inoradde.com/4/4326563/
200 OK 637 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 741969dae451492c07682a10030d8cd2
66430bbdcaafcfdb1ff111669c9c3d1c268d475b
e5012c2e3401accef6363122ec80fae19b14425f0cabf8cc0462a5dfa6a6d7f1
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /4/4326563/ HTTP/1.1
Host: inoradde.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 04 Feb 2023 10:08:59 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 8aeef478b80a862bd29a1310513b0449
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://go1.reacheffecti.work>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=ae9185e679944f9590e37ffdcc765f86; expires=Sun, 04 Feb 2024 10:08:59 GMT; path=/
oaidts=1675505339; expires=Sun, 04 Feb 2024 10:08:59 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e051e6e01b12b9ad6e0014603f93431a
ada9efe77054d8593f2687fb3a7eada8908ef7e8
c41be8ffe176ca674efb0588164fdfd237754c6b5b461f8f46387b96ae7d6090
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41BE8FFE176CA674EFB0588164FDFD237754C6B5B461F8F46387B96AE7D6090"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5224
Expires: Sat, 04 Feb 2023 11:36:03 GMT
Date: Sat, 04 Feb 2023 10:08:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3454
Expires: Sat, 04 Feb 2023 11:06:33 GMT
Date: Sat, 04 Feb 2023 10:08:59 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 09:43:37 GMT
content-type: application/json
age: 1522
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14316
Expires: Sat, 04 Feb 2023 14:07:35 GMT
Date: Sat, 04 Feb 2023 10:08:59 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +ZXZ8UkSozkefTGNqxdB3etScbKZmKcBBCUrjOL79oVKQCaMIOQ8oRkQepZ0rykD3El38rXQfiA=
x-amz-request-id: 6P1HVP5MBTBTCT41
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 09:52:47 GMT
age: 972
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d569e7bd4156dca119066c3e7472393
8673466abc415457e3e90e10de117c8c84301ead
a1f4e7a2c1714f6d89c6827ebab63e5d4f2c1bf9da2a2f7562612211462f44f7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A1F4E7A2C1714F6D89C6827EBAB63E5D4F2C1BF9DA2A2F7562612211462F44F7"
Last-Modified: Fri, 03 Feb 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7561
Expires: Sat, 04 Feb 2023 12:15:01 GMT
Date: Sat, 04 Feb 2023 10:09:00 GMT
Connection: keep-alive
go1.reacheffecti.work/pop.go?spaceid=1239285&sid2=645678791372583764&subid=4326563&rdk=rk1
200 OK 493 B URL HTTP/2 go1.reacheffecti.work/pop.go?spaceid=1239285&sid2=645678791372583764&subid=4326563&rdk=rk1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3c1ffb84f7c52fc7b1aae713b1a38f1b
3b1b3f4d3b67457b51cb0e8562a4bfd0f74dce5b
c7d2263c18d34177c85c456effcd2632d83e891c02cf2329f6e38b947ad84888
GET /pop.go?spaceid=1239285&sid2=645678791372583764&subid=4326563&rdk=rk1 HTTP/1.1
Host: go1.reacheffecti.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: text/html; charset=utf-8
content-length: 493
content-encoding: gzip
expires: Mon, 03 Jul 2001 06:00:00 GMT
last-modified: Sat, 04 02 2023 10:09:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
pragma: no-cache
x-backend-server: nl2-go-web-242
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bb0e1ff82ab6199f715e00974b7f6957
74edba6943c202d060b471c30a3c626542bfac84
d982aa0ae1b32ffba27f789ad265b594dfef0bc4c55a0d0489d38b0827e6a7e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D982AA0AE1B32FFBA27F789AD265B594DFEF0BC4C55A0D0489D38B0827E6A7E2"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4578
Expires: Sat, 04 Feb 2023 11:25:18 GMT
Date: Sat, 04 Feb 2023 10:09:00 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=ae9185e679944f9590e37ffdcc765f86
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=ae9185e679944f9590e37ffdcc765f86
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=ae9185e679944f9590e37ffdcc765f86 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=ae9185e679944f9590e37ffdcc765f86; expires=Sun, 04 Feb 2024 10:09:00 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 235409bd906f18346126b22e9334658f
c32a5eed874b7fb7ab981bce7282ba30a783fe79
cec0da0c9b81833a3d0e3ada52ebc2a0f3996286a4ee583df36151735b9a81e1
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=87660
Date: Sat, 04 Feb 2023 10:09:00 GMT
Etag: "63dce0fa-1d7"
Expires: Sun, 05 Feb 2023 10:30:00 GMT
Last-Modified: Fri, 03 Feb 2023 10:24:58 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: r35YZfbXolQQ8HuGlxJCTNj8PzvYIZjVfvnAaUk-LX4HkgtYALlLaw==
Age: 302
go.aff.betplays.com/3eokxnvq?campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
301 Moved Permanently 0 B URL HTTP/2 go.aff.betplays.com/3eokxnvq?campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3eokxnvq?campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA== HTTP/1.1
Host: go.aff.betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go1.reacheffecti.work/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 04 Feb 2023 10:09:00 GMT
content-length: 0
location: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
ip: 91.90.42.154
country: NO
city: Oslo
_t: 2
_sr: affiliate03
set-cookie: __tr=zntiodifsbkrtnic; Domain=betplays.com; Expires=expires=Mon, 06 Mar 2023 10:09:00 GMT; Path=/; HTTPOnly
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 10:07:19 GMT
age: 101
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash eb03851ce3bf2100fec39387901ee5d1
0fa80d615f280b8214a284dd88bebc96d78292ee
7911eb8e689ab5fdcbf8411e4d1aec763656b1e98396b40dd1098e12c34ae8f5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 258
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:00 GMT
Etag: "63dd14ed-118"
Last-Modified: Sat, 04 Feb 2023 10:04:42 GMT
Server: ECS (amb/6B9E)
X-Cache: HIT
Content-Length: 280
betplays.com/Promotion/betplays/NB/WB/assets/css/bootstrap.min.css
200 OK 35 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/css/bootstrap.min.css
IP
ASN #201341 trafficforce, UAB
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash 890a3242ad294313107a0b60318ebedd
69c23a5d1fec04920c9bfd932f8ca7a53795796b
7f25235e41676a467dc2b6bcae567c368ff694886049d844c2e9b4060544b43e
GET /Promotion/betplays/NB/WB/assets/css/bootstrap.min.css HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: text/css
content-length: 34613
cache-control: public, max-age=172800
content-encoding: gzip
last-modified: Wed, 31 Aug 2022 09:27:04 GMT
etag: "7004ad51bbdd81:0"
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 79429bbb28c60b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/document.png
200 OK 2.4 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/document.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 67 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash 2166c46d49f8ed539f467f0a3766b389
f7c3b2bfb96c65a4545512052feb1b38cf66ef3a
14f9392cf08a8a71c979c21e77b2d64dcc749e9bcea69b0dcc1856ba35a56416
GET /Promotion/betplays/NB/WB/assets/images/document.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 2374
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:09 GMT
etag: "bf1d8e1f1cbdd81:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28cb0b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/logo2.png
200 OK 7.6 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/logo2.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash b3bac375ffbde5a5cb34ec11a003cd95
e9f4436a86d11f307c3e467f11c63be88d746ad3
36f97d6d1c80bf6ebac09b65b1aeac458134cd2095631e6ac95cc44fd64b5d58
GET /Promotion/betplays/NB/WB/assets/images/logo2.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 7640
cache-control: public, max-age=172800
last-modified: Fri, 30 Dec 2022 08:32:13 GMT
etag: "7e17737291cd91:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28c70b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
200 OK 6.2 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
IP
ASN #201341 trafficforce, UAB
Hash 1cd5b12c347a16685bd9b66df1e75d32
29f27d0a54dd909fc3923d9f96baf646c28f2fac
e57eed32ac47b85a3ab3908f6323d8fbe9748b71063001e21150ce593ddd69e0
GET /Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: text/css
content-length: 6168
cache-control: public, max-age=172800
content-encoding: gzip
last-modified: Tue, 03 Jan 2023 13:26:03 GMT
etag: "f7b4c2ed761fd91:0"
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 79429bbb28c50b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon01.png
200 OK 21 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon01.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 106 x 177, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f112de51d0678955750be8519abde7e
ca87894bbe721602e052eb55c6a5997853dbc45f
d2580d138986f5dacbeb51ab91ebbcaeee47e9e49e17ff2fb087a366956b8145
GET /Promotion/betplays/NB/WB/assets/images/icon01.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 21392
cache-control: public, max-age=172800
last-modified: Thu, 08 Sep 2022 08:29:32 GMT
etag: "1213e91e5dc3d81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28d50b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon02.png
200 OK 30 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon02.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 133 x 171, 8-bit/color RGBA, non-interlaced\012- data
Hash 84815e60897e9799c87c923e43f6f8f4
2c2738fb9d2de6298ed22b37145f9439871ea492
61445a3e07f069a1dcc2b41686e61c2a4bc2c729b692b7a0240cc102b257bea4
GET /Promotion/betplays/NB/WB/assets/images/icon02.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 29908
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:15 GMT
etag: "961b4e231cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28d60b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon05.png
200 OK 50 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon05.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 212 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash 3931f080b3ae03a0cd88f9440a10b9d1
f1e32a1d610b0784027d71dac890f21038e9280e
a8861d1be58fa8ce7e44d5223882c9bb2a07723e6b6f841f346fbacfda676878
GET /Promotion/betplays/NB/WB/assets/images/icon05.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 49881
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "29ad19281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28d90b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/js/bootstrap.bundle.min.js
200 OK 30 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/js/bootstrap.bundle.min.js
IP
ASN #201341 trafficforce, UAB
File type ASCII text, with very long lines (65299)
Hash f7410323a07ecc5a13c425ede277d4a4
e9f0bad970f58aa7c77a0a008b7b8cef8af8466d
e7557a798d72ef382e818753f3eb940f214c016bee994dfa08c44c019bfc84f1
GET /Promotion/betplays/NB/WB/assets/js/bootstrap.bundle.min.js HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: application/javascript
content-length: 30180
cache-control: public, max-age=172800
content-encoding: gzip
last-modified: Wed, 31 Aug 2022 09:30:08 GMT
etag: "1b1ef9421cbdd81:0"
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
server: cloudflare
cf-ray: 79429bbb38e40b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/business-and-finance.png
200 OK 3.2 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/business-and-finance.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 65 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash b73dec648504fe5b1282712600a3b63f
d27430c22a302be053dcd2078af43ef30c19e119
9082c7435573201aca5850b1b18b8f47cf12083f83288363c4b0a196b50dbc3f
GET /Promotion/betplays/NB/WB/assets/images/business-and-finance.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 3197
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:09 GMT
etag: "bb3b891f1cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28d10b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/bet.png
200 OK 7.5 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/bet.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 67 x 67, 8-bit/color RGBA, non-interlaced\012- data
Hash 2086806e59fb9e682358614e54bf221d
7c225a3bf370e3f73ecc77d4afcee9f53f0f9265
d4e0d4f68b3a2247b3942cdd44a87b4ac8cb9d817b7a1ff334dd78667cc76c31
GET /Promotion/betplays/NB/WB/assets/images/bet.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 7486
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:09 GMT
etag: "4adc871f1cbdd81:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28d30b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/footer-logo2.png
200 OK 2.5 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/footer-logo2.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 119 x 27, 8-bit/color RGBA, non-interlaced\012- data
Hash 018711b33780a2810a0f4019771b65a5
87dc8f84219006902bad45bce020e980f1543bf8
7b4f648c8a4d7b05ab5f28c2c501e12d588e7cd209b184120048ffb081c52c42
GET /Promotion/betplays/NB/WB/assets/images/footer-logo2.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 2526
cache-control: public, max-age=172800
last-modified: Fri, 30 Dec 2022 09:00:36 GMT
etag: "6269512e2d1cd91:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb38e10b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
200 OK 14 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
IP
ASN #201341 trafficforce, UAB
Hash 8449a533192042c699587f21b9a9661d
c07c4ff36fff694e6badf8273059b7fbb3a3fba2
5c0b9fa6599589a71cdcc62b79b04e1b536fc6f1b5dba997e750e192bf83a92e
GET /Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA== HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://go1.reacheffecti.work/
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: text/html
cache-control: max-age=172800
last-modified: Mon, 30 Jan 2023 15:59:12 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; path=/; expires=Sat, 04-Feb-23 10:39:00 GMT; domain=.betplays.com; HttpOnly; Secure; SameSite=None
_cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; path=/; domain=.betplays.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 79429bba783a0b49-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon06.png
200 OK 22 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon06.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 150 x 141, 8-bit/color RGBA, non-interlaced\012- data
Hash ab4406cadb1279836f78020c227d9850
3813ceed342e7ec66900ce292da1d6fe99462f24
bc0be32341361c0a2278a6dc6e17d4a756eb73096a5d9b3f30d882715b9d9be5
GET /Promotion/betplays/NB/WB/assets/images/icon06.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 22284
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "ce331b281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28da0b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon03.png
200 OK 34 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon03.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 147 x 148, 8-bit/color RGBA, non-interlaced\012- data
Hash e9709c0c0def733ba995ad29c92dc704
9bc1044d2dab5d31606e49ec387290c85625b270
00bd901cfac6cc11a0ebf848e83331f3773dff856e3425d320d937539356a6d8
GET /Promotion/betplays/NB/WB/assets/images/icon03.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 34406
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:15 GMT
etag: "13a24f231cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28d70b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon07.png
200 OK 24 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon07.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 143 x 174, 8-bit/color RGBA, non-interlaced\012- data
Hash d27445fe190e999853b784d9d5fac8a8
6cb2f36b13ad2a589841982e3fdcf1d22a44fc76
10b3f0dc37f956dde7297b578a70cd2c1f7ee9aab2175634235e1bae92ca527f
GET /Promotion/betplays/NB/WB/assets/images/icon07.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 23953
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "fd7c14281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28db0b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon08.png
200 OK 35 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon08.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 171 x 190, 8-bit/color RGBA, non-interlaced\012- data
Hash 12347fc0f7f76ec26761157398ca583e
816ee00c54f6463a075af4b683bd0ab8a41862b4
5dcaed337558f1cd8b27d5125af7f1f91ca10cb6cfa21a1bb4c1fd08db1e9ba3
GET /Promotion/betplays/NB/WB/assets/images/icon08.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 34678
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "dd2a16281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28dd0b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/icon04.png
200 OK 56 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/icon04.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 203 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash 87cc8ab0b9ae9b77968c00e56339c035
2b1d381f27785d8f9aaddad1974db5c798bb3510
9c018a8427aaa610c2699996234ab1f2bb37d5ba71a43e84bdc081a5a68674f0
GET /Promotion/betplays/NB/WB/assets/images/icon04.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 55784
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:29:23 GMT
etag: "51b117281cbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28d80b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/image08.png
200 OK 510 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/image08.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 540 x 873, 8-bit/color RGBA, non-interlaced\012- data
Size 510 kB (510513 bytes)
Hash 6a90e4dedfb8fbfa0c5415b2a0d3ec6d
93ccd59b7bc84bff6b8a685206a909e6bf1a9b52
e1d551ae2b468cd708e01292783f4a82c51208e984e47c7b9d40dfd52b5bf622
GET /Promotion/betplays/NB/WB/assets/images/image08.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/S_WB_LP_F_NOK.html?btag=zntiodifsbkrtnic_60656&utm_source=60656&campaign_id=2152&afp=11|125917|194989|no|11753|297258|1239285|1|0|46|50304|4326563,,645678791372583764,,,|4|0|0|0|0|0|en|1|1532635802|0|1675505340&afp1=f3BjfXZneA==
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 510513
cache-control: public, max-age=172800
last-modified: Mon, 12 Sep 2022 13:25:07 GMT
etag: "44c65013abc6d81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbb28c80b49-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3563
Expires: Sat, 04 Feb 2023 11:08:23 GMT
Date: Sat, 04 Feb 2023 10:09:00 GMT
Connection: keep-alive
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-ExtrabldIt.woff2
200 OK 13 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-ExtrabldIt.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12696, version 1.0\012- data
Hash e2483453cb1f101e863678c85fdea697
53fd1719ae31f1f6c317cea137683617b2cf6335
a9ddc49d51dfeb625554c714b8b1924a35d0059242717e02553bca119700cffd
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-ExtrabldIt.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: application/octet-stream
content-length: 12696
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:16 GMT
etag: "b29b6ddc1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 75271
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbbb97f0b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-Bold.woff2
200 OK 12 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-Bold.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12528, version 1.0\012- data
Hash ceaa41b2ee3715e120ba23f443981527
88f0d814475d95742f66b3017229914048d5cb4b
64bf0062fc2c38f50de6804d03c946d479075e5fd37478fac5b0ec8349b136a4
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-Bold.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: application/octet-stream
content-length: 12528
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:18 GMT
etag: "28bb76dd1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 75665
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbbc98c0b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-BlackIt.woff2
200 OK 12 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-BlackIt.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12512, version 1.0\012- data
Hash 974d423ab3eb02178d3b385a86e2748a
3f446b97652db3e3b36ff84b4655b24d292d4e8e
c69eb4263ac59e127738e9fb259decb32493230416ff6b8c8e727b42ec5e6823
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaA-BlackIt.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: application/octet-stream
content-length: 12512
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:18 GMT
etag: "11d06cdd1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 75271
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbbc9820b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-Regular.woff2
200 OK 12 kB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-Regular.woff2
IP
ASN #201341 trafficforce, UAB
File type Web Open Font Format (Version 2), TrueType, length 12420, version 1.0\012- data
Hash 5c4deb544d81af239fff07798e56c1e7
59409922ee31341bc5f2cd56d8473dda72a2802c
7807cbacc4742a4c5f8bf13b7b90569045dc85c301e8a8ef500e6a920e2ac2a4
GET /Promotion/betplays/NB/WB/assets/fonts/ProximaNovaACond-Regular.woff2 HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: application/octet-stream
content-length: 12420
cache-control: public, max-age=172800
last-modified: Wed, 31 Aug 2022 09:27:16 GMT
etag: "fdd73dc1bbdd81:0"
x-xss-protection: 1; mode=block
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
cf-cache-status: HIT
age: 75665
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbbc9980b49-OSL
X-Firefox-Spdy: h2
betplays.com/Promotion/betplays/NB/WB/assets/images/banner07.png
200 OK 1.9 MB URL HTTP/2 betplays.com/Promotion/betplays/NB/WB/assets/images/banner07.png
IP
ASN #201341 trafficforce, UAB
File type PNG image data, 1898 x 1086, 8-bit/color RGBA, non-interlaced\012- data
Size 1.9 MB (1889684 bytes)
Hash eaf342b006def7488fd8841b0dd59b95
a20d7c41cb3ca8f543aeb9b3a39ac01167252cfb
3e0f9366e661c3795fdce16750284df4a7d2e289fd6dcb30f48a1c711cb3bbe0
GET /Promotion/betplays/NB/WB/assets/images/banner07.png HTTP/1.1
Host: betplays.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/Promotion/betplays/NB/WB/assets/css/style2.css?j77ds546745kfjsh88
Connection: keep-alive
Cookie: __tr=zntiodifsbkrtnic; __cf_bm=MELC7IJWvEUXwizaH8Nr769DvJEs5RaGvvFUiHa1Ga4-1675505340-0-AUv8ieaBuOv+kGVKzzPkRivipcG2JQxQmqahtklIAxvBhg86+K9Lrl+y6SwzPqh8gBq0a/S3c2v+wuqkVqZtHIM=; _cfuvid=zvUIKsUb8E24U4e_As2k53pppIqPpfToGZH7SAEu2I8-1675505340600-0-604800000; btag=zntiodifsbkrtnic_60656
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: image/png
content-length: 1889684
cache-control: public, max-age=172800
last-modified: Thu, 08 Sep 2022 08:29:23 GMT
etag: "4cd970195dc3d81:0"
content-security-policy: default-src *; style-src 'self' http://* 'unsafe-inline'; script-src 'self' http://* 'unsafe-inline' 'unsafe-eval'; img-src 'self' http://* data:; font-src 'self' * http://* data: https://*; object-src 'self' blob:
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: Strict-Transport-Security: max-age=31536000;
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 143203
expires: Mon, 06 Feb 2023 10:09:00 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 79429bbbb97e0b49-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-PMP2D5L
200 OK 79 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PMP2D5L
IP
File type ASCII text, with very long lines (40406)
Hash 22f46b5114063b8c0e5ef96117c341c0
2e8ee1154911a3a19d98f1332546b562a9291034
78cb5412ce8523365c4f2e59454a9cd561d3b67facfaa35692b397d44f425899
GET /gtm.js?id=GTM-PMP2D5L HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 Feb 2023 10:09:00 GMT
expires: Sat, 04 Feb 2023 10:09:00 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 Feb 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 78843
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 6bac0e894dc55f695e50e2a306b01d19
bc413e653647e640ada9ae5d5ed46a312ff7c245
1c78dd3978ee7a7f2224f6d9038b31687f53274e157d11907953fdc0c71e1a5e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5957
Cache-Control: max-age=158823
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:01 GMT
Etag: "63dde0df-118"
Expires: Mon, 06 Feb 2023 06:16:04 GMT
Last-Modified: Sat, 04 Feb 2023 04:36:47 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 280
widget.intercom.io/widget/yl6n06ex
200 OK 6.0 kB URL HTTP/2 widget.intercom.io/widget/yl6n06ex
IP
File type Unicode text, UTF-8 text, with very long lines (18637), with no line terminators
Hash 6d519ef18b4d10648bfc42ae95dcc177
859144f83a7a1a28eba1facdc0ac748dde0a73e4
8a5d2b760d1db6e1a6825653f307a6f4279a8d2bfd99da22ee059a4412c35328
GET /widget/yl6n06ex HTTP/1.1
Host: widget.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 6045
last-modified: Fri, 03 Feb 2023 18:05:29 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: X57ZUpnu01WCjQ7YHomDJpzCkRyxF6Ty
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 Feb 2023 10:01:46 GMT
cache-control: max-age=900, s-maxage=900, public
etag: "6d519ef18b4d10648bfc42ae95dcc177"
x-cache: Error from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: OVTRy6gAcAOQojoTcIwyrpYOrV52o7-wrqNm-lKrVuUFMa5JFZTnIg==
age: 436
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3dGdHzjie6Ml3f7W+Vok+A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ht1MNs2GYzg9PknLVnJ/3lrqM7U=
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 04 Feb 2023 09:44:08 GMT
expires: Sat, 04 Feb 2023 11:44:08 GMT
cache-control: public, max-age=7200
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
age: 1493
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.intercomcdn.com/vendor.69a3910c.js
200 OK 108 kB URL HTTP/2 js.intercomcdn.com/vendor.69a3910c.js
IP
File type Unicode text, UTF-8 text, with very long lines (65431)
Size 108 kB (108273 bytes)
Hash cc78f0d0f167e2782e52beed336c235e
8e3342efb45d9047b690ad96568f9dd84bfc138e
19cc596dd145be7071189795d4ec1c8176a88497482247c848f18087fb3037df
GET /vendor.69a3910c.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betplays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 108273
date: Sat, 04 Feb 2023 08:09:14 GMT
last-modified: Fri, 03 Feb 2023 18:03:52 GMT
etag: "cc78f0d0f167e2782e52beed336c235e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, s-maxage=7200, public
content-encoding: gzip
x-amz-version-id: nUkUE5hCMGBu1ujlyuSkrFiZjkQXiPKB
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: vk5ShGQ_YuNRMee1hGrjTM6QWKXUe1IIYl4tZ1w7c7MOZ1G9LvhEZw==
age: 7187
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=99253430&t=pageview&_s=1&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Dzntiodifsbkrtnic_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645678791372583764%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675505340%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&ul=en-us&de=UTF-8&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=639184600&gjid=141694021&cid=488853624.1675505376&tid=UA-235509498-1&_gid=695247868.1675505376&_r=1&_slc=1>m=45He3210n81PMP2D5L&z=1515553437
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=99253430&t=pageview&_s=1&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Dzntiodifsbkrtnic_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645678791372583764%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675505340%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&ul=en-us&de=UTF-8&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=639184600&gjid=141694021&cid=488853624.1675505376&tid=UA-235509498-1&_gid=695247868.1675505376&_r=1&_slc=1>m=45He3210n81PMP2D5L&z=1515553437
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j99&a=99253430&t=pageview&_s=1&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Dzntiodifsbkrtnic_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645678791372583764%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675505340%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&ul=en-us&de=UTF-8&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=639184600&gjid=141694021&cid=488853624.1675505376&tid=UA-235509498-1&_gid=695247868.1675505376&_r=1&_slc=1>m=45He3210n81PMP2D5L&z=1515553437 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Content-Type: text/plain
Content-Length: 0
Origin: https://betplays.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://betplays.com
date: Sat, 04 Feb 2023 10:09:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.intercomcdn.com/frame.e7e1d6d8.js
200 OK 140 kB URL HTTP/2 js.intercomcdn.com/frame.e7e1d6d8.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (139844 bytes)
Hash 9cb32e333330776b3a68bb3296f82bd1
46f2334dc125d9957a2f5edecec079252922de7c
6803966b29e906b424de4795c7b46fb768c9cbb9cb1dac8d39637856a8de52cb
GET /frame.e7e1d6d8.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://betplays.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 139844
last-modified: Fri, 03 Feb 2023 18:03:52 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: Ui5z4pa3z1fRjUlhXBA31aggJP6QBIUV
accept-ranges: bytes
server: AmazonS3
date: Sat, 04 Feb 2023 09:28:12 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "9cb32e333330776b3a68bb3296f82bd1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: rBXQJ3L97wmar9Q3XDNG6VIACT25FeSTMuuVgePe40BVZQng0ODNgA==
age: 2449
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42f7bb86070a306c0902a2947bfd5db1
679751d86f7520d1e5e30b5bc050015450de75a7
ebccfef4e98d659e8e275dd6b2797b1154e42572695aefc916825bc0819e96dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&gjid=141694021&_gid=695247868.1675505376&_u=YEBAAEAAAAAAACAAI~&z=2014138535
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&gjid=141694021&_gid=695247868.1675505376&_u=YEBAAEAAAAAAACAAI~&z=2014138535
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&gjid=141694021&_gid=695247868.1675505376&_u=YEBAAEAAAAAAACAAI~&z=2014138535 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Content-Type: text/plain
Content-Length: 0
Origin: https://betplays.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://betplays.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 04 Feb 2023 10:09:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 220587466ab5731fc6cbcb5c9480950f
5286121db7536474423af3608fb9db362a7d46b7
064d3afa03396f0b1bec8e1afeac6ddee405cfe4baf7ae1ee374ff18a7c7363e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 04 Feb 2023 10:09:01 GMT
Last-Modified: Sat, 04 Feb 2023 09:01:18 GMT
Server: ECS (nyb/1D20)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1OTnR64IHm9sLHM20GZDgl4L_AzOU6k1DYDikWt-5Ur2PD0mshUl9A==
Age: 4063
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42f7bb86070a306c0902a2947bfd5db1
679751d86f7520d1e5e30b5bc050015450de75a7
ebccfef4e98d659e8e275dd6b2797b1154e42572695aefc916825bc0819e96dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 621b586028d5acaf29b8777ca0872ce1
9d2a358576d0acab58e2eacf7765b686cee9181f
a7c99a5217e394c715679780ae1e3e60202653547212b0a4fd2efab0e1a01015
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de88149c85daf1f2f8f183d16f581394
4b88639d92a9defef7e575ff50f00348d7a4fc91
5bcde8fa6ee36e3a745249b5a5d1c583b0b17e1bd37a3d5b83ce9255b818680d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&_u=YEBAAEAAAAAAACAAI~&z=1547821989
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&_u=YEBAAEAAAAAAACAAI~&z=1547821989
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&_u=YEBAAEAAAAAAACAAI~&z=1547821989 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 04 Feb 2023 10:09:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&_u=YEBAAEAAAAAAACAAI~&z=1547821989
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&_u=YEBAAEAAAAAAACAAI~&z=1547821989
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-235509498-1&cid=488853624.1675505376&jid=639184600&_u=YEBAAEAAAAAAACAAI~&z=1547821989 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 04 Feb 2023 10:09:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de88149c85daf1f2f8f183d16f581394
4b88639d92a9defef7e575ff50f00348d7a4fc91
5bcde8fa6ee36e3a745249b5a5d1c583b0b17e1bd37a3d5b83ce9255b818680d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8176ac8bbb8fa05f36bdfa163da09e0c
b936c84c5fa7e781b12a17952c82bca546ca0575
1aa7e39fd02514a4023036a8a100d7e7898ee220063ebfb41c509264c81ed727
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 10:09:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-EVCV40XZYB>m=45je3210&_p=99253430&cid=488853624.1675505376&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=gtm.js&sid=1675505376&sct=1&seg=0&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Dzntiodifsbkrtnic_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645678791372583764%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675505340%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&en=page_view&_fv=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-EVCV40XZYB>m=45je3210&_p=99253430&cid=488853624.1675505376&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=gtm.js&sid=1675505376&sct=1&seg=0&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Dzntiodifsbkrtnic_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645678791372583764%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675505340%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&en=page_view&_fv=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-EVCV40XZYB>m=45je3210&_p=99253430&cid=488853624.1675505376&ul=en-us&sr=1280x1024&uaW=1&_s=1&uid=gtm.js&sid=1675505376&sct=1&seg=0&dl=https%3A%2F%2Fbetplays.com%2FPromotion%2Fbetplays%2FNB%2FWB%2FS_WB_LP_F_NOK.html%3Fbtag%3Dzntiodifsbkrtnic_60656%26utm_source%3D60656%26campaign_id%3D2152%26afp%3D11%7C125917%7C194989%7Cno%7C11753%7C297258%7C1239285%7C1%7C0%7C46%7C50304%7C4326563%2C%2C645678791372583764%2C%2C%2C%7C4%7C0%7C0%7C0%7C0%7C0%7Cen%7C1%7C1532635802%7C0%7C1675505340%26afp1%3Df3BjfXZneA%3D%3D&dr=https%3A%2F%2Fgo1.reacheffecti.work%2F&dt=Betplays.com%20-%20Online%20Casino%2C%20Crypto%20Bet%20Games%20%26%20Sportsbook&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Origin: https://betplays.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://betplays.com
date: Sat, 04 Feb 2023 10:09:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17343
Expires: Sat, 04 Feb 2023 14:58:05 GMT
Date: Sat, 04 Feb 2023 10:09:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17343
Expires: Sat, 04 Feb 2023 14:58:05 GMT
Date: Sat, 04 Feb 2023 10:09:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17343
Expires: Sat, 04 Feb 2023 14:58:05 GMT
Date: Sat, 04 Feb 2023 10:09:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17343
Expires: Sat, 04 Feb 2023 14:58:05 GMT
Date: Sat, 04 Feb 2023 10:09:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b25bf82638deaab60981e1315ee0849
e3bd912fd1a890e64ee6746a78a674db7ff77039
a99b0dfa9ca7176b21cc2d65963a1b6eb6d534b3767d02ef06cc207a63331ebf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A99B0DFA9CA7176B21CC2D65963A1B6EB6D534B3767D02EF06CC207A63331EBF"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17343
Expires: Sat, 04 Feb 2023 14:58:05 GMT
Date: Sat, 04 Feb 2023 10:09:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f926cd4f39b1a10b152e5959b28ae29e
2b1982d21321071394e363888e007598e968fb35
a51b246a9aa5a2583cae7fd4f0a3bdf73f0b318b7838828d36ea5674a5f26753
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F651be34f-d4ea-4a24-987c-b006e5f9a876.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13309
x-amzn-requestid: f6a3f0f3-d91b-4f4d-8265-0f87742ba5d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyFeBFX4oAMFfpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd82bf-5808ceec265756c702d212dc;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:55:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WWjzs8W8GmSAM0-Uc8XBTxz67RJJCIzp3fBYhkoIWZ26UrobmZV8mw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:14:12 GMT
etag: "2b1982d21321071394e363888e007598e968fb35"
content-type: image/jpeg
age: 42890
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 392b61306c346508d3ac4a2f28218f9c
d2de32b52e0d3f4fc6acaf687b3521294b01dc03
018712a4d6734b84ac1777124f97dae4d93b1e5b297a5dcfe0955b52710b8a35
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F10640252-429d-4110-bf18-1908ac233402.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10253
x-amzn-requestid: a90cb6b3-8a72-4b4b-b4f5-6dafc8c6752a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7GGv5IAMFu8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-3ca59e7c52800a4e44bda8fd;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jBxNmhfAeUgxg8w4XpQHZ1QoN9GatdUV7V7r2tHd7YePJYPHpesd2Q==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:21 GMT
age: 43421
etag: "d2de32b52e0d3f4fc6acaf687b3521294b01dc03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7afd5ce8fb9ec7b62e528bf97705e49
afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3
b2d93ba6c0ed2c858d91afba1c81251afbffa41c779be2e9203994dcfb7bbc9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: 007ce521-ed5c-4074-a314-684ad0df2e22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9GH5goAMF_ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8053-7060f02b767c90371991a190;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fTV_e56nzjiXo4Guu67WXDDvp3nrjB0Yfyy6ByjcDSx23J-8r0fmQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 43121
etag: "afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45c6a062f8637e689819f505b019dc0e
61665688f1039c4fad848853a68e28d057718ad1
c9b14113eba535a2e1a6cbbf121a818ad0204fc6dd7b2ea9b592830ab927d6d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe387e59d-188b-44a0-b94c-033d7d635117.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6718
x-amzn-requestid: 662f889b-4c25-4dec-85d4-ea9dfa8b8974
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7DE5boAMF_cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-33ca99fc7b6eac8d5486d6c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WvNs1hPPXHBJs5rTIBqH3DbqLLX6si9jHF46KrsuT9BFB2N2V3zeUA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:06:20 GMT
age: 43362
etag: "61665688f1039c4fad848853a68e28d057718ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e366b32074025aaf60bbae8bdb08d330
a52c2883bad98fa20333aa639a5dd3a5bf544c8e
9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lsQxPtozrh2Ty1T-3d-1crDfi8HgVKRafOXb1UFl033bCx3kAzTS7w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 06:20:04 GMT
age: 13738
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: 6a8c6487-6069-47d1-afa1-648626f85439
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDqqGg5oAMFV-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fdd-0a772cde1e6fba6d7da97435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CHWhIpyzhoPtMUplzh1430Q9FfCM1wkTc_hQsgQk6InM9tYBPGYnNg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:05:44 GMT
age: 43398
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 1aaa532afd0df6899aab80c42cb08cc4
74b5e222e1546162c9b479b7152cb10fe8bf08e3
9617de054b35eab79bdc2b4889634413af9f9b20d2c3fab85445b6ee86980741
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 04 Feb 2023 10:09:02 GMT
Etag: "63dd21c5-1d7"
Last-Modified: Sat, 04 Feb 2023 10:08:46 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jDtjuqbVPDgMA8AP21b7RJiPXpE_jL0Ww4Lve0oA7mq_2h5lSC85fA==
Age: 16
nexus-websocket-a.intercom.io/pubsub/5-vDrYR05cDWEQnLXLuAKnBFxFvVVcDyjmKbAs98E45xd22V3t68c_UfYPI0WvC46rIfafYE3FPf45pQSUYLVe1Bhn-0WsMcHb7VFA?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
101 Switching Protocols 0 B URL HTTP/1.1 nexus-websocket-a.intercom.io/pubsub/5-vDrYR05cDWEQnLXLuAKnBFxFvVVcDyjmKbAs98E45xd22V3t68c_UfYPI0WvC46rIfafYE3FPf45pQSUYLVe1Bhn-0WsMcHb7VFA?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pubsub/5-vDrYR05cDWEQnLXLuAKnBFxFvVVcDyjmKbAs98E45xd22V3t68c_UfYPI0WvC46rIfafYE3FPf45pQSUYLVe1Bhn-0WsMcHb7VFA?X-Nexus-New-Client=true&X-Nexus-Version=0.9.0&user_role=undefined HTTP/1.1
Host: nexus-websocket-a.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://betplays.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: h/Dy7dqyTv4cLMbt1caAXQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Sat, 04 Feb 2023 10:09:02 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aSsBPPDY8cAGj4XAW4aTCLiS990=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca17cfb9-5ad6-429a-9791-23b12f01c467.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca17cfb9-5ad6-429a-9791-23b12f01c467.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8bee4ee9542d0c7a9cc8402d60e7cca2
95b8debca975255d2a0a60c5c6dde74040bd2f88
a6c63af682c3d4b11e5af0aa6b72921b8acf72626fb765a60e96d491d2a04c70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca17cfb9-5ad6-429a-9791-23b12f01c467.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8148
x-amzn-requestid: 6006bf4d-0aef-4eec-a73d-70cb8cad5abd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyDraGO9oAMFscg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd7fe2-1df60a735b30e2d41fd3a435;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:42:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tnqzIXXbcIjPhSnbzsVd2oN_qouQqZqlYGRNOAxlkQgnoI60PHY-CQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:09:44 GMT
age: 43165
etag: "95b8debca975255d2a0a60c5c6dde74040bd2f88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn-plat.apidigi.com/plat/prd/Img/partners/1194/favicon.ico
200 OK 0 B URL HTTP/2 cdn-plat.apidigi.com/plat/prd/Img/partners/1194/favicon.ico
IP
GET /plat/prd/Img/partners/1194/favicon.ico HTTP/1.1
Host: cdn-plat.apidigi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://betplays.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:01 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Mon, 18 Jul 2022 09:05:03 GMT
etag: W/"d569c77859ad81:0"
access-control-allow-origin: *
cf-cache-status: HIT
age: 5818
expires: Sat, 04 Feb 2023 14:09:01 GMT
vary: Accept-Encoding
set-cookie: __cfruid=028783fe61df0722be3a389e221103171530dc62-1675505341; path=/; domain=.apidigi.com; HttpOnly; Secure; SameSite=None
_cfuvid=wN_GlkXnhx7E20Y49mjokbg3LDUJc4kDcytYynFVZRo-1675505341014-0-604800000; path=/; domain=.apidigi.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 79429bbd48dfb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
api-iam.intercom.io/messenger/web/ping
200 OK 0 B URL HTTP/2 api-iam.intercom.io/messenger/web/ping
IP
POST /messenger/web/ping HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 781
Origin: https://betplays.com
Connection: keep-alive
Referer: https://betplays.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 04 Feb 2023 10:09:02 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
x-ratelimit-limit: 13333
x-ratelimit-reset: 1675505350
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-ratelimit-remaining: 13330
access-control-allow-origin: https://betplays.com
vary: Accept,Accept-Encoding
x-intercom-version: 4797ec0ee90a71b86478d2a6bf5452ac351ff9c5
x-xss-protection: 1; mode=block
content-encoding: gzip
x-request-id: 002mvmc8pk69jgrgrg7g
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"0aa468e56f6262cf0f72228353c98370"
x-runtime: 0.449340
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0c75d874912a7b35f
X-Firefox-Spdy: h2
go1.reacheffecti.work/favicon.ico
404 Not Found 0 B URL HTTP/2 go1.reacheffecti.work/favicon.ico
IP
GET /favicon.ico HTTP/1.1
Host: go1.reacheffecti.work
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go1.reacheffecti.work/pop.go?spaceid=1239285&sid2=645678791372583764&subid=4326563&rdk=rk1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sat, 04 Feb 2023 10:09:00 GMT
content-type: text/html
x-backend-server: nl2-go-web-242
content-encoding: gzip
X-Firefox-Spdy: h2
139.45.197.238
34.120.237.76
95.101.11.115
217.22.19.196
34.240.114.39
104.17.29.29