lvbet.pl/pl/fantasy/?btag=655708_123ga584cidpidaffid655708
104.16.113.23301 Moved Permanently 0 B URL HTTP/1.1 lvbet.pl/pl/fantasy/?btag=655708_123ga584cidpidaffid655708
IP 104.16.113.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pl/fantasy/?btag=655708_123ga584cidpidaffid655708 HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 22 Nov 2022 07:55:07 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 22 Nov 2022 08:55:07 GMT
Location: https://lvbet.pl/pl/fantasy/?btag=655708_123ga584cidpidaffid655708
Server-Timing: cf-q-config;dur=7.0000000960135e-06
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e019d919fa1c0a-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8843
Expires: Tue, 22 Nov 2022 10:22:30 GMT
Date: Tue, 22 Nov 2022 07:55:07 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4843de3bf95411e6aa89834def44bb86
1f1882351ac63fba73a22014382f69df5e02ec96
1e6ed1df02f8fa6c89ddca66f7c9981f8a06127d7ec90b503703137e823bb4b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3562
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:07 GMT
Last-Modified: Tue, 22 Nov 2022 06:55:45 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 22 Nov 2022 07:09:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2746
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8a6c553d89cb6fd1de4787fee2a0e0dc
b974e022ea8675c0a09f58864cc99df05b5b1241
a62ecedcb0953814f982237818a3d902fdca501f82b675629d28b5d476e0fbfa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A62ECEDCB0953814F982237818A3D902FDCA501F82B675629D28B5D476E0FBFA"
Last-Modified: Mon, 21 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14635
Expires: Tue, 22 Nov 2022 11:59:02 GMT
Date: Tue, 22 Nov 2022 07:55:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qxwe0x07M+oytSfAUIAmvu+P0cUYrsCpdtlnIBWvyXZ3sYNJ1GDsQjwz6wsdtfSesAKOT2YRtrU=
x-amz-request-id: G4K9XQASWD84FZDZ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 22 Nov 2022 07:39:28 GMT
age: 939
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 90a75655766782bc81ac1237cea308cf
e13cc990f23f586709202f09b2e0c1b6a0568c97
5f9f9860562070ca77c09b6c45cafa2d51f6d4982006320af769ece3fa00634d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=124172
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:07 GMT
Etag: "637bc267-117"
Expires: Wed, 23 Nov 2022 18:24:39 GMT
Last-Modified: Mon, 21 Nov 2022 18:24:39 GMT
Server: nginx
Content-Length: 279
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 22 Nov 2022 07:08:53 GMT
cache-control: public,max-age=3600
age: 2774
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 2db0ebb9efcf3be3c92f23b61de5c065
dd830565723f18a7944c26d24b0fb142d06a71a5
8615316184c4d1d64db923a5364363bbb3d25e146a042c5fbd5bf0cfcec8effb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4379
Cache-Control: max-age=95085
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Etag: "637b3fae-1d7"
Expires: Wed, 23 Nov 2022 10:19:53 GMT
Last-Modified: Mon, 21 Nov 2022 09:06:54 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.149.219.22101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.219.22:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LeD6Qug5DHoWCevBYBAlrg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oQJihhsAAs9bUh8NvgxEOQNAWyQ=
lvbet.pl/img/secure.png
104.16.114.23200 OK 2.9 kB IP 104.16.114.23:0
File type PNG image data, 49 x 21, 8-bit/color RGBA, non-interlaced\012- data
Hash 3615c0a92cad63fc9cc94dc3659167e4
65e8c7244e2dd4c3ebf1c09113e8f5f6db82cfd5
478167342108f783aae682224582269e2f09f8d80b8dad68d94b4a49684cbc6c
GET /img/secure.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 2938
cf-ray: 76e019e27c8fb4e8-OSL
accept-ranges: bytes
age: 38552
cache-control: public, max-age=86400
etag: "17a7-5875ab6b9f580"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Thu, 25 Apr 2019 13:22:46 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
cf-bgj: imgq:85,h2pri
cf-polished: origSize=6055
server: cloudflare
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash a045d905491ab6bde6bfc62a42d813ca
7ba6bc36f605a8aad95b114bf8597a8323206297
89a0edac835c97d3ec1e61303a24d8b96d9043c955d3eeb76656ff8c80204de3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4879
Cache-Control: max-age=86935
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Etag: "637b1de4-118"
Expires: Wed, 23 Nov 2022 08:04:03 GMT
Last-Modified: Mon, 21 Nov 2022 06:42:44 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
lvbet.pl/img/backgrounds/player-back.png
104.16.114.23200 OK 89 kB URL HTTP/2 lvbet.pl/img/backgrounds/player-back.png
IP 104.16.114.23:0
File type PNG image data, 233 x 308, 8-bit/color RGBA, non-interlaced\012- data
Hash 667dcba847f538b8f5a4bfa90ed92ff7
49240611098662f7a6b2b03db46abebc8aa69eae
71f0f68f2291807225371cbe9f6aebc4f2a959c7ca714ce75efc3870c0e9a2d3
GET /img/backgrounds/player-back.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 88861
cf-ray: 76e019e27c98b4e8-OSL
accept-ranges: bytes
age: 38604
cache-control: public, max-age=86400
etag: "178ea-582df0e9c5e80"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Wed, 27 Feb 2019 12:10:18 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
cf-bgj: imgq:85,h2pri
cf-polished: origSize=96490
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/css/subpages.css
104.16.114.23200 OK 63 kB URL HTTP/2 lvbet.pl/css/subpages.css
IP 104.16.114.23:0
Hash 60a643fbce9d7a910f56fbf5f4fa1deb
02f1ca1cb4d92a922e6b9d50ec13e4e8d5d1cfb0
8438ea36b88540ee9908a1a3c7cf4900f47e854afd6c26feac7b6e66313ae368
GET /css/subpages.css HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: text/css
cf-ray: 76e019e26c7bb4e8-OSL
accept-ranges: bytes
content-encoding: gzip
etag: "7aeb8-5e8c84eff2300-gzip"
last-modified: Fri, 16 Sep 2022 09:51:40 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/images/uploads/sponsors/laczy-nas-pasja.png
104.16.114.23200 OK 4.5 kB URL HTTP/2 lvbet.pl/images/uploads/sponsors/laczy-nas-pasja.png
IP 104.16.114.23:0
File type PNG image data, 129 x 50, 8-bit/color RGBA, interlaced\012- data
Hash ac2cdd3a05f60573be3a86d3edbe2eda
051ad2c8ed03954e4fbefecd784d7c5d8fe892c9
8d3549070a56c379409ed15628880327a42445a947fdeb79d55ae8d69e91a4cb
GET /images/uploads/sponsors/laczy-nas-pasja.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 4489
cf-ray: 76e019e26c88b4e8-OSL
accept-ranges: bytes
cache-control: public, max-age=1200
etag: "24e9-584ac56f9b500"
expires: Tue, 22 Nov 2022 08:15:08 GMT
last-modified: Fri, 22 Mar 2019 10:30:12 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=9449
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/images/uploads/sponsors/victoria-london.png
104.16.114.23200 OK 8.3 kB URL HTTP/2 lvbet.pl/images/uploads/sponsors/victoria-london.png
IP 104.16.114.23:0
File type PNG image data, 73 x 73, 8-bit/color RGBA, non-interlaced\012- data
Hash b18ca9b4e35541a662601fe0e67633e6
f4506e00b8487f29e25b1690f320cdbdc89b431b
a502ada5906dacacaf86547da9caea041e9def7f669a008400f01bf71661273a
GET /images/uploads/sponsors/victoria-london.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 8337
cf-ray: 76e019e26c85b4e8-OSL
accept-ranges: bytes
cache-control: public, max-age=1200
etag: "3612-584ace26403c0"
expires: Tue, 22 Nov 2022 08:15:08 GMT
last-modified: Fri, 22 Mar 2019 11:09:11 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13842
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/images/uploads/sponsors/slask-wroclaw_pilka-nozna.png
104.16.114.23200 OK 10 kB URL HTTP/2 lvbet.pl/images/uploads/sponsors/slask-wroclaw_pilka-nozna.png
IP 104.16.114.23:0
File type PNG image data, 67 x 73, 8-bit/color RGBA, interlaced\012- data
Hash 08552b3a53a7e435f0b9fa26813b94ed
b3a49ae76c541394d8f6ef830cd16de7d8e5a730
aef437547eace37380ef313a79ec9bde2b46cd4e70e56ea89db793a902133aee
GET /images/uploads/sponsors/slask-wroclaw_pilka-nozna.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 10045
cf-ray: 76e019e26c82b4e8-OSL
accept-ranges: bytes
cache-control: public, max-age=1200
etag: "2cce-5c235ba432fb2"
expires: Tue, 22 Nov 2022 08:15:08 GMT
last-modified: Thu, 13 May 2021 13:01:37 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=11470
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/images/uploads/sponsors/unia-leszno.png
104.16.114.23200 OK 7.7 kB URL HTTP/2 lvbet.pl/images/uploads/sponsors/unia-leszno.png
IP 104.16.114.23:0
File type PNG image data, 118 x 77, 8-bit/color RGBA, non-interlaced\012- data
Hash 03dff01719430ce8f3e52e816d60847f
de80aeb99e5c3c1b913d08b1cad4d360f4c08ce0
ff7c690bd0a3afb2162271e302f58969d3d480fa98cc535e368fee983e25c234
GET /images/uploads/sponsors/unia-leszno.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 7746
cf-ray: 76e019e27c8ab4e8-OSL
accept-ranges: bytes
cache-control: public, max-age=1200
etag: "27bd-5bbfdd08d0a9a"
expires: Tue, 22 Nov 2022 08:15:08 GMT
last-modified: Tue, 23 Feb 2021 09:48:03 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=10173
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/images/uploads/sponsors/59x73-wisla_p.png
104.16.114.23200 OK 4.8 kB URL HTTP/2 lvbet.pl/images/uploads/sponsors/59x73-wisla_p.png
IP 104.16.114.23:0
File type PNG image data, 59 x 73, 8-bit/color RGBA, non-interlaced\012- data
Hash 929f88a2ef3942211f387c7680e272bd
8c8789df21fdf12bdb0e19e73a78d4500ad4e68f
a6c3eda4a3e42a9bdd6544dee646faa974dae8afca4a139f43814c0a24613c7a
GET /images/uploads/sponsors/59x73-wisla_p.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 4828
cf-ray: 76e019e27c8cb4e8-OSL
accept-ranges: bytes
cache-control: public, max-age=1200
etag: "1a8e-5a9c6aa82cb7b"
expires: Tue, 22 Nov 2022 08:15:08 GMT
last-modified: Mon, 06 Jul 2020 14:26:52 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=6798
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/images/uploads/sponsors/logoanon.png
104.16.114.23200 OK 3.6 kB URL HTTP/2 lvbet.pl/images/uploads/sponsors/logoanon.png
IP 104.16.114.23:0
File type PNG image data, 75 x 57, 8-bit/color RGBA, non-interlaced\012- data
Hash 19071482a03d3688af8bb04b114c55cf
16429057aa96dce8d76c6810c4841adeb723e55b
0b6342f8244dc7d683e3d8efcc097bfedc168c04dcf120e45853e38d23194ec8
GET /images/uploads/sponsors/logoanon.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 3636
cf-ray: 76e019e27c8eb4e8-OSL
accept-ranges: bytes
cache-control: public, max-age=1200
etag: "ece-5c9367979ddad"
expires: Tue, 22 Nov 2022 08:15:08 GMT
last-modified: Tue, 10 Aug 2021 15:51:26 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=3790
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/images/uploads/sponsors/stal-mielec.png
104.16.114.23200 OK 9.1 kB URL HTTP/2 lvbet.pl/images/uploads/sponsors/stal-mielec.png
IP 104.16.114.23:0
File type PNG image data, 73 x 73, 8-bit/color RGBA, interlaced\012- data
Hash 2275dd76b634fa66df1ff1e9e817a76c
c99ce8ca0f890209bda15183d7e9a59e3e1c48e6
f08bb017f6e30d81791eed26ee1e33284ea3b848d1dfec720c8dadee075f7019
GET /images/uploads/sponsors/stal-mielec.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/png
content-length: 9079
cf-ray: 76e019e27c8db4e8-OSL
accept-ranges: bytes
cache-control: public, max-age=1200
etag: "34d0-583e6d81c3fc0"
expires: Tue, 22 Nov 2022 08:15:08 GMT
last-modified: Tue, 12 Mar 2019 14:52:55 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
cf-bgj: imgq:85,h2pri
cf-polished: origSize=13520
server: cloudflare
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&subset=latin-ext
142.250.74.10200 OK 1.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&subset=latin-ext
IP 142.250.74.10:0
Hash 547310aa983b77fb4cbbeeaf8126a914
e92da82d7be332a4f391c0f65070c24338da0f2e
ca550ac7396395a48c51ad29f8470d9c07dfafb7f05565da5966d41074bea59b
GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i&subset=latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 22 Nov 2022 07:55:08 GMT
date: Tue, 22 Nov 2022 07:55:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 585eab785e44953b9e6d7c389024ff3e
57582825e9a285177f38cd2fa868ad3a8eab85d1
f1c62af1e27c8510576adcb62b28be35f290d2ee71e873f7000c194980522e80
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lvbet.pl/css/main.css
104.16.114.23200 OK 187 kB IP 104.16.114.23:0
Size 187 kB (186900 bytes)
Hash 0888941698abb7efa1dede9bd3d12798
84466fccfaebf9ecebf2c74db718bd0e63fc88fd
7ff3487ff6ed044a271145e025f859e548a72d4fa88807a481ec7d1f970e9db0
GET /css/main.css HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: text/css
cf-ray: 76e019e26c7cb4e8-OSL
accept-ranges: bytes
content-encoding: gzip
etag: "aae4f-5ebc4f0587680-gzip"
last-modified: Mon, 24 Oct 2022 10:06:02 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ed3ae8e878b9c8c9c5fc3ab22d8547d6
e4d08dc74fa84a3bcc9d442e225e8f7a6c124822
e135b6fb23500cb2edbf836719ed450cdb6b1e86b7c8491289cb4e1ccbd9ce84
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
216.58.207.195200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Hash 3fe71527811fbfedd2c07962e1bc49e7
f63e158a0480c5d711b5e268db0e75e57d87a8a5
24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:57:58 GMT
expires: Tue, 21 Nov 2023 18:57:58 GMT
cache-control: public, max-age=31536000
age: 46630
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
216.58.207.195200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:59:14 GMT
expires: Tue, 21 Nov 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 46554
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
216.58.207.195200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 21:10:08 GMT
expires: Fri, 17 Nov 2023 21:10:08 GMT
cache-control: public, max-age=31536000
age: 384300
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 6212ef55ac15854f4bb720988748db21
536bf403adca709382e5db204f15d1ae342fc932
fa5b048b9f771b351a7256d8009abb846bf0eecbb07e298a54d378ccf06a4a40
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4582
Cache-Control: max-age=121202
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:09 GMT
Etag: "637ba4e9-118"
Expires: Wed, 23 Nov 2022 17:35:11 GMT
Last-Modified: Mon, 21 Nov 2022 16:18:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
lvbet.pl/img/backgrounds/map_pl.png
104.16.114.23200 OK 18 kB URL HTTP/2 lvbet.pl/img/backgrounds/map_pl.png
IP 104.16.114.23:0
File type PNG image data, 370 x 220, 8-bit/color RGB, non-interlaced\012- data
Hash 2dab4eef4de36fa1e095ae871b179b96
2702cb0aee7fbc7eabed92e232f23e17e7c4ffea
45aced6bbf179cbb865b3ded302a49e5b68cc0a9a07115f19b2f8c54cb2d042f
GET /img/backgrounds/map_pl.png HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: image/png
content-length: 18474
cf-ray: 76e019e628f1b4e8-OSL
accept-ranges: bytes
age: 38605
cache-control: public, max-age=86400
etag: "6244-58883a8f0cd00"
expires: Wed, 23 Nov 2022 07:55:09 GMT
last-modified: Fri, 10 May 2019 07:39:00 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
cf-bgj: imgq:85,h2pri
cf-polished: origSize=25156
server: cloudflare
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 1.4 kB IP 93.184.220.29:0
File type gzip compressed data, from Unix\012- data
Hash 25986b39d17703b74f35f6cf3f39b87e
f77de44bccba82c164340872e4be5a574943e98d
aec998043fc3c4eeae5f61c3476921b6fcc69c13d90f64c834da9ba0ddd8e477
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4582
Cache-Control: max-age=121202
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:09 GMT
Etag: "637ba4e9-118"
Expires: Wed, 23 Nov 2022 17:35:11 GMT
Last-Modified: Mon, 21 Nov 2022 16:18:49 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
sc-static.net/scevent.min.js
54.230.82.240200 OK 12 kB URL HTTP/2 sc-static.net/scevent.min.js
IP 54.230.82.240:0
File type ASCII text, with very long lines (27639), with no line terminators
Hash 6d231d01533de87f1978527ff1582e85
2681a231f71539018d1e7ef81b21035159e70067
dd8eda4130a189c4da20100752803ccb737e26f5c93f97f8db822f29f545be19
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 11968
server: CloudFront
date: Tue, 22 Nov 2022 07:55:09 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Wed, 23 Nov 2022 06:58:40 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: V71UPUUlkN6y2p_ec0PtcCuIRNCJuynEOBrjcekIeNP0g0P0G4TtDg==
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 6fc14b649b372e17262ac993a01b6e44
4866a8e009319378be142a25018223d7b0ef9bd8
31a96724f512a3cfec476ca9abfa1a5a6677668c4711a3063ce2380495771965
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 332
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:09 GMT
Last-Modified: Tue, 22 Nov 2022 07:49:37 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash 297d6b3b3effc626135c35bc1a7aebf4
a43f46da12f9b831214977ec9602aabfb0a30b46
adee20a227652b6e1889616c0b5cb61b3cdb95c3838e0cc5895d08fefafbb820
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 26 Nov 2022 05:49:33 GMT
ETag: "a43f46da12f9b831214977ec9602aabfb0a30b46"
Last-Modified: Tue, 22 Nov 2022 05:49:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 82
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e019e8db341bfa-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash d9fc305a152b948877a19e64f07e9904
0a6f467107ca0284e5d9c7a89e2431b3709b41ae
b0ffff086e960ab6a18ec015d70ccb6d1259aee22ceadda17ad465e1253756aa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:09 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 06:25:22 GMT
Expires: Mon, 28 Nov 2022 06:25:21 GMT
Etag: "0a6f467107ca0284e5d9c7a89e2431b3709b41ae"
Cache-Control: max-age=512411,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e019e8ae4ab50f-OSL
my.rtmark.net/p.js?f=sync&lr=1&partner=cb18a4ba6e5f716d87317f9c448739b8768d312891a68782b0ba780329a08500
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=cb18a4ba6e5f716d87317f9c448739b8768d312891a68782b0ba780329a08500
IP 139.45.195.8:0
Hash 7899623e61d40e64fc69d29dd21ac33a
fec010db0cb0526e1b46bf0b4986e99d8f8ba3a4
0cdfd1eaf1018517512288fb040df16c7d7870fb066becb6873c87baed97e236
GET /p.js?f=sync&lr=1&partner=cb18a4ba6e5f716d87317f9c448739b8768d312891a68782b0ba780329a08500 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9149
Expires: Tue, 22 Nov 2022 10:27:38 GMT
Date: Tue, 22 Nov 2022 07:55:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9149
Expires: Tue, 22 Nov 2022 10:27:38 GMT
Date: Tue, 22 Nov 2022 07:55:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9149
Expires: Tue, 22 Nov 2022 10:27:38 GMT
Date: Tue, 22 Nov 2022 07:55:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9149
Expires: Tue, 22 Nov 2022 10:27:38 GMT
Date: Tue, 22 Nov 2022 07:55:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9defa28d124bae7e5ef29a1fb165ee02
2afe813f0fefae511064297ccff9a6de548104e8
8cfdd12386dcc87cfd874ed0c2d42cd33ae2a05cb35127f1a94e163d17bd5b31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F559c6770-d162-460d-b372-5ff036a364d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11576
x-amzn-requestid: 9dd2cb2e-de79-4937-b525-05be9d57c03b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrdFuxoAMFa9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee49-5437ea0f1568967278fe96ad;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:53 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 1daKtJmaZARpzMRiPQaWttMITAndRqZt0VwhiBzbxzxBvw4a28a2sg==
via: 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:02:45 GMT
etag: "2afe813f0fefae511064297ccff9a6de548104e8"
content-type: image/jpeg
age: 35544
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 04:39:13 GMT
age: 11756
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 253593d1b3f90aa54d0748688fbb09ac
470c54ca28e1e5c56828c8c7f9849374061f501e
d8d331519f526b1117e4f67b0fb5fb46f400a63d1cb5757a3f22201ea70301ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F05ba1792-f86a-406e-8e1c-f133f0fb8d73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9598
x-amzn-requestid: a713ce94-2441-4288-b6d8-cd6b638274b9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IqVGgJoAMFz5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee41-5ed8e45c664203e137f8c92b;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mDiJvNjoSqIbYd2Mx4Kv5muJ-g-hehPMyWAjnZuhidG7uEtjdTtTGA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:36:15 GMT
etag: "470c54ca28e1e5c56828c8c7f9849374061f501e"
content-type: image/jpeg
age: 33534
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
34.120.237.76200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dafd9e17dc0023e71ae513c6025e4b80
12e2654db1f384bb04f5c5042848b25dda86b710
e9c885a102dc811648cec4ac292db63564e81a48d7a3611cb31fba73b37286dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3c73cec7-245a-480e-8dfe-cc11a12b2656.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4639
x-amzn-requestid: 8a93fa29-158b-4402-aac4-85ad29a74ae1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oELooAMFWFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-5a85509b26d9aeef7ae59b4c;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z_LKFsiB_s81UenxBOVg9_qX_7vBHUZix7XF8YguDCytRn5opLkLRA==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:01:10 GMT
age: 35639
etag: "12e2654db1f384bb04f5c5042848b25dda86b710"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F359c7e24-81c9-4605-bf89-c3a58f4c72b2.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F359c7e24-81c9-4605-bf89-c3a58f4c72b2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3675a1c1e9e3bfc3d16d71644b4c7ab1
c09ea0df36485d017a0fea2c992f5a5676d42d7c
6771ed9a8f8fbcc5c822f261c71018296febd92463c56662f3af6fe793248227
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F359c7e24-81c9-4605-bf89-c3a58f4c72b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11088
x-amzn-requestid: 3a42e1ee-d63c-4a40-8122-22ea5775bd5d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6nFpMoAMF3gg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-01b48ea07786649b466b9b29;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rQM8prt2Kwp-ND1TCSfMqn8YPIr19TZ_AxHla2UydDx9bBFxO5ddww==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 21:44:52 GMT
age: 36617
etag: "c09ea0df36485d017a0fea2c992f5a5676d42d7c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=4f32f2900aa614af0188326c902167ab3885f1a8fb6648c69642030f5cb4082b
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=4f32f2900aa614af0188326c902167ab3885f1a8fb6648c69642030f5cb4082b
IP 139.45.195.8:0
Hash c77155cc52145c9ad83def1261769b2c
6949191da1d7b1b843db1e30903be10704a981be
1703d2e6614c09c87858e9cbd0319216857c41946fcd32572d18ed450fc049cd
GET /p.js?f=sync&lr=1&partner=4f32f2900aa614af0188326c902167ab3885f1a8fb6648c69642030f5cb4082b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd770f2a4-df6c-467f-9831-3297f524941e.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd770f2a4-df6c-467f-9831-3297f524941e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 296559cb68d1f42b8b9e5d5e5a8167bc
a4b04d0296539fa5063b1f464d2c461be37491a5
eeab74cba5a5a12453a831f9d7e002999c6752576f8a2f31a7040158a7f57bee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd770f2a4-df6c-467f-9831-3297f524941e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11343
x-amzn-requestid: 5af18795-3668-4174-a2cf-47a020d665f2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6pEjEIAMF3pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-26f7d1cd340cb8ab3ab6c81b;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Agcwvavv8A4OPGPxIBmI5UGmA_i8SARRmMCVA4zvXmVIPLycE-m6lQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Mon, 21 Nov 2022 22:36:11 GMT
age: 33538
etag: "a4b04d0296539fa5063b1f464d2c461be37491a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dtm-dre.platform.hicloud.com/download/web/dtm.js?id=DTM-ac1262027c6e10a2817cc06442e74a12
80.158.18.121200 OK 47 kB URL HTTP/1.1 dtm-dre.platform.hicloud.com/download/web/dtm.js?id=DTM-ac1262027c6e10a2817cc06442e74a12
IP 80.158.18.121:0
ASN #6878 T-Systems International GmbH
File type ASCII text, with very long lines (36822)
Hash 764e73e27709e8f585bfcc94dccbba8f
c7a5b0236df0fd53356f7707c2246710fa28e126
49b48dd60124b94a8c543d367f9a3f14cff15daa0ac1455ed5a3140a41644493
GET /download/web/dtm.js?id=DTM-ac1262027c6e10a2817cc06442e74a12 HTTP/1.1
Host: dtm-dre.platform.hicloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:07 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private,max-age=900
Content-Disposition: inline
X-XSS-Protection: 1; mode=block
X-frame-options: SAMEORIGIN
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server: elb
my.rtmark.net/p.js?f=sync&lr=1&partner=3cc4494455a46c39c24db8d70257eab38b18ee9caf06f993700d8dec63bf45fe
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=3cc4494455a46c39c24db8d70257eab38b18ee9caf06f993700d8dec63bf45fe
IP 139.45.195.8:0
Hash d711ca90c68bf91da46cde7fd4d9e719
7860db87d5f66359c78fb06448e2a0d803f70a28
116a687a0419084a4ebf0ae9212d32819ce6d7ad28b7f5572917bdc6acb9bd4b
GET /p.js?f=sync&lr=1&partner=3cc4494455a46c39c24db8d70257eab38b18ee9caf06f993700d8dec63bf45fe HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash a10230dea2107c1f41d3509b35b62ab3
7b47313c41d71d1c4c63d5fc9abfcb7036a46a64
29524f44be7b61da2bda1e58ad2b3cd4589fb6ddbcd0b372e45bb6d7cbc3411b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5330
Cache-Control: max-age=103228
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:09 GMT
Etag: "637b5bc7-13a"
Expires: Wed, 23 Nov 2022 12:35:37 GMT
Last-Modified: Mon, 21 Nov 2022 11:06:47 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 314
ocsp.digicert.com/
93.184.220.29200 OK 314 B IP 93.184.220.29:0
Hash ae8d32915bda4a19345a548f8fcf6b6a
9c26ccca35a0c77c3c21767ad035efb2b966e3b4
824ef283079c1fcb276b71d6281dcd39d6f98874617c6178aebfdb6da200da11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5305
Cache-Control: max-age=126998
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:09 GMT
Etag: "637bb8ba-13a"
Expires: Wed, 23 Nov 2022 19:11:47 GMT
Last-Modified: Mon, 21 Nov 2022 17:43:22 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 314
dnacdn.net/dna
178.250.2.146200 OK 0 B IP 178.250.2.146:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=iHFvc180M0RITmhlJTJCZkMwOUJGQlhaMUN2czk3ckZIbkRVcndabWJWMXJ4UVRaZHIwQmR1ektaakpVbG1ISWJ6Rnl1bHQ; expires=Sun, 17 Dec 2023 07:55:09 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 270230
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
dnacdn.net/dna
178.250.2.146200 OK 441 B IP 178.250.2.146:0
Hash 8cb8b7d18878e936cb20841ce7611432
5f0c7fcd14c762b08946dc2cae62f4a414e90f2b
5aee8d9f988ac5352142137b61610f12234020204b50ad4cfa5bac256c1d88e2
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=iHFvc180M0RITmhlJTJCZkMwOUJGQlhaMUN2czk3ckZIbkRVcndabWJWMXJ4UVRaZHIwQmR1ektaakpVbG1ISWJ6Rnl1bHQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=V_mKgF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czk3ckZIbkRVcndabWJWMXJ4UVRaZHE2YjlnVHNaT29uT0ZKMm1kYmRZWiUyQg; expires=Sun, 17 Dec 2023 07:55:09 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 180749
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
185.235.84.192200 OK 39 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP 185.235.84.192:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 069608af3769b34cd50d97abaaf388e2
c7d21581e0b845aec7a47baefc08befe7e63ab48
676b4db385ac57b0d64a7475d6706d597dd474bb73c203336152c77487ff7ce9
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 52359
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 461760f30678f8aa3ad801eb88dc59d9
7b3c33ec99c429ad19918895014e309ca947f31a
fe8c62f7c90fa17a3d286b4abc0c8d7aa338d26aa4724d0d5dbaaab7b889b382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-CNPHYEZZHW&cid=90208960.1669103709>m=2oeb90&aip=1
142.250.150.157204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-CNPHYEZZHW&cid=90208960.1669103709>m=2oeb90&aip=1
IP 142.250.150.157:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-CNPHYEZZHW&cid=90208960.1669103709>m=2oeb90&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://lvbet.pl
date: Tue, 22 Nov 2022 07:55:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=cb18a4ba6e5f716d87317f9c448739b8768d312891a68782b0ba780329a08500&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=cb18a4ba6e5f716d87317f9c448739b8768d312891a68782b0ba780329a08500&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=cb18a4ba6e5f716d87317f9c448739b8768d312891a68782b0ba780329a08500&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f70aa8381d9844a2b2ccbfea4d8ae8c6; expires=Wed, 22 Nov 2023 07:55:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=4f32f2900aa614af0188326c902167ab3885f1a8fb6648c69642030f5cb4082b&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=4f32f2900aa614af0188326c902167ab3885f1a8fb6648c69642030f5cb4082b&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=4f32f2900aa614af0188326c902167ab3885f1a8fb6648c69642030f5cb4082b&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=384fe31f18b644498980bb235ce8eda7; expires=Wed, 22 Nov 2023 07:55:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=3cc4494455a46c39c24db8d70257eab38b18ee9caf06f993700d8dec63bf45fe&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=3cc4494455a46c39c24db8d70257eab38b18ee9caf06f993700d8dec63bf45fe&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=3cc4494455a46c39c24db8d70257eab38b18ee9caf06f993700d8dec63bf45fe&ttl=&rurl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=513ec26a44d84857aed26ecc2f4033e4; expires=Wed, 22 Nov 2023 07:55:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 461760f30678f8aa3ad801eb88dc59d9
7b3c33ec99c429ad19918895014e309ca947f31a
fe8c62f7c90fa17a3d286b4abc0c8d7aa338d26aa4724d0d5dbaaab7b889b382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
user.lvbet.pl/user/info/?slider_info=1&with_deposits=True
104.16.114.23200 OK 44 B URL HTTP/2 user.lvbet.pl/user/info/?slider_info=1&with_deposits=True
IP 104.16.114.23:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 95bccc12c1fdfbcd823319c5319701f5
224578a0bbe2fada16e5642d63a20744f5467b64
08be1cbfd6dd755a991fd4fed0b3f6f5c67a0e8983bc6eaf4cd0117a887b48e8
GET /user/info/?slider_info=1&with_deposits=True HTTP/1.1
Host: user.lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: pl-PL,pl
Accept-Encoding: gzip, deflate, br
Content-language: pl
x-translation-lang: pl
Content-Type: application/x-www-form-urlencoded
device: PWA
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: application/json
content-length: 44
vary: Cookie, Accept-Language, Origin
content-language: pl
access-control-allow-credentials: true
access-control-allow-origin: https://lvbet.pl
set-cookie: csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK; Domain=.lvbet.pl; expires=Tue, 21-Nov-2023 07:55:10 GMT; Max-Age=31449600; Path=/
domain_gateways="https://lvbet.pl/"; expires=Tue, 22-Nov-2022 08:55:10 GMT; Max-Age=3600; Path=/
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e019edba18b4e8-OSL
X-Firefox-Spdy: h2
lvbet.pl/js//authorization-bar/pl/home.9809931ce7b5d2d6b21e.4651b7fb410c6c8b9382.chunk.js
104.16.114.23200 OK 34 kB URL HTTP/2 lvbet.pl/js//authorization-bar/pl/home.9809931ce7b5d2d6b21e.4651b7fb410c6c8b9382.chunk.js
IP 104.16.114.23:0
Hash d23a81e6a4aec72bf062a0c2678890fa
e8181cf8497575f7ec77ac589487c9428ab3678b
7857713d88fe5effc4c5d4c5db9aaee34942a1e859bca368822012589884f6fb
GET /js//authorization-bar/pl/home.9809931ce7b5d2d6b21e.4651b7fb410c6c8b9382.chunk.js HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: application/javascript
cf-ray: 76e019ed59bcb4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "2e8d5-5ed6acadd9fa8-gzip"
expires: Tue, 22 Nov 2022 08:00:10 GMT
last-modified: Mon, 14 Nov 2022 09:23:29 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: EXPIRED
server: cloudflare
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/track.js
91.201.28.201200 OK 13 kB URL HTTP/2 lvbet.ladesk.com/scripts/track.js
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type ASCII text, with very long lines (50335), with no line terminators
Hash 7a051dd9922bb948e8a87b7183c83b0a
bf7e80c30bdf1089db17a9a1851becbcb604d2af
39b814cc1a6e3c9e16cf24bebf5bc95943a107fe23c7faf72c86f3043439758e
GET /scripts/track.js HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: application/javascript
content-length: 13022
etag: "c49f-5eb538358c880"
expires: Tue, 22 Nov 2022 13:53:40 GMT
cache-control: max-age=300, public
last-modified: Tue, 18 Oct 2022 18:46:42 GMT
x-srv: 3
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 487202309 493781005
age: 90
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.pl/img/subpages/mundial-pickem/section-hero-img.jpg
104.16.114.23200 OK 331 kB URL HTTP/2 lvbet.pl/img/subpages/mundial-pickem/section-hero-img.jpg
IP 104.16.114.23:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2499x1284, components 3\012- data
Size 331 kB (330817 bytes)
Hash be7a77e4c1d677aaa43e2a5afd563dcc
16488993d007824e7a6028fa39066ecdf7734100
797a1109dd8aaf5e56f0018efc1e500c908871d36b09d3f6c3c24ebbad33d2f9
GET /img/subpages/mundial-pickem/section-hero-img.jpg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709; csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/jpeg
content-length: 330817
cf-ray: 76e019f00d4cb4e8-OSL
accept-ranges: bytes
age: 59767
cache-control: public, max-age=86400
etag: "50c49-5ebef60c83d40"
expires: Wed, 23 Nov 2022 07:55:10 GMT
last-modified: Wed, 26 Oct 2022 12:43:57 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
cf-bgj: imgq:85,h2pri
cf-polished: origSize=330825
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/img/icons/primary/payments-history.svg
104.16.114.23200 OK 162 kB URL HTTP/2 lvbet.pl/img/icons/primary/payments-history.svg
IP 104.16.114.23:0
Size 162 kB (161455 bytes)
Hash d61106ece3b48ac60310422d6ed947cd
44ec601bd6e1c06e60ce9cee7908a0b6c33441fe
d7c2d0f2543f0e7d977c09107e9cc4bb1c9263e7f597be5758c242e99dbfc58c
GET /img/icons/primary/payments-history.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/svg+xml
cf-ray: 76e019ee0a79b4e8-OSL
cache-control: public, max-age=86400
etag: W/"2d0-5aede4d18d8c0"
expires: Wed, 23 Nov 2022 07:55:10 GMT
last-modified: Wed, 09 Sep 2020 09:44:43 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/img/subpages/mundial-pickem/section-finals-img.jpg
104.16.114.23200 OK 177 kB URL HTTP/2 lvbet.pl/img/subpages/mundial-pickem/section-finals-img.jpg
IP 104.16.114.23:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1259x992, components 3\012- data
Size 177 kB (176644 bytes)
Hash d4a399c0d17b12a196b703509a3da0e9
65239d2ec8e4d885195e0011f711b23034812e1b
aba308b50b95e76259de39bc84553579d5212df80cb46728427312b5f34cf00e
GET /img/subpages/mundial-pickem/section-finals-img.jpg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709; csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/jpeg
content-length: 176644
cf-ray: 76e019f01d68b4e8-OSL
accept-ranges: bytes
age: 47143
cache-control: public, max-age=86400
etag: "2d781-5ebef60c83d40"
expires: Wed, 23 Nov 2022 07:55:10 GMT
last-modified: Wed, 26 Oct 2022 12:43:57 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
cf-bgj: imgq:85,h2pri
cf-polished: degrade=85, origSize=186241
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/img/icons/primary/documents.svg
104.16.114.23200 OK 55 kB URL HTTP/2 lvbet.pl/img/icons/primary/documents.svg
IP 104.16.114.23:0
Hash 2b09251a76747e7ee57507153685d7a3
9933c21d89ec81283f2503c7737f276e4f5a9b72
3328d13a66f903d566331cd05d293fcd67d5030ed4e079ed1d4645d0c6c4d2b2
GET /img/icons/primary/documents.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/svg+xml
cf-ray: 76e019ee0a81b4e8-OSL
cache-control: public, max-age=86400
etag: W/"322-5aede4da22d00"
expires: Wed, 23 Nov 2022 07:55:10 GMT
last-modified: Wed, 09 Sep 2020 09:44:52 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
user.lvbet.pl/user/info/?slider_info=1&with_deposits=True
104.16.114.23200 OK 44 B URL HTTP/2 user.lvbet.pl/user/info/?slider_info=1&with_deposits=True
IP 104.16.114.23:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 95bccc12c1fdfbcd823319c5319701f5
224578a0bbe2fada16e5642d63a20744f5467b64
08be1cbfd6dd755a991fd4fed0b3f6f5c67a0e8983bc6eaf4cd0117a887b48e8
GET /user/info/?slider_info=1&with_deposits=True HTTP/1.1
Host: user.lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: pl-PL,pl
Accept-Encoding: gzip, deflate, br
Content-language: pl
x-translation-lang: pl
X-CSRFToken: QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK
Content-Type: application/x-www-form-urlencoded
device: PWA
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709; csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK; domain_gateways="https://lvbet.pl/"
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: application/json
content-length: 44
vary: Cookie, Accept-Language, Origin
content-language: pl
access-control-allow-credentials: true
access-control-allow-origin: https://lvbet.pl
set-cookie: csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK; Domain=.lvbet.pl; expires=Tue, 21-Nov-2023 07:55:10 GMT; Max-Age=31449600; Path=/
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e019f13f20b4e8-OSL
X-Firefox-Spdy: h2
lvbet.pl/img/icons/primary/message.svg
104.16.114.23200 OK 103 kB URL HTTP/2 lvbet.pl/img/icons/primary/message.svg
IP 104.16.114.23:0
Size 103 kB (103334 bytes)
Hash 5337726895585f46b2776f03405eb9ec
02ec832e65d79e585bf24980dd6b67f88bd2446c
b3786ba6f65927a8fd781ad82efc5c3b89b48f61c1af8a30a32722f854af0dda
GET /img/icons/primary/message.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/svg+xml
cf-ray: 76e019ee0a74b4e8-OSL
cache-control: public, max-age=86400
etag: W/"1e4-5aede4c804240"
expires: Wed, 23 Nov 2022 07:55:10 GMT
last-modified: Wed, 09 Sep 2020 09:44:33 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 398 B URL HTTP/2 lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
Hash 24c821f58b12b3746474d958de7359ca
d3772dba7a11d996d11ef8d9d15770bc546be26c
78b44820fae058af5e13b6fb43fe63767231b911497f4e83fcb272b0560a8ebb
GET /scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/javascript; charset=UTF-8
content-length: 398
pragma:
last-modified: Tue, 22 Nov 2022 07:54:55 GMT
x-srv: 1
x-content-type-options: nosniff, nosniff
content-encoding: gzip
x-varnish: 493585064 490635309
age: 16
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
cms-pickem.lvbet.pl/api/content/get-content?locale=pl
104.16.113.23200 OK 24 kB URL HTTP/2 cms-pickem.lvbet.pl/api/content/get-content?locale=pl
IP 104.16.113.23:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (14872)
Hash 46e8634c36d98201ec5f5163436d4c9c
77f0f9d01f46c01a8ddc5b149b31e4835dd21b17
aac4d1f88da471c064bb6a8640ea9ec642eef77787a3b54fae8a5f4b7a227e9d
GET /api/content/get-content?locale=pl HTTP/1.1
Host: cms-pickem.lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: application/json; charset=utf-8
content-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://dl.airtable.com;media-src 'self' data: blob:;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
vary: Origin
access-control-allow-origin: https://lvbet.pl
access-control-allow-credentials: true
x-powered-by: Strapi <strapi.io>
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e019ed8866b521-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/viewthroughconversion/851683490/?random=1669103709275&cv=11&fst=1669103709275&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&auid=401068278.1669103709&rfmt=3&fmt=4
142.250.74.34200 OK 908 B URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/851683490/?random=1669103709275&cv=11&fst=1669103709275&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&auid=401068278.1669103709&rfmt=3&fmt=4
IP 142.250.74.34:0
File type ASCII text, with very long lines (1937), with no line terminators
Hash 9726eb2028566eb72fca67a3e899c20a
66ea0fcfa7142f329c3322d22f871524f9416105
8df99c9bd55e997f3760e79b685eac72b003af49beb3cb13cc146a58961ba87c
GET /pagead/viewthroughconversion/851683490/?random=1669103709275&cv=11&fst=1669103709275&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&auid=401068278.1669103709&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:55:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 908
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 22-Nov-2022 08:10:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 72d50acad831beb6384250b4be217004
4c63b5d7120df90dce65d1d9a449e0779916cd86
948ea04f802c71a04d3a7f3e5a056b195b99d7e4b346b1b2e8afb53fd537b642
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:11 GMT
Last-Modified: Tue, 22 Nov 2022 06:06:23 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
lvbet.pl/img/icons/primary/my-bets.svg
104.16.114.23200 OK 18 kB URL HTTP/2 lvbet.pl/img/icons/primary/my-bets.svg
IP 104.16.114.23:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (58479)
Hash 45fce8596d96218bb74baf876d4ee426
e96db767d3019663c64e4e86683290516bf03995
9e6cf5c876b565dd05183bb5900f71d9c443ea15470aa2df23addb9f3ce11b65
GET /img/icons/primary/my-bets.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/svg+xml
cf-ray: 76e019ee0a76b4e8-OSL
cache-control: public, max-age=86400
etag: W/"2f8-5aedd13b22240"
expires: Wed, 23 Nov 2022 07:55:10 GMT
last-modified: Wed, 09 Sep 2020 08:17:05 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 30e580e36afe0cf59ecf3b4acddc4cf3
e4fa574490eb096d887028e2e02b11da0fe5c4fc
a9f6f07a05238e48be2b4248498d111b458eaafe90678b713e9391804fec3178
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2601
Cache-Control: max-age=131800
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:11 GMT
Etag: "637bd60e-1d7"
Expires: Wed, 23 Nov 2022 20:31:51 GMT
Last-Modified: Mon, 21 Nov 2022 19:48:30 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash dc18476a17e787dc0700f3ee8dc99bcf
4db3ef7edb2683d8141280b9dd780ce4375e3c0f
4082538731e62eb96bd62690e973875ef9e3048432a3a849d7bedd37872b79ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 398 B URL HTTP/2 lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
Hash 24c821f58b12b3746474d958de7359ca
d3772dba7a11d996d11ef8d9d15770bc546be26c
78b44820fae058af5e13b6fb43fe63767231b911497f4e83fcb272b0560a8ebb
GET /scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/javascript; charset=UTF-8
content-length: 398
pragma:
last-modified: Tue, 22 Nov 2022 07:55:11 GMT
x-srv: 5
x-content-type-options: nosniff, nosniff
content-encoding: gzip
x-varnish: 491258530 493585065
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 398 B URL HTTP/2 lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
Hash 24c821f58b12b3746474d958de7359ca
d3772dba7a11d996d11ef8d9d15770bc546be26c
78b44820fae058af5e13b6fb43fe63767231b911497f4e83fcb272b0560a8ebb
GET /scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/javascript; charset=UTF-8
content-length: 398
pragma:
last-modified: Tue, 22 Nov 2022 07:55:11 GMT
x-srv: 5
x-content-type-options: nosniff, nosniff
content-encoding: gzip
x-varnish: 492077450 493585065
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 398 B URL HTTP/2 lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
Hash 24c821f58b12b3746474d958de7359ca
d3772dba7a11d996d11ef8d9d15770bc546be26c
78b44820fae058af5e13b6fb43fe63767231b911497f4e83fcb272b0560a8ebb
GET /scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/javascript; charset=UTF-8
content-length: 398
pragma:
last-modified: Tue, 22 Nov 2022 07:55:11 GMT
x-srv: 5
x-content-type-options: nosniff, nosniff
content-encoding: gzip
x-varnish: 491258532 493585065
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 398 B URL HTTP/2 lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
Hash 24c821f58b12b3746474d958de7359ca
d3772dba7a11d996d11ef8d9d15770bc546be26c
78b44820fae058af5e13b6fb43fe63767231b911497f4e83fcb272b0560a8ebb
GET /scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/javascript; charset=UTF-8
content-length: 398
pragma:
last-modified: Tue, 22 Nov 2022 07:55:11 GMT
x-srv: 5
x-content-type-options: nosniff, nosniff
content-encoding: gzip
x-varnish: 492077452 493585065
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
178.250.6.232200 OK 317 kB URL HTTP/2 ag.gbc.criteo.com/newidsd
IP 178.250.6.232:0
Size 317 kB (316632 bytes)
Hash a998b46fd9ec95442e0b662615ba8b95
fe79d1c1ccd55307e0852ef9e620af29e0597a60
9f7bafe630385fd1063581ccd93f171bfd0cedc3fc7190fc5a9e5ad009f8bf79
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 77928
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
lvbet.pl/img/icons/primary/bonus.svg
104.16.114.23200 OK 28 kB URL HTTP/2 lvbet.pl/img/icons/primary/bonus.svg
IP 104.16.114.23:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (63674)
Hash d6892672dd3a02e00b625cd12660aa20
113e3ef65953826049ad7b6e7dd2c422888288d5
8c4fcef7a3bc7ccebbe7a158139de1f9d905369b8e2479d775ed4c7805ab2d04
GET /img/icons/primary/bonus.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: image/svg+xml
cf-ray: 76e019edfa6eb4e8-OSL
cache-control: public, max-age=86400
etag: W/"2a2-5aede4af387c0"
expires: Wed, 23 Nov 2022 07:55:10 GMT
last-modified: Wed, 09 Sep 2020 09:44:07 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: REVALIDATED
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/851683490/?random=1669103709275&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&fmt=3&is_vtc=1&random=3792692111&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/851683490/?random=1669103709275&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&fmt=3&is_vtc=1&random=3792692111&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/851683490/?random=1669103709275&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&fmt=3&is_vtc=1&random=3792692111&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:55:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 72d50acad831beb6384250b4be217004
4c63b5d7120df90dce65d1d9a449e0779916cd86
948ea04f802c71a04d3a7f3e5a056b195b99d7e4b346b1b2e8afb53fd537b642
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6528
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:11 GMT
Last-Modified: Tue, 22 Nov 2022 06:06:23 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash dc18476a17e787dc0700f3ee8dc99bcf
4db3ef7edb2683d8141280b9dd780ce4375e3c0f
4082538731e62eb96bd62690e973875ef9e3048432a3a849d7bedd37872b79ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash fab2cb3bd48a955d89176110d75459e4
8e642591b32f0095b8302d23b2aa3d4849352c56
71e3ae0dd72335874bd1e42e216d72a6185fb21786e55efbf3012ee0094692a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 13 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7853)
Hash c0460684dc0ac604cfe85aab39feef98
0f9ce4b5157096dc82a3994db54fe7eabc9405db
b501d779b2b04c38341f1a82aa8932c68e59122a9ecbb26f8d20de52310ceb06
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 12837
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 6
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 491913930 492077459
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 13 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7853)
Hash c0460684dc0ac604cfe85aab39feef98
0f9ce4b5157096dc82a3994db54fe7eabc9405db
b501d779b2b04c38341f1a82aa8932c68e59122a9ecbb26f8d20de52310ceb06
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 12837
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 6
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 487983864 492077459
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 13 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7853)
Hash c0460684dc0ac604cfe85aab39feef98
0f9ce4b5157096dc82a3994db54fe7eabc9405db
b501d779b2b04c38341f1a82aa8932c68e59122a9ecbb26f8d20de52310ceb06
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 12837
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 6
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 491913932 492077459
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/851683490/?random=1669103709275&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&fmt=3&is_vtc=1&random=3792692111&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/851683490/?random=1669103709275&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&fmt=3&is_vtc=1&random=3792692111&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/851683490/?random=1669103709275&cv=11&fst=1669100400000&bg=ffffff&guid=ON&async=1>m=2wgb90&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&tiba=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&fmt=3&is_vtc=1&random=3792692111&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 22 Nov 2022 07:55:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 13 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7853)
Hash c0460684dc0ac604cfe85aab39feef98
0f9ce4b5157096dc82a3994db54fe7eabc9405db
b501d779b2b04c38341f1a82aa8932c68e59122a9ecbb26f8d20de52310ceb06
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 12837
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 6
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 491913936 492077459
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 9.9 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6736)
Hash eb68fdacc7fbafde4ddbdb8e4a5b696b
8b948aa8bed148e1363e6d30cb08cae634a5d57f
69807d3943e87f3310518cbc9c0bd013119091fb2880dcac4b3e40f3556f4960
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 9898
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 8
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 491913938 493093004
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 9.9 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6736)
Hash eb68fdacc7fbafde4ddbdb8e4a5b696b
8b948aa8bed148e1363e6d30cb08cae634a5d57f
69807d3943e87f3310518cbc9c0bd013119091fb2880dcac4b3e40f3556f4960
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 9898
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 8
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 494108903 493093004
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 9.9 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6736)
Hash eb68fdacc7fbafde4ddbdb8e4a5b696b
8b948aa8bed148e1363e6d30cb08cae634a5d57f
69807d3943e87f3310518cbc9c0bd013119091fb2880dcac4b3e40f3556f4960
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 9898
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 8
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 487983866 493093004
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 9.9 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6736)
Hash eb68fdacc7fbafde4ddbdb8e4a5b696b
8b948aa8bed148e1363e6d30cb08cae634a5d57f
69807d3943e87f3310518cbc9c0bd013119091fb2880dcac4b3e40f3556f4960
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
content-length: 9898
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 8
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 491913940 493093004
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
sslwidget.criteo.com/event?a=98614&v=5.12.3&p0=e%3Dce%26m%3D%255B%255D&p1=e%3Dexd%26site_type%3Dd&p2=e%3Dvh&p3=e%3Ddis&adce=1&bundle=GQPXE19PMkRuc3dyY3RXT3pEU1MyR0VjaW82RFNUOTk3Nmx0N3AlMkYwRFdqaDRVbGxob3FSZmM4Nnc4M0JWJTJCbm52OVhVMWRNakI1MFZocUVHa2tLYzllT0FyQTlrSHVQaDglMkJDJTJGa1FhM0RGZVE3amd6SGlOM3RyQzNqVWVDaEY4TGF6WXBy&tld=lvbet.pl&fu=https%253A%252F%252Flvbet.pl%252Fpl%252Ffantasy%252F&dtycbr=38160
178.250.2.151200 OK 4.1 kB URL HTTP/2 sslwidget.criteo.com/event?a=98614&v=5.12.3&p0=e%3Dce%26m%3D%255B%255D&p1=e%3Dexd%26site_type%3Dd&p2=e%3Dvh&p3=e%3Ddis&adce=1&bundle=GQPXE19PMkRuc3dyY3RXT3pEU1MyR0VjaW82RFNUOTk3Nmx0N3AlMkYwRFdqaDRVbGxob3FSZmM4Nnc4M0JWJTJCbm52OVhVMWRNakI1MFZocUVHa2tLYzllT0FyQTlrSHVQaDglMkJDJTJGa1FhM0RGZVE3amd6SGlOM3RyQzNqVWVDaEY4TGF6WXBy&tld=lvbet.pl&fu=https%253A%252F%252Flvbet.pl%252Fpl%252Ffantasy%252F&dtycbr=38160
IP 178.250.2.151:0
Hash 64e8a722ca94604e1ccccb01825b496f
a18e83556f705342621a15f11b9929f9b99c6bd8
0af59f62b035f129ccc779e912fcfd610ffbd401543a5d105d1adb2068c231e9
GET /event?a=98614&v=5.12.3&p0=e%3Dce%26m%3D%255B%255D&p1=e%3Dexd%26site_type%3Dd&p2=e%3Dvh&p3=e%3Ddis&adce=1&bundle=GQPXE19PMkRuc3dyY3RXT3pEU1MyR0VjaW82RFNUOTk3Nmx0N3AlMkYwRFdqaDRVbGxob3FSZmM4Nnc4M0JWJTJCbm52OVhVMWRNakI1MFZocUVHa2tLYzllT0FyQTlrSHVQaDglMkJDJTJGa1FhM0RGZVE3amd6SGlOM3RyQzNqVWVDaEY4TGF6WXBy&tld=lvbet.pl&fu=https%253A%252F%252Flvbet.pl%252Fpl%252Ffantasy%252F&dtycbr=38160 HTTP/1.1
Host: sslwidget.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/x-javascript
server: Kestrel
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: 0
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
p3p: NON DSP COR CURa PSA PSD OUR BUS NAV STA
timing-allow-origin: *
server-processing-duration-in-ticks: 20411576
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
lvbet.ladesk.com/themes/embedded_chat/rotary/chat.css?v=5.33.6.18
91.201.28.201200 OK 22 kB URL HTTP/2 lvbet.ladesk.com/themes/embedded_chat/rotary/chat.css?v=5.33.6.18
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type ASCII text, with very long lines (65536), with no line terminators
Hash dbb91cd8d58e35f939c7d415792f3743
89d561e423d7996c3d9040650cfdad5546323788
d79d12bf215d99c150968383e6e43144c12d793de843a5ecfcac2afe3c0ddadd
GET /themes/embedded_chat/rotary/chat.css?v=5.33.6.18 HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/css
content-length: 22063
etag: "1cc21-5eb5383d2da80"
expires: Tue, 29 Nov 2022 07:30:52 GMT
cache-control: max-age=604800
last-modified: Tue, 18 Oct 2022 18:46:50 GMT
x-srv: 3
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 490538284 484573423
age: 1459
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 9.9 kB URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6736)
Hash eb68fdacc7fbafde4ddbdb8e4a5b696b
8b948aa8bed148e1363e6d30cb08cae634a5d57f
69807d3943e87f3310518cbc9c0bd013119091fb2880dcac4b3e40f3556f4960
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=onlineform&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 8
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 493093003
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
s2.adform.net/banners/scripts/st/trackpoint-async.js
37.157.5.72200 OK 107 kB URL HTTP/2 s2.adform.net/banners/scripts/st/trackpoint-async.js
IP 37.157.5.72:0
File type ASCII text, with very long lines (992)
Size 107 kB (106613 bytes)
Hash 5b5f895c69d4939dff13fbe71b5bdbe3
3608ef7e9ca46b4fe98c673a23ed93d94f85dd8a
b4a4986c58a3a22c982e9f3f8635619ea31be2aa440faf36e867ad280ac90ca7
GET /banners/scripts/st/trackpoint-async.js HTTP/1.1
Host: s2.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 05 Oct 2022 12:23:24 GMT
x-rgw-object-type: Normal
etag: W/"4cb8e818a3c8dda5fd80d6d9a55d958d"
x-amz-request-id: tx000005a5a6561e003d79a-0063765fcb-329373d4-default
access-control-allow-origin: *
cache-control: public, max-age=604800
x-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/static/webpack/liveagent-common-bundle/bundle-5c3e2a4e8b463c094a2f.esm.js
91.201.28.201200 OK 1.7 kB URL HTTP/2 lvbet.ladesk.com/scripts/static/webpack/liveagent-common-bundle/bundle-5c3e2a4e8b463c094a2f.esm.js
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type ASCII text, with very long lines (3694), with no line terminators
Hash 4f030892c7aa1ee0a50e999800f22b7f
3e046aacf9639010a57608f50f4ce092254c0e2c
217c4665a2d5409820a79243fe9623fb86fcff3a3c7c855d18e8efab372b455e
GET /scripts/static/webpack/liveagent-common-bundle/bundle-5c3e2a4e8b463c094a2f.esm.js HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: application/javascript
content-length: 1690
etag: "e6e-5eb53833a4400"
expires: Tue, 22 Nov 2022 13:42:48 GMT
cache-control: max-age=21600
last-modified: Tue, 18 Oct 2022 18:46:40 GMT
x-srv: 4
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 494108913 486738192
age: 743
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/pix.gif
91.201.28.201200 OK 42 B URL HTTP/2 lvbet.ladesk.com/scripts/pix.gif
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash accba0b69f352b4c9440f05891b015c5
9d01cc5dc8e042c0d4ad6cfb8b3ac38e84a5ef9f
47043e4823a6c21a8881de789b4185355330b5804629d23f6b43dd93f5265292
GET /scripts/pix.gif HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: image/gif
content-length: 42
etag: "2a-5eb538358c880"
expires: Tue, 29 Nov 2022 07:26:17 GMT
cache-control: max-age=604800
last-modified: Tue, 18 Oct 2022 18:46:42 GMT
x-srv: 3
x-content-type-options: nosniff
x-varnish: 491782718 473699305
age: 1734
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
track.adform.net/Serving/TrackPoint/?CC=1&pm=2785392&ADFPageName=site_visit&ADFdivider=%7C&ord=587966763245&ADFtpmode=2&loc=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.3.30200 OK 185 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?CC=1&pm=2785392&ADFPageName=site_visit&ADFdivider=%7C&ord=587966763245&ADFtpmode=2&loc=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.3.30:0
File type ASCII text, with CRLF line terminators
Hash 33859a6ed0ec5b992de945e1121142d5
14db676a5b3a1dfbcbef84980bdbb48353d331d3
983f65b42452f6b6ba8de4bd228b34826da33c771fb48d4cf7f069c7251f6fd8
GET /Serving/TrackPoint/?CC=1&pm=2785392&ADFPageName=site_visit&ADFdivider=%7C&ord=587966763245&ADFtpmode=2&loc=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/javascript; charset=utf-8
content-length: 185
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=2022946227928597&ev=PageView&dl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rl=&if=false&ts=1669103711423&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669103711422.1556288083&it=1669103711106&coo=false&rqm=GET
157.240.200.35200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=2022946227928597&ev=PageView&dl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rl=&if=false&ts=1669103711423&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669103711422.1556288083&it=1669103711106&coo=false&rqm=GET
IP 157.240.200.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=2022946227928597&ev=PageView&dl=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rl=&if=false&ts=1669103711423&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669103711422.1556288083&it=1669103711106&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 22 Nov 2022 07:55:11 GMT
X-Firefox-Spdy: h2
firebaseinstallations.googleapis.com/v1/projects/translations-sportsbook/installations
142.250.74.10200 OK 493 B URL HTTP/2 firebaseinstallations.googleapis.com/v1/projects/translations-sportsbook/installations
IP 142.250.74.10:0
File type JSON data\012- , ASCII text, with very long lines (327)
Hash 20b29a94529ad14f44ddb7a1d152e6b8
27312482a89704385b15a663bbd50a84c2e31baf
40df3bfe9e1c30b8034adf3d186af2d3d46069093c322a7b7a0e453c1c6e8302
POST /v1/projects/translations-sportsbook/installations HTTP/1.1
Host: firebaseinstallations.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
content-type: application/json
x-firebase-client: eyJ2ZXJzaW9uIjoyLCJoZWFydGJlYXRzIjpbeyJhZ2VudCI6ImZpcmUtY29yZS8wLjcuMzIgZmlyZS1jb3JlLWVzbTIwMTcvMC43LjMyIGZpcmUtanMvIGZpcmUtZ2NzLzAuOS45IGZpcmUtZ2NzLWVzbTIwMTcvMC45LjkgZmlyZS1qcy1hbGwtYXBwLzkuOS40IGZpcmUtaWlkLzAuNS4xMiBmaXJlLWlpZC1lc20yMDE3LzAuNS4xMiBmaXJlLXJjLzAuMy4xMSBmaXJlLXJjLWVzbTIwMTcvMC4zLjExIiwiZGF0ZXMiOlsiMjAyMi0xMS0yMiJdfV19
x-goog-api-key: AIzaSyAMJ4qFHZmHDvELQxTG0iWmqpId7VPu3f4
Origin: https://lvbet.pl
Content-Length: 130
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 22 Nov 2022 07:55:11 GMT
server: ESF
cache-control: private
content-length: 493
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lvbet.pl
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 75f280cb98dd308ff2d874aaa3e41a2e
4327da218f2fbf92d083ebdebd86d5de1ae5cb46
db460046677f3b1508c4f4a01540f0e99ec3377bf173015237291c643d4a974f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4205
Cache-Control: max-age=86645
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:11 GMT
Etag: "637b1f67-1d7"
Expires: Wed, 23 Nov 2022 07:59:16 GMT
Last-Modified: Mon, 21 Nov 2022 06:49:11 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
track.adform.net/Serving/TrackPoint/?pm=2785392&ADFPageName=site_visit&ADFdivider=%7C&ord=587966763245&ADFtpmode=2&loc=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24
37.157.3.30302 Found 353 B URL HTTP/2 track.adform.net/Serving/TrackPoint/?pm=2785392&ADFPageName=site_visit&ADFdivider=%7C&ord=587966763245&ADFtpmode=2&loc=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24
IP 37.157.3.30:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 555d696ba6de1cd4ff0db7f105ef9912
a308baad4a7ed49e6a574a625e3d56fc36a402f5
c8fb366238d191ac67df4be5cae6afbd0c0e7504bc96663c028f9cd86e85251d
GET /Serving/TrackPoint/?pm=2785392&ADFPageName=site_visit&ADFdivider=%7C&ord=587966763245&ADFtpmode=2&loc=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24 HTTP/1.1
Host: track.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
location: https://track.adform.net/Serving/TrackPoint/?CC=1&pm=2785392&ADFPageName=site_visit&ADFdivider=%7C&ord=587966763245&ADFtpmode=2&loc=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&Set1=en-US%7Cen-US%7C1280x1024%7C24
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
expires: -1
access-control-allow-origin: *
set-cookie: C=1; domain=adform.net; expires=Thu, 22-Dec-2022 07:55:11 GMT; path=/
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/track_visit.php?t=Y&C=Track&B=kolt32bj44i5dmsb4189fpx2vb978&S=1ngy20z2uwobqmlfgb1w7vykyanxr&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&url=__S__lvbet.pl%2Fpl%2Ffantasy%2F&ref=&sr=1280x1024&ud=%7B%7D&vn=Y&ci=&jstk=Y
91.201.28.201200 OK 206 B URL HTTP/2 lvbet.ladesk.com/scripts/track_visit.php?t=Y&C=Track&B=kolt32bj44i5dmsb4189fpx2vb978&S=1ngy20z2uwobqmlfgb1w7vykyanxr&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&url=__S__lvbet.pl%2Fpl%2Ffantasy%2F&ref=&sr=1280x1024&ud=%7B%7D&vn=Y&ci=&jstk=Y
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
Hash 5be9c84552c7d54a1e635b170285486c
56da25aaa1c0c845abcc97c2e22c21525e0e5800
4f7c6ee58484c2380f8337f8517d8eef6916620dc6489d1681a76953487a912a
GET /scripts/track_visit.php?t=Y&C=Track&B=kolt32bj44i5dmsb4189fpx2vb978&S=1ngy20z2uwobqmlfgb1w7vykyanxr&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&url=__S__lvbet.pl%2Fpl%2Ffantasy%2F&ref=&sr=1280x1024&ud=%7B%7D&vn=Y&ci=&jstk=Y HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: application/javascript
content-length: 206
pragma:
last-modified: Tue, 22 Nov 2022 07:54:55 GMT
x-srv: 6
x-content-type-options: nosniff, nosniff
content-encoding: gzip
x-varnish: 494239837 489785928
age: 17
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 75f280cb98dd308ff2d874aaa3e41a2e
4327da218f2fbf92d083ebdebd86d5de1ae5cb46
db460046677f3b1508c4f4a01540f0e99ec3377bf173015237291c643d4a974f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4206
Cache-Control: max-age=86645
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637b1f67-1d7"
Expires: Wed, 23 Nov 2022 07:59:17 GMT
Last-Modified: Mon, 21 Nov 2022 06:49:11 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 398 B URL HTTP/2 lvbet.ladesk.com/scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
Hash 24c821f58b12b3746474d958de7359ca
d3772dba7a11d996d11ef8d9d15770bc546be26c
78b44820fae058af5e13b6fb43fe63767231b911497f4e83fcb272b0560a8ebb
GET /scripts/button.php?ChS=UTF-8&C=Widget&i=e69f7b56&p=__S__lvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: application/javascript; charset=UTF-8
content-length: 398
pragma:
last-modified: Tue, 22 Nov 2022 07:55:11 GMT
x-srv: 5
x-content-type-options: nosniff, nosniff
content-encoding: gzip
x-varnish: 492634809 493585065
age: 1
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
X-Firefox-Spdy: h2
lvbet.pl/cdn-cgi/rum?
104.16.114.23204 No Content 0 B IP 104.16.114.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 34726
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103710; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.2.90208960.1669103709; csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK; LaVisitorNew=Y; LaVisitorId_bHZiZXQubGFkZXNrLmNvbS8=kolt32bj44i5dmsb4189fpx2vb978; LaSID=1ngy20z2uwobqmlfgb1w7vykyanxr; LaUserDetails=%7B%7D; cto_bundle=GQPXE19PMkRuc3dyY3RXT3pEU1MyR0VjaW82RFNUOTk3Nmx0N3AlMkYwRFdqaDRVbGxob3FSZmM4Nnc4M0JWJTJCbm52OVhVMWRNakI1MFZocUVHa2tLYzllT0FyQTlrSHVQaDglMkJDJTJGa1FhM0RGZVE3amd6SGlOM3RyQzNqVWVDaEY4TGF6WXBy; _gid=GA1.2.1715889204.1669103711; _gat_UA-84648673-1=1; _fbp=fb.1.1669103711422.1556288083
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:12 GMT
access-control-allow-origin: https://lvbet.pl
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 76e019f8a833b4e8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5bfeb821371b452e68d7f263f5778aa2
5e41e6ef1684541ad4225aedb59d253805540cb6
c66ba94e4380c6eb67426770ee65db98828abf9977d605fe476502672867e8dd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C66BA94E4380C6EB67426770EE65DB98828ABF9977D605FE476502672867E8DD"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12022
Expires: Tue, 22 Nov 2022 11:15:34 GMT
Date: Tue, 22 Nov 2022 07:55:12 GMT
Connection: keep-alive
matching.ivitrack.com/sync?realm=criteo&uid=k-8K16LidmPTf06l0dK-HRYGWJlO1FKnqA-_dFKw
34.117.157.22200 OK 42 B URL HTTP/2 matching.ivitrack.com/sync?realm=criteo&uid=k-8K16LidmPTf06l0dK-HRYGWJlO1FKnqA-_dFKw
IP 34.117.157.22:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /sync?realm=criteo&uid=k-8K16LidmPTf06l0dK-HRYGWJlO1FKnqA-_dFKw HTTP/1.1
Host: matching.ivitrack.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: istio-envoy
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: image/gif
content-length: 42
cache-control: public, max-age=86400
x-envoy-upstream-service-time: 0
x-envoy-decorator-operation: tag-manager.programmatic.svc.cluster.local:3000/*
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5bfeb821371b452e68d7f263f5778aa2
5e41e6ef1684541ad4225aedb59d253805540cb6
c66ba94e4380c6eb67426770ee65db98828abf9977d605fe476502672867e8dd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C66BA94E4380C6EB67426770EE65DB98828ABF9977D605FE476502672867E8DD"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12022
Expires: Tue, 22 Nov 2022 11:15:34 GMT
Date: Tue, 22 Nov 2022 07:55:12 GMT
Connection: keep-alive
ocsp.usertrust.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 512a75615d90196414f9943f4b1f8dc3
3c38bf7158f199603cb029a572cad333b5eb09c4
063610c633e985ff3f8d92afac8a6345dc20d089a765628166dd8c654fc06665
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 03:46:36 GMT
Expires: Sat, 26 Nov 2022 03:46:35 GMT
Etag: "3c38bf7158f199603cb029a572cad333b5eb09c4"
Cache-Control: max-age=602248,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1010
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e019f9cc5fb4ee-OSL
gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40
178.250.0.157302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40
IP 178.250.0.157:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=8&r=1&a=1&u=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D28645%26dpuuid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:11 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://dpm.demdex.net/ibs:dpid=28645&dpuuid=
server-processing-duration-in-ticks: 876228
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash db5ab411546c353760dc5cbcec19ab58
5d82580406aaf52b063f718ed7187d0109fc283c
f2cb5e4d232e81304409d045197464377da5220bdbe54c0c0092aebffc7fa6e5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 22 Nov 2022 07:55:12 GMT
Last-Modified: Tue, 22 Nov 2022 06:14:03 GMT
Server: ECS (bsa/EB1D)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ksGOsenDlFNVIOQM2sKYvQ1s1LFHhfEsOYyDeidPW2OUc04medWahg==
Age: 6069
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-lwyeHCdmPTf06l0dK-HRYGWJlO3C85AyEvyMkQ
172.64.154.237302 Found 0 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-lwyeHCdmPTf06l0dK-HRYGWJlO3C85AyEvyMkQ
IP 172.64.154.237:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rum?cm_dsp_id=20&external_user_id=k-lwyeHCdmPTf06l0dK-HRYGWJlO3C85AyEvyMkQ HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:12 GMT
content-length: 0
location: /rum?cm_dsp_id=20&external_user_id=k-lwyeHCdmPTf06l0dK-HRYGWJlO3C85AyEvyMkQ&C=1
cf-ray: 76e019fa3997b500-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI"
pragma: no-cache
set-cookie: CMID=Y3yAYH0IFfLwmfWuEnHnBgAA; Path=/; Domain=casalemedia.com; Expires=Wed, 22 Nov 2023 07:55:12 GMT; Max-Age=31536000; Secure; SameSite=None
CMPS=1838; Path=/; Domain=casalemedia.com; Expires=Mon, 20 Feb 2023 07:55:12 GMT; Max-Age=7776000; Secure; SameSite=None
CMPRO=1838; Path=/; Domain=casalemedia.com; Expires=Mon, 20 Feb 2023 07:55:12 GMT; Max-Age=7776000; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3AL0EPWz1k3rslXjHftReg2rqpbpF%2Bb%2B2lxQOrDjvqeNn%2FBgkhDSDfTUtrZf2jjztRgKS%2FrdFfA4ViSzKC6%2F0OVTmAf7ntuY7TIk%2BP%2BPJdCEm%2FXG%2Fv0pldA5GAR1WsJ7A5oi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.goadservices.com/tags/25516f0b-f093-4728-8c70-65768096fae2?url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
195.177.217.192200 OK 782 B URL HTTP/1.1 t.goadservices.com/tags/25516f0b-f093-4728-8c70-65768096fae2?url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
Hash 2568d7990dc0cf8ce2c00facc36bf768
d4d92bc71b9cccb552dac536971c05ebeada3614
dc7ab6504f7eaaa889d03718e6324b720c2c47a8b383d381299784dd3c0bc6fc
GET /tags/25516f0b-f093-4728-8c70-65768096fae2?url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: t.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, no-cache, no-store
contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-TE1t1CdmPTf06l0dK-HRYGWJlO2p8fHpPLd8hg
23.38.200.22200 OK 45 B URL HTTP/2 contextual.media.net/cksync.php?cs=3&type=crt&ovsid=k-TE1t1CdmPTf06l0dK-HRYGWJlO2p8fHpPLd8hg
IP 23.38.200.22:0
File type GIF image data, version 87a, 1 x 1\012- data
Hash 99cceceaed4d575484b69ddaf9ed66a7
1e3a3b15296b585833a22d987a387aa58aa1642d
832f63f4187160c195b04f1911c2e623a75e805f4b23abb9b0bea214b4283a43
GET /cksync.php?cs=3&type=crt&ovsid=k-TE1t1CdmPTf06l0dK-HRYGWJlO2p8fHpPLd8hg HTTP/1.1
Host: contextual.media.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache
content-length: 45
content-type: image/gif
set-cookie: visitor-id=3121053123580243000V10; Expires=Wed, 22 Nov 2023 07:55:12 GMT; domain=.media.net; Path=/;
data-c-ts=1669103712;Expires=Thu, 22 Dec 2022 07:55:12 GMT;path=/;domain=.media.net;
data-c=k-TE1t1CdmPTf06l0dK-HRYGWJlO2p8fHpPLd8hg~~3;Expires=Thu, 22 Dec 2022 07:55:12 GMT;path=/;domain=.media.net;
p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA", CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA, CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA
strict-transport-security: max-age=31536000
x-mnet-hl2: E
expires: Tue, 22 Nov 2022 07:55:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 22 Nov 2022 07:55:12 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash e8ee27fde371f44458d83408ababd84b
95d73d26e0a56ce18ec3f03eece492b15b19fe2c
f42c73d66e1e0c3392a2162f667de53277b7f7a7603317b059dae92c85fdf7cb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3543
Cache-Control: max-age=118712
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637b9f41-139"
Expires: Wed, 23 Nov 2022 16:53:44 GMT
Last-Modified: Mon, 21 Nov 2022 15:54:41 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
dss.hybrid.ai/Pixel/Track2?pid=5fa50d6c4d506eb7343d3ef0&bobid=&evt=PageView&cost=&text=<m=false&cnt=&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rf=&lng=en-US&tz=&sw=1280&sh=1024&foadh=&gapl=&cs=&pcs=&vcs=&r=
37.18.103.19204 No Content 0 B URL HTTP/2 dss.hybrid.ai/Pixel/Track2?pid=5fa50d6c4d506eb7343d3ef0&bobid=&evt=PageView&cost=&text=<m=false&cnt=&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rf=&lng=en-US&tz=&sw=1280&sh=1024&foadh=&gapl=&cs=&pcs=&vcs=&r=
IP 37.18.103.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /Pixel/Track2?pid=5fa50d6c4d506eb7343d3ef0&bobid=&evt=PageView&cost=&text=<m=false&cnt=&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rf=&lng=en-US&tz=&sw=1280&sh=1024&foadh=&gapl=&cs=&pcs=&vcs=&r= HTTP/1.1
Host: dss.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:12 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=e077be1a171463b61943; expires=Wed, 22 Nov 2023 07:55:10 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 510
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-lwyeHCdmPTf06l0dK-HRYGWJlO3C85AyEvyMkQ&C=1
172.64.154.237200 OK 43 B URL HTTP/2 r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-lwyeHCdmPTf06l0dK-HRYGWJlO3C85AyEvyMkQ&C=1
IP 172.64.154.237:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /rum?cm_dsp_id=20&external_user_id=k-lwyeHCdmPTf06l0dK-HRYGWJlO3C85AyEvyMkQ&C=1 HTTP/1.1
Host: r.casalemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: image/gif
content-length: 43
cf-ray: 76e019fada2bb500-OSL
cache-control: no-cache
expires: 0
cf-cache-status: DYNAMIC
pragma: no-cache
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vmmZeBvvB%2FlaklYwTvlzcvM9DvA%2F6G3w66BtUuAHuvmQbbH1dYyq6p6oSvJ%2F2E1gjcpUfBk0504AamvZ7VIHfqN8oPp7yIefW78hgwbDggmFz5S3KwLLJI%2B079ha9ivvM3u1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dss.hybrid.ai/Pixel/TrackTp?pid=5fa50d6c4d506eb7343d3ef0&foadh=&gapl=&cs=&pcs=&vcs=
37.18.103.19204 No Content 0 B URL HTTP/2 dss.hybrid.ai/Pixel/TrackTp?pid=5fa50d6c4d506eb7343d3ef0&foadh=&gapl=&cs=&pcs=&vcs=
IP 37.18.103.19:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /Pixel/TrackTp?pid=5fa50d6c4d506eb7343d3ef0&foadh=&gapl=&cs=&pcs=&vcs= HTTP/1.1
Host: dss.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:12 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 525
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 306f418448d9386973e8cba677ee3cdf
f342b95b8fc1eceff87ed077f7b0b989b845f07c
346557785638bf307a869139a386b7cac91eed4b900848150312ea3a296b3699
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 01:56:51 GMT
Expires: Sat, 26 Nov 2022 01:56:50 GMT
Etag: "f342b95b8fc1eceff87ed077f7b0b989b845f07c"
Cache-Control: max-age=323497,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e019fb0ed9b50f-OSL
1-vbus-eu.ladesk.com/5_33_6_18/static/webpack/js_bundle/postmessage_bundle.js
91.201.28.221200 OK 2.1 kB URL HTTP/2 1-vbus-eu.ladesk.com/5_33_6_18/static/webpack/js_bundle/postmessage_bundle.js
IP 91.201.28.221:0
ASN #203480 Quality Unit, s.r.o.
File type ASCII text, with very long lines (2090), with no line terminators
Hash 73456dad83c5e8c13a018d7eccef4160
d23f0b6ad3088e76121286f678ea840e5d9068af
faa8e9370329c0b337f2c2dbbac451c8a5444d45f742f9acec42465452a87eb3
GET /5_33_6_18/static/webpack/js_bundle/postmessage_bundle.js HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_33_6_18/scripts/lib/bus.html?v=5.33.6.18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: application/javascript
content-length: 2090
last-modified: Tue, 18 Oct 2022 18:46:40 GMT
etag: "634ef490-82a"
accept-ranges: bytes
X-Firefox-Spdy: h2
t.goadservices.com/engine/25516f0b-f093-4728-8c70-65768096fae2
195.177.217.192200 OK 25 kB URL HTTP/1.1 t.goadservices.com/engine/25516f0b-f093-4728-8c70-65768096fae2
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
File type Unicode text, UTF-8 text, with very long lines (1214)
Hash 94805d2b8abe06128a3fd3e270479e6c
76a4199c42a1415f8c56ab7a9f9f44a6534112db
9bf6e52ac217150c83d61be729b46cb35e58166361c8a73bda5e3a1699ac387e
GET /engine/25516f0b-f093-4728-8c70-65768096fae2 HTTP/1.1
Host: t.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 27 Jun 2022 06:33:09 GMT
Etag: "428ab818137cc4e2e060c1b718ad0f47"
ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
185.89.210.212307 Redirection 0 B URL HTTP/1.1 ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID
IP 185.89.210.212:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
AN-X-Request-Uuid: 6f476c44-5bdf-4b7c-842a-32501eee4902
Set-Cookie: uuid2=7593682943161876079; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 20-Feb-2023 07:55:12 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b39e71b4c72982ec8970df27c133293b
7197516f228098e4014d0220966177383eaec22d
a47e9ce26e4d4a947c7c619df669644b56a6d5abeb81597114e5926958075b42
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3685
Cache-Control: max-age=151988
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637c20af-1d7"
Expires: Thu, 24 Nov 2022 02:08:20 GMT
Last-Modified: Tue, 22 Nov 2022 01:06:55 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
1-vbus-eu.ladesk.com/5_33_6_18/static/webpack/js_bundle/pushstream_bundle.js
91.201.28.221200 OK 21 kB URL HTTP/2 1-vbus-eu.ladesk.com/5_33_6_18/static/webpack/js_bundle/pushstream_bundle.js
IP 91.201.28.221:0
ASN #203480 Quality Unit, s.r.o.
File type ASCII text, with very long lines (20688), with no line terminators
Hash a8a7ebee1d37f0cebaafc9513baac1bb
7cf3bd16190a3ca785084d19d9623fa6cfe5d22d
ab1f85d6560124d8d3d99ab7fd875a5c2ff35da42f7d9c8c138e08dd198298f2
GET /5_33_6_18/static/webpack/js_bundle/pushstream_bundle.js HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_33_6_18/scripts/lib/bus.html?v=5.33.6.18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: application/javascript
content-length: 20688
last-modified: Tue, 18 Oct 2022 18:46:40 GMT
etag: "634ef490-50d0"
accept-ranges: bytes
X-Firefox-Spdy: h2
1-vbus-eu.ladesk.com/5_33_6_18/static/webpack/js_bundle/bus_bundle.js
91.201.28.221200 OK 2.3 kB URL HTTP/2 1-vbus-eu.ladesk.com/5_33_6_18/static/webpack/js_bundle/bus_bundle.js
IP 91.201.28.221:0
ASN #203480 Quality Unit, s.r.o.
File type C source, ASCII text, with very long lines (2250), with no line terminators
Hash 5bfaf8422b5b3675ac7afa75fc7ad99c
815972aad12fe88c843f38a04ac23c2eee204769
2df69b6b5eabdfc3a041b51249904b1f2355bd5a3635be0ff03750df349fab24
GET /5_33_6_18/static/webpack/js_bundle/bus_bundle.js HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_33_6_18/scripts/lib/bus.html?v=5.33.6.18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: application/javascript
content-length: 2250
last-modified: Tue, 18 Oct 2022 18:46:40 GMT
etag: "634ef490-8ca"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 2c4a7edafb4674c9add9d5467b586570
9961c58860122d6940c89207ed8158b720fe34b7
cec44cfc8479fadc4931067f058eb6cb57dee0b861c7df5afa2cbeaefda95b9b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149722
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637c19b8-1d7"
Expires: Thu, 24 Nov 2022 01:30:34 GMT
Last-Modified: Tue, 22 Nov 2022 00:37:12 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 277ppC_B3Nb-aI8k8esvOxxPArwxLOw6zdLV-rRsfZYu10EheXcX8Q==
Age: 3202
rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-OXNs-idmPTf06l0dK-HRYGWJlO0v7PJinYuhSA
185.86.139.114200 OK 43 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?partnerid=79&partneruserid=k-OXNs-idmPTf06l0dK-HRYGWJlO0v7PJinYuhSA
IP 185.86.139.114:0
ASN #201081 SmartAdServer SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /redir/?partnerid=79&partneruserid=k-OXNs-idmPTf06l0dK-HRYGWJlO0v7PJinYuhSA HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
content-type: image/gif
date: Tue, 22 Nov 2022 07:55:11 GMT
cache-control: no-cache,no-store
pragma: no-cache
set-cookie: pid=7968123924652612547; expires=Fri, 22 Dec 2023 07:55:12 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 22 Dec 2023 07:55:12 GMT; domain=smartadserver.com; path=/
csync=79:k-OXNs-idmPTf06l0dK-HRYGWJlO0v7PJinYuhSA; expires=Wed, 22 Nov 2023 07:55:12 GMT; domain=smartadserver.com; path=/
transfer-encoding: chunked
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e2ea24ee702f90f84c0832621d856e92
c22e3e7bc4be2cdb527d73471389ff9060078638
0e9aad1bb53f26bff8e1bbe5a21d77898a3612110ab93d7ac6f7201fbfcc7d87
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3214
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Last-Modified: Tue, 22 Nov 2022 07:01:38 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
tr.snapchat.com/collector/is_enabled?pids=0bf4ba52-c25f-4fec-9a67-4bc32a6a08ef&tld=pl
35.190.43.134200 OK 145 B URL HTTP/2 tr.snapchat.com/collector/is_enabled?pids=0bf4ba52-c25f-4fec-9a67-4bc32a6a08ef&tld=pl
IP 35.190.43.134:0
Hash ccccd8388ac35c67422aa5b792e6a17d
dbdb49a23faa70b07cce6d0c5ab5c76b1bf5731f
fd0288cf48131314cf98c7a2f928d656d7b2f4607d1af39a7f779f78cdbfab67
GET /collector/is_enabled?pids=0bf4ba52-c25f-4fec-9a67-4bc32a6a08ef&tld=pl HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:11 GMT
access-control-allow-origin: https://lvbet.pl
content-type: application/json
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 559965013e2d7b388533f5e537b57cee
edd1bb28bf8781a82bd917611af353c3a73aa8b2
230c08d7bf687ec3775a25ed1017cbc3adaf006a16921d547154a4ae5e3e20fe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4284
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Last-Modified: Tue, 22 Nov 2022 06:43:48 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
185.89.210.212302 Found 0 B URL HTTP/1.1 ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID
IP 185.89.210.212:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID HTTP/1.1
Host: ib.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.21.3
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
AN-X-Request-Uuid: edd8324e-6345-4abb-9f1d-dfb9a8679bf0
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
x.bidswitch.net/sync?dsp_id=46&user_id=k-WEnQeydmPTf06l0dK-HRYGWJlO1WYwUTaPwhZw&expires=30
3.127.178.250302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=46&user_id=k-WEnQeydmPTf06l0dK-HRYGWJlO1WYwUTaPwhZw&expires=30
IP 3.127.178.250:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=46&user_id=k-WEnQeydmPTf06l0dK-HRYGWJlO1WYwUTaPwhZw&expires=30 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:12 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=46&user_id=k-WEnQeydmPTf06l0dK-HRYGWJlO1WYwUTaPwhZw&expires=30
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=62bda5c8-bde1-4b84-9157-bd2db4a97aed; path=/; expires=Wed, 22-Nov-2023 07:55:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669103712; path=/; expires=Wed, 22-Nov-2023 07:55:12 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1669103712; path=/; expires=Wed, 22-Nov-2023 07:55:12 GMT; domain=.bidswitch.net; samesite=none; secure
c=1669103712; path=/; expires=Wed, 22-Nov-2023 07:55:12 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-ZLdYBydmPTf06l0dK-HRYGWJlO1_76_J61caTw&expires=30
213.19.162.90204 No Content 0 B URL HTTP/1.1 pixel.rubiconproject.com/tap.php?v=6434&nid=2149&put=k-ZLdYBydmPTf06l0dK-HRYGWJlO1_76_J61caTw&expires=30
IP 213.19.162.90:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tap.php?v=6434&nid=2149&put=k-ZLdYBydmPTf06l0dK-HRYGWJlO1_76_J61caTw&expires=30 HTTP/1.1
Host: pixel.rubiconproject.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
P3P: CP="NOI CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Pragma: no-cache
Cache-Control: no-cache,no-store,must-revalidate
Expires: 0
X-RPHost: deb9f124eecce7a554c70ca983265c95
Content-Type: image/gif
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 20802b1baf5a5448508b1dbe310a8849
c63906671fa37d4ed4dc506563236ee15ecae641
9f0283438c532fe191b5d1bda20c35355e4b5ec0ca48ef6fbda16d40c6783a1d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5888
Cache-Control: max-age=85789
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637b157e-1d7"
Expires: Wed, 23 Nov 2022 07:45:01 GMT
Last-Modified: Mon, 21 Nov 2022 06:06:54 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
t.goadservices.com/v2/tag/25516f0b-f093-4728-8c70-65768096fae2?data=%5B%5B%22_ENTRY%22%5D%5D&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rid=1669103712420-525715
195.177.217.192200 OK 358 B URL HTTP/1.1 t.goadservices.com/v2/tag/25516f0b-f093-4728-8c70-65768096fae2?data=%5B%5B%22_ENTRY%22%5D%5D&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rid=1669103712420-525715
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
File type ASCII text, with very long lines (358), with no line terminators
Hash 58ff4e5d621665b032946ed66ab37d22
d648b06f34e946ba31a1966b5563943366f93866
53a1f5997a229f895dd81fa207986a0d48737c40e6dd0856e9aaedf4b139858b
GET /v2/tag/25516f0b-f093-4728-8c70-65768096fae2?data=%5B%5B%22_ENTRY%22%5D%5D&url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F&rid=1669103712420-525715 HTTP/1.1
Host: t.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Set-Cookie: __goadservices=4-MzI4MTYwMDE2NA; expires=Thu, 21-Nov-2024 07:55:12 GMT; Max-Age=63072000; path=/; domain=.goadservices.com; secure; SameSite=None
path_25516f0b-f093-4728-8c70-65768096fae2=7e695ba1a69c7a4914915cc427e941db; expires=Thu, 22-Dec-2022 07:55:12 GMT; Max-Age=2592000; path=/; domain=.goadservices.com; secure; SameSite=None
session_25516f0b-f093-4728-8c70-65768096fae2=01cad9db5e5fe596fc4c961551fa702a; expires=Tue, 22-Nov-2022 08:55:12 GMT; Max-Age=3600; path=/; domain=.goadservices.com; secure; SameSite=None
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 379d96d3ef633b1f24a2646a99c494ff
eff0788396634e00cb3f885f24f5fc87b944453d
22326c8bba75b94e2709a38e3dc2e6684feb522dec8b80ac9b39d4761d70a325
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22326C8BBA75B94E2709A38E3DC2E6684FEB522DEC8B80AC9B39D4761D70A325"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5090
Expires: Tue, 22 Nov 2022 09:20:02 GMT
Date: Tue, 22 Nov 2022 07:55:12 GMT
Connection: keep-alive
cm.adform.net/pixel?adform_pid=15&adform_pc=k-cn2VQSdmPTf06l0dK-HRYGWJlO1L-hIxAiOJWQ
37.157.3.30200 OK 43 B URL HTTP/2 cm.adform.net/pixel?adform_pid=15&adform_pc=k-cn2VQSdmPTf06l0dK-HRYGWJlO1L-hIxAiOJWQ
IP 37.157.3.30:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /pixel?adform_pid=15&adform_pc=k-cn2VQSdmPTf06l0dK-HRYGWJlO1L-hIxAiOJWQ HTTP/1.1
Host: cm.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: image/gif
content-length: 43
last-modified: Fri, 07 Feb 2020 08:03:24 GMT
etag: "5e3d19cc-2b"
accept-ranges: bytes
X-Firefox-Spdy: h2
firebaseremoteconfig.googleapis.com/v1/projects/translations-sportsbook/namespaces/firebase:fetch?key=AIzaSyAMJ4qFHZmHDvELQxTG0iWmqpId7VPu3f4
142.250.74.10200 OK 0 B URL HTTP/2 firebaseremoteconfig.googleapis.com/v1/projects/translations-sportsbook/namespaces/firebase:fetch?key=AIzaSyAMJ4qFHZmHDvELQxTG0iWmqpId7VPu3f4
IP 142.250.74.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/projects/translations-sportsbook/namespaces/firebase:fetch?key=AIzaSyAMJ4qFHZmHDvELQxTG0iWmqpId7VPu3f4 HTTP/1.1
Host: firebaseremoteconfig.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-encoding,content-type,if-none-match
Referer: https://lvbet.pl/
Origin: https://lvbet.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://lvbet.pl
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-encoding,content-type,if-none-match
access-control-max-age: 3600
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
criteo-sync.teads.tv/um?eid=80&uid=k-obUenCdmPTf06l0dK-HRYGWJlO1YVpHAGpUL8Q
23.195.255.234200 OK 23 B URL HTTP/2 criteo-sync.teads.tv/um?eid=80&uid=k-obUenCdmPTf06l0dK-HRYGWJlO1YVpHAGpUL8Q
IP 23.195.255.234:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash da5b449fff36752a93779fa4067cd2eb
71a96eea77f21ab5f1819b96c4cedd5cd34476ca
328e90a318268aea96180cc31666ae6d6f79d90d078c123bc3d98ee08a192fb7
GET /um?eid=80&uid=k-obUenCdmPTf06l0dK-HRYGWJlO1YVpHAGpUL8Q HTTP/1.1
Host: criteo-sync.teads.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
server: akka-http/10.2.9
content-length: 23
expires: Tue, 22 Nov 2022 07:55:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 22 Nov 2022 07:55:12 GMT
X-Firefox-Spdy: h2
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 0297c26dd85ac836c9ee4b0d8dc86452
3123acd6ec5a63ed7d2e9f7c853ef8ba77aa2496
b7874e5ad214b9e945f614fdb85df2b4677903e2432da39739ce365af34f4263
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3608
Cache-Control: max-age=137888
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637be9e8-1d7"
Expires: Wed, 23 Nov 2022 22:13:20 GMT
Last-Modified: Mon, 21 Nov 2022 21:13:12 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
1-vbus-eu.ladesk.com/5_33_6_18/u122722_6812/kolt32bj44i5dmsb4189fpx2vb978/event/lp/v2?channels=0e8988fc73_vb_1ngy20z2uwobqmlfgb1w7vykyanxr&tag=0&time=Tue%2C%2022%20Nov%202022%2003%3A45%3A12%20GMT&eventid=&_=1669103712449
91.201.28.221304 Not Modified 0 B URL HTTP/2 1-vbus-eu.ladesk.com/5_33_6_18/u122722_6812/kolt32bj44i5dmsb4189fpx2vb978/event/lp/v2?channels=0e8988fc73_vb_1ngy20z2uwobqmlfgb1w7vykyanxr&tag=0&time=Tue%2C%2022%20Nov%202022%2003%3A45%3A12%20GMT&eventid=&_=1669103712449
IP 91.201.28.221:0
ASN #203480 Quality Unit, s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5_33_6_18/u122722_6812/kolt32bj44i5dmsb4189fpx2vb978/event/lp/v2?channels=0e8988fc73_vb_1ngy20z2uwobqmlfgb1w7vykyanxr&tag=0&time=Tue%2C%2022%20Nov%202022%2003%3A45%3A12%20GMT&eventid=&_=1669103712449 HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://1-vbus-eu.ladesk.com/5_33_6_18/scripts/lib/bus.html?v=5.33.6.18
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 304 Not Modified
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: application/octet-stream
content-length: 0
last-modified: Tue, 22 Nov 2022 03:45:12 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate
etag: W/0
X-Firefox-Spdy: h2
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-aJu3ESdmPTf06l0dK-HRYGWJlO3kBZJrg6i5zw
3.126.56.137302 Found 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-aJu3ESdmPTf06l0dK-HRYGWJlO3kBZJrg6i5zw
IP 3.126.56.137:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-aJu3ESdmPTf06l0dK-HRYGWJlO3kBZJrg6i5zw HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:12 GMT
content-length: 0
strict-transport-security: max-age=31536000
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
location: https://ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-aJu3ESdmPTf06l0dK-HRYGWJlO3kBZJrg6i5zw&verify=true
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBGCAfGMCEMBYKH9Ce3iLtkgVR8M6vc8FEgEBAQHRfWOGYwAAAAAA_eMAAA&S=AQAAAmYFh049s755o6sm_RjwM5s; Expires=Wed, 22 Nov 2023 13:55:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
id5-sync.com/s/966/9.gif?puid=k-UrqX9SdmPTf06l0dK-HRYGWJlO0Remo2bv0iLw
162.19.138.118200 43 B URL HTTP/1.1 id5-sync.com/s/966/9.gif?puid=k-UrqX9SdmPTf06l0dK-HRYGWJlO0Remo2bv0iLw
IP 162.19.138.118:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /s/966/9.gif?puid=k-UrqX9SdmPTf06l0dK-HRYGWJlO0Remo2bv0iLw HTTP/1.1
Host: id5-sync.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
p3p: CP="CAO PSA OUR"
set-cookie: cf=; Max-Age=300; Expires=Tue, 22-Nov-2022 08:00:12 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cip=; Max-Age=300; Expires=Tue, 22-Nov-2022 08:00:12 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
cnac=; Max-Age=300; Expires=Tue, 22-Nov-2022 08:00:12 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
car=; Max-Age=300; Expires=Tue, 22-Nov-2022 08:00:12 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
gdpr=; Max-Age=300; Expires=Tue, 22-Nov-2022 08:00:12 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
callback=; Max-Age=300; Expires=Tue, 22-Nov-2022 08:00:12 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure
content-type: image/gif;charset=UTF-8
transfer-encoding: chunked
date: Tue, 22 Nov 2022 07:55:11 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 138506fdaa9ac63d51f9c0be3e6eec10
ed26089ddb748685d476d9ff6bbe0d85919f224c
6d9420977257fa08bed79941fd5f4300165c48e6890d8aacd1f61bc14a122589
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 15:11:57 GMT
Expires: Sat, 26 Nov 2022 15:11:56 GMT
Etag: "ed26089ddb748685d476d9ff6bbe0d85919f224c"
Cache-Control: max-age=371203,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e019fbe839b50f-OSL
dpm.demdex.net/ibs:dpid=28645&dpuuid=
34.242.195.231302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=28645&dpuuid=
IP 34.242.195.231:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=28645&dpuuid= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-2-v045-0b398da67.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=41068491383223915761199887049112370623; Max-Age=15552000; Expires=Sun, 21 May 2023 07:55:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: dvK+RIOFSHg=
Content-Length: 0
Connection: keep-alive
1-vbus-eu.ladesk.com/5_33_6_18/scripts/lib/bus.html?v=5.33.6.18
91.201.28.221200 OK 187 B URL HTTP/2 1-vbus-eu.ladesk.com/5_33_6_18/scripts/lib/bus.html?v=5.33.6.18
IP 91.201.28.221:0
ASN #203480 Quality Unit, s.r.o.
Hash d8575639370fb70639ddb4946307300c
1e12351381df1055b9f68847eff07f5dd9204234
593aee6b51871f83cc5c8b05939aa8714abb16cb54296a88494c61c22f036e0b
GET /5_33_6_18/scripts/lib/bus.html?v=5.33.6.18 HTTP/1.1
Host: 1-vbus-eu.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: text/html
last-modified: Tue, 18 Oct 2022 18:46:42 GMT
etag: W/"634ef492-13b"
content-encoding: gzip
X-Firefox-Spdy: h2
t.goadservices.com/v2/check/25516f0b-f093-4728-8c70-65768096fae2?id=4-MzI4MTYwMDE2NA&rid=1669103712492-434581
195.177.217.192200 OK 336 B URL HTTP/1.1 t.goadservices.com/v2/check/25516f0b-f093-4728-8c70-65768096fae2?id=4-MzI4MTYwMDE2NA&rid=1669103712492-434581
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
File type ASCII text, with very long lines (336), with no line terminators
Hash acff8782f6e0e4f99f3593278be33a40
60a7a072b25a8a78c2fd4e66204170de096ab86e
02b36c8995c20f76ae23dc371722dd97868b877228835281341cfefaae1f8393
GET /v2/check/25516f0b-f093-4728-8c70-65768096fae2?id=4-MzI4MTYwMDE2NA&rid=1669103712492-434581 HTTP/1.1
Host: t.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Cookie: __goadservices=4-MzI4MTYwMDE2NA; path_25516f0b-f093-4728-8c70-65768096fae2=7e695ba1a69c7a4914915cc427e941db; session_25516f0b-f093-4728-8c70-65768096fae2=01cad9db5e5fe596fc4c961551fa702a
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: application/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash f33d014ec4ff52b857265fa3720188eb
6494faad2040e3fac5a47c203d163448a98d2c74
c913eca543405b65e30f2a05ec021cea68498d2a9889e7d9b29cc3be305d00e2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=165375
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637c577d-1d7"
Expires: Thu, 24 Nov 2022 05:51:27 GMT
Last-Modified: Tue, 22 Nov 2022 05:00:45 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NTsFHhFPwc086zNL8S47pglxoeR81ZEdFibMVwbORwYVP-Br6IZ7hA==
Age: 3042
firebaseremoteconfig.googleapis.com/v1/projects/translations-sportsbook/namespaces/firebase:fetch?key=AIzaSyAMJ4qFHZmHDvELQxTG0iWmqpId7VPu3f4
142.250.74.10200 OK 188 B URL HTTP/2 firebaseremoteconfig.googleapis.com/v1/projects/translations-sportsbook/namespaces/firebase:fetch?key=AIzaSyAMJ4qFHZmHDvELQxTG0iWmqpId7VPu3f4
IP 142.250.74.10:0
File type JSON data\012- , ASCII text
Hash 51f02a00d48c68981ee35b1e5624227c
b22264848610cbc9037148fdc93f3b8446d398ad
38ad9664086b532895627ba515eb9196b2daeb53ccc291a0d2c37e8cbaeb7ba6
POST /v1/projects/translations-sportsbook/namespaces/firebase:fetch?key=AIzaSyAMJ4qFHZmHDvELQxTG0iWmqpId7VPu3f4 HTTP/1.1
Host: firebaseremoteconfig.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
Content-Type: application/json
Content-Encoding: gzip
If-None-Match: *
Origin: https://lvbet.pl
Content-Length: 480
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: etag-translations-sportsbook-firebase-fetch--2137420530
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 22 Nov 2022 07:55:12 GMT
server: ESF
cache-control: private
content-length: 188
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://lvbet.pl
access-control-expose-headers: etag,vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 4ded072f638298550b83461b231de2ef
9bbcde261a2ba8385ae8be9843ee76208ab8fc6a
f29c250631caab1c872b31fccadc6ac3c21002880b742da2fcaefc3c152173a4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 22 Nov 2022 07:55:12 GMT
Last-Modified: Tue, 22 Nov 2022 06:39:29 GMT
Server: ECS (nyb/1D08)
X-Cache: Miss from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nBzIs9Fqra2uk6sB3b314Rj1GM2WgFTZIhfnGpYC-bIz0xpkCbfvpw==
Age: 4543
ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-aJu3ESdmPTf06l0dK-HRYGWJlO3kBZJrg6i5zw&verify=true
3.126.56.137204 No Content 0 B URL HTTP/2 ups.analytics.yahoo.com/ups/58301/sync?_origin=1&uid=k-aJu3ESdmPTf06l0dK-HRYGWJlO3kBZJrg6i5zw&verify=true
IP 3.126.56.137:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ups/58301/sync?_origin=1&uid=k-aJu3ESdmPTf06l0dK-HRYGWJlO3kBZJrg6i5zw&verify=true HTTP/1.1
Host: ups.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:12 GMT
p3p: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV
strict-transport-security: max-age=31536000
age: 0
server: ATS/9.1.10.25
set-cookie: A3=d=AQABBGCAfGMCEEsa-Qk7tGqRZ7PZCyc-gnkFEgEBAQHRfWOGYwAAAAAA_eMAAA&S=AQAAAorJjUa1YHq-pVccMXjst7Q; Expires=Wed, 22 Nov 2023 13:55:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-3KMYWidmPTf06l0dK-HRYGWJlO3e0EHr_4Rfbw
185.255.84.152200 OK 49 B URL HTTP/2 visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-3KMYWidmPTf06l0dK-HRYGWJlO3e0EHr_4Rfbw
IP 185.255.84.152:0
ASN #200271 Iguane Solutions SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 4408efc0174f07ad685c456f1de521ca
e3bc3250f8f32bd98dc7b05fd8940b74617eb8d1
d1371feb0512d700cf724b05a588ce79f8d8dfbb0991ae5f45ecd3ab08983a38
GET /visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-3KMYWidmPTf06l0dK-HRYGWJlO3e0EHr_4Rfbw HTTP/1.1
Host: visitor.omnitagjs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
expires: 0
p3p: CP="CAO PSA OUR"
pragma: no-cache
set-cookie: ayl_visitor=7b14688a04871fa0ba0d17059ca11385; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None
vary: Accept-Encoding
x-content-type-options: nosniff
date: Tue, 22 Nov 2022 07:55:12 GMT
content-length: 49
x-envoy-upstream-service-time: 2
server: ayl-lb-fra02
X-Firefox-Spdy: h2
match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-eduHuidmPTf06l0dK-HRYGWJlO0AXqV7EifNDg
35.157.236.74204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-eduHuidmPTf06l0dK-HRYGWJlO0AXqV7EifNDg
IP 35.157.236.74:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=7658cb1d77a660882b48db06&source_user_id=k-eduHuidmPTf06l0dK-HRYGWJlO0AXqV7EifNDg HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:12 GMT
X-Firefox-Spdy: h2
eb2.3lift.com/xuid?mid=2711&xuid=k-qSMbiidmPTf06l0dK-HRYGWJlO0Zyl4J-t_7tA&dongle=013b
13.248.245.213200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=2711&xuid=k-qSMbiidmPTf06l0dK-HRYGWJlO0Zyl4J-t_7tA&dongle=013b
IP 13.248.245.213:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=2711&xuid=k-qSMbiidmPTf06l0dK-HRYGWJlO0Zyl4J-t_7tA&dongle=013b HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
34.242.195.231200 OK 59 B URL HTTP/1.1 dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid=
IP 34.242.195.231:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 1251cd5e5c2def4c046309375f87c1c1
e02d6b0c6a5c495c15985e2832e335eda8528c80
4e7010cc46fa361c88e57e3346d27421cf3b8a8bf5f39b43fc45997c60cb1c13
GET /demconf.jpg?et:ibs%7cdata:dpid=28645&dpuuid= HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: image/gif
DCS: dcs-prod-irl1-1-v045-0780584f2.edge-irl1.demdex.com 7 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-TID: PLaNzHSuTFA=
Content-Length: 59
Connection: keep-alive
ad.yieldlab.net/m?dt_id=8664&ext_id=k-c7kr2idmPTf06l0dK-HRYGWJlO1bIuKYmo7i0w
23.13.245.180204 No Content 0 B URL HTTP/1.1 ad.yieldlab.net/m?dt_id=8664&ext_id=k-c7kr2idmPTf06l0dK-HRYGWJlO1bIuKYmo7i0w
IP 23.13.245.180:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m?dt_id=8664&ext_id=k-c7kr2idmPTf06l0dK-HRYGWJlO1bIuKYmo7i0w HTTP/1.1
Host: ad.yieldlab.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
x-application-context: application
Cache-Control: no-store,no-cache,max-age=-3600,must-revalidate,post-check=0,pre-check=0
Pragma: no-cache
Expires: Mon, 21 Nov 2022 07:55:12 GMT
Date: Tue, 22 Nov 2022 07:55:12 GMT
Connection: keep-alive
Set-Cookie: id=de0abd60-3866-49ad-a85a-73035a03fdd7; Path=/; Domain=yieldlab.net; Expires=Wed, 22-Nov-2023 07:55:12 GMT; Max-Age=31536000; Secure; SameSite=None
gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
178.250.0.157302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40
IP 178.250.0.157:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=83&r=1&a=1&u=https%3A%2F%2Fbeacon.krxd.net%2Fusermatch.gif%3Fpartner%3Dcriteo%26partner_uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:12 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
server-processing-duration-in-ticks: 926494
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 3c8eb94e3b81b030cefd2818e4dbee86
0639f70c799ad071fbc65a53d0f5c1fd23990d2a
6ede732faf9179dfa1df275b03a5544d9cf3ac8e11157cad598a51e0f0328f6f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107103
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637b6884-1d7"
Expires: Wed, 23 Nov 2022 13:40:15 GMT
Last-Modified: Mon, 21 Nov 2022 12:01:08 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bTImOsZOwYPBwg9DiDlV1V1QEaUcGW2_fWusv3xKiMIzzGOgyjaZXA==
Age: 5947
ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-ES5xCCdmPTf06l0dK-HRYGWJlO2wjrCSb-85dw
3.122.208.114302 Found 0 B URL HTTP/2 ad.360yield.com/match?publisher_dsp_id=38&external_user_id=k-ES5xCCdmPTf06l0dK-HRYGWJlO2wjrCSb-85dw
IP 3.122.208.114:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?publisher_dsp_id=38&external_user_id=k-ES5xCCdmPTf06l0dK-HRYGWJlO2wjrCSb-85dw HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: text/plain
content-length: 0
location: https://ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-ES5xCCdmPTf06l0dK-HRYGWJlO2wjrCSb-85dw
set-cookie: tuuid=4c963601-51e7-408b-bf78-a88de49eefe1; Expires=Mon, 20 Feb 2023 07:55:12 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
tuuid_lu=1669103712; Expires=Mon, 20 Feb 2023 07:55:12 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
sync-criteo.ads.yieldmo.com/sync?id=k-sYHIoSdmPTf06l0dK-HRYGWJlO2b_gInwqKhTw&pn_id=criteo&ext=1
52.17.209.100200 OK 43 B URL HTTP/2 sync-criteo.ads.yieldmo.com/sync?id=k-sYHIoSdmPTf06l0dK-HRYGWJlO2b_gInwqKhTw&pn_id=criteo&ext=1
IP 52.17.209.100:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /sync?id=k-sYHIoSdmPTf06l0dK-HRYGWJlO2b_gInwqKhTw&pn_id=criteo&ext=1 HTTP/1.1
Host: sync-criteo.ads.yieldmo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: image/gif
content-length: 43
set-cookie: yieldmo_id=gdb071df9f83bcb91910%7C1669103712794%7C0%7C; Domain=.yieldmo.com; Expires=Wed, 22-Nov-2023 07:55:12 GMT; Path=/; Secure; SameSite=None; Secure
ptrcriteo=k-sYHIoSdmPTf06l0dK-HRYGWJlO2b_gInwqKhTw; Domain=ads.yieldmo.com; Expires=Wed, 22-Nov-2023 07:55:12 GMT; Path=/; Secure; SameSite=None; Secure
access-control-allow-origin: *
access-control-request-headers: Cache-Control, Pragma
access-control-allow-methods: GET, OPTIONS
pragma: no-cache
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash 6b57f424bfd561dbb4f7cc916aa019ba
63dae942ae56ad319076f084fe5f2cdddfe86eaa
dee36f4c7ab75a63ba2c774a1d1b8a5c300b5c9a6ceed341dc20063f7bd61b7b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=123217
Date: Tue, 22 Nov 2022 07:55:12 GMT
Etag: "637bb1ac-1d7"
Expires: Wed, 23 Nov 2022 18:08:49 GMT
Last-Modified: Mon, 21 Nov 2022 17:13:16 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Za0_8v3e7KQIvCpHbn8JJbd5-PLZzVhX5vwnAOQr3iKYw6tHpEtpaw==
Age: 3333
firebasestorage.googleapis.com/v0/b/translations-sportsbook.appspot.com/o/translations-bcf%2Flvbetpl%2Fpl%2Fsportsbook-web.json?alt=media
142.250.74.10200 OK 0 B URL HTTP/2 firebasestorage.googleapis.com/v0/b/translations-sportsbook.appspot.com/o/translations-bcf%2Flvbetpl%2Fpl%2Fsportsbook-web.json?alt=media
IP 142.250.74.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v0/b/translations-sportsbook.appspot.com/o/translations-bcf%2Flvbetpl%2Fpl%2Fsportsbook-web.json?alt=media HTTP/1.1
Host: firebasestorage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-firebase-storage-version
Referer: https://lvbet.pl/
Origin: https://lvbet.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdt12RNquwZHKZIZz2A0pbLFx5YfeAIiYhT7thowgpi5aDjQX1xBGVi__te6X5wF0C8Tyrqt5dBpcCofHaS4jq3mHw
access-control-allow-methods: POST, GET, HEAD, DELETE, PATCH
access-control-allow-headers: Authorization, Content-Type, Range, X-Firebase-Storage-Version, X-Firebase-Storage-XSRF, X-Firebase-AppCheck, X-Firebase-GMPID, X-Goog-AuthUser, X-Goog-Upload-Command, X-Goog-Upload-Header-Content-Length, X-Goog-Upload-Header-Content-Type, X-Goog-Upload-Protocol
access-control-max-age: 3600
access-control-expose-headers: Content-Range, X-Firebase-Storage-XSRF
access-control-allow-origin: *
date: Tue, 22 Nov 2022 07:55:12 GMT
expires: Tue, 22 Nov 2022 07:55:12 GMT
cache-control: private, max-age=0
content-length: 0
server: UploadServer
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
sync.outbrain.com/cookie-sync?p=criteo&uid=k-VgnCridmPTf06l0dK-HRYGWJlO05UvBdIYa-EA
70.42.32.95200 OK 0 B URL HTTP/1.1 sync.outbrain.com/cookie-sync?p=criteo&uid=k-VgnCridmPTf06l0dK-HRYGWJlO05UvBdIYa-EA
IP 70.42.32.95:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cookie-sync?p=criteo&uid=k-VgnCridmPTf06l0dK-HRYGWJlO05UvBdIYa-EA HTTP/1.1
Host: sync.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Length: 0
Cache-Control: no-cache
X-TraceId: 035a87a736fa6659d38ef21fc0a3c652
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash de4873a51579184be89a62e04f2d2265
f142217a8688d8b0dc50cfec81cc191e473c9174
6b20de30c7288f0216b2e8388a838bca001189d362d0112a53dc0451fcbcc0c4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3427
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 22 Nov 2022 07:55:12 GMT
Last-Modified: Tue, 22 Nov 2022 06:58:06 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
m.goadservices.com/other/?id=4-MzI4MTYwMDE2NA
195.177.217.192200 OK 1.9 kB URL HTTP/1.1 m.goadservices.com/other/?id=4-MzI4MTYwMDE2NA
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (499)
Hash 946c16eaad0910c086b2d666d09c60c1
5d9f187c0d86f365322a608b6f54a1728ae8d642
4a4ee9c2b8d44a186d23c55e68039d11bef78d6e925215573f49cfa8ab238516
GET /other/?id=4-MzI4MTYwMDE2NA HTTP/1.1
Host: m.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Cookie: __goadservices=4-MzI4MTYwMDE2NA; path_25516f0b-f093-4728-8c70-65768096fae2=7e695ba1a69c7a4914915cc427e941db; session_25516f0b-f093-4728-8c70-65768096fae2=01cad9db5e5fe596fc4c961551fa702a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
m.goadservices.com/match/adformssp?sync=1
195.177.217.192302 Found 0 B URL HTTP/1.1 m.goadservices.com/match/adformssp?sync=1
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/adformssp?sync=1 HTTP/1.1
Host: m.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Cookie: __goadservices=4-MzI4MTYwMDE2NA; path_25516f0b-f093-4728-8c70-65768096fae2=7e695ba1a69c7a4914915cc427e941db; session_25516f0b-f093-4728-8c70-65768096fae2=01cad9db5e5fe596fc4c961551fa702a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 22 Nov 2022 07:55:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://cm.adform.net/pixel?adform_pid=13&adform_v=1&adform_pc=4-MzI4MTYwMDE2NA
beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
34.248.152.66204 No Content 0 B URL HTTP/2 beacon.krxd.net/usermatch.gif?partner=criteo&partner_uid=
IP 34.248.152.66:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usermatch.gif?partner=criteo&partner_uid= HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:12 GMT
set-cookie: _kuid_=PNrI6bJ_; Expires=Sun, 21-May-23 07:55:12 GMT; Max-Age=15552000; Domain=.krxd.net; Path=/
cache-control: private, no-cache, no-store
p3p: policyref="https://cdn.krxd.net/kruxcontent/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC"
x-served-by: beacon-n012-dub-prod.krxd.net
x-request-time: D=39 t=1669103712
X-Firefox-Spdy: h2
firebasestorage.googleapis.com/v0/b/translations-sportsbook.appspot.com/o/translations-bcf%2Flvbetpl%2Fpl%2Fsportsbook-web.json?alt=media
142.250.74.10200 OK 18 kB URL HTTP/2 firebasestorage.googleapis.com/v0/b/translations-sportsbook.appspot.com/o/translations-bcf%2Flvbetpl%2Fpl%2Fsportsbook-web.json?alt=media
IP 142.250.74.10:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (17293), with no line terminators
Hash 3709bbe75f6ea1e9c0a4ed45753700a2
841f4ae6b5d47e41960712582365c0a5108ea9d7
1042ccd3a57e1757e430dd500e9659cfbf305ff17bad757b0bd95f670b077916
GET /v0/b/translations-sportsbook.appspot.com/o/translations-bcf%2Flvbetpl%2Fpl%2Fsportsbook-web.json?alt=media HTTP/1.1
Host: firebasestorage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Firebase-Storage-Version: webjs/9.9.4
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-guploader-uploadid: ADPycdszsph9cVvaMtuGVFXSdG3qIOFVrLqx_BHRVeNY5Zmhshk7Ykvh0aAQRqkIacJuIi0TClTbukZekdI3OA1frUIJYtaoLS49
date: Tue, 22 Nov 2022 07:55:12 GMT
cache-control: no-transform
expires: Tue, 22 Nov 2022 07:55:12 GMT
last-modified: Mon, 14 Nov 2022 10:57:46 GMT
etag: "3709bbe75f6ea1e9c0a4ed45753700a2"
x-goog-generation: 1668423466399902
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 17539
content-type: application/json
x-goog-hash: crc32c=kgdTDg==, md5=Nwm7519uoenApO1FdTcAog==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 17539
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cm.adform.net/pixel?adform_pid=13&adform_v=1&adform_pc=4-MzI4MTYwMDE2NA
37.157.3.30200 OK 43 B URL HTTP/2 cm.adform.net/pixel?adform_pid=13&adform_v=1&adform_pc=4-MzI4MTYwMDE2NA
IP 37.157.3.30:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /pixel?adform_pid=13&adform_v=1&adform_pc=4-MzI4MTYwMDE2NA HTTP/1.1
Host: cm.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:13 GMT
content-type: image/gif
content-length: 43
last-modified: Fri, 07 Feb 2020 08:03:24 GMT
etag: "5e3d19cc-2b"
accept-ranges: bytes
X-Firefox-Spdy: h2
gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
178.250.0.157302 Found 0 B URL HTTP/2 gum.criteo.com/sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40
IP 178.250.0.157:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?c=10&r=1&u=https%3A%2F%2Fs.thebrighttag.com%2Fcs%3Fbtt%3D0%26tp%3Dcr%26uid%3D%40USERID%40 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:12 GMT
server: Kestrel
content-length: 0
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
location: https://s.thebrighttag.com/cs?btt=0&tp=cr&uid=
server-processing-duration-in-ticks: 562922
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-ES5xCCdmPTf06l0dK-HRYGWJlO2wjrCSb-85dw
3.122.208.114200 OK 43 B URL HTTP/2 ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-ES5xCCdmPTf06l0dK-HRYGWJlO2wjrCSb-85dw
IP 3.122.208.114:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/match?publisher_dsp_id=38&external_user_id=k-ES5xCCdmPTf06l0dK-HRYGWJlO2wjrCSb-85dw HTTP/1.1
Host: ad.360yield.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:13 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
X-Firefox-Spdy: h2
rtb-csync.smartadserver.com/redir/?partnerid=55&gdpr=0&partneruserid=4-MzI4MTYwMDE2NA&redirurl=https:%2F%2Fm.goadservices.com%2Fmatch%2Fsmart%3Fid%3D4-MzI4MTYwMDE2NA%26pid%3DSMART_USER_ID
185.86.139.114302 Found 0 B URL HTTP/1.1 rtb-csync.smartadserver.com/redir/?partnerid=55&gdpr=0&partneruserid=4-MzI4MTYwMDE2NA&redirurl=https:%2F%2Fm.goadservices.com%2Fmatch%2Fsmart%3Fid%3D4-MzI4MTYwMDE2NA%26pid%3DSMART_USER_ID
IP 185.86.139.114:0
ASN #201081 SmartAdServer SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redir/?partnerid=55&gdpr=0&partneruserid=4-MzI4MTYwMDE2NA&redirurl=https:%2F%2Fm.goadservices.com%2Fmatch%2Fsmart%3Fid%3D4-MzI4MTYwMDE2NA%26pid%3DSMART_USER_ID HTTP/1.1
Host: rtb-csync.smartadserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
content-length: 0
date: Tue, 22 Nov 2022 07:55:12 GMT
cache-control: no-cache,no-store
location: https://m.goadservices.com/match/smart?id=4-MzI4MTYwMDE2NA&pid=2596993074457861067&gdpr=0&gdpr_consent=
pragma: no-cache
set-cookie: pid=2596993074457861067; expires=Fri, 22 Dec 2023 07:55:13 GMT; domain=smartadserver.com; path=/
TestIfCookieP=ok; expires=Fri, 22 Dec 2023 07:55:13 GMT; domain=smartadserver.com; path=/
csync=55:4-MzI4MTYwMDE2NA; expires=Wed, 22 Nov 2023 07:55:13 GMT; domain=smartadserver.com; path=/
p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
m.goadservices.com/match/smart?id=4-MzI4MTYwMDE2NA&pid=2596993074457861067&gdpr=0&gdpr_consent=
195.177.217.192200 OK 43 B URL HTTP/1.1 m.goadservices.com/match/smart?id=4-MzI4MTYwMDE2NA&pid=2596993074457861067&gdpr=0&gdpr_consent=
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match/smart?id=4-MzI4MTYwMDE2NA&pid=2596993074457861067&gdpr=0&gdpr_consent= HTTP/1.1
Host: m.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
Connection: keep-alive
Cookie: __goadservices=4-MzI4MTYwMDE2NA; path_25516f0b-f093-4728-8c70-65768096fae2=7e695ba1a69c7a4914915cc427e941db; session_25516f0b-f093-4728-8c70-65768096fae2=01cad9db5e5fe596fc4c961551fa702a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:13 GMT
Content-Type: image/gif; charset=UTF-8
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
Set-Cookie: __goadservices=4-MzI4MTYwMDE2NA; expires=Thu, 21-Nov-2024 07:55:13 GMT; Max-Age=63072000; path=/; domain=.goadservices.com; secure; SameSite=None
m.goadservices.com/match/doubleclick_new?id=[GOADSERVICES-ID]&google_gid=[GOOGLE_ID]&id=4-MzI4MTYwMDE2NA&google_error=3
195.177.217.192200 OK 43 B URL HTTP/1.1 m.goadservices.com/match/doubleclick_new?id=[GOADSERVICES-ID]&google_gid=[GOOGLE_ID]&id=4-MzI4MTYwMDE2NA&google_error=3
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match/doubleclick_new?id=[GOADSERVICES-ID]&google_gid=[GOOGLE_ID]&id=4-MzI4MTYwMDE2NA&google_error=3 HTTP/1.1
Host: m.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.goadservices.com/
Connection: keep-alive
Cookie: __goadservices=4-MzI4MTYwMDE2NA; path_25516f0b-f093-4728-8c70-65768096fae2=7e695ba1a69c7a4914915cc427e941db; session_25516f0b-f093-4728-8c70-65768096fae2=01cad9db5e5fe596fc4c961551fa702a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:13 GMT
Content-Type: image/gif; charset=UTF-8
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
ocsp.sectigo.com/
172.64.155.188200 OK 282 B IP 172.64.155.188:0
Hash 92921d7676772d800978cc63caa8fc2a
7a2cb47358ff13ff5e203bb210b93726bfacbbad
124287245aef0457c8c0692a7a95b165d3116ec53bf8ccc33b00421a8b4db04a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:13 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 18:32:38 GMT
Expires: Mon, 28 Nov 2022 18:32:37 GMT
Etag: "7a2cb47358ff13ff5e203bb210b93726bfacbbad"
Cache-Control: max-age=556043,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76e019ff5ccab50f-OSL
ocsp.entrust.net/
104.110.10.32200 OK 1.6 kB IP 104.110.10.32:0
Hash 5ea1fd2abc629eceb0973030f00b2867
67b1048177e1260a73d6034d2275963f86f73590
7bb080a3a7514d8726b7c9be52faaea4a506e53f250c078ea36630b7794140f3
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "7BB080A3A7514D8726B7C9BE52FAAEA4A506E53F250C078EA36630B7794140F3"
Last-Modified: Mon, 21 Nov 2022 20:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2069
Expires: Tue, 22 Nov 2022 08:29:42 GMT
Date: Tue, 22 Nov 2022 07:55:13 GMT
Connection: keep-alive
cmpl.hit.gemius.pl/externalrehitredir?rid=qleoqqmfjy/id=d6ZK6Adicw7Az192pyAWOLbtnKPYsTAZpQ_fFEbGPfz.m7/extra=userid%3D4-MzI4MTYwMDE2NA
195.177.217.225301 Moved Permanently 0 B URL HTTP/2 cmpl.hit.gemius.pl/externalrehitredir?rid=qleoqqmfjy/id=d6ZK6Adicw7Az192pyAWOLbtnKPYsTAZpQ_fFEbGPfz.m7/extra=userid%3D4-MzI4MTYwMDE2NA
IP 195.177.217.225:0
ASN #50599 Data Space Sp. z o.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /externalrehitredir?rid=qleoqqmfjy/id=d6ZK6Adicw7Az192pyAWOLbtnKPYsTAZpQ_fFEbGPfz.m7/extra=userid%3D4-MzI4MTYwMDE2NA HTTP/1.1
Host: cmpl.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.goadservices.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 22 Nov 2022 07:55:13 GMT
expires: Mon, 21 Nov 2022 07:55:13 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlG4JMGGQMGGCa-Qx8sxmX2issGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Tue, 29 Nov 2022 07:55:13 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
location: /__/externalrehitredir?rid=qleoqqmfjy/id=d6ZK6Adicw7Az192pyAWOLbtnKPYsTAZpQ_fFEbGPfz.m7/extra=userid%3D4-MzI4MTYwMDE2NA
content-length: 0
X-Firefox-Spdy: h2
cmpl.hit.gemius.pl/__/externalrehitredir?rid=qleoqqmfjy/id=d6ZK6Adicw7Az192pyAWOLbtnKPYsTAZpQ_fFEbGPfz.m7/extra=userid%3D4-MzI4MTYwMDE2NA
195.177.217.225301 Moved Permanently 0 B URL HTTP/2 cmpl.hit.gemius.pl/__/externalrehitredir?rid=qleoqqmfjy/id=d6ZK6Adicw7Az192pyAWOLbtnKPYsTAZpQ_fFEbGPfz.m7/extra=userid%3D4-MzI4MTYwMDE2NA
IP 195.177.217.225:0
ASN #50599 Data Space Sp. z o.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /__/externalrehitredir?rid=qleoqqmfjy/id=d6ZK6Adicw7Az192pyAWOLbtnKPYsTAZpQ_fFEbGPfz.m7/extra=userid%3D4-MzI4MTYwMDE2NA HTTP/1.1
Host: cmpl.hit.gemius.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.goadservices.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 22 Nov 2022 07:55:13 GMT
expires: Mon, 21 Nov 2022 07:55:13 GMT
server: GHC
accept-ranges: none
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
set-cookie: Gtest=KlxKiRMGQMGGIjbmoGFxmX2issGMXP8cERbG; Domain=hit.gemius.pl; Path=/; SameSite=None; Secure; Expires=Tue, 29 Nov 2022 07:55:13 GMT
p3p: CP="NOI DSP COR NID PSAo OUR IND"
location: https://m.goadservices.com/match/adocean?pid=
content-length: 0
X-Firefox-Spdy: h2
m.goadservices.com/match/adocean?pid=
195.177.217.192200 OK 43 B URL HTTP/1.1 m.goadservices.com/match/adocean?pid=
IP 195.177.217.192:0
ASN #50599 Data Space Sp. z o.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match/adocean?pid= HTTP/1.1
Host: m.goadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://m.goadservices.com/
Connection: keep-alive
Cookie: __goadservices=4-MzI4MTYwMDE2NA; path_25516f0b-f093-4728-8c70-65768096fae2=7e695ba1a69c7a4914915cc427e941db; session_25516f0b-f093-4728-8c70-65768096fae2=01cad9db5e5fe596fc4c961551fa702a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Nov 2022 07:55:13 GMT
Content-Type: image/gif; charset=UTF-8
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
s.thebrighttag.com/cs?btt=0&tp=cr&uid=
3.143.128.248200 OK 35 B URL HTTP/2 s.thebrighttag.com/cs?btt=0&tp=cr&uid=
IP 3.143.128.248:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /cs?btt=0&tp=cr&uid= HTTP/1.1
Host: s.thebrighttag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:13 GMT
content-type: image/gif
content-length: 35
x-bt-requestid: fed4a6b0-6a3a-11ed-982b-0000ac1702a8
cache-control: private, must-revalidate
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
access-control-allow-origin:
server: nginx
p3p: CP=NOI DSP COR NID
X-Firefox-Spdy: h2
trc-events.taboola.com/1494454/log/3/unip?en=pre_d_eng_tb&tos=2277&scd=12&ssd=1&est=1669103711081&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669103713362&vi=1669103711077&ri=70abdba38a4c591bb6a79d24e3b364a6&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1494454/log/3/unip?en=pre_d_eng_tb&tos=2277&scd=12&ssd=1&est=1669103711081&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669103713362&vi=1669103711077&ri=70abdba38a4c591bb6a79d24e3b364a6&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1494454/log/3/unip?en=pre_d_eng_tb&tos=2277&scd=12&ssd=1&est=1669103711081&ver=35&isls=true&src=i&invt=1500&rv=1&tim=1669103713362&vi=1669103711077&ri=70abdba38a4c591bb6a79d24e3b364a6&ref=null&cv=20221117-23-RELEASE&item-url=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 22 Nov 2022 07:55:13 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://lvbet.pl
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
emd.hybrid.ai/plgt.js?fbpid=5fa50d6c4d506eb7343d3ef0&foadh=&gapl=&cs=&pcs=&vcs=
37.18.103.21200 OK 2.4 kB URL HTTP/2 emd.hybrid.ai/plgt.js?fbpid=5fa50d6c4d506eb7343d3ef0&foadh=&gapl=&cs=&pcs=&vcs=
IP 37.18.103.21:0
File type ASCII text, with very long lines (2442), with no line terminators
Hash a7899fd94c645ccd9c35f2b570e4a6c8
3575d781e0aa6c996aa82305b801d158cbe199fe
b46b5f6584a85f169af3fc716dac9c0a719450319a2d1c19e34e301c6adb0b4b
Analyzer Verdict Alert quad9 Sinkholed
GET /plgt.js?fbpid=5fa50d6c4d506eb7343d3ef0&foadh=&gapl=&cs=&pcs=&vcs= HTTP/1.1
Host: emd.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 2442
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 526
x-xss-protection: 1; mode=block
access-control-allow-origin: *
set-cookie: vid=f8f1ad93274f2727314d; expires=Wed, 22 Nov 2023 07:55:13 GMT; domain=.hybrid.ai; path=/; samesite=none
mkmgsgp=RLQOO1; expires=Tue, 22 Nov 2022 08:10:13 GMT; domain=.hybrid.ai; path=/; samesite=none
server: Hybrid Web Server
X-Firefox-Spdy: h2
s.ad.smaato.net/c/?dspId=1001983&dspCookie=f8f1ad93274f2727314d
143.204.55.79302 Found 0 B URL HTTP/2 s.ad.smaato.net/c/?dspId=1001983&dspCookie=f8f1ad93274f2727314d
IP 143.204.55.79:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?dspId=1001983&dspCookie=f8f1ad93274f2727314d HTTP/1.1
Host: s.ad.smaato.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: CloudFront
date: Tue, 22 Nov 2022 07:55:14 GMT
content-length: 0
cache-control: no-cache, must-revalidate
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
location: https://s.ad.smaato.net/c/?dspId=1001983&dspCookie=f8f1ad93274f2727314d&cookieCheck=1
set-cookie: SCM=40cfffde; Expires=Tue, 13 Dec 2022 07:55:14 GMT; Domain=.smaato.net; SameSite=None; Path=/; Secure
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Q-jc-jvz1vzE1XafwxK3kQt9u0otdX2T04KduGkdvtZtKeCcbWAkaQ==
X-Firefox-Spdy: h2
s.ad.smaato.net/c/?dspId=1001983&dspCookie=f8f1ad93274f2727314d&cookieCheck=1
143.204.55.79302 Found 0 B URL HTTP/2 s.ad.smaato.net/c/?dspId=1001983&dspCookie=f8f1ad93274f2727314d&cookieCheck=1
IP 143.204.55.79:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/?dspId=1001983&dspCookie=f8f1ad93274f2727314d&cookieCheck=1 HTTP/1.1
Host: s.ad.smaato.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
Connection: keep-alive
Cookie: SCM=40cfffde
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: CloudFront
date: Tue, 22 Nov 2022 07:55:14 GMT
content-length: 0
cache-control: no-cache, must-revalidate
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
location: https://sync.taboola.com/sg/smaatortb-network/1/rtb-h/?taboola_hm=40cfffde
set-cookie: SCM=40cfffde; Expires=Tue, 13 Dec 2022 07:55:14 GMT; Domain=.smaato.net; SameSite=None; Path=/; Secure
SCMt=40cfffde; Expires=Fri, 02 Dec 2022 19:55:14 GMT; Domain=.smaato.net; Path=/; SameSite=None; Secure
SCM1001983=40cfffde; Expires=Fri, 02 Dec 2022 19:55:14 GMT; Domain=.smaato.net; Path=/; SameSite=None; Secure
SCMtmp1001983=40cfffde; Expires=Tue, 22 Nov 2022 06:55:14 GMT; Domain=.smaato.net; Path=/; SameSite=None; Secure
x-cache: FunctionGeneratedResponse from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: f4OOE9vUoHZWXZJpQwjEJVoNod2JYz2FnYn62mgAPwo7lksjMZkrGQ==
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 24de65c24f9f222e4aa96322d622b15f
0e5cad8b996cf82244684d4bf25a83a8871dc845
38b37c2ddd5130ca734a456d1703ca08bc4d4bbe2a752b2c4f66daaa8825fea0
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 22 Nov 2022 07:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 26 Nov 2022 04:57:18 GMT
ETag: "0e5cad8b996cf82244684d4bf25a83a8871dc845"
Last-Modified: Tue, 22 Nov 2022 04:57:19 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1524
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76e01a0818111bfa-OSL
sync.taboola.com/sg/smaatortb-network/1/rtb-h/?taboola_hm=40cfffde
141.226.228.48200 OK 272 B URL HTTP/2 sync.taboola.com/sg/smaatortb-network/1/rtb-h/?taboola_hm=40cfffde
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 4f1b3fb2a21080273cb377cc725b50b4
75cd3e1c92b3220c51ffdd1e2ce6d8473c35eab1
d8ffe14b1e463f595ce0a188975497da6e32af23858c10efb774f282281320c3
GET /sg/smaatortb-network/1/rtb-h/?taboola_hm=40cfffde HTTP/1.1
Host: sync.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:14 GMT
x-fastly-to-nlb-rtt: 21964
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 348c4996f1b34ebd1f73f5b9bb4e1657
f503a6776ac7a826da6c00759020896e455234c0
7466fd56884ddf1d8baa42c2c52c83292743714e07f9843c378111bde9f36911
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 22 Nov 2022 07:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 21 Nov 2022 21:26:14 GMT
Expires: Tue, 22 Nov 2022 21:26:14 GMT
ETag: "f503a6776ac7a826da6c00759020896e455234c0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
dm-eu.hybrid.ai/gb-match?gdpr=&gdpr_consent=&google_error=3
37.18.103.21204 No Content 0 B URL HTTP/2 dm-eu.hybrid.ai/gb-match?gdpr=&gdpr_consent=&google_error=3
IP 37.18.103.21:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /gb-match?gdpr=&gdpr_consent=&google_error=3 HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lvbet.pl/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:14 GMT
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
set-cookie: vid=fbf25982147a18e8594c; expires=Wed, 22 Nov 2023 07:55:14 GMT; domain=.hybrid.ai; path=/; samesite=none
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 518
x-xss-protection: 1; mode=block
access-control-allow-origin: *
server: Hybrid Web Server
X-Firefox-Spdy: h2
redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fdm.hybrid.ai%2Fmatch%3Fid%3D206%26vid%3D{WEBO_CID}
35.190.24.218302 Found 0 B URL HTTP/2 redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fdm.hybrid.ai%2Fmatch%3Fid%3D206%26vid%3D{WEBO_CID}
IP 35.190.24.218:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd?url=https%3A%2F%2Fdm.hybrid.ai%2Fmatch%3Fid%3D206%26vid%3D{WEBO_CID} HTTP/1.1
Host: redirect.frontend.weborama.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: Weborama Collect Frontend
date: Tue, 22 Nov 2022 07:55:14 GMT
content-length: 0
location: https://redirect.frontend.weborama.fr/rd?url=https%3A%2F%2Fdm.hybrid.ai%2Fmatch%3Fid%3D206%26vid%3D%7BWEBO_CID%7D&bounce=1&random=3139861833
access-control-allow-origin: *
p3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: Tue, 03 Jul 2001 06:00:00 GMT
last-modified: Tue, 22 Nov 2022 07:55:14 GMT
set-cookie: AFFICHE_W=lYc3-6miEa2V57; expires=Wed, 20 Dec 2023 07:55:14 GMT; domain=.weborama.fr; path=/; secure; SameSite=None
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-0g9ZIydmPTf06l0dK-HRYGWJlO0t6jYIVhpYggvaLB6Qlzf5
35.158.201.127200 OK 90 B URL HTTP/2 exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-0g9ZIydmPTf06l0dK-HRYGWJlO0t6jYIVhpYggvaLB6Qlzf5
IP 35.158.201.127:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash e1678fa5b57c488aa203bc94ea8fba57
3415a4a33f0160680e99bdb08ad80069381339ae
293df81e9c39f4a44c12192bcfaf62ad4b5bc677f783e6b3c269d714171ed36e
GET /usersync/push?partner=criteo&partnerId=k-0g9ZIydmPTf06l0dK-HRYGWJlO0t6jYIVhpYggvaLB6Qlzf5 HTTP/1.1
Host: exchange.mediavine.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: text/html; charset=utf-8
vary: Origin, Accept-Encoding
access-control-allow-credentials: true
cache-control: private, no-cache
set-cookie: mv_tokens=%7B%22mv_uuid%22%3A%22fe353260-6a3a-11ed-80b0-c92ccdb013f8%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 06 Dec 2022 07:55:12 GMT; Secure; SameSite=None
mv_tokens_eu-v1=%7B%22mv_uuid%22%3A%22fe353260-6a3a-11ed-80b0-c92ccdb013f8%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 06 Dec 2022 07:55:12 GMT; Secure; SameSite=None
am_tokens=%7B%22mv_uuid%22%3A%22fe353260-6a3a-11ed-80b0-c92ccdb013f8%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 06 Dec 2022 07:55:12 GMT; Secure; SameSite=None
am_tokens_eu-v1=%7B%22mv_uuid%22%3A%22fe353260-6a3a-11ed-80b0-c92ccdb013f8%22%2C%22version%22%3A%22eu-v1%22%7D; Path=/; Expires=Tue, 06 Dec 2022 07:55:12 GMT; Secure; SameSite=None
criteo=%7B%22id%22%3A%22k-0g9ZIydmPTf06l0dK-HRYGWJlO0t6jYIVhpYggvaLB6Qlzf5%22%2C%22version%22%3A%22criteo%22%7D; Path=/; Expires=Tue, 06 Dec 2022 07:55:12 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash 348c4996f1b34ebd1f73f5b9bb4e1657
f503a6776ac7a826da6c00759020896e455234c0
7466fd56884ddf1d8baa42c2c52c83292743714e07f9843c378111bde9f36911
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Tue, 22 Nov 2022 07:55:14 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 21 Nov 2022 21:26:14 GMT
Expires: Tue, 22 Nov 2022 21:26:14 GMT
ETag: "f503a6776ac7a826da6c00759020896e455234c0"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
lvbet.pl/cdn-cgi/rum?
104.16.114.23204 No Content 0 B IP 104.16.114.23:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 665
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103710; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103716.53.0.0; _ga=GA1.2.90208960.1669103709; csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK; LaVisitorNew=Y; LaVisitorId_bHZiZXQubGFkZXNrLmNvbS8=kolt32bj44i5dmsb4189fpx2vb978; LaSID=1ngy20z2uwobqmlfgb1w7vykyanxr; LaUserDetails=%7B%7D; cto_bundle=GQPXE19PMkRuc3dyY3RXT3pEU1MyR0VjaW82RFNUOTk3Nmx0N3AlMkYwRFdqaDRVbGxob3FSZmM4Nnc4M0JWJTJCbm52OVhVMWRNakI1MFZocUVHa2tLYzllT0FyQTlrSHVQaDglMkJDJTJGa1FhM0RGZVE3amd6SGlOM3RyQzNqVWVDaEY4TGF6WXBy; _gid=GA1.2.1715889204.1669103711; _gat_UA-84648673-1=1; _fbp=fb.1.1669103711422.1556288083; __goadservices=4-MzI4MTYwMDE2NA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Tue, 22 Nov 2022 07:55:16 GMT
access-control-allow-origin: https://lvbet.pl
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 76e01a128925b4e8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
178.250.2.151200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=0
IP 178.250.2.151:0
GET /dis/rtb/appnexus/cookiematch.aspx?appnxsid=0 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 455019
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
lvbet.pl/js/sports/navigation.js
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/sports/navigation.js
IP 104.16.114.23:0
GET /js/sports/navigation.js HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/javascript
cf-ray: 76e019e26c80b4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "45f-5c671a0fb9680-gzip"
expires: Tue, 22 Nov 2022 08:00:08 GMT
last-modified: Tue, 06 Jul 2021 10:10:18 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: EXPIRED
server: cloudflare
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?topUrl=lvbet.pl&origin=onetag
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?topUrl=lvbet.pl&origin=onetag
IP 178.250.0.157:0
GET /syncframe?topUrl=lvbet.pl&origin=onetag HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=527fde20-c43e-4da6-93a4-a422d571834d; expires=Sun, 17 Dec 2023 07:55:09 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 746707
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
st.hybrid.ai/txsp.js
185.76.9.23200 OK 0 B IP 185.76.9.23:0
ASN #60068 Datacamp Limited
Analyzer Verdict Alert quad9 Sinkholed
GET /txsp.js HTTP/1.1
Host: st.hybrid.ai
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Tue, 15 Nov 2022 07:53:37 GMT
etag: W/"63734581-1f70"
access-control-allow-origin: *
x-accel-expires: @1669103748
server: CDN77-Turbo
x-77-nzt: AblMCRTKgML/7A0AAA
x-77-nzt-ray: af58563031aaafca60807c63c71d6009
x-cache: HIT
x-age: 3564
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-XyZFcCdmPTf06l0dK-HRYGWJlO2qjrrefVC35g
141.226.228.48200 OK 0 B URL HTTP/2 sync-t1.taboola.com/sg/criteortb-network/1/rtb-h/?taboola_hm=k-XyZFcCdmPTf06l0dK-HRYGWJlO2qjrrefVC35g
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
GET /sg/criteortb-network/1/rtb-h/?taboola_hm=k-XyZFcCdmPTf06l0dK-HRYGWJlO2qjrrefVC35g HTTP/1.1
Host: sync-t1.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:12 GMT
x-fastly-to-nlb-rtt: 21921
access-control-allow-credentials: true
X-Firefox-Spdy: h2
lvbet.pl/img/icons/+18.svg
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/img/icons/+18.svg
IP 104.16.114.23:0
GET /img/icons/+18.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/svg+xml
cf-ray: 76e019e27c90b4e8-OSL
age: 58591
cache-control: public, max-age=86400
etag: W/"867-5875aa4b9ce00"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Thu, 25 Apr 2019 13:17:44 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/img/countries/poland.svg
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/img/countries/poland.svg
IP 104.16.114.23:0
GET /img/countries/poland.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/svg+xml
cf-ray: 76e019e41e58b4e8-OSL
age: 38586
cache-control: public, max-age=86400
etag: W/"27d-58082e7a4e300"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Mon, 28 Jan 2019 11:23:24 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.195200 OK 0 B URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.195:0
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 05:42:51 GMT
expires: Fri, 17 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 439937
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lvbet.pl/pl/fantasy/?btag=655708_123ga584cidpidaffid655708
104.16.114.23302 Found 0 B URL HTTP/2 lvbet.pl/pl/fantasy/?btag=655708_123ga584cidpidaffid655708
IP 104.16.114.23:0
GET /pl/fantasy/?btag=655708_123ga584cidpidaffid655708 HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 22 Nov 2022 07:55:07 GMT
content-type: text/html; charset=UTF-8
location: /pl/fantasy/
cf-ray: 76e019dbeb8db4e8-OSL
set-cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; expires=Thu, 22-Dec-2022 07:55:07 GMT; Max-Age=2592000; path=/; domain=.lvbet.pl
via: 1.1 google
cf-cache-status: DYNAMIC
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/img/icons/white/close.svg
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/img/icons/white/close.svg
IP 104.16.114.23:0
GET /img/icons/white/close.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/svg+xml
cf-ray: 76e019e27c91b4e8-OSL
age: 38604
cache-control: public, max-age=86400
etag: W/"315-584e8a189e040"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Mon, 25 Mar 2019 10:26:01 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/js/sports/cookies.js
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/sports/cookies.js
IP 104.16.114.23:0
GET /js/sports/cookies.js HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/javascript
cf-ray: 76e019e27c9cb4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "476-5952c15c11e4e-gzip"
expires: Tue, 22 Nov 2022 08:00:08 GMT
last-modified: Fri, 18 Oct 2019 09:37:39 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/js/authorization-bar/pl/styles.bundle.js?v=4
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/authorization-bar/pl/styles.bundle.js?v=4
IP 104.16.114.23:0
GET /js/authorization-bar/pl/styles.bundle.js?v=4 HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/javascript
cf-ray: 76e019e27c9fb4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "fdba-5ed6ac9cf848a-gzip"
expires: Tue, 22 Nov 2022 08:00:08 GMT
last-modified: Mon, 14 Nov 2022 09:23:11 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: EXPIRED
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/img/countries/united-kingdom.svg
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/img/countries/united-kingdom.svg
IP 104.16.114.23:0
GET /img/countries/united-kingdom.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/svg+xml
cf-ray: 76e019e42e6bb4e8-OSL
age: 38586
cache-control: public, max-age=86400
etag: W/"aa3-58082e5f9a400"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Mon, 28 Jan 2019 11:22:56 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/img/icons/grey/arrow-down-2.svg
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/img/icons/grey/arrow-down-2.svg
IP 104.16.114.23:0
GET /img/icons/grey/arrow-down-2.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/svg+xml
cf-ray: 76e019e42e6ab4e8-OSL
age: 38585
cache-control: public, max-age=86400
etag: W/"1cf-5b2ba5bf50a00"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Wed, 28 Oct 2020 12:32:40 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/js/cms-elements/cms-elements-web.js?v=30
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/cms-elements/cms-elements-web.js?v=30
IP 104.16.114.23:0
GET /js/cms-elements/cms-elements-web.js?v=30 HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: application/javascript
cf-ray: 76e019e27ca1b4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "47dc6-5ed6aec759b40-gzip"
expires: Tue, 22 Nov 2022 08:00:09 GMT
last-modified: Mon, 14 Nov 2022 09:32:53 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: EXPIRED
server: cloudflare
X-Firefox-Spdy: h2
gum.criteo.com/sid/json?origin=onetag&domain=lvbet.pl&sn=FirefoxSyncframe&so=0&topUrl=lvbet.pl&info=V_mKgF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czk3ckZIbkRVcndabWJWMXJ4UVRaZHE2YjlnVHNaT29uT0ZKMm1kYmRZWiUyQg&idsd=1462781675,2077180353&cw=1&lsw=1
178.250.0.157200 OK 0 B URL HTTP/2 gum.criteo.com/sid/json?origin=onetag&domain=lvbet.pl&sn=FirefoxSyncframe&so=0&topUrl=lvbet.pl&info=V_mKgF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czk3ckZIbkRVcndabWJWMXJ4UVRaZHE2YjlnVHNaT29uT0ZKMm1kYmRZWiUyQg&idsd=1462781675,2077180353&cw=1&lsw=1
IP 178.250.0.157:0
GET /sid/json?origin=onetag&domain=lvbet.pl&sn=FirefoxSyncframe&so=0&topUrl=lvbet.pl&info=V_mKgF80M0RITmhlJTJCZkMwOUJGQlhaMUN2czk3ckZIbkRVcndabWJWMXJ4UVRaZHE2YjlnVHNaT29uT0ZKMm1kYmRZWiUyQg&idsd=1462781675,2077180353&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?topUrl=lvbet.pl&origin=onetag
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 1317768
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
104.16.56.101200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP 104.16.56.101:0
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 76e019e2cd060b59-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
static.criteo.net/js/ld/ld.js
178.250.0.130200 OK 0 B URL HTTP/2 static.criteo.net/js/ld/ld.js
IP 178.250.0.130:0
GET /js/ld/ld.js HTTP/1.1
Host: static.criteo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: text/javascript
last-modified: Tue, 08 Nov 2022 15:05:46 GMT
etag: W/"636a704a-a8d9"
expires: Wed, 23 Nov 2022 07:55:09 GMT
cross-origin-resource-policy: cross-origin
cache-control: max-age=86400, public
timing-allow-origin: *
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
91.201.28.201200 OK 0 B URL HTTP/2 lvbet.ladesk.com/scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F
IP 91.201.28.201:0
ASN #203480 Quality Unit, s.r.o.
GET /scripts/generateWidget.php?v=5.33.6.18&t=1669103529&cwid=e69f7b56&cwrt=C&cwt=chat&pt=%F0%9F%A5%87%20LV%20BET%3A%20Zak%C5%82ady%20bukmacherskie%20-%20Legalny%20Bukmacher%20online&ref=https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F HTTP/1.1
Host: lvbet.ladesk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=31536000, public
expires: Sun, 01 Jan 2023 08:00:00 GMT
last-modified: Tue, 01 Jan 2008 08:00:00 GMT
x-srv: 6
x-content-type-options: nosniff
content-encoding: gzip
x-varnish: 492077458
age: 0
vary: Accept-Encoding
via: 1.1 varnish (1.lb-app.la.ws-eu)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
lvbet.pl/img/logo.svg
104.16.114.23200 OK 0 B IP 104.16.114.23:0
GET /img/logo.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: image/svg+xml
cf-ray: 76e019e27c94b4e8-OSL
age: 65456
cache-control: public, max-age=86400
etag: W/"433-5a6b207cf5644"
expires: Wed, 23 Nov 2022 07:55:08 GMT
last-modified: Thu, 28 May 2020 09:34:08 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/js/sports/country-modal.js
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/sports/country-modal.js
IP 104.16.114.23:0
GET /js/sports/country-modal.js HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/javascript
cf-ray: 76e019e27c93b4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "779-5b05a813e3648-gzip"
expires: Tue, 22 Nov 2022 08:00:08 GMT
last-modified: Mon, 28 Sep 2020 07:20:45 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
X-Firefox-Spdy: h2
lvbet.pl/img/icons/black/arrow-up.svg
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/img/icons/black/arrow-up.svg
IP 104.16.114.23:0
GET /img/icons/black/arrow-up.svg HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/css/main.css
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: image/svg+xml
cf-ray: 76e019e638feb4e8-OSL
age: 42559
cache-control: public, max-age=86400
etag: W/"283-58abb3adcca76"
expires: Wed, 23 Nov 2022 07:55:09 GMT
last-modified: Fri, 07 Jun 2019 12:47:14 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
user.lvbet.pl/user/check-session/
104.16.113.23200 OK 0 B URL HTTP/2 user.lvbet.pl/user/check-session/
IP 104.16.113.23:0
OPTIONS /user/check-session/ HTTP/1.1
Host: user.lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: device,x-translation-lang
Referer: https://lvbet.pl/
Origin: https://lvbet.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: text/html; charset=utf-8
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://lvbet.pl
access-control-allow-headers: x-requested-with, content-type, accept, origin, authorization, x-csrftoken, x-translation-lang, device, device-os
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e019ed4816b521-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/js/authorization-bar/pl/main.bundle.js?v=4
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/authorization-bar/pl/main.bundle.js?v=4
IP 104.16.114.23:0
GET /js/authorization-bar/pl/main.bundle.js?v=4 HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/javascript
cf-ray: 76e019e27ca0b4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "638eba-5ed6acb190436-gzip"
expires: Tue, 22 Nov 2022 08:00:08 GMT
last-modified: Mon, 14 Nov 2022 09:23:33 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: EXPIRED
server: cloudflare
X-Firefox-Spdy: h2
user.lvbet.pl/user/check-session/
104.16.114.23403 Forbidden 0 B URL HTTP/2 user.lvbet.pl/user/check-session/
IP 104.16.114.23:0
GET /user/check-session/ HTTP/1.1
Host: user.lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: pl-PL,pl
Accept-Encoding: gzip, deflate, br
Content-language: pl
x-translation-lang: pl
Content-Type: application/x-www-form-urlencoded
device: PWA
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 403 Forbidden
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: application/json
vary: Accept-Language, Cookie, Origin
content-language: pl
access-control-allow-credentials: true
access-control-allow-origin: https://lvbet.pl
set-cookie: domain_gateways="https://lvbet.pl/"; expires=Tue, 22-Nov-2022 08:55:10 GMT; Max-Age=3600; Path=/
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e019edba1fb4e8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
criteo-partners.tremorhub.com/sync?UICR=k-O3Un-idmPTf06l0dK-HRYGWJlO21f0niNI_tdQ
54.163.167.231200 OK 0 B URL HTTP/2 criteo-partners.tremorhub.com/sync?UICR=k-O3Un-idmPTf06l0dK-HRYGWJlO21f0niNI_tdQ
IP 54.163.167.231:0
GET /sync?UICR=k-O3Un-idmPTf06l0dK-HRYGWJlO21f0niNI_tdQ HTTP/1.1
Host: criteo-partners.tremorhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:12 GMT
content-type: image/gif
server: Apache-Coyote/1.1
p3p: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
X-Firefox-Spdy: h2
lvbet.pl/pl/fantasy/
104.16.114.23200 OK 0 B IP 104.16.114.23:0
GET /pl/fantasy/ HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: text/html; charset=UTF-8
cf-ray: 76e019de5f03b4e8-OSL
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Tue, 22 Nov 2022 07:55:08 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: DYNAMIC
pragma: no-cache
set-cookie: lv_lang_sports=pl; expires=Fri, 21-Nov-2025 07:55:07 GMT; Max-Age=94608000; path=/; domain=lvbet.pl
exp_last_visit=1353743707; expires=Wed, 22-Nov-2023 07:55:07 GMT; Max-Age=31536000; path=/; HttpOnly
exp_last_activity=1669103707; expires=Wed, 22-Nov-2023 07:55:07 GMT; Max-Age=31536000; path=/; HttpOnly
exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; path=/; HttpOnly
exp_csrf_token=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; HttpOnly
exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; expires=Tue, 22-Nov-2022 09:55:07 GMT; Max-Age=7200; path=/; HttpOnly
x-frame-options: SAMEORIGIN
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/css/fixed.css
104.16.114.23200 OK 0 B IP 104.16.114.23:0
GET /css/fixed.css HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: text/css
cf-ray: 76e019e26c7fb4e8-OSL
accept-ranges: bytes
content-encoding: gzip
etag: "1d7-5e9df4cadf140-gzip"
last-modified: Fri, 30 Sep 2022 06:42:37 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
X-Firefox-Spdy: h2
user.lvbet.pl/user/info/?slider_info=1&with_deposits=True
104.16.114.23200 OK 0 B URL HTTP/2 user.lvbet.pl/user/info/?slider_info=1&with_deposits=True
IP 104.16.114.23:0
OPTIONS /user/info/?slider_info=1&with_deposits=True HTTP/1.1
Host: user.lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: device,x-translation-lang
Referer: https://lvbet.pl/
Origin: https://lvbet.pl
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:10 GMT
content-type: text/html; charset=utf-8
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://lvbet.pl
access-control-allow-headers: x-requested-with, content-type, accept, origin, authorization, x-csrftoken, x-translation-lang, device, device-os
access-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT
access-control-max-age: 86400
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 76e019ed398eb4e8-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
lvbet.pl/js/authorization-bar/pl/polyfills.bundle.js?v=4
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/authorization-bar/pl/polyfills.bundle.js?v=4
IP 104.16.114.23:0
GET /js/authorization-bar/pl/polyfills.bundle.js?v=4 HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/javascript
cf-ray: 76e019e27c9db4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "80d14-5ed6acb87225c-gzip"
expires: Tue, 22 Nov 2022 08:00:08 GMT
last-modified: Mon, 14 Nov 2022 09:23:40 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: EXPIRED
server: cloudflare
X-Firefox-Spdy: h2
dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-_D8jbidmPTf06l0dK-HRYGWJlO0DZv5HI9D-UA&google_error=3
178.250.2.151200 OK 0 B URL HTTP/2 dis.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-_D8jbidmPTf06l0dK-HRYGWJlO0DZv5HI9D-UA&google_error=3
IP 178.250.2.151:0
GET /dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k-_D8jbidmPTf06l0dK-HRYGWJlO0DZv5HI9D-UA&google_error=3 HTTP/1.1
Host: dis.criteo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: image/gif
server: Kestrel
cache-control: no-cache
pragma: no-cache
expires: Mon, 26 Jul 1997 05:00:00 GMT
cross-origin-resource-policy: cross-origin
p3p: CP='NON DSP COR CURa PSA PSD OUR BUS NAV STA'
timing-allow-origin: *
server-processing-duration-in-ticks: 256511
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
lvbet.pl/js/sports/scrollTop.js
104.16.114.23200 OK 0 B URL HTTP/2 lvbet.pl/js/sports/scrollTop.js
IP 104.16.114.23:0
GET /js/sports/scrollTop.js HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103707; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:08 GMT
content-type: application/javascript
cf-ray: 76e019e27c9bb4e8-OSL
cache-control: public, max-age=300
content-encoding: gzip
etag: "1f7-596959a259100-gzip"
expires: Tue, 22 Nov 2022 08:00:08 GMT
last-modified: Tue, 05 Nov 2019 08:56:04 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
X-Firefox-Spdy: h2
get.geojs.io/v1/ip/country.json
104.26.1.100200 OK 0 B URL HTTP/2 get.geojs.io/v1/ip/country.json
IP 104.26.1.100:0
GET /v1/ip/country.json HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lvbet.pl
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:09 GMT
content-type: application/json
x-request-id: 61b58cb100908430f243ed5c07f2f90e-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PHwyFBqiDVgvDNFsg1N61mmiHkoDLDtaZdPkQUBQvPtVsnkVXkcyzjhMKe3H%2FcPvrjKOEjlnB9BmGiVRYQGKj1Zy9nI0R6LBnMBm9GAnvLsGI0GcAb4u3og6PvM8zg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76e019e62cf6fabc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lvbet.pl/img/favicon.ico
104.16.114.23200 OK 0 B IP 104.16.114.23:0
GET /img/favicon.ico HTTP/1.1
Host: lvbet.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/pl/fantasy/
Cookie: lvcasino_btag=655708_123ga584cidpidaffid655708; lv_lang_sports=pl; exp_last_visit=1353743707; exp_last_activity=1669103710; exp_tracker=%7B%220%22%3A%22fantasy%22%2C%22token%22%3A%220fd1f7374d6371a9d447c208361ab9b9202cf73fe3c7fdfaee8d9c588e63bbe985e7a8a770f2e5ac6f5ae1f9998751b8%22%7D; exp_csrf_token=a0525ab99d9f2d5c85ca877762923692e990f85b; _gcl_au=1.1.401068278.1669103709; affID=655708; _ga_CNPHYEZZHW=GS1.1.1669103709.1.0.1669103709.60.0.0; _ga=GA1.1.90208960.1669103709; csrftoken=QzRvCU7IbHPT55kqBZHZzwGsWUUZgiybdPebz4tkY35sPlOhv3AIKOQI0ZSYHRtK
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 22 Nov 2022 07:55:11 GMT
content-type: image/vnd.microsoft.icon
cf-ray: 76e019f1afc1b4e8-OSL
age: 50058
cache-control: public, max-age=86400
etag: W/"4b4-583f820faf900"
expires: Wed, 23 Nov 2022 07:55:11 GMT
last-modified: Wed, 13 Mar 2019 11:30:12 GMT
vary: Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
trc.taboola.com/1494454/trc/3/json?tim=1669103711089&data=%7B%22id%22%3A574%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669103711077%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Flvbet.pl%2F%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkartilonasro-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669103711088%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A12%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.85.44200 OK 0 B URL HTTP/2 trc.taboola.com/1494454/trc/3/json?tim=1669103711089&data=%7B%22id%22%3A574%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669103711077%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Flvbet.pl%2F%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkartilonasro-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669103711088%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A12%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.85.44:0
GET /1494454/trc/3/json?tim=1669103711089&data=%7B%22id%22%3A574%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1669103711077%2C%22cv%22%3A%2220221117-23-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Flvbet.pl%2F%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dkartilonasro-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1669103711088%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2Flvbet.pl%2Fpl%2Ffantasy%2F%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A12%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lvbet.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Tue, 22 Nov 2022 07:55:11 GMT
via: 1.1 varnish
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669103711.258068,VS0,VE91
vary: Accept-Encoding
x-vcl-time-ms: 91
X-Firefox-Spdy: h2