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 63554b60bb305a45c430613fd013bbc3
8767dfe76ea8295d596eadc765eabc8a5475ee11
d22618294684c21f2bfdc38a141702c6f08e32a0fbcf0862427c3d9dd849e1f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6538
Cache-Control: max-age=133484
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "63862445-117"
Expires: Thu, 01 Dec 2022 17:13:51 GMT
Last-Modified: Tue, 29 Nov 2022 15:24:53 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
fs.betunit.com/1665482188129royalwin-prize_ZM%20(1).png
172.67.185.6200 OK 151 kB URL HTTP/1.1 fs.betunit.com/1665482188129royalwin-prize_ZM%20(1).png
IP 172.67.185.6:0
File type PNG image data, 411 x 275, 8-bit/color RGBA, non-interlaced\012- data
Size 151 kB (150615 bytes)
Hash e2ff47958cd9b7fa96aad30b4c89c0fb
01f363900df72367d8565f32fdb0f25e99bba221
3076cb8bcae346179d595167d0eb017b11ad4fb48f1421f0dcd4028fd18e436f
GET /1665482188129royalwin-prize_ZM%20(1).png HTTP/1.1
Host: fs.betunit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: image/png
Content-Length: 150615
Connection: keep-alive
Last-Modified: Tue, 11 Oct 2022 09:56:28 GMT
ETag: "63453dcc-24c57"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MsFbgmOuLPP3Pt1rimc5qjp%2F27jsSTRFBYaK%2B%2Bp1YuU%2FsRFJ0lr4IhR%2BRHeeGLJ00xQhm5gV4F2fZBh97cf68nUPjQtsX5jrF51QbO4XVpvsfbZ8%2FSWN0MDsASp%2Fu%2FgdMA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9ccad711c0e-OSL
alt-svc: h2=":443"; ma=60
ocsps.ssl.com/
100.24.223.135200 OK 1.8 kB IP 100.24.223.135:0
Hash c6d38e8aad667bfff0fa904d7063e4f6
9caf3444722eaa72b1476b7d9ac25a1a29d5115d
361e2ee81ad7a1a9a6c97e25177aa078f5cdd73ad64ef6e6d2e42053ce82c97b
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Tue, 06 Dec 2022 06:24:02 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "9caf3444722eaa72b1476b7d9ac25a1a29d5115d"
Last-Modified: Tue, 29 Nov 2022 06:24:03 GMT
X-Proxy-Cache: HIT
gis.slotegrator.com/api/images/games/ThreeOaks/0d4f9d942cc74f38bc3d2f46d23215aa.png
172.67.69.178200 OK 41 kB URL HTTP/2 gis.slotegrator.com/api/images/games/ThreeOaks/0d4f9d942cc74f38bc3d2f46d23215aa.png
IP 172.67.69.178:0
File type PNG image data, 287 x 193, 8-bit colormap, non-interlaced\012- data
Hash e0de33c576cdddcdb9fc8c6375e0e11c
f10c0305ae3491e3c37c43f31009b5d597df7ff2
8049a30c76a6082b05994aa04723bf802829768dd6d09eb1608c169d61cd2ddf
GET /api/images/games/ThreeOaks/0d4f9d942cc74f38bc3d2f46d23215aa.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
content-length: 40611
last-modified: Tue, 29 Nov 2022 13:40:14 GMT
etag: "63860bbe-9ea3"
access-control-allow-origin: *
cache-control: max-age=2678400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S96zvJcp%2FmB3PsEdatSQQzD0WOfTjSdkim8525QVA3ahgZUuKUwoLhty4N%2FsQ6N8Qu6IUfsPbI1k4IeeWQcN%2FdbRTpYntsS9aVJO7wsfNNeGipWXJ7%2B%2Fv83MZ7FageAIEXPR8ls%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cdaf0f0b39-OSL
X-Firefox-Spdy: h2
prod.gamerouter.pw/api/index.php/image/get?hash=b37dd1f8ef878128094f900be2b9002d93bda2c9.jpg
190.2.145.249200 OK 41 kB URL HTTP/1.1 prod.gamerouter.pw/api/index.php/image/get?hash=b37dd1f8ef878128094f900be2b9002d93bda2c9.jpg
IP 190.2.145.249:0
ASN #49981 WorldStream B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 287x193, components 3\012- data
Hash 8a98740717e16c7fbeed38ae1003613c
b958ba6f9f1c59a008716cf4285e62fc7fb06cee
4bd9b9c22b35f8555718713897dbb51e8321f8195b1c57d36ef64724374a6ea4
GET /api/index.php/image/get?hash=b37dd1f8ef878128094f900be2b9002d93bda2c9.jpg HTTP/1.1
Host: prod.gamerouter.pw
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
gis.slotegrator.com/api/index.php/image/get?hash=423b1f5041d649ef65a7c6ae0c1cc7c5b19a43ff.png
172.67.69.178200 OK 57 kB URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=423b1f5041d649ef65a7c6ae0c1cc7c5b19a43ff.png
IP 172.67.69.178:0
File type PNG image data, 287 x 193, 8-bit colormap, non-interlaced\012- data
Hash 32f1a6e91d96d19eb583a3a8576aeca6
9c8f236284fdbafbfbea3311f0d942af32e1a87b
9d4c59ae47d25cb556d7662b7f381af5c0120372d0b8c55ce01d31a2ca153280
GET /api/index.php/image/get?hash=423b1f5041d649ef65a7c6ae0c1cc7c5b19a43ff.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jwz1xucUhRjWOkwyr5vAkSezk0DpYMjKrRcWojH4pi3Ggt4F2DIX4R08nsb8bbnRloKmgFbGZ9cPz%2BeDhFX9q15ZfAoM0KxjwhaOWEsKmMnREA3pq94ic9gUD%2Bp%2F%2Fbl%2BORHyavU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cd8f020b39-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c3c6fcc1a6ec6e438b371359a220d437
646d2c502eb3579d0c394dbdd16ef10f60f43063
5e75d86847b64e661c218e63d1b4b2c4a9ade7506b3b50fce16dd39ebaa5c5fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6566
Cache-Control: max-age=112245
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "6385d132-1d7"
Expires: Thu, 01 Dec 2022 11:19:52 GMT
Last-Modified: Tue, 29 Nov 2022 09:30:26 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
a.exoclick.com/tag_gen.js
205.185.216.10200 OK 515 B URL HTTP/1.1 a.exoclick.com/tag_gen.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (1030), with no line terminators
Hash 628e0302068ade64b5f411f39d5ce7e5
ff1a609269f34bad5ae67ed1678df3f7b905d018
c583ceaeae2e9a05e25c27b61520710f16b8b98ca7f9087a75ae90a040b8bc3f
GET /tag_gen.js HTTP/1.1
Host: a.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 515
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"a56c0470b9aa925085e51a6271a"
X-HW: 1669781347.dop021.sk1.t,1669781347.cds249.sk1.shn,1669781347.dop021.sk1.t,1669781347.cds251.sk1.c
Access-Control-Allow-Origin: *, *
playmaster.co.zm/files/faviconsZambia/android-icon-192x192.png
172.67.149.121404 Not Found 122 B URL HTTP/1.1 playmaster.co.zm/files/faviconsZambia/android-icon-192x192.png
IP 172.67.149.121:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aabeec983d3c897396cfd907842d784d
8752bef32fe307ab620914f8fb87ad378ea52686
07dc4622fbc281139dbd7f08cf88194f8307b323cc3db25fcbbb7b5ce69fb59e
GET /files/faviconsZambia/android-icon-192x192.png HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 404 Not Found
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4sIPr5pYu1u2dXXf3%2BrAXeZBM2L58McyLZXVUDlPd52FBq0Hs4daX91AoTEgsPS%2BoX3lsBjWH9xDd45tGZOe6ygY88gpS9Vm6Jj%2FzX%2BpXzUvRjRzbY%2Fi3ditzSTRPgWzSACw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7720b9cf59d9b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f50fd635895870df33a17fe377a6a038
dd65dfbbc810b095432cfd59f971af04a9e31ab7
ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ZgoNSARHktGDw3/1dFAljHUgON9RcqrAHJ8dl//mo/N57urtmNs7EXCh/Y5G7h5PzLcgzojX+WJ2TMX2iqgVYw==
priority: u=3,i
content-length: 27340
x-fb-trip-id: 1904183273
date: Wed, 30 Nov 2022 04:09:07 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 30 Nov 2022 02:41:08 GMT
expires: Wed, 30 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 5279
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
playmaster.co.zm/files/faviconsZambia/favicon-16x16.png
172.67.149.121200 OK 1.3 kB URL HTTP/1.1 playmaster.co.zm/files/faviconsZambia/favicon-16x16.png
IP 172.67.149.121:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 9bbcc98c2bca44d7a94b4074280cc15e
cdeedcc784b89ab1b1a74ad513d33584c1d594a1
4ade4afd12ec303e37f5941367df8a239b0e9a04e48a08b6b3d1983e9084b158
GET /files/faviconsZambia/favicon-16x16.png HTTP/1.1
Host: playmaster.co.zm
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://playmaster.co.zm/en/ucasino_ms
Cookie: web.sid=s%3ArTdqE5PTaJDWaZP6_jcq6bH79jl7IH3Z.aKx%2B4He%2FAacviSgPi6d6Yb0nXtiYJUKltzVgQ%2BVt%2Fzk
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 04:09:07 GMT
Content-Type: image/png
Content-Length: 1278
Connection: keep-alive
Last-Modified: Thu, 17 Nov 2022 14:09:55 GMT
ETag: "637640b3-4fe"
Expires: Fri, 30 Dec 2022 04:09:07 GMT
Cache-Control: max-age=2592000
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cpRvEGx2rISL7OKKPteIT%2FuWmCbPKjIahajAkSQlDLSE%2FFmvj%2B36fy3GiNQ%2BE8Y8u%2FYs%2Fiinq%2B9S1jD20Yp3Tk5kzLU7kDe9jeasv%2Fz2NNObLoGD0cXFmbSms%2BTFuTY6ckV4"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7720b9cf59dab4f4-OSL
alt-svc: h2=":443"; ma=60
d1b82hscw3e9o2.cloudfront.net/media/images/slots/small/ka/jpg/ka-pharaohs-reign.jpg
54.230.245.85200 OK 57 kB URL HTTP/1.1 d1b82hscw3e9o2.cloudfront.net/media/images/slots/small/ka/jpg/ka-pharaohs-reign.jpg
IP 54.230.245.85:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x200, components 3\012- data
Hash bd2e6ef72807d24218dc3addb1083d47
41d5f4c8b05c742ae91b6b27c53a3e00b996a408
727b1e7941e10667219e1540b479b66c4c55cec7968e7c3d76d117ae9ac38f14
GET /media/images/slots/small/ka/jpg/ka-pharaohs-reign.jpg HTTP/1.1
Host: d1b82hscw3e9o2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Tue, 29 Nov 2022 09:28:40 GMT
Last-Modified: Mon, 06 Dec 2021 12:40:35 GMT
ETag: W/"dea5-5d2799030f97d"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1CQA_RQDZPgufuFLlGQGvVkUc0Ada7SBKwP-9VjMYGIHYJqMYas1YA==
Age: 67227
d1b82hscw3e9o2.cloudfront.net/media/images/slots/small/no/jpg/no-fire-in-the-hole.jpg
54.230.245.85200 OK 40 kB URL HTTP/1.1 d1b82hscw3e9o2.cloudfront.net/media/images/slots/small/no/jpg/no-fire-in-the-hole.jpg
IP 54.230.245.85:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x200, components 3\012- data
Hash a196cc1adf87898832ea56504677f301
8f5d6cbc8825e34bffc0087a3c487b25e77daca2
026bdf71bbff5769f86c4e0b812fff933fa3feedc4b203a208de9e9c647812ea
GET /media/images/slots/small/no/jpg/no-fire-in-the-hole.jpg HTTP/1.1
Host: d1b82hscw3e9o2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Mon, 01 Mar 2021 14:25:12 GMT
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 04:09:07 GMT
ETag: W/"9b56-5bc7a62c7dc8d"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: od8UkgsSyyEDTzcf5Cmov3wDLaMFgbvWEcc-3M60ukR4HEtYJ9lWGA==
Age: 62394
d1b82hscw3e9o2.cloudfront.net/media/images/slots/small/bf/jpg/bf-chicken-madness.jpg
54.230.245.85200 OK 49 kB URL HTTP/1.1 d1b82hscw3e9o2.cloudfront.net/media/images/slots/small/bf/jpg/bf-chicken-madness.jpg
IP 54.230.245.85:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x200, components 3\012- data
Hash baab8017f5ba00d0ae57c8a99de6facc
786ebd41ddbadcc38925c7c98811734733b24e8f
c7eb6efe3b7b766ab62f02d4582f0405802760ce09e95cb10465bbd59c3600e7
GET /media/images/slots/small/bf/jpg/bf-chicken-madness.jpg HTTP/1.1
Host: d1b82hscw3e9o2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Wed, 30 Nov 2022 04:09:07 GMT
Last-Modified: Mon, 25 Apr 2022 09:44:32 GMT
ETag: W/"c045-5dd776c5abf18"
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aYdxu2ReauI4-Re3hkj6C57q1wc26vox_z4FhtBE1ViNlDcEcefUhg==
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c3c6fcc1a6ec6e438b371359a220d437
646d2c502eb3579d0c394dbdd16ef10f60f43063
5e75d86847b64e661c218e63d1b4b2c4a9ade7506b3b50fce16dd39ebaa5c5fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6566
Cache-Control: max-age=112245
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Etag: "6385d132-1d7"
Expires: Thu, 01 Dec 2022 11:19:52 GMT
Last-Modified: Tue, 29 Nov 2022 09:30:26 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.google-analytics.com/j/collect?v=1&_v=j98&a=1314452864&t=pageview&_s=1&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&ul=en-us&de=UTF-8&dt=Online%20Casino%20and%20Various%20Slots%20%7C%20playmaster.co.zm&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=246982441&gjid=12243204&cid=1708155585.1669781347&tid=UA-90610526-8&_gid=1592973579.1669781347&_r=1&_slc=1&z=2136853177
142.250.74.110200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1314452864&t=pageview&_s=1&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&ul=en-us&de=UTF-8&dt=Online%20Casino%20and%20Various%20Slots%20%7C%20playmaster.co.zm&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=246982441&gjid=12243204&cid=1708155585.1669781347&tid=UA-90610526-8&_gid=1592973579.1669781347&_r=1&_slc=1&z=2136853177
IP 142.250.74.110:0
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j98&a=1314452864&t=pageview&_s=1&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&ul=en-us&de=UTF-8&dt=Online%20Casino%20and%20Various%20Slots%20%7C%20playmaster.co.zm&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=246982441&gjid=12243204&cid=1708155585.1669781347&tid=UA-90610526-8&_gid=1592973579.1669781347&_r=1&_slc=1&z=2136853177 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://playmaster.co.zm
date: Wed, 30 Nov 2022 04:09:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?v=1&_v=j98&a=1314452864&t=pageview&_s=2&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&ul=en-us&de=UTF-8&dt=Online%20Casino%20and%20Various%20Slots%20%7C%20playmaster.co.zm&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1708155585.1669781347&tid=UA-90610526-8&_gid=1592973579.1669781347&z=2012999557
142.250.74.110200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j98&a=1314452864&t=pageview&_s=2&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&ul=en-us&de=UTF-8&dt=Online%20Casino%20and%20Various%20Slots%20%7C%20playmaster.co.zm&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1708155585.1669781347&tid=UA-90610526-8&_gid=1592973579.1669781347&z=2012999557
IP 142.250.74.110:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j98&a=1314452864&t=pageview&_s=2&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&ul=en-us&de=UTF-8&dt=Online%20Casino%20and%20Various%20Slots%20%7C%20playmaster.co.zm&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=&gjid=&cid=1708155585.1669781347&tid=UA-90610526-8&_gid=1592973579.1669781347&z=2012999557 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Tue, 29 Nov 2022 04:42:34 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 84393
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gis.slotegrator.com/api/index.php/image/get?hash=e6f6ee32ed3372d22adedeacbe76a9ea175f1da4.png
172.67.69.178200 OK 72 kB URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=e6f6ee32ed3372d22adedeacbe76a9ea175f1da4.png
IP 172.67.69.178:0
File type PNG image data, 287 x 193, 8-bit colormap, non-interlaced\012- data
Hash bab2fe0ab0c9f132ddc923688b4f8f06
aa5bd593a62b42d4dc9a5085bad32d2590490d3a
8c83576e5160305217009c3f7ce176fb6493cdddc2d185d65e5b9c819b7dfb1a
GET /api/index.php/image/get?hash=e6f6ee32ed3372d22adedeacbe76a9ea175f1da4.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pwNm%2F2K%2FpqoRk7PN8KnAPaQsZ2Cr5SvTky2nfbTCI%2FNgFgnCgHaueSlTBtm8m77BUA4d%2BTx4LbAV%2F2hHcMQl3JaP3kjLgUtbI3rt6BTj%2FY%2BNP1Rud6OHq%2BFllOrKO5LohHyHki0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cd8f030b39-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11230
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:09:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11230
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:09:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11230
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:09:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11230
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:09:08 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 86 kB IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
File type gzip compressed data, from Unix\012- data
Hash 4bd05c871ea0f60e487f1121b3fab3f0
6de0885baae11dd9f43720b3d84d9cd8b0a3cd3c
e5fe8e9d8176f1a4b73484ba147ec94f62e742b27519663713af30a168336e8c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11230
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 04:09:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0c14828912decf19c9d95fee93e92f00
49a82390cbf2139bf681d896f9467ab736e0b337
bbafc9bd160a30c6a31954bdf66655e1decc59dead3bb94c6fa21cad1cd56fe3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11466
x-amzn-requestid: 40ae63d3-397e-4118-90b2-d48b1f4014c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHUxIAMFxWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-2b309a0a5e93f68312a26fa1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G2_x26WJ_ISQDsWfV3RzC_jCy5FLNLpblRk_GvuCn4i-ETBAsaKBjQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 22583
etag: "49a82390cbf2139bf681d896f9467ab736e0b337"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9fb14804c284e300f976848e30396e9c
6004b4b7afd22dded903f026d245bc90a6706767
1cf96b0b6c83f182d018fa4ffb9924038bf282755091e7bacff2a624220260d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F265a94d3-cdf4-4682-bcea-7cb1b79bc860.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13195
x-amzn-requestid: 1303b72c-fe18-46a3-b3c1-06f3b8550d90
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvHW6oAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1b3dbbb005a238117076d1f3;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pw2Wm8mI8MxRAOVsdvvWLEuxPN5ffcgWBZ_KecuuS5stoTHF4hxECg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:08:33 GMT
age: 21635
etag: "6004b4b7afd22dded903f026d245bc90a6706767"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ym_L3s5E6MLy6BxqNkVxok6L6hA4c-ilSsEqt42j2IbiXYPb4c6-VQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:51 GMT
age: 22577
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ced71a5-36d7-45c9-b67b-df6c12c1a127.jpeg
34.120.237.76200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ced71a5-36d7-45c9-b67b-df6c12c1a127.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a8c2292c953e41a108b1ca1f83b5134
0c3e4019730bae709f01d0fcbc6b4b0f20388c0f
155552a78d298bb7f16b41375faf63037de17d1caee1a836bbd512c2e4e5d1fa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ced71a5-36d7-45c9-b67b-df6c12c1a127.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6695
x-amzn-requestid: 870d0eb1-8aa0-40d0-a04c-5e2666b68720
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhXTFWBIAMFfvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c2e-2f45c71127e5bebd660e6023;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:39:58 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4kohsyhb7lYfyt2YFKwV0h4Pwywl1J5pA5WGoFFdpv1kS9XodWRnrQ==
via: 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:51 GMT
age: 22577
etag: "0c3e4019730bae709f01d0fcbc6b4b0f20388c0f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7f230eb-6b67-4a80-b973-d8ea78fe73ae.png
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7f230eb-6b67-4a80-b973-d8ea78fe73ae.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e08af5b1d18986e112913c6e69cc8ce6
151b60134a66305bd72dbb3810f67a57720b2af1
555a62d98f4002ad187a6b480d534a1dbe3c64d1f4d17cffad2ab985c10ca462
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7f230eb-6b67-4a80-b973-d8ea78fe73ae.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12853
x-amzn-requestid: 25e4402d-98d0-4c38-a927-397c37724bea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhdpHAuIAMFweQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c57-506672a36959d9ea09ef5155;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gHL2sFE-o1u5kEIUiabbP6u5CXr3ihI4mKiAVkfReyuJuTF5k5ktSg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:17:16 GMT
age: 21112
etag: "151b60134a66305bd72dbb3810f67a57720b2af1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cb669522a324cd5d9ba1b1743138d38
71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0
a997731964710b80affb001f7f2e2f05a93550b06c1626279516d78b11332803
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa44c8657-c62c-4dd0-8688-d6b89a767fb4.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8337
x-amzn-requestid: 88e6ec5a-6b04-4787-91e4-02f316d0d6e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgYHViIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-10f0d81a09c0ae930f6be726;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CQERARyqGc2C8dEihlWw5X9eI6QqdR9Equ683aCy1XkizytQdod9Kw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:57:25 GMT
age: 22303
etag: "71e4307194ea9fb15d29c8a5e35f9bfd3cb0c6e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-90610526-8&cid=1708155585.1669781347&jid=246982441&gjid=12243204&_gid=1592973579.1669781347&_u=IEBAAEAAAAAAACAAI~&z=1566606394
74.125.131.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-90610526-8&cid=1708155585.1669781347&jid=246982441&gjid=12243204&_gid=1592973579.1669781347&_u=IEBAAEAAAAAAACAAI~&z=1566606394
IP 74.125.131.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-90610526-8&cid=1708155585.1669781347&jid=246982441&gjid=12243204&_gid=1592973579.1669781347&_u=IEBAAEAAAAAAACAAI~&z=1566606394 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://playmaster.co.zm
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 30 Nov 2022 04:09:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=713553236672667&ev=PageView&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&rl=&if=false&ts=1669781347036&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669781347035.676459070&it=1669781346826&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=713553236672667&ev=PageView&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&rl=&if=false&ts=1669781347036&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669781347035.676459070&it=1669781346826&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=713553236672667&ev=PageView&dl=http%3A%2F%2Fplaymaster.co.zm%2Fen%2Fucasino_ms&rl=&if=false&ts=1669781347036&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.2.1669781347035.676459070&it=1669781346826&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 30 Nov 2022 04:09:08 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1cfa609ebdf236e2f3e3ff25dd05caf
c8117b0187d4d9021ed1a42907bd93d24ed4ebf0
7a2761aa36168d4f2c9034486777f5588aaf0fa1f7d1e55006db7320259303b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
unphionetor.com/vbl?t=102362&bid=undefined&aid=undefined
139.45.197.236204 No Content 0 B URL HTTP/2 unphionetor.com/vbl?t=102362&bid=undefined&aid=undefined
IP 139.45.197.236:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /vbl?t=102362&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 30 Nov 2022 04:09:08 GMT
access-control-allow-origin: http://playmaster.co.zm
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 2770a78ea246a2255ef0f0365a5b373a
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-1456890.js?sv=6
143.204.55.98200 OK 4.5 kB URL HTTP/2 static.hotjar.com/c/hotjar-1456890.js?sv=6
IP 143.204.55.98:0
File type ASCII text, with very long lines (5909)
Hash 12f246bfc8dec129b971b526e141502a
d6c6158f4cee41e85ef31edcc90dadfe72b4ae0d
11ba74d34df0e325fc3411b5a58855f651f987d2be030b7ca9aed05ed43d3e32
GET /c/hotjar-1456890.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 04:08:30 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/aefa91aa4a20ca8b398ceac8fe93e1f5
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HPRzGSCiFd7spw57dQsvATDi94kzmjvAjLitICbcz4x3IiuvAjqS9Q==
age: 37
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 798c6088f000b3a2464e23a92271c24d
2a53b3d3bd4a9104c79595f664276db5b32b9bad
dcccfc9bb4da634286d08301fcf23be3ae26bb429b35349fb72dde530fdb3ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-vendors.js
172.67.38.66200 OK 63 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-vendors.js
IP 172.67.38.66:0
File type Unicode text, UTF-8 text, with very long lines (65464)
Hash e33879072874295892cc9d095d75dc51
be6fc29bd5d763be4448e8061526ec9a3f33ddb8
29d56f268acefd165d7f34da0b77aab3b16f86b6c9c52dcd49ea0ced77b79622
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:08 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"70dac54eca3bb2143032bc4db3237623"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9d2380fb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-90610526-8&cid=1708155585.1669781347&jid=246982441&_u=IEBAAEAAAAAAACAAI~&z=1598797319
142.250.74.163200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-90610526-8&cid=1708155585.1669781347&jid=246982441&_u=IEBAAEAAAAAAACAAI~&z=1598797319
IP 142.250.74.163:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-90610526-8&cid=1708155585.1669781347&jid=246982441&_u=IEBAAEAAAAAAACAAI~&z=1598797319 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 04:09:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash abd55ecd24d357a9f02612558f723a90
6a1e6963864f0b53ddc6205d35225e6cf0bcbeec
195fa531e0462be58d5c62ebbe6060e147c94bdb1d38ff46c341c74e0ab2671a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 04:09:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-vendor.js
172.67.38.66200 OK 28 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-vendor.js
IP 172.67.38.66:0
File type ASCII text, with very long lines (65472)
Hash bc3df91d3c32bdb9a27d98b59dd469b4
247199823137ce197dd761e8bbac0840b5b552ca
502dc1f289a666aaf0374a09a860ed1f5acef85a7f711a022316a10486eb28ab
GET /_s/v4/app/637ddf31c8f/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:08 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9d2380bb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/languages/en.js
172.67.38.66200 OK 4.0 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/languages/en.js
IP 172.67.38.66:0
File type ASCII text, with CRLF, LF line terminators
Hash ae843ee95e549e867dba1e4e8ce7e48a
37e047654e98906a0b37248bd7af0f872a79bcbb
24feb6fbb27021440168727c7a4e132779fea10b871af475403c921e1f6f6678
GET /_s/v4/app/637ddf31c8f/languages/en.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"585ba00b2c167b90c210161454f843b5"
age: 587482
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9db1a66b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/css/min-widget.css
172.67.38.66200 OK 5.2 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/css/min-widget.css
IP 172.67.38.66:0
File type ASCII text, with very long lines (24880), with no line terminators
Hash 66c436e2bdc03c2868e293a0b3a6e916
9a069b36d81a4674f7403dc506c48ef2818017fc
a63fd39ef4ef5a39d728e0429dea9240b91ce2724a403b122bb1d6e8585091e2
GET /_s/v4/app/637ddf31c8f/css/min-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=24960
access-control-allow-origin: *
age: 587481
etag: W/"80df9814fe6b98404ccc1df3c455ceaa"
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9dcdac8b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-32507910.js
172.67.38.66200 OK 24 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-32507910.js
IP 172.67.38.66:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1a7f390f392796535d01958e58e6bc20
4a2da2cf33edd03bc9515c7e29b55cd9791494db
f328beaf1cb9021b3566303573c849db3719cebb58c8f4cc3e735875407ca515
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-32507910.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"af764270cff49e4f88710a5824f1af0a"
age: 587481
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9dc7abdb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-common.js
172.67.38.66200 OK 46 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-common.js
IP 172.67.38.66:0
File type ASCII text, with very long lines (65466)
Hash cf643300e2b1b5ea811396fb905befe8
2e0bbb5c8e2adcbf2d66adb7916c38e2e4c252e1
5d4fa3fea6bc4454bd1b6908a9726ba24450fb519ed98bc3c16864296555619f
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"bde99510bdf9ab7bbc9ce82519a19a36"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9d24812b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gis.slotegrator.com/api/index.php/image/get?hash=091fb1f505c83f58e3dda6a914d93ad1ad281cfc.png
172.67.69.178200 OK 0 B URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=091fb1f505c83f58e3dda6a914d93ad1ad281cfc.png
IP 172.67.69.178:0
GET /api/index.php/image/get?hash=091fb1f505c83f58e3dda6a914d93ad1ad281cfc.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YtywS6wwiVOHQxQEKr74HZhoy%2FmE71hRoriqA%2Bg4sKcezNJukVZK7WkUBaQbRoFZwUm8KHKLP2oalJak%2BrgPDdimkwNowhhia2ml3CnDLVuhrRXdwi9ql%2BR6MAS32eCUcqjpvo4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cd9f0e0b39-OSL
X-Firefox-Spdy: h2
gis.slotegrator.com/api/index.php/image/get?hash=8c35806a327d76b99c31afeb9a7f71870e5e2624.png
172.67.69.178200 OK 0 B URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=8c35806a327d76b99c31afeb9a7f71870e5e2624.png
IP 172.67.69.178:0
GET /api/index.php/image/get?hash=8c35806a327d76b99c31afeb9a7f71870e5e2624.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lePt63aHSmISG7yFwTMuFMledKPoEPGOabAC8tkBNcuQNTyo0DP1XlSr9xObdYxWDXwdK8Y%2FZrnE%2BQUbBAUPsLGTDNo7myrfGQvYC%2FUBxFwLXmPY5mz1Ew6MSP9pC3up9bPQR%2BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cd9f0d0b39-OSL
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-2c78ba82.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-2c78ba82.js
IP 172.67.38.66:0
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-2c78ba82.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"fac25ff2d2c405e1ac7e156dca1f819c"
age: 587482
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9dc6ab0b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tvbetframe6.com/assets/frame.js
88.210.39.170200 OK 0 B URL HTTP/2 tvbetframe6.com/assets/frame.js
IP 88.210.39.170:0
GET /assets/frame.js HTTP/1.1
Host: tvbetframe6.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:11:15 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 08 Nov 2022 06:21:07 GMT
vary: Accept-Encoding
etag: W/"6369f553-219e"
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.1.0/css/all.css
172.64.133.15200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.1.0/css/all.css
IP 172.64.133.15:0
GET /releases/v5.1.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:05 GMT
content-type: text/css
x-amz-id-2: Hznl1gIHAwgz/HNKiOGCC1kEkODeifTDTN1NoX/1/l2jLFdOaD4O8FjYkqkFBqTSHzPIJ1ERAME=
x-amz-request-id: H2CBK9WW0ZS9GB38
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:30:31 GMT
etag: W/"826c57385f3d35cfed5478ba7b1f5c03"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 52596
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kAygQUVqVlAvKK0PKS3PEd54C5mE%2BlT%2BMO6eJNkmlbUaXXYvJ5KxRODeMbDyPyjNt3oLHiQhSV7aGs8iusI8XsQ9paNxUPs170U%2BKCuuZOViSRGqLOz3YtoMX0bEHk5edzBticL0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7720b9c37d727327-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/5d5fdf30eb1a6b0be609045f/default
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/5d5fdf30eb1a6b0be609045f/default
IP 172.67.38.66:0
GET /5d5fdf30eb1a6b0be609045f/default HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-637ddf31c8f"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9c98dabb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Noto+Sans
142.250.74.106200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Noto+Sans
IP 142.250.74.106:0
GET /css?family=Noto+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 04:09:05 GMT
date: Wed, 30 Nov 2022 04:09:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
gis.slotegrator.com/api/index.php/image/get?hash=0f95726078cc17be5222dc4cc72bc4c90053ef38.png
172.67.69.178200 OK 0 B URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=0f95726078cc17be5222dc4cc72bc4c90053ef38.png
IP 172.67.69.178:0
GET /api/index.php/image/get?hash=0f95726078cc17be5222dc4cc72bc4c90053ef38.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TE2P9B3o7s7AYqFFqqcHGDBpoZTgES8n40oMxgJpKLooPZmo0O4%2Bj8zdBxff1qCVBsjwJogP%2FbB5Ai5yOSofhY02Rq%2F6e2HG5i9WZwgBItuqQLVr%2B6Sx0jSq%2FY0sdCgNwBh380Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cd8f040b39-OSL
X-Firefox-Spdy: h2
gis.slotegrator.com/api/index.php/image/get?hash=7e5dd657f2c02b17191dfc2f934d3561a75e59fd.png
172.67.69.178200 OK 0 B URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=7e5dd657f2c02b17191dfc2f934d3561a75e59fd.png
IP 172.67.69.178:0
GET /api/index.php/image/get?hash=7e5dd657f2c02b17191dfc2f934d3561a75e59fd.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kn6BlAo%2BqpbDWiQRGAtNU44RRT8T8cak5dXjTTj%2FovFpc2Rb%2BgOKlfyZS91jzpw1ZsiTndetnZmw8BJUwkQh9c1UFBzB5qfGMx3CE4rgURgul0HhwQ6O0UOq2%2BTcLT6NhEWw8wk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cd9f0c0b39-OSL
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-48f46bef.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-48f46bef.js
IP 172.67.38.66:0
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-48f46bef.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"12f6c0f6e6cec2a03629fbce091e2072"
age: 587482
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9dc7ab8b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
104.18.11.207200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP 104.18.11.207:0
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:05 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 11/18/2022 06:18:38
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 47a3d2aebe5e348c8b9cbd261ecfda0e
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7720b9c33a76b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gis.slotegrator.com/api/index.php/image/get?hash=ae40c00585a4c901a3286f8202d11ae1fdc65857.png
172.67.69.178200 OK 0 B URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=ae40c00585a4c901a3286f8202d11ae1fdc65857.png
IP 172.67.69.178:0
GET /api/index.php/image/get?hash=ae40c00585a4c901a3286f8202d11ae1fdc65857.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dMJ%2FFWwWke7J8J38B%2FsKeKTSre4bJVbzjxyylewiR9oSjMPmUsAKdAJhVTuoHYafnmmj9mOxm1HxlyrZEjJnKvDG%2BhGgvwAp97Oj%2FrNXDmTNFbV8dyDRmoTApEhLp1hYiCCb0R8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cd8f010b39-OSL
X-Firefox-Spdy: h2
gis.slotegrator.com/api/index.php/image/get?hash=6e514731d448e9ce4bbec08ee14d054fa5570d54.png
172.67.69.178200 OK 0 B URL HTTP/2 gis.slotegrator.com/api/index.php/image/get?hash=6e514731d448e9ce4bbec08ee14d054fa5570d54.png
IP 172.67.69.178:0
GET /api/index.php/image/get?hash=6e514731d448e9ce4bbec08ee14d054fa5570d54.png HTTP/1.1
Host: gis.slotegrator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:07 GMT
content-type: image/png
cache-control: max-age=2678400
cf-cache-status: MISS
last-modified: Wed, 30 Nov 2022 04:09:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K0d3%2FIrZAB%2BTcD5ktcFEN1P1CBNTJ1dy5E5qo9HKEhnB34GOba4XSeVbg42SEV%2BCgWOJHFHrIOBmn1WKq1zm7f%2FILDeeh%2FyPwSTGPvcSm8yAZHtcBRKW3tkVWz2xye7PF%2BkPZXo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7720b9cdaf100b39-OSL
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-2d0b9454.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-2d0b9454.js
IP 172.67.38.66:0
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-2d0b9454.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"09c3819d373bd4178a620d721429fada"
age: 587482
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9dc7abbb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-f163fcd0.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-f163fcd0.js
IP 172.67.38.66:0
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-f163fcd0.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:09 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"a92075fd9ac5ba130387a80453676099"
age: 587482
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9dc7abcb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
104.18.226.52200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP 104.18.226.52:0
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:05 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 743
expires: Sat, 03 Dec 2022 04:09:05 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 7720b9c33f81fabc-OSL
content-encoding: br
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=102362
139.45.197.240200 OK 0 B URL HTTP/2 propeller-tracking.com/fv.js?t=102362
IP 139.45.197.240:0
GET /fv.js?t=102362 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 04:09:06 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 8bc5da1aacac4da2fca344f8eaff4c3d
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-main.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-main.js
IP 172.67.38.66:0
GET /_s/v4/app/637ddf31c8f/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://playmaster.co.zm
Connection: keep-alive
Referer: http://playmaster.co.zm/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 04:09:08 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7720b9d2280ab52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2