i.ibb.co/XjNGd5p/1861434.png
162.19.58.158200 OK 19 kB URL GET HTTP/2 i.ibb.co/XjNGd5p/1861434.png
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 403a6556c168ac3956ec6fbb71002b30
7ad8747582c503ba24fec8f7c53738600689b1d5
33b2a65a4dc052af405f64364ddbb1873a10f5239b044045ec7dd87f2194cea0
GET /XjNGd5p/1861434.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 18793
last-modified: Fri, 21 Jul 2023 15:16:16 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/gvSR757/kontak-b.png
162.19.58.158200 OK 4.9 kB URL GET HTTP/2 i.ibb.co/gvSR757/kontak-b.png
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 69 x 287, 8-bit/color RGBA, non-interlaced\012- data
Hash 33496c42d4bd7126fd5515db2776cfab
0677ddecbc8ba8fd593bc7f3ee260444ad2bff42
cfa70233dc8767e17600592d9f11ba7226d30a042e493c62a5866bed58e1d0de
GET /gvSR757/kontak-b.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 4860
last-modified: Tue, 12 Nov 2019 04:13:48 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/jR3hdJJ/sms.png
162.19.58.158200 OK 3.7 kB IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash b95e9984b9bd05a9b45eba19fe1721b0
adeec2bb5e3d2c006b25f4c46f3d48d498d3547b
4b0da539d8931218058f58eaff1e34e7460d56477f95907e447277a35a956ad2
GET /jR3hdJJ/sms.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 3655
last-modified: Tue, 12 Nov 2019 04:14:56 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/BcTwcxq/skype.png
162.19.58.158200 OK 3.4 kB URL GET HTTP/2 i.ibb.co/BcTwcxq/skype.png
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash d5d53ca4a0e23f5e3a26f8810c5b90d7
029813bec9eca0c747628f7b41b69bb21fb86f3f
a8e969c6b132c419ca27c9cf7f21c50679c3c950b36e2dae3d184ddabd66341a
GET /BcTwcxq/skype.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 3408
last-modified: Tue, 12 Nov 2019 04:15:26 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/PGnHfhW/fb.png
162.19.58.158200 OK 3.3 kB IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 2d55307f34387379b4ccc22d2de21a9e
c997d2ad17a49ca9b2b4fb354be15e85d3ad14c9
7aeb01b89d71c04d2229293b21d9f3e86bbfac32b5338b5b0a552da1f20306e6
GET /PGnHfhW/fb.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 3295
last-modified: Tue, 12 Nov 2019 04:15:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/YRRQNDb/qrcode-icon.png
162.19.58.158200 OK 43 kB URL GET HTTP/2 i.ibb.co/YRRQNDb/qrcode-icon.png
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Hash 81240f75a4a21958d10be8a14610b54d
f61efe8b61d6958b334cb188b5354435ea2ff7d3
9e79d9d74038bc0ea15410f9201f1bcf700153e3a2ab38ff74e8fd65f211efa7
GET /YRRQNDb/qrcode-icon.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 42820
last-modified: Mon, 30 Nov 2020 14:57:23 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/Vwv2JQR/wa.png
162.19.58.158200 OK 1.6 kB IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 3a408b6bf4e181f563dc28f1748e830b
5aea9e06e911ee8f884fb2895e6fbf3da074523c
5fa6462a001b9f68473fcb46cd9d9df800123b0479ef8673e09589c9a59561ac
GET /Vwv2JQR/wa.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 1628
last-modified: Tue, 12 Nov 2019 04:18:37 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/9rY3B7J/wechat.png
162.19.58.158200 OK 1.5 kB URL GET HTTP/2 i.ibb.co/9rY3B7J/wechat.png
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 24 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash e15844a192c878de090d521707abb177
8ab02f4b5c6cd75f72935f2fe05d0dbd423ee757
d87a2de250c8cad722d26817d5b45f9c8f638a4696feafe785ac837a104ff4e7
GET /9rY3B7J/wechat.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 1481
last-modified: Tue, 12 Nov 2019 04:14:38 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/887dTFr/dewabet3888.png
162.19.58.158200 OK 103 kB URL GET HTTP/2 i.ibb.co/887dTFr/dewabet3888.png
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 640 x 276, 8-bit/color RGBA, non-interlaced\012- data
Size 103 kB (102806 bytes)
Hash 517b48f484ad6c419132a135328b7893
08b00894a29cd15a4bff7a5a35f23bd955a629e6
63be8255e8aa1a98dcfdc7d4e4b0df5d1852c1f2270279cabbf39ff0876413cb
GET /887dTFr/dewabet3888.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 102806
last-modified: Fri, 18 Oct 2019 01:52:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
172.217.21.170200 OK 33 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js
IP 172.217.21.170:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32089)
Hash 397754ba49e9e0cf4e7c190da78dda05
ae49e56999d82802727455f0ba83b63acd90a22b
c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33018
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:18:20 GMT
expires: Fri, 29 Nov 2024 04:18:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 359786
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.postimg.cc/x8BSTXZ5/evolutiongaming1.jpg
162.19.88.68200 OK 66 kB URL GET HTTP/2 i.postimg.cc/x8BSTXZ5/evolutiongaming1.jpg
IP 162.19.88.68:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:05:17 13:44:07], baseline, precision 8, 310x200, components 3\012- data
Hash d11eb24e2196564de702012e5959c839
0e8d337ceee0130c3a102304d6e01f36c3008d7e
81084d4e8599f7b8992b114a6dd18d07fbca857ce5578d8ecde80d1ef41330d9
GET /x8BSTXZ5/evolutiongaming1.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 66164
last-modified: Sun, 17 May 2020 06:44:16 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/7PQjSTLY/PILIH-GAME.png
162.19.88.68200 OK 40 kB URL GET HTTP/2 i.postimg.cc/7PQjSTLY/PILIH-GAME.png
IP 162.19.88.68:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 220 x 122, 8-bit/color RGBA, non-interlaced\012- data
Hash 95049fb362f881ebdf798a3e82795854
6427968dac93ed6b4fda27bd36049c33b2e50225
870fc9a8e8c37541903ca103313e1a184483aed46fafe946455826f54b490397
GET /7PQjSTLY/PILIH-GAME.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 39814
last-modified: Sun, 17 May 2020 08:02:09 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/wv1Zr6fd/Menang.png
162.19.88.68200 OK 48 kB URL GET HTTP/2 i.postimg.cc/wv1Zr6fd/Menang.png
IP 162.19.88.68:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type PNG image data, 220 x 122, 8-bit/color RGBA, non-interlaced\012- data
Hash 72293ed072caa5e0c7777c88cede8c5e
b30a45bed1bcef129b7062b809a358b1d0c6d279
21701a8da7f57e91ce3aa2b771648a70d33370faf010d0ed3e4bd5195d9c0499
GET /wv1Zr6fd/Menang.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 48148
last-modified: Sun, 17 May 2020 08:02:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/sgqZdmKG/Sportsbook2.jpg
162.19.88.68200 OK 94 kB URL GET HTTP/2 i.postimg.cc/sgqZdmKG/Sportsbook2.jpg
IP 162.19.88.68:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:05:17 12:19:37], baseline, precision 8, 310x200, components 3\012- data
Hash ffd21c0015d865331571d427b3d848a3
9da5967bb23b4f2903e2c00e665358a978f1e8a9
96315faaa9936d6c6e402806e121ad7ff1def8d38b4985cb825e53713789239c
GET /sgqZdmKG/Sportsbook2.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 94100
last-modified: Sun, 17 May 2020 06:30:49 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.postimg.cc/WzNd6HpC/pragmatic2.jpg
162.19.88.68200 OK 90 kB URL GET HTTP/2 i.postimg.cc/WzNd6HpC/pragmatic2.jpg
IP 162.19.88.68:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:05:17 12:21:03], baseline, precision 8, 310x200, components 3\012- data
Hash c36bc1256b2ba73836a2ded87fa81076
1234c1397ee4fa108b166e732d6c735ce118906d
6bf0c0b958c8e1a7ecfa67c98a05b18b1441306cb970379a9db6e424ada3210c
GET /WzNd6HpC/pragmatic2.jpg HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 90355
last-modified: Sun, 17 May 2020 06:31:48 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-VMR2MD4EYG
142.250.74.168200 OK 90 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-VMR2MD4EYG
IP 142.250.74.168:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3651)
Hash 054982bf0e46ae1155e6c6153eb4d9c9
06d0a65fe05d693551f241f069ae9b5e7ce7e0f0
cc0f887cce9d9a0c43442866bf5763e4f7ca47913f698f68af6683eb9199c039
GET /gtag/js?id=G-VMR2MD4EYG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 08:14:46 GMT
expires: Mon, 04 Dec 2023 08:14:46 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89870
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.postimg.cc/fRjD3nzv/GGBET188.gif
162.19.88.68200 OK 400 kB URL GET HTTP/2 i.postimg.cc/fRjD3nzv/GGBET188.gif
IP 162.19.88.68:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintA5:BC:82:6C:AF:0C:87:E6:4B:2F:B4:1A:26:A9:BB:4B:55:67:EA:1F
ValidityTue, 24 Oct 2023 07:31:42 GMT - Mon, 22 Jan 2024 07:31:41 GMT
File type GIF image data, version 89a, 200 x 200\012- data
Size 400 kB (400475 bytes)
Hash 8402d53d32a1697a04f1541d8f24a243
1742c53ba7a8202debe08a58d26299bae086b7f2
c07696c596c6f7837541c4490e532b63de77f96bf70b0ec01aec759fa6f219b4
GET /fRjD3nzv/GGBET188.gif HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/gif
content-length: 400475
last-modified: Wed, 06 Jul 2022 04:43:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
www.tordewa388.com/dwb/img/m/banner/lc-evo.jpg
188.114.97.1200 OK 24 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-evo.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash b82fb045585568f39ae9f456a6e91c5e
25bc0e47cfa9bc77026b5fde6830e6cee2a76070
b98a40198a73fdc1b49880565bd0f74ece3ad2dd8c719bd20069bc442f188c46
GET /dwb/img/m/banner/lc-evo.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 24156
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sJjL1ENhiNukOiDzhpN8P8P3%2FGDyWCupaevYvTgJOXi2qSbwCgVvumI550O%2B%2FzwNq%2BzuTtMz1YmH4s6qYyYTN9zO4poKebbZqT8gV8mMuwptEeHuEFFc764a2aI846hZb8BJpVU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990379a8712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/sb-bti.jpg
188.114.97.1200 OK 35 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/sb-bti.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 24620d4f95a96238973d5ad9e858cf89
8cb74cb4ae347c637deeb92bf2c96b513758bc46
bcffa0dd1688e8dfffd677f7662f4a1ef9cc7939d4cc51b655dcc3c6fd58f058
GET /dwb/img/m/banner/sb-bti.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 35027
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QonXaIFzOePili3RFdMxEAs1qgMjotCAr1bLujgYqbA8ba0xDzspOs6hh8c3bK4bXAbXNEyco2cD1klZsUxxLL4%2FGYiLZSSZtZ10DA0yfV8%2BIREty5u5Bc9NZ2FYCcLFCUIkNQc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399d5712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/home/step1.png
188.114.97.1200 OK 28 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/home/step1.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 220 x 122, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f15b5f1e6fd36ea50430ebf8787f865
754572c3abacf90b806ac53e4e21010f955fbbbf
00051db19b2a145d019c5f6dbae4b8bf5484d60c6b8272c55445c2ca41d6f5fd
GET /dwb/img/home/step1.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 27733
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ssblsPidv8Ug1iYhErTYBQ5x6ca%2FT9jE0Wo4GgEU9lqZ%2Bj0zt3UQnDGqbDusJF26ZaU%2BmrJcSAa5bBlwXy2ct7GrxoYUUrwG1rvOhkuK60Y55Y7Uviny5xqEu5NauVJOWLDSzg4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830299033969712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-sexy.jpg
188.114.97.1200 OK 27 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-sexy.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash ba07e138a5b868379a5a8dbab59528ae
2947389f5dd51de6f5bc20fae1bc0fdb2f4f032e
c72717e8e0348b4f73f072bf8650b312ee9a01db9a91fc1bdc23b919f9a7e623
GET /dwb/img/m/banner/lc-sexy.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 27154
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IBDXUG8X5FuVWmuCg0xrmjtovOhfPnjKalmujJnx%2FJmC4c2syuJeAQSVJPAUpd8NGhvEZguGevMQChZYL%2BFTzsAcsgS7N71rXXiEwrHEO%2BxQ9LjIBM3abRuN4NH8RvZMJAvSN64%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830299036995712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-ab.jpg
188.114.97.1200 OK 26 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-ab.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 353e2c4fdbbce18c3fbc212a1bd56a17
e01591972ac141816f9ba6082c4d5f12ce1a3f1c
69bbc171eb6cc6276afb84ba205f972f653936b39048aff31758776b9dab95b7
GET /dwb/img/m/banner/lc-ab.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 26028
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4YGifxodSnaEvjFcZC6BtgOQbPPTJ9iWJKJ55q4WW0e5ndWX8xeatAjyfx4DN00SLDQ6PItz%2ByQN%2B%2BCtElb395Hvyrx1AesVNxyP1Sfplzsmz6hqvnuAlyicSH%2Fw5GHm%2FFFlvSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990379af712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-ebet.jpg
188.114.97.1200 OK 25 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-ebet.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 73d22f40f29932599505f4d35944e93f
ab611f883daf665df78d75b1f10e2c68fbd5d07d
4e485089f7f55c7c50e95d3de404380af9c369c9fd90a11dcb0eb05f7141c799
GET /dwb/img/m/banner/lc-ebet.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 25190
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g5OhP2E%2BQ5Vt%2FBNX1yx64tIMlXu6Y4bqfxxrCpbk5v0BQYcY4qratsngWyjWUH5xH77Q64r1kNE85SFk%2Br7vCj7Bst%2FkFYbxowxN9aySHq1lxXQgNTFE3q6F2MMfCszi4gzFF7g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830299036992712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-gp.jpg
188.114.97.1200 OK 24 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-gp.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 18092a0231a57f274dfc4f01cd6e73df
64afe763905dd3b80536cc06baacc3d56c43960f
6e1a443c76f8468da0945170f1d8a16a1565f5ed38539317a952d6426c3b8c8b
GET /dwb/img/m/banner/lc-gp.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 23825
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pLUVe85Yaomuj2MN0XuBZLlkGCFhU6oZIt3QOMl9WB4UlHxBVOZUQ1TYU4%2F%2BJhNUvTFcPw7thwclx3ZX3w%2BWUr2Hd4XnS3%2B5j0mYTeclATWxMGgSilH3yfZjnbfe%2BWuOgaXNmuA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990379b1712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-vivo.jpg
188.114.97.1200 OK 26 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-vivo.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d4648d46cb31c48e7aa4a2597bf567f9
3ddd77b0a9cfca355ada226f43010af7e240b40c
245d57d5af0056dde92533073d05ab9b3f93e86987f64f1d57add6e6cd3c484b
GET /dwb/img/m/banner/lc-vivo.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 25970
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LRWmuUkRadchptx%2FYjeIZCz9q%2BvbHgg5S6sUZEeQOp3XLm8q4LgzEb6EdS5SVJJ%2BYZb4eHHtjqxnQOK5FaTnZTC%2FSIpZkrAhxtLgvkFiw36h2m2seJwk5G08edusvgov0ARrQEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903698f712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-sa.jpg
188.114.97.1200 OK 25 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-sa.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 85403caa010af8dc9b3b931f547e112e
9a5120702a703e890776ae235c06edc041ea3672
a8e21cb501073e23157aa2cab21d2ecd00e92f442e3546aee4c82d8a6b8e64cf
GET /dwb/img/m/banner/lc-sa.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 25322
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zcbkRi%2Bbbx3OFCfdMc1lNBk0J34a9s7S9yHfrlzmHJVd0tt7E12DePrDGsf6d4OC06kUI5BHBSG9G66cYTjaD5K%2FkkESh7wB4o8wKt%2BrHtCNNHTuOvA3LDvRg5g1UEFiz9EP3uQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990369a1712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/home/step2.png
188.114.97.1200 OK 31 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/home/step2.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 220 x 122, 8-bit/color RGBA, non-interlaced\012- data
Hash a405c6ebaadb5402b43aa49da6f77b72
62deb080e8c206c37134f1c26b7d9a602b734373
9ce5c57e52cc62645d4c7fc942d652c1e2f22cf16100ee72ad6a8dbe3940a13d
GET /dwb/img/home/step2.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 30572
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zu1WeNVYu%2B25%2B8LBloy6YTLz5Z8kKwMLLYYHVOe8UuY5KUnIOF2lFJKPIe55cKM%2F7APTG2JfKoXXClreFnvILa2YLVzdFzP4K2dNYoxnEO3%2Ft75hZ0ltaSAa0gcnhkysqlCHMfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903396a712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-ion.jpg
188.114.97.1200 OK 24 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-ion.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 02c6bc1ca5f4763cdc575052bdf677e8
a6a56fb34ad78d0ccbb1023efc7997ce1c1ee503
b38fa405496dbbb34377cd6dbd5b70a689bb50c893b19d5f43a51970cb627e13
GET /dwb/img/m/banner/lc-ion.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 24419
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PNoolr6BvCIM2VaLO7nW94efhWiONcD4EhlJCa6J5M1Q31NvoalcImTEkABbU%2BQw9nAbWoQ3lfJ7OxETpqb4Cik9hHvBaqjm5zm6g%2BWyjyvXnQGJMsacUWG1NYyitI2QoxnkUWI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990379a7712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/sb-wb.png
188.114.97.1200 OK 33 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/sb-wb.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 571ab8bd288397586075245091d929e5
45bdf6176d07541d8651a75768f89505d236873e
3351e5d44068771065a2891aba8d2fa4afbe12bed9dc8226759a8f51ca2c3a36
GET /dwb/img/m/banner/sb-wb.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 33317
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hDE0qfMVj1mmnsKdCZ5nMWl43hjLw1RqQG9%2FfFBDfhpVhm6TBcp45oW5xmwDslJgoAnQR9g7PayT8PcV60sNqcRu6tBMA%2FluklOSRknMLbwhjXPGuLC01eGCLJB5Zrys0c1rsEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399c6712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-ag.jpg
188.114.97.1200 OK 23 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-ag.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash e492d94d18f1d26d5399200e75e686d5
1e2ab55be390c6a6e4db934b36fb86910af3a3fc
7025f454b151bf78d5e630f73ce617e46b774d12e384effd013d7816927100b9
GET /dwb/img/m/banner/lc-ag.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 22802
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gKxpO9PaQt4z8TTKWSxyxxpkKCncsZfKOy55EBmWST3%2FNWcwrL9HQ7ps1VEY25iTsuTPLWxOP4PdGLXOgivZt0yUZdKAfCsfpH17n%2FCOWMJR6IzR5aNwPd%2FymVPSiXzLhknnFMw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990389b9712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-og.jpg
188.114.97.1200 OK 29 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-og.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 1a9b3d96f48ee89afdffb1e962c79a6c
55940ffa1a3cde30151b1eb9080e6c25fa86cb43
ab2d1bbf9046db8648218231b29d6cf3250d0b8b380808c70f66e3b5e2384819
GET /dwb/img/m/banner/lc-og.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 28896
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EwfoZ95AxW5ufyDgaWXsIMlGjf3PDeScwHtbzbjW8KN97jJuNHC76SuBhGHNlKUNCMBoKYR4CuudBFz6dzrfiDkYqnZy38jrOpjD61U1YxIrhX029LnoJynQ5nnhTBS6JXhE%2BmU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399c0712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/sb-cmd.jpg
188.114.97.1200 OK 41 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/sb-cmd.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash a5d4a0b7804e8a2ab06b45ee17bc6e52
337eb1e698af781767557cdee35fb768ed21a1b8
88bcfe7fc4f91a9fcbbbcf26c943ca81440db7ff27bd4c0b3d93864f43decfc1
GET /dwb/img/m/banner/sb-cmd.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 41382
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CTpJntCGw2yzIShrv%2BEFzCnlAtJwqayATRwejNGilbmMxCubHD%2FqhtPzOcp%2Fu7TUOuR6un0BwI4A7sbl%2FogD6K%2BfGrSgBXnEHeZn4loJMV3RgsMOG63rbj2P8CKxAuqTUcRRqzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903a9da712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/poker-balak.jpg
188.114.97.1200 OK 31 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/poker-balak.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 03e2bafd128b1eca74bbfefc35a401db
6f3340bd5fff0f21a54c989fc6132f000d553867
59ef7f8a2253e11f999a4fda7f6c12d3888f3e7e08b1797eb7642d295807a678
GET /dwb/img/m/banner/poker-balak.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 30942
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IMEwL6gNb6cDvfIw92e30JZsPVrQZBg7o1euiavi9jCG6kJxKXc1yBaUKURVRUDomJlgeTXqrweu%2FNkVx6Fyqd7uhzkekR%2FGK3a5Di1dTKWmYIcdlNsJHbzodbGSJIIcc8IVic8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903a9e3712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/sb-i.jpg
188.114.97.1200 OK 36 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/sb-i.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 70f972a3eba05f4fe0718ce86c6021e6
a134897e4da227156248763c3e44ecd6aa0db627
918105616bc9fa03bf34bb05e8436a431c5efa959badd8a64390236e902b0ae1
GET /dwb/img/m/banner/sb-i.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 35475
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PMC%2FdHkuUEAVbQ7TORIPVzJ9lf3xFGTGh562kvm0O1S0CGh0Y69c0B0F7KXSrR5rs3BYe%2FCzJAVC4awxHUkc%2F%2FJlzsWqste%2Bl7WRZwWlf73woi3rhacU6%2FQ%2B%2FYJMV55zItm8wbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399c7712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-wm.jpg
188.114.97.1200 OK 25 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-wm.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 089a3c98bb83b52efff32a26041900ef
c390c6c760fccd9df1178fe8addd3adf1630af93
af97b60d316069e73390ff214b4486a6269f0091a4a1ed392e6991e86afb2c76
GET /dwb/img/m/banner/lc-wm.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 25411
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L7quZSdS4yUaX7bgGplinPRgG2Oj7SIYBvdyLv0zd6oLk2nQqvPWR6s4NGZHSVD7seOXaObiO%2Batnz72dH9FOnZi0ss91qybQyYJVVEGyTp349qAEGmX3ywb09Ys%2Bla5dkFhPlo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903698d712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-pt.jpg
188.114.97.1200 OK 23 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-pt.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 9f25dffd9cac67f2230cfdac7b52f81d
2463abf64d5ee4470d1424f76ba059de94f9fa6c
58b7eebd90e9807ff69c8f811cbead68958cecc1ef7ee1add722e357982a13fa
GET /dwb/img/m/banner/lc-pt.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 23443
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=19Tm2VzeLOh0AinmtXyqcr6Sky2Uau%2BmwP6YIuSsHmlamlXLaOf2KJ7%2BsE2CqdW1%2F0kX8Jo1VNaJqdUGHB4GXrzMn%2B8mYL1BXkT1frz3SXIx1rNOtEfOFtpipJ5%2F1%2FRBFljYCF8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990379b6712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-mg.jpg
188.114.97.1200 OK 23 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-mg.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d72a1fc3c54fb0b0be1f0ed8ca8cf996
b0c7adda77434f2c785ff89c62cb50977bde3953
32c4dccef0556152363dab1f7b43ddbf710ee470ed2e9f504a51d6b06d303dee
GET /dwb/img/m/banner/lc-mg.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 22808
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eS3AS2V8vljXCsALL5ZGzmunu9Custyolk73L%2BOOPpHtOnFddMsFAHFzI5PI%2F31HY8CKhJNA9RxjDIYX%2BnHkLNWo8JJcJzJf32ZuLc9X6Gc1ObGAph61nYUHRuh8luSPWOF1iMY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990389bd712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-dg.jpg
188.114.97.1200 OK 25 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-dg.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash a65a9602af496880858e57c5f85cfeb2
b197d9f25b63827a41c82fa3e9121687cb71609b
37bff1c9cc43b3581e698b475b6b18747a03a21b248a170511d4d0b016367068
GET /dwb/img/m/banner/lc-dg.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 25166
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dB6sD0bMbH9wbZ5vBBW51NlqafzLjjKnXgSyIadEQPuisNNvC%2FCSPOfGdbtPgXZOsIUoIKbBR%2FRP1QWnyiv5rK%2BNlu61ODtfZEI9OECn32uXOKKfisvaFR%2FaUQlcjmk3ADdA%2FfE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399c1712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/4d-nex4d.jpg
188.114.97.1200 OK 30 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/4d-nex4d.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash a28ec57348a8155ce1225e320a22d6e5
d32b81f9d3307dba14c7b96b5fcf8a5693fc09f5
9f4764ff8065eb7afcde8bffdc4d8f53eced3834425b6335fa2e9fd948693ac2
GET /dwb/img/m/banner/4d-nex4d.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 30235
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jcAYbUYXTL2Xfw5W4Xpuz2JHcwpHvnd7bFJ9IQIQXm2DyHpPooEu%2F5%2FcwK8YFrh0pvzRKayrS4tB1p8yer0%2F6zMoESER%2FVqsCm%2Fzkgp6jjSBzTTJnjPWoJtqgHfxvopsU5IbIn4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903b9f2712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/sb-s.jpg
188.114.97.1200 OK 33 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/sb-s.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 9a4c962c63e24587f361bbe160b4bfab
2a3ab30b1d2c663dcbc4c1aaeff25c38de7c405e
2feb14cfbe1f799d0f7318052dd00755dc5ab723a451cc320a7e1e15a2e70d5e
GET /dwb/img/m/banner/sb-s.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 33270
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dRJYLtjF7gUjQCwdflF8k9Ll4WMXD02cR7x6MYCx7iRdLe7qAZCF%2BLZmd6kQYwlw4YBM7YVlh4Wxq15Dw%2Bx57N%2FCRmH8N%2F%2BrDit%2F3bYh8qgCe%2F99D%2B9mf%2F7h%2BTSE0F2as17O7%2FI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399cb712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/others-cf388.png
188.114.97.1200 OK 40 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/others-cf388.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 5bd438ddf39ed5692bffccfb5efd5333
552eff01b34a248cb457e5829d7638af4850cd0d
9f3b4648a3df87b06be721e604ceb016a74b0e39376c7df9287c6dfc8cee3892
GET /dwb/img/m/banner/others-cf388.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 39784
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k8bWo%2BQVBfGL7QhBYVRePJCv8bHVPeT0CTWVDRy2nRXrSs%2Bo2di1nXUCOqbL2fUFvOkvwXtRABj%2Fi6K1kt9BNZTvMe6ri6W8FFfxcEe8NngckLY3NoHf1gt4j1mJJMvVRsrtKj0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903c9fa712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/sb-s-2g.jpg
188.114.97.1200 OK 38 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/sb-s-2g.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 75162bb0f6d7eb26592771234512f6e6
87d808cacf125b511a2a7fb0ec0b296c0a90a9c1
e3c34e44afc15e2525a9e4531cb4db85bba85135239b4fd3e32e226b726d471e
GET /dwb/img/m/banner/sb-s-2g.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 38276
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8th4UHxI35oE9AFuVyHVKTUKUuBJJmbXtlYeOMvbkuUVv2X8mcg%2B3vu103Nfy3eVm3thQWo86a28f92nyR85RnrCdgL8gofp3hocWYuT6IJNLTATTfuucpaffvmt69vTNBi7lTk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399d2712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/tangkas.jpg
188.114.97.1200 OK 25 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/tangkas.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4b69fb5d1cbd65f7f3f35534d3e58b25
813e67be9a0087163a1d40778b5e675c13ca72c8
79f9036ce5f24fa3b0093bb846913bb1dfca6f0a801bf84cbf41511a737f68a6
GET /dwb/img/m/banner/tangkas.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 24899
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1EHKvY%2FzOOCPNHyAFO89zuqMIDUMX0bYs9HuE5AFpVTOBVUzngBp1PZP5mgmZ58Dy%2Fhe7jNTl3h6MSypXF7Np3Gg4nWa6Cwyqv34%2BP94lMxAbw45xQSGxAR%2BYjcGmWmFrssSD0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903b9ed712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/poker-p2play.jpg
188.114.97.1200 OK 31 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/poker-p2play.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 7458ddb752e93074125bf85750cc84ae
fb3af46aab0ae8a297053ca5e349c9462e2dc4ef
5ff53a475ab074bac3373fdcd27f9acf096aae11483167622067829207369564
GET /dwb/img/m/banner/poker-p2play.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/jpeg
content-length: 30954
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jG1ndwC3QPzo3eCu3N7%2BRybAefTNhMmPxynRmVMOwd8baFjqtq7YV%2ByNtcEB9PLP%2F%2FvA3yGyEwpOFJuXpmBzQcN8agWboiBNOlaGs6BfhxJw%2Fw1YwzTGZBEljp%2BRRZ4r%2BhJ6HQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903b9e9712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/others-p93.png
188.114.97.1200 OK 34 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/others-p93.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 060750822b8f23328beee8b1d40d85dc
d0bdd26f44fbb2d1e34db7cc6c31c6d29ca4591b
e95f1d55ac52303e9cc56ff7ed117c2ec0be8e5652be96a12ddb416eb809fb68
GET /dwb/img/m/banner/others-p93.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: image/png
content-length: 33575
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pkhDMNUfSLtp0qMjjf6N1iT9jztYcy3TFk7beM2zPawt11qqmFahKD9SIsHmkkVS8dyIJ8n0mDWkPV%2FK9hXOIkBJhMTBP6Eha9uMd8vHP4Ax3rqPPCiSQrWAnGMFJsqQU9y1O70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903c9f7712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/others-pt.png
188.114.97.1200 OK 36 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/others-pt.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 342d656f7084c75f109c971675dccf5e
386ebcf4697d189274317f2b16805738c6e79bd5
a0decc35ad9a9954dd89b2b9a9fa86400a8614a3398e5322ab831528629e5798
GET /dwb/img/m/banner/others-pt.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 36312
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z38pdTkd3dE3uvwpDGjd7XY35yjILalJDGPl38h8ErtZaYZ4Ww%2BKgg5nctE%2FKV2t3t8gGjRgu8ZY7RAGahuexGkGjlxHyZ%2FcQJF3%2BTTaFtZl0blVLI%2BdYPNWHfNkLexYrq8ITbU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903da0a712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/logo.png
188.114.97.1200 OK 98 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/logo.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 640 x 276, 8-bit/color RGBA, non-interlaced\012- data
Hash 56c0501d3124908e5672f68ac7b6c56e
d6fa418052dc07784a2490b0fad78e79acb854fa
503dca2c1bae70451244e9449a125aab507c0636d23add6f65433a532fedbec9
GET /dwb/img/logo.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 98087
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=86TOeKGDooZo1pR%2FyNbsBiI9mh09irlGu5orDwIDFlYcdnpQQLlnhQ%2BYINXQf16RWoN9%2F23iaRcgn65DkN4HD75lyRS6nkSz0BTs%2FAggDMakiyQaCahYXZQucV%2BsX0cBZndx1wI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830299035981712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-s.jpg
188.114.97.1200 OK 60 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-s.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, baseline, precision 8, 300x300, components 3\012- data
Hash d8d895f04a388d711211add7e45e5eab
bcfc3f65280d8989f3ec93a9d3a33299d398a273
b92adced5b4e98efdd5c83639765bf154b778c0fb692d630737624076b1a41eb
GET /dwb/img/m/banner/lc-s.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/jpeg
content-length: 59763
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m7Of%2BLylraaTcSo%2Fbs1AsrtBzDEEWcfIF%2BMhLX%2BeE4RaWMpu4T0cgUqELwsph3FWJ87JZzIiZSRSLRKPRT1uVVWIYNOmLRvYbPVp4z7mUrSzULogrbf%2FbsQQmpgCIJXI1%2BISLEg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990399be712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/fish-ka.png
188.114.97.1200 OK 93 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/fish-ka.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash f6e86883923a212114cc347466ca2c3b
c05e8d3584ef6a0b21afa7474c18d9d5ee3e0f08
3076aa690ffd9ddbcf5c26ccef2e7a5bb8b64d4efb4994ae0b8bb0e90837d496
GET /dwb/img/m/banner/fish-ka.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 92576
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OeR%2BjlE8Wvysb9TiBQn0aqNlcGd3r5LObxY%2BQJmPQhn1q6HGHoyYgDc9AWSqInmbjy2T85MZLbLvDcgP4%2BKw%2FW02B6Xh8UPARS%2ByDeB8aH8zNKzlVxcjIaY5MJJUzzinY2WzK2M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903ca00712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/fish-vp.png
188.114.97.1200 OK 45 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/fish-vp.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit colormap, non-interlaced\012- data
Hash 66b39bd619afba0ea2f26e914feebdd4
5e45ecd949cc3df264ca05aa0900edf250934cf7
afb0cbcf9874267789afcbf35ff8f1440c235c83414e98b4c0bdd42f4ae64290
GET /dwb/img/m/banner/fish-vp.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 44914
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iocn7LUc0PHg%2BkOzs2e8d1wxGa0If%2FbjePCY1mniuDactuwoR5EU%2BolDiPYNqZlK8fIub4OfiRn5IpdQ3gtrLkj9U1ZqFw2sCj1vgMpKndVJ2PDxXlICq4nI%2FxOUm8RQaO%2Flemg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903c9f6712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/lc-pm.jpg
188.114.97.1200 OK 119 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/lc-pm.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2021:04:13 16:23:55], progressive, precision 8, 300x300, components 3\012- data
Size 119 kB (118633 bytes)
Hash 36c1cb9e8f9bbb20e62008e7474b60f7
fa911e37a3c6ddfd932a565ffbeb460efba5451e
5b630e01dd9cb94f4aac19ffd99e42ccd5b9227b99f53976dcf53647545e047c
GET /dwb/img/m/banner/lc-pm.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/jpeg
content-length: 118633
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bpnyCRRrxO2CjOVQaobgWARj2j7a3nWbHoBSgMUSzuwjTF71VyNDy%2FoSYWNYqgGdSfn019pakf7ghwzqOz5TujnhQVio4OosLg%2Bv6swAUevePvO%2FUSRYXYW%2FvFFBJzFGNpsUobU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830299035983712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/fish-fa.png
188.114.97.1200 OK 104 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/fish-fa.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 104 kB (104037 bytes)
Hash 69ce02e1a5ee0bf3ca2536774db8b5f7
9bd22be948ff9f6b2c53946de6ab98b0bb74608a
62aaee09e0e524c94764885efc906bb89cb8757e8a3bfa63a7bef364eb17b2cb
GET /dwb/img/m/banner/fish-fa.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 104037
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XAQqo2nclIsCfSY0htzzO8kxqKAenZTAcoZUztLlDv6ImyAHjaazoNedVTIED5CaPd5PlzqtWPNbKZReT1L04gGcjy7MWMDws%2F7Np3p%2FY5Gs1Vt6qIDGY0nsxWDN%2FqfYz1m6zms%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903c9fd712e-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtm.js?id=GTM-MKH4BX7
142.250.74.168200 OK 44 kB URL GET HTTP/3 www.googletagmanager.com/gtm.js?id=GTM-MKH4BX7
IP 142.250.74.168:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (2213)
Hash 79cbc64b4bce85838ffabe081cc58d45
b9a62d6ca142adcaddd906111dd41856d1f69949
6a060921dfa2e840ae8468db85634a34736756cff01a9d7dfcbcbb77d02f206d
GET /gtm.js?id=GTM-MKH4BX7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 08:14:47 GMT
expires: Mon, 04 Dec 2023 08:14:47 GMT
cache-control: private, max-age=900
last-modified: Mon, 04 Dec 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44413
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.tordewa388.com/dwb/img/m/banner/poker-1gaming.jpg
188.114.97.1200 OK 105 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/poker-1gaming.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:12:23 18:10:41], baseline, precision 8, 300x300, components 3\012- data
Size 105 kB (105388 bytes)
Hash 6179fe75e7d406e1c7f482cd284de452
020c6377652717a3edd7fcfb57a4a9399ba98ed6
4f58fd6e24dd6fa080a6129703061fd4fcd295bc7efce1f10ea75c272de07e72
GET /dwb/img/m/banner/poker-1gaming.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/jpeg
content-length: 105388
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lnvpUqWVrqY5CTUVr%2FzCADmCB37SUeslbWKRVKJoqJwRnu758f9m1bkudRUELWN7VuyWAvA%2FyiqiHG8cpyUybOG9X5WJLdXZD2kQqVrPbjt93%2Bk3D1SxQTsXjo%2BcYVPQPR6d%2BCI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903b9e8712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/m/banner/fish-joker.png
188.114.97.1200 OK 115 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/m/banner/fish-joker.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 115 kB (115267 bytes)
Hash f37747aaf12a8db3392be3abcaf66363
774d420d3224afb1c4837ae42a85e1f8a05b866f
0905ffd5ba09aea2abe5a7243a2da4f2062717098e6c68501e27638c5c83af3d
GET /dwb/img/m/banner/fish-joker.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 115267
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jlyhfugeB9%2B6EEyukAVYVmsJVou%2Buw9y6wgZbjApkvupP6kEsc%2B%2FQjKTyYZUCb9ZBjfEd%2FHfkQOuKrmVZAD0FR3Ylzs%2BOxvB9NB%2F9BeZ0WL5VDPgqy2836Nix5uVYLlVouZLVQ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029903da08712e-OSL
alt-svc: h3=":443"; ma=86400
i.ibb.co/1GmMZkY/dewabet-background-1.jpg
162.19.58.158200 OK 128 kB URL GET HTTP/2 i.ibb.co/1GmMZkY/dewabet-background-1.jpg
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:02:17 14:07:02], baseline, precision 8, 1920x1087, components 3\012- data
Size 128 kB (127673 bytes)
Hash 4951dba14e2208423337f1f66ae05f90
18f8da27d4c33e229920ba4db123bdcf6df05fcd
44afa2e2e0364819dda88c0375fe53cdd4a2fc958b406abcad79e07156ae6991
GET /1GmMZkY/dewabet-background-1.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/jpeg
content-length: 127673
last-modified: Mon, 17 Feb 2020 07:07:27 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
www.tordewa388.com/dwb/css/mobile.css
188.114.97.1200 OK 6.8 kB URL GET HTTP/3 www.tordewa388.com/dwb/css/mobile.css
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (338), with CRLF line terminators
Hash 9f90865e52664e99b8fdb09350762875
2a211ec29498d357ac8df737ffe08141a5abdbfa
1d8cdbc6d70ae66ed62c9f6558350a33b15359603ff9970b9e47984df89b86c8
GET /dwb/css/mobile.css HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ch6zBsROwPIlEDmFOeAnJWwG12WzxDCPCBGMnSNWOhJZrdr5S%2BcVFULAXcGAtHXopXeXjGPuIhLkVbYwcqvS%2FbRjILNClxX7%2BG3iyhmMxaJ0Qp8PLwzCrqaqOiDHkadGZU8JNfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029909cf80712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2
216.58.207.227200 OK 45 kB URL GET HTTP/2 fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2
IP 216.58.207.227:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 44584, version 1.0\012- data
Hash e04669366cda1aca21161f9e22bac3ae
157532ec5cdb07c395eb96aa6e9d0de1eeb869a7
43a079fd739dffa727de659b5bbf44596031aa7542c8a8afbc54a243aab96b47
GET /s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44584
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:07 GMT
expires: Fri, 29 Nov 2024 05:00:07 GMT
cache-control: public, max-age=31536000
age: 357280
last-modified: Mon, 03 Apr 2023 20:46:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.tordewa388.com/dwb/img/icon/home.png
188.114.97.1200 OK 5.2 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/home.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 299a7af94213b28f0c058e83ea7e4f8b
ad2f9c52c3f09cb5e97cc65a84809e106efa6f77
44e976ddb4c49cab1097bb018708bbd1fa2a624ee406ec3f65bc3f8de4b2f206
GET /dwb/img/icon/home.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 5197
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NxoKu8FooTuUqNJ9nJqlWi4gXlaraQwc09M5KOQ0zj1p12LZbAN%2Fx2HEHC20Lflt2kJQ%2FO2tlY7m4lrNcR4qi6Gs71rKPPTA2IV4iUi9xFPcanjjK7JeqMSG0FIRD%2FOGz352lVs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ac87a712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/slots.png
188.114.97.1200 OK 5.1 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/slots.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 58 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 6455da01f75412f4311cb8c745bf8a38
f7fb39fe0b1df94ea02d74b55be745ec598d68f9
44d25c977c4e7a2ad9938e7c5972de10c07641f56510c09e1156e32f192af508
GET /dwb/img/icon/slots.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 5081
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cyvtU9g3wrboJbIel01E7XVjmhGwxLd1K2vxSS4G7R6pvB2EAAsptZrNsSWX4EcjFiU5G%2FkyFjfijN%2Faw0EmKQXcU3sFdE2%2F3DXxKTA%2FgAqV9KACt%2BolNx%2FePapDGxuHu5mtKfo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ad889712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/dice.png
188.114.97.1200 OK 5.8 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/dice.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 46 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash d4c1a9fa1d887e1fc2fbca29d6b3a211
c0b7899e2740d3f56cda84c81fdd25269df22c2f
6a8b5685ee947285f4c5128576ea11a7fc91a8e3f7705b51923271922e50e0b5
GET /dwb/img/icon/dice.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 5848
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jPQ5Q1ca95CRL71kHxBzuuIGkXUd07nSCntP6e0KZ6deasWJIgF%2FY%2FH9X7OjQ9U5aOzRi3tz87%2FnW00acsgiEsly1ch0OxfWg20RLGnorZBgvEEZ28A%2FxzRGGqnAfcnMI8ce72o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ae897712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/mobile.png
188.114.97.1200 OK 4.4 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/mobile.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 46 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f674f992977ae06db815935c1cf0827
881f3fc68374ec61ad5793da9dd0e301211b3e9f
0b902e537df49e487c04581909a1c8cff4fe7072f1909835209748dbb31bdcdc
GET /dwb/img/icon/mobile.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 4399
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tYrLn3ofI0fbqV2Tp7RQhcnyAH1DahfLiScqXJ%2FCkF2Zy2WBA35eDTfU9YsJurLKoCUjx1kmg8uqCc9tceh9LPtXis0o6mHciq03hNPK0hrXKOqHTSPlp7WcF%2BZwvYpF93GuO78%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ae8a8712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/sportsbook.png
188.114.97.1200 OK 5.5 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/sportsbook.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 692e14c0f42fddfe31a911d8cfc8585c
07c534e0db71713714da43d29981708ee65bbf9a
924ba7efc31ef9a31477eb6f8f49434df02260b4436ba3a782afabe3c18612d7
GET /dwb/img/icon/sportsbook.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 5521
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NZqkW85%2BEGtG7g4%2FPobszZqeHq3T469um7Qib8bChibOktxffvUfaDvOirNKOBQ5RsOp8iH%2BDsudmx5A3WUxoL8h899lMyzEQI4DTHFEY5uUyvwyJjTKou2dg36v7PIchpx2Ghg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ac87d712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/promotions.png
188.114.97.1200 OK 4.9 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/promotions.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 40 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 5478853915095a69be9517f9cf6c6a53
2c229fb6d23f06018b0bb645cce41b68df418745
45e7be16423102952c184620727d173a90190223d928449d5798e19e67b949b5
GET /dwb/img/icon/promotions.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 4909
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KIbstujsjPWXQhqzvtG1Tf7Z0%2BvjYd%2B9xjeIgCJslhGH%2BZB6AdMdKtQxQDxjKegSK7eRKTbuwxFSQDwjnfhnlFyUJ5AkdybfF%2FXTCFUO6NbPKueD%2BjNhQeln2SScocqc0NGuvzY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ae89f712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/coin.png
188.114.97.1200 OK 4.9 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/coin.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d26e1c4c0888a6e1af3b2ad40ef3b4e
1b5271c970a7a9487fa1a2e2832163d57dc2a317
80d30a961ba380d53f763bc27606c6c36ac71d7544a229b8f7e523e0dfeee093
GET /dwb/img/icon/coin.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 4935
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ikQX%2BawjbsjSsuevkepcTmRWPJ8zyIrdbSjujeNEQ8jB%2B1XcneM%2FnylNvQ0D8wIv%2FCBv%2BSZPb8W5eh5i%2BVnrF4cmyhI%2FE5Oon1kQATK0oI3tNSqjzKF0%2F474jfe0yVq0pn8BVAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ae893712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/casino.png
188.114.97.1200 OK 6.2 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/casino.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 48 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash d4e1c8e62913f3340bbcd72cbf9a4ad4
15caa45a113fb39d213e86cde4a0e63d1bae7801
91618e320355c5eb117cb214368c011b7b310a56f8a8897ff9eeb171854769bb
GET /dwb/img/icon/casino.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 6169
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WOafrXJQBt7rcD%2BHzUEcvOlm72hvFfAA3JfgaRM%2BHuPQfusmgy4mkD%2BnISuQDRHvL46qzi08yT3Bxmgt7Mg7JYM%2FcxmF0jVkL0TCE1oU6YmaicN%2BKgI5lHH1ss1TaLOGnr3FJ0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ad88d712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/tangkas.png
188.114.97.1200 OK 5.0 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/tangkas.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 42 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 396c0e9992931939e9bd201e6757df36
e6ced90a5837ab94563cf49ceca2883c49bbc4a9
9e1b887d9068f7f92f2185bdfd4bd32b1108c37afdb4312c8e77fd93c2b231d7
GET /dwb/img/icon/tangkas.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 4966
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FEengaUWmew1zGVc4hiv4JZLAMgQXb3aawtcGZH4hV2m8s6UheimVtFONEl8PNbfs3mUgEiBn4ucdEhovsduC5Ti7rxkVE%2FR2IIWGU29D%2Bt1zkjDAeQC7znq9HEPCZ6RCTMTw2Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ae895712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/icon/human.png
188.114.97.1200 OK 4.2 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/icon/human.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 37 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 21f65ea7b6d7e3c60b00a1ed46884173
f41cc5dfb7ba8305a040c46e134e37bce97fd20e
c4f0aa28d4ba2feefe6466bd71ec7c4165dff822187d479d06f2b6ebc0313e9a
GET /dwb/img/icon/human.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: image/png
content-length: 4242
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pN0lbyTkqM2hNfRYAm8RABiNBzMclcZfiZCyNs5VGNM2QqcoCnOnjpJAa%2FFDAS1hVf1RzsVgMmPI7j8Kd3dB83uWZzHkLs1e%2B7NGJn%2FFwGnREAlwEeyXt%2F%2F%2FNpn23ETSqyJ16Ko%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990ae8ac712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/home/jackpot-title.png
188.114.97.1200 OK 116 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/home/jackpot-title.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 844 x 110, 8-bit/color RGBA, non-interlaced\012- data
Size 116 kB (115555 bytes)
Hash 339791b27835f99bc884c88c847eb5af
4ebfdc79f26ea17c3ba4eed430cb8a2f02d16818
f07fc375183a88d3ec4f6b9ff14226ad4047579cf4be6faa7734544d0f22ff6a
GET /dwb/img/home/jackpot-title.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/png
content-length: 115555
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yPZzvNQPbdwY2OzqMIOKnMWRGcbuN8Br7I3dA1xb3V1YPqJqK%2BQbjVR%2Fi8qeF6lVYPKqGq69m88Q1hcgi2b3BKTSHgPhmN7%2FVwj%2F8JhMeKw52XrICSy%2BEkXxn4sIu1gG6STlAJU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990af8b4712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/css/fonts/font-awesome/fontawesome-webfont.woff2?v=4.3.0
188.114.97.1200 OK 57 kB URL GET HTTP/3 www.tordewa388.com/css/fonts/font-awesome/fontawesome-webfont.woff2?v=4.3.0
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /css/fonts/font-awesome/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/css/fonts/font-awesome/font-awesome.min.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 56780
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JQ7YWv4cJtcGPeKwOBDHQc5%2BXNnrt7%2F%2ByBAuqzU3gGUCYZ8A2Wkctp1TbGzMHSt1uMHPN99c9klHg3feGuPXa1zbx05EGjAxQApn4dKDkh5p9v1gCL9%2B3L%2Bj5cP69WHs%2BlchQoo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990b08c3712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/home/table.png
188.114.97.1200 OK 56 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/home/table.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 1056 x 119, 8-bit/color RGBA, non-interlaced\012- data
Hash b7fc7cb5c1dcdfdd9ce029581fba8b6f
2f4fb248b281d37fc9a9f538ac5a10d7d3b76955
812ad5f8079d269adde58e5421a9113849e43156ef496fd6e678493359bc8599
GET /dwb/img/home/table.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/png
content-length: 56385
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IndSpEerHQeuVSP3gFFF9DlrVrYEPJajC1p1psL4hgNL%2FvufpCzoQVeiJDMYqHk1Duk4ykdfqidYNU%2B2wE3JizrBCuGsaXFxuTHVmAeXANX9pmF0NCU8YjR0GLrTIysLdnT%2BJmE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990b08c2712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/img/home/jackpot-bg.png
188.114.97.1200 OK 246 kB URL GET HTTP/3 www.tordewa388.com/dwb/img/home/jackpot-bg.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 1920 x 110, 8-bit/color RGBA, non-interlaced\012- data
Size 246 kB (245867 bytes)
Hash 7f69929d30a86f167ae04359f52ea171
39d6f5bc6b409354cea5b9e0314fff3c7f9a9941
57cfeade633273e7ebacdc30e8387057a1e55e6efea284177393dd55680edf8b
GET /dwb/img/home/jackpot-bg.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/dwb/css/style.css
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/png
content-length: 245867
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oUz1OSjNP3Ar51Xnmu2RiXlmyOgH1%2BSvN2%2FsoP2I7cvt3cXffXHx4SAe2q0%2BgVqCM%2Bisf13V9pgnxtRl7COi5Fazgi15wa5SUqxfW9yJ5068II6Jf8nV4A1au8GNftlQkTo9Iqc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990af8b2712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/imgs/joker/hot.png
188.114.97.1200 OK 9.5 kB URL GET HTTP/3 www.tordewa388.com/common/imgs/joker/hot.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash ae8e49ea075aa34f3b5228a1204fb66b
84cb03676203c2dcf9689f6f4eb421c5a8db4cd2
3838622f25b033191c5b63f2355d4c764a1e4ed7af966098b57811f30c4105de
GET /common/imgs/joker/hot.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/png
content-length: 9536
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dCDN8WjhTBlMQTpKtBaxy%2BjrrYc65kl1MKBPr9vS9V7nFpcLpzqUxj2y%2BxcDFW%2FGFz%2FkkfanN9Ja3ig3Zb6l1T91dcWrFIAdma84A7hJx1kKzgGi%2B9NTQDcLLwuZa%2BsV2xXiTQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990eac51712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/images/tnm/202311/pm-02-640x300.jpg
188.114.97.1200 OK 61 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202311/pm-02-640x300.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x300, components 3\012- data
Hash f21a8c94314d5fa9c1fb46ab7b026ba0
fece32cc41e0d0985a103fe52b903704e3838c64
3b3f66f6c0a44da5c38b554bb6ebe480c00b405d99ecf98390180e62a4ad794d
GET /common/images/tnm/202311/pm-02-640x300.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 61247
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tyn3Aypi8qAE6FhvjTWHjugec%2B7FPF%2F8pGJ3AcBI40ClYoRqKByUPBBFZRFtyepH9FA4tZNtw5liwG4BpJNfUYVuPcGkJbRRl4C3BPsiUh%2B0sQGIh9YGzs5F43vLcK5zugfmpVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fcd3b712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/css/fonts/font-awesome/font-awesome.min.css
188.114.97.1200 OK 60 kB URL GET HTTP/3 www.tordewa388.com/css/fonts/font-awesome/font-awesome.min.css
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (23523)
Hash 3738ef90dad175977dc8a695809bb71a
98aa676ba7987caa86d49ab1b71f73896d08ad13
c86f7b62a894d5799f1aa0a535efb34ed6f914447f901f1da50c837dee13fa72
GET /css/fonts/font-awesome/font-awesome.min.css HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gnv4U1JxBn2u8slVlGyXjCivSrw%2FctqRin%2F4JPPfW3uJJm0P0vsPTk2hhKOcZE688ojO9V0kYiqvrEhnzNPlitR9pah5%2F6wFZr8%2FxdJ5zgHHVUTulzymGMNk4h2PBbcb00%2FTyWw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830299032962712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/images/tnm/202309/jk-640x300.jpg
188.114.97.1200 OK 74 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202309/jk-640x300.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x300, components 3\012- data
Hash 93e8642ce21f1a3b106dd3f807a6d155
d10cd62ae8d954ccc5bdcfb9d3683527c77c199d
6405f4f8d8da0291d04cd3d2d9f7350fc3624e684cfe9cc48b5c46a1a00e3480
GET /common/images/tnm/202309/jk-640x300.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 73494
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zivqg0m1FdGucqf%2FuY0Lj24r1wlcYhp0Bl%2BnvHY0i%2BUn0QaVU8TsQMRse6Bt6bswfvsKdOH0zC5U3XxR5I9fHz6pooGjgtySFPoOCLK9MEL9ZZssATQpuYwOgOIITd%2Bii3H6k64%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fed5c712e-OSL
alt-svc: h3=":443"; ma=86400
dwb.bo5w.com/stream/id?attachId=1253788&a.jpg
104.21.45.191200 OK 35 kB URL GET HTTP/2 dwb.bo5w.com/stream/id?attachId=1253788&a.jpg
IP 104.21.45.191:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectbo5w.com
FingerprintF5:82:2F:E0:4D:F9:9E:F0:86:2D:93:F0:06:D6:3C:02:18:A6:57:4F
ValiditySun, 22 Oct 2023 07:08:39 GMT - Sat, 20 Jan 2024 07:08:38 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x300, components 3\012- data
Hash da87a7e59c1a7bec0fd6acd7b64e2888
ede8f0d8b40d5e0d31da0fcd9119fcb6c1059cef
19a1899383ba917ed0e402316f22dd79d7ea967376f8393f44ef18c02f0a59a7
GET /stream/id?attachId=1253788&a.jpg HTTP/1.1
Host: dwb.bo5w.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 34725
content-disposition: filename=PROMO SPORTSBOOK new kecil.jpg
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BvovtgPNmQYrHxjyN%2BIddtf01krJxkcS4AYK5eEhZgBoBh2nDzD72qKpcuN7Vv1HmMCEQ6NteTqflTbfD1XvULhvRRY1Zzc1Jc47ETdF%2BrsdeyUgTuDZzvqNBwtBGHU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029910583256cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.tordewa388.com/stream/id?attachId=1404992
188.114.97.1200 OK 195 kB URL GET HTTP/3 www.tordewa388.com/stream/id?attachId=1404992
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x600, components 3\012- data
Size 195 kB (194902 bytes)
Hash 0e41e1728f236d70f9f6f08cd0e28368
9bf8ab8a9c391b50e4f19e85cce7a501678f5a0c
35949249e6e1740e8a5fcfe7fa5bf7d0f2e4e792c2ee67b80725c13d7ed6619b
GET /stream/id?attachId=1404992 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 194902
content-disposition: filename=t
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zlP64jgK7Oy%2FijObrCYEUx5CTjIBeoZH%2B2wchUzGJpBEG9xm0Fje%2F2ZWX3x9sRpZpD3k6ljFceFQuMRgFBMbWwG1Tw%2FYjMd%2FtlFiYJ4ns6BY5EDzKk0Pj4QYJMlz3ssDwNsgvNE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990fed64712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/images/tnm/202308/mg-1800x600.jpg
188.114.97.1200 OK 211 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202308/mg-1800x600.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x600, components 3\012- data
Size 211 kB (210718 bytes)
Hash 9bf6b1e33ba01ab0ac63a5a546d25232
14f9b1e836441796fbd7c5aaea21474ade84baf0
bbcdd8ac025b2d6eaced30551a26fa86e78e6c1ca59cdd9e51f7a02d94f9c11f
GET /common/images/tnm/202308/mg-1800x600.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 210718
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hgZP7UiNNQlU91NKJik4QRBHJja8Lkfd8NpyMHEqX1iZmXz2zsTbj3OquOXonGXrnGcqdiPg0%2FCQtZPy7AqPR5Nh8k9%2B%2BAf3UG1tsWCRA7hjek5VFFhlL%2B5keIlCY7QpObNXH8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fdd4d712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/imgs/pp/pp-title-no-1.png
188.114.97.1200 OK 70 kB URL GET HTTP/3 www.tordewa388.com/common/imgs/pp/pp-title-no-1.png
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type PNG image data, 300 x 326, 8-bit/color RGBA, non-interlaced\012- data
Hash d5dc7db2a9a592d375cebefc9c8ff72a
dc96a3b0cc3e7c18da2927cf7ede9ccad16f2117
5d773a863d8bf249bb2a8b6ed3fbc98bbfe5c847ab6af3507bf9eb6ad6829505
GET /common/imgs/pp/pp-title-no-1.png HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: image/png
content-length: 69875
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ngyJYrnOJq6JbRtOz4MizuUPpfDamRUY1I6GtODCJyTdDYOC%2B5GowX77u%2BOWjfSVLW8uyJgJaLeEjzTEy9Ydx4PBSRWd1dNEL6UqueliAj3ipgRwESV7%2BSqfszEmQVB69h2hrK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990eac50712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/stream/id?attachId=1404983
188.114.97.1200 OK 195 kB URL GET HTTP/3 www.tordewa388.com/stream/id?attachId=1404983
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x600, components 3\012- data
Size 195 kB (194902 bytes)
Hash 0e41e1728f236d70f9f6f08cd0e28368
9bf8ab8a9c391b50e4f19e85cce7a501678f5a0c
35949249e6e1740e8a5fcfe7fa5bf7d0f2e4e792c2ee67b80725c13d7ed6619b
GET /stream/id?attachId=1404983 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 194902
content-disposition: filename=y
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xUyW4G82QFzk8SPlChsyOpSurMZR%2FMdJeaeAZu5qe76LwjGzq%2BPVhjxa%2FJikr7afdRjAxFyNzeeFByJuldjitjLoVIu1md4HC5JxTjbHG5Aeg01YU4Zr0Gipyf1TH18p3wXo0UU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990fed60712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/images/tnm/202309/jk-1800x600.jpg
188.114.97.1200 OK 258 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202309/jk-1800x600.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x600, components 3\012- data
Size 258 kB (258356 bytes)
Hash 91fc43f0ff7fd419d7882bb7ce7fcdba
aeb88d1d91a0044ff9be85c50f30888ec0845770
792fdfde9853d68f332d41859387ec9a545d4d85b1e859b7400349f4475c460d
GET /common/images/tnm/202309/jk-1800x600.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 258356
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RkZnPmfR%2FgNf2uJD8Fnb2%2Fp12Mbp4ZSV0%2F83o0vLrt8bBCqKefvjupOIjx2zZOxqJAxFzSCFJH4Nz8VDVPVFs%2Bd4a1nCKwCiICOBAEmfYZfrsH2xJkHp8sTlmemhlQkb2D8hf%2Bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fdd55712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/images/tnm/202311/pm-02-1800x600.jpg
188.114.97.1200 OK 217 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202311/pm-02-1800x600.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x600, components 3\012- data
Size 217 kB (217195 bytes)
Hash be38230dbe8d28ebc2428d55c77fdf4d
ffc9197b8bbfb6605997398a1a767a1146a7d0b1
1f9fb0706bea9d928a471c9a7e6f12b4eb34b7252b24bce40ccc78c05bbb05ef
GET /common/images/tnm/202311/pm-02-1800x600.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 217195
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xiauZFdKawIVdGYJjKgtFyhQ9kv58bn2pvH7loDJe1hNm7DAKm5ii086hIR8WvFflVX85lbNo3QOk%2Fe%2Br875T9DHm3zEpfjHkw1kLVPjgiQBoQU%2FJb3uS6SzUTz0kbeHeJwdQJw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fcd36712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/images/tnm/202311/pm-03-1800x600.jpg
188.114.97.1200 OK 190 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202311/pm-03-1800x600.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x600, components 3\012- data
Size 190 kB (189846 bytes)
Hash f2caa8010c303e774f2776e119282988
618d36f0d12c62bce4f3d7e17f95e52f8127ce11
80591ca49e08593670b89c9861dfd2dd14c0c7895f1c4a41316b0697f876e33b
GET /common/images/tnm/202311/pm-03-1800x600.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: image/jpeg
content-length: 189846
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K5uY0THYw86OsP4R9Z44vutUMOZ0mrnkzcAEvazWl65vME7XWkdRp1%2BmgL3Tp35Ixs82e3HWUiOlrlZWL50%2BIHnxRouCq%2F8hXEYf%2Bz4ESt7jTMSpI11nl7NilDXYta4P8Eptmvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fbd1e712e-OSL
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/common/images/tnm/202308/mg-640x300.jpg
188.114.97.1200 OK 57 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202308/mg-640x300.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x300, components 3\012- data
Hash 72291c28df22c0b4dd1c4a7292297879
06243bbe222e34fb1eccafc1b195e4f0aa678469
d14a47578f6b1f9495f8c5da970f16d8102140da75d7dd73c77c7721ab103b64
GET /common/images/tnm/202308/mg-640x300.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: image/jpeg
content-length: 57239
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jGFilOsMYtFcbxM3ZWMCmV1X4juiuefJr%2BLXXpsAk1Md4wiEMnou5BrVONOqiHBta7ZCMZHmIrzjvgusWDlqIQ8rttN3UT1WXTx45qnKoYarcwfZNbtoNYbsxabXj9znNbx44AA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fdd4f712e-OSL
alt-svc: h3=":443"; ma=86400
i.ibb.co/SB6mVq8/dewaaaaa.png
162.19.58.158200 OK 78 kB URL GET HTTP/2 i.ibb.co/SB6mVq8/dewaaaaa.png
IP 162.19.58.158:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 52582bc4cd709e98959f6fd1b744488f
3f5b1dd68c8c6c29b2c30173d7fac7bb2940d815
0d1ace17da3ae5ab7b60726cde780995e5b59eb76ad9d67c4090626a5b9bd03e
GET /SB6mVq8/dewaaaaa.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: image/png
content-length: 78275
last-modified: Sun, 14 Jun 2020 05:53:04 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
dwb.bo5w.com/stream/id?attachId=1253786&a.jpg
104.21.45.191200 OK 144 kB URL GET HTTP/2 dwb.bo5w.com/stream/id?attachId=1253786&a.jpg
IP 104.21.45.191:443
Requested by https://www.tordewa388.com/
Certificate IssuerLet's Encrypt
Subjectbo5w.com
FingerprintF5:82:2F:E0:4D:F9:9E:F0:86:2D:93:F0:06:D6:3C:02:18:A6:57:4F
ValiditySun, 22 Oct 2023 07:08:39 GMT - Sat, 20 Jan 2024 07:08:38 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x600, components 3\012- data
Size 144 kB (144122 bytes)
Hash e0cdc5c143d8434403cf9c231acc9b4f
4299e3313a51d91e8559320ad53f19cdf0de1d23
e6088e0ed330fb68ed881f7c71f353dc1be80d059707b8626d56e5d5e1420bca
GET /stream/id?attachId=1253786&a.jpg HTTP/1.1
Host: dwb.bo5w.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 144122
content-disposition: filename=PROMO SPORTSBOOK new big.jpg
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OLKcAXHGE96wySd2QcomiUKQNmQx9hpFXfcShsyWXFNSMoo79szfJmFbfLCniweEACO00SeLabPjUTa3ZMgfMHIKKAMJVvy%2Bd5bDHDefupdWKfgsTpal7Tz8jmlwcsw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029910482a56cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
151.101.129.229200 OK 41 kB URL GET HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP 151.101.129.229:443
Requested by https://www.tordewa388.com/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (32014)
Hash 7bb7aac0cac89a90304af1c72eb4f50d
729f6f8ca5787d89743b0ed7eb27fd76406bf985
f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 08:14:53 GMT
age: 21100585
x-served-by: cache-fra-eddf8230136-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 41275
X-Firefox-Spdy: h2
cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
151.101.129.229200 OK 41 kB URL GET HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP 151.101.129.229:443
Requested by https://www.tordewa388.com/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (32014)
Hash 7bb7aac0cac89a90304af1c72eb4f50d
729f6f8ca5787d89743b0ed7eb27fd76406bf985
f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: br
accept-ranges: bytes
date: Mon, 04 Dec 2023 08:14:53 GMT
age: 21100585
x-served-by: cache-fra-eddf8230136-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 41275
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-2.woff2?55755728=
104.22.24.131200 OK 10 kB URL GET HTTP/3 embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-2.woff2?55755728=
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 10520, version 1.0\012- data
Hash 054b3b66812d0a4b87ffc6776f0a42f1
683eb11f2439b9edc3290899fb47806166b5182e
f4d4fcb3cdd9f021bca50bedb83de05b77fd23b3c98ad36b103fea8c0744ea71
GET /_s/v4/assets/fonts/tawk-font-icon-2.woff2?55755728= HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://embed.tawk.to/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: font/woff2
content-length: 10520
last-modified: Sat, 22 May 2021 07:25:13 GMT
etag: "054b3b66812d0a4b87ffc6776f0a42f1"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992f3eb9b511-OSL
alt-svc: h3=":443"; ma=86400
vsa58.tawk.to/s/?k=656d8a7cee771623a2cb1ca8&cver=0&pop=false&asver=1232&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYiLCJ2aWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYtSXJOQWt2MmdKeWV5Uk11R3gwd2RYIiwic2lkIjoiNjU2ZDhhN2NlZTc3MTYyM2EyY2IxY2E4IiwiaWF0IjoxNzAxNjc3NjkyLCJleHAiOjE3MDE2Nzk0OTIsImp0aSI6IlpXd3NON21xVzFWdGJjd2ZjZWdhQSJ9.jD7Uzvy0g0vVP3mskHaY0JFFuX1mTtK0CzKgOEgvl-Vm011EWWJNl4tU5NcjEMf89np2uJUOySpRypn3EjMuwg&EIO=3&transport=websocket&__t=OmpvGtV
104.22.25.131 0 B URL vsa58.tawk.to/s/?k=656d8a7cee771623a2cb1ca8&cver=0&pop=false&asver=1232&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYiLCJ2aWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYtSXJOQWt2MmdKeWV5Uk11R3gwd2RYIiwic2lkIjoiNjU2ZDhhN2NlZTc3MTYyM2EyY2IxY2E4IiwiaWF0IjoxNzAxNjc3NjkyLCJleHAiOjE3MDE2Nzk0OTIsImp0aSI6IlpXd3NON21xVzFWdGJjd2ZjZWdhQSJ9.jD7Uzvy0g0vVP3mskHaY0JFFuX1mTtK0CzKgOEgvl-Vm011EWWJNl4tU5NcjEMf89np2uJUOySpRypn3EjMuwg&EIO=3&transport=websocket&__t=OmpvGtV
IP 104.22.25.131:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=656d8a7cee771623a2cb1ca8&cver=0&pop=false&asver=1232&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYiLCJ2aWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYtSXJOQWt2MmdKeWV5Uk11R3gwd2RYIiwic2lkIjoiNjU2ZDhhN2NlZTc3MTYyM2EyY2IxY2E4IiwiaWF0IjoxNzAxNjc3NjkyLCJleHAiOjE3MDE2Nzk0OTIsImp0aSI6IlpXd3NON21xVzFWdGJjd2ZjZWdhQSJ9.jD7Uzvy0g0vVP3mskHaY0JFFuX1mTtK0CzKgOEgvl-Vm011EWWJNl4tU5NcjEMf89np2uJUOySpRypn3EjMuwg&EIO=3&transport=websocket&__t=OmpvGtV HTTP/1.1
Host: vsa58.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.tordewa388.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4D7WfgnvMDZgdbZhHJ8FAg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 04 Dec 2023 08:14:53 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: WRHs5/lLWU73NbFTHOo97ihjkTo=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8302992dea495697-OSL
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-48f3b594.js
104.22.24.131200 OK 24 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-48f3b594.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (18972), with no line terminators
Hash 4061c95c48ec3ed959c7680780bd67ef
608454b43a764a08b9b5278735a80dad00618d56
0eebd026a95918965aceab6c60edec5ffcca83206495c0d0ef4d7f5178ae0d24
GET /_s/v4/app/6567e780829/js/twk-chunk-48f3b594.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"4061c95c48ec3ed959c7680780bd67ef"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274539
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d4c6656bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.getbutton.io/widget-send-button/js/init.js
104.26.14.221302 Found 111 kB URL GET HTTP/2 static.getbutton.io/widget-send-button/js/init.js
IP 104.26.14.221:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjectgetbutton.io
Fingerprint33:01:8C:4F:31:EF:74:D6:93:89:8F:EF:73:59:C5:D1:E6:2D:7C:D5
ValidityWed, 15 Nov 2023 03:46:05 GMT - Tue, 13 Feb 2024 03:46:04 GMT
Size 111 kB (111017 bytes)
Hash 5cdb1e93bd31a6a436a337b2d005ee21
1f7918f89868c4d3cc03ad3956d8c6ad8a1631cf
affceb7034c3f88876001baf52f09adc1a030cf427276d002a6f86ca09c89594
GET /widget-send-button/js/init.js HTTP/1.1
Host: static.getbutton.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: text/html
location: https://static.getbutton.io/widget/bundle.js
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uq19Gl4q9r%2FIUwX2gMpkyFVG6acGeDhoO9%2FbEZxBGeiyWlKjp0ftQMNAbSbaeiCxgcJDRstHuY9k0%2B57CYp9koVKoky48N08OwTv2qHLAXjqrJF6ztfcXZqU5fLGj0guQKcdzaE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990e6952712b-OSL
X-Firefox-Spdy: h2
www.tordewa388.com/func/jsx/cms.js?0.18179587056522617
188.114.97.1200 OK 5.8 kB URL GET HTTP/3 www.tordewa388.com/func/jsx/cms.js?0.18179587056522617
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type HTML document, ASCII text
Hash e91a0010b10e45e7ae7e0ef4b82f6496
cc9b833d4b287a91e0806192c09c43ec59715b33
6d9e44b805a144baea722bfe41341d46927ead16495dff164ab80bbfc6d08639
GET /func/jsx/cms.js?0.18179587056522617 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
pragma: No-cache
cache-control: no-cache,no-store,max-age=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lBUDDkKfKeLxNyhzT87FEjoQfvtzcIAac9v2OwjR1Dxh1hVs7azFrfVu2Wh1nbh5FWjsEeQNkledazag45x86OW%2FXeUUL0G%2F%2BG9GBCt%2FiXIw2EIdHs1X8lYCGAMB3RN4sDQVH1U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990b4918712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-common.js
104.22.24.131200 OK 45 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-common.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (557), with no line terminators, Unicode text, UTF-8 text, with very long lines (65458)
Hash 3796067c0421b3650647c50a5c453ffa
7f2a3c0cbb919102b83f058a7f8fe5a420180193
b9768209b9b5e74beb119795bde89bb5fbe5e2286f70ad4f311e8b2b051d1b40
GET /_s/v4/app/6567e780829/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:50 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"3796067c0421b3650647c50a5c453ffa"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830299181f7956b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
2.18.121.73 512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP 2.18.121.73:0
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Thu, 16 Nov 2023 07:38:15 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1700120294.87662
Content-Type: application/zip
X-Trans-Id: tx8c0ef9e37b1a4ab29193d-0065580fd1dfw1
Cache-Control: public, max-age=225920
Expires: Wed, 06 Dec 2023 23:00:24 GMT
Date: Mon, 04 Dec 2023 08:15:04 GMT
Connection: keep-alive
va.tawk.to/v1/session/start
104.22.24.131200 OK 192 kB URL POST HTTP/3 va.tawk.to/v1/session/start
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1024), with no line terminators
Size 192 kB (191622 bytes)
Hash 2fd4cf2a706568121cf73d067d930888
7315965cfba98174858622ff16e9815318321fc2
1521507c03245f5147ad0ca26050667b515da268a8f131e84737b94c4fa7dde6
POST /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.tordewa388.com/
Content-Type: application/json; charset=utf-8
Content-Length: 180
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:52 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-l88m
access-control-allow-origin: https://www.tordewa388.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302991d6def56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1200 OK 23 kB URL User Request GET HTTP/2 IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1928), with CRLF, LF line terminators
Hash 22bdab9fe1d9c608de37ceb8da88fc88
68334bd6aa3b72e22615436696b3d5193fdcd5ea
b7958f954affe4c912550c83b29e5f362b7174216b89127f5c4317aa6b50f3a7
GET / HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ndCcyVvncXiBC5LjaQmugi1z7ha1PW45Ff02Uskv06Fr1AP6ciPZe%2B4sgA8KISLEBO0ukiAaYCv%2Be%2BPRts2%2FOMaxXf6oa0ilTMtXwBKYcPbc9OvjVOCbDSb5Nin6V%2BK8eRR1hE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029909df93712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1200 OK 22 kB URL User Request GET HTTP/2 IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1928), with CRLF, LF line terminators
Hash 22bdab9fe1d9c608de37ceb8da88fc88
68334bd6aa3b72e22615436696b3d5193fdcd5ea
b7958f954affe4c912550c83b29e5f362b7174216b89127f5c4317aa6b50f3a7
GET / HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CiRK29QBFz1zXK7z4B2OYH4IOxgnYcmz4gZuDyfQIsfRfeP4eA%2FKzTSXxW%2BuncOmDpSWmXsZ%2F7b6VNqX3HvMHhupN33Dm94Is5%2BAgM4L7aF7KIbXy2kX4Hp8hHBhkepfty4YtUQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830299032967712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/plugins/alerts/jquery.alerts.js
188.114.97.1200 OK 7.7 kB URL GET HTTP/3 www.tordewa388.com/plugins/alerts/jquery.alerts.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (9075), with no line terminators
Hash c14fb1eca4db53dceac16a17c0721a03
bc28017edeb99084c54422293f35d2f9f8ddea48
7887106bb5e5367c6a231067ded1d34f580728589c87c909b326f3786a747d97
GET /plugins/alerts/jquery.alerts.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K38AKhQoKXccDwD%2BrGU2qYkbmsJ8gQMnZeDLeBa8Ff1B1r%2BIE1J4r2WgPw7h%2BXBSrRTfcJ3p79eheVpFmkdJ2%2BTQylQsuT%2BtWaiyi8n3FsnkZ7pjaIxhwTiR7ZDYOJNRQQNgeIU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903da12712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/css/all.min.css
188.114.97.1200 OK 57 kB URL GET HTTP/3 www.tordewa388.com/css/all.min.css
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (57111)
Hash f5e52a217c8af090db55bc38b2986cb9
b7415ce92a9ed6ddacd48c5be302922cdacbb3a0
e8c693fc8b891b84746ae694e75ad7f6550ff4d23b39a7719757e38c83c9d01f
GET /css/all.min.css HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=74h%2FtEUhmpab%2F2Kwr5XdfUfhOYWUQLtaIo5sVBt%2F00t3kcgJE4XYHg40nPzdQVN0Mynf%2FeA1T%2FKpyZaFXzNKxViYjYa5xjLtPokVqq7ajjWBI4B6WIbleYoifSGZ08RW%2BOI7xf0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029909cf83712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=PT+Sans
172.217.21.170200 OK 1.3 kB URL GET HTTP/3 fonts.googleapis.com/css?family=PT+Sans
IP 172.217.21.170:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1327), with no line terminators
Hash 1305e821874491f0696032c8ce328a9d
b35dec57cc06a05668ca215dd3d2df26567d0c61
7952a3cece1d18cd28e4ee1bd80278db19a1d4e24df031bd30230128b9155b9e
GET /css?family=PT+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 08:14:47 GMT
date: Mon, 04 Dec 2023 08:14:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.tordewa388.com/js/common.js
188.114.97.1200 OK 2.2 kB URL GET HTTP/3 www.tordewa388.com/js/common.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (2371), with no line terminators
Hash 70a56e8acbe486f71118079d65932cf8
03a3bc3c959a737ad6641855c8fa69f731b7cc17
8d0896e75bc3f275da55f7c2701922ce4955b75d2be5aae7439fcf4a15a26323
GET /js/common.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zm9L2QwPLVhtsanuRDaKeu6jCikZQUuCL0bNWN5KeWDlP6MtjXL6ApNfqcBicVpBjgf5nvUCEIyfcvGvYI6NYvgc92%2Fp1l5R817nQLd1zzdkizLDfqhDdVgoBI0nWN%2FJdV4E2X8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903ea1b712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/func/jsx/global.js?0.5408686367417972
188.114.97.1200 OK 229 B URL GET HTTP/3 www.tordewa388.com/func/jsx/global.js?0.5408686367417972
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with no line terminators
Hash 1e389be8d3b597d2d66b121fba9f1751
1edf4c6693e548df28d50a0cc7d15819216826ee
a30d5fed450863a3eda783999d14a4e335b930e561e178eb38af0e4fa3c1f2be
GET /func/jsx/global.js?0.5408686367417972 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/javascript
pragma: No-cache
cache-control: no-cache,no-store,max-age=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G9VE7f1h7qX14v0meM586o5YlcL5JtD18pfNJiZcjWchyBssnPRnyUDYGFwDNvhSjYZDHs68T0H32TQvwrccYTlyZoiCzZPmTdRS00YmkqH%2FL9Eju7YjO77Q8CeXFJIsapPUoDw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990b4916712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-2c776523.js
104.22.24.131200 OK 7.9 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-2c776523.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (8581), with no line terminators
Hash 66deb9d660a0528e2b3909ad3d97a340
fb03d0b3b97a251e4a6812b15c4f1876319e8692
97c305538967ed36cf2a69655a89781ff79cf1200dece2b19b4ad400c242f0c4
GET /_s/v4/app/6567e780829/js/twk-chunk-2c776523.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:52 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"589bcaf3fa2f5394494ee99582c6bee6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274538
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d2c4456bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/css/bubble-widget.css
104.22.24.131200 OK 14 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/css/bubble-widget.css
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (13521), with no line terminators
Hash 950518e32fd92957181f766f08d3cf98
9fe20c86b818d3576e9d70e6ed091964cb8b7427
2f56f47d64037d5aa3a96b50c840580e5549fee6f9fafff8af3d1821d189fa5c
GET /_s/v4/app/6567e780829/css/bubble-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=13594
access-control-allow-origin: *
etag: W/"ce7913b80c763449b3895d46419f7a6b"
last-modified: Thu, 30 Nov 2023 01:39:50 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: MISS
cf-cache-status: HIT
age: 274538
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992ebd9556bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-24d8db78.js
104.22.24.131200 OK 112 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-24d8db78.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65464)
Size 112 kB (112163 bytes)
Hash b3d0f3cafb54a62e76dd04f5ad2f4580
6f6435a77e95ecbdb7c662cf671559511c77f1ec
7ff16293d92ffde99276f0512644545e1ceebd483efee80c6489345ba022fe3b
GET /_s/v4/app/6567e780829/js/twk-chunk-24d8db78.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"b3d0f3cafb54a62e76dd04f5ad2f4580"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274539
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d6c7c56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/js/jquery-1.11.3.min.js
188.114.97.1200 OK 96 kB URL GET HTTP/3 www.tordewa388.com/js/jquery-1.11.3.min.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (32038), with CRLF line terminators
Hash 13c0a5055cca7b2463b2f73701960b9e
e6082a7b52db82604ac446d2e6a32cb5af263781
20e11ce61890c08c0529911822233c9023ebc367df6c1050dec105e2b9628104
GET /js/jquery-1.11.3.min.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lf95FK9HxL1BS6lSqpJMUPnjwQUzxitvwwOFDlCekEHNqwHS3%2BAY1sCnsVuuU9Y1p3CfEr8%2BlBDJPVmFBohPka0%2F%2BTbVTnom83dhumqKLUGRvWaXhcIbVmB3RAczkecdHGjsfwo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903da0b712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg
104.22.24.131200 OK 22 kB URL GET HTTP/3 embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (22356), with no line terminators
Hash f66e029841759471d2ec78b86760dca7
d9db67738984efee3dd63cb144759ac0521c7dda
5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526
GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: image/svg+xml
last-modified: Sat, 22 May 2021 07:25:19 GMT
etag: W/"f66e029841759471d2ec78b86760dca7"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 604704
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992efdc256bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/css/min-widget.css
104.22.24.131200 OK 25 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/css/min-widget.css
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (24751), with no line terminators
Hash d4f9ad34fae3ba64cbc48057dc47e968
f8d0d55dc6e9b5d53f74b0b8bfc5e2edbdb0618d
2b5b9f68ace12b789b1371204754547021dcbf3e9df630e7e22b49ee56e05b8c
GET /_s/v4/app/6567e780829/css/min-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=24831
access-control-allow-origin: *
etag: W/"5742a34aaab2a5983c7c11cdeef1c0ee"
last-modified: Thu, 30 Nov 2023 01:39:50 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 274538
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992e4d3e56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.getbutton.io/widget/bundle.js
104.26.14.221200 OK 382 kB URL GET HTTP/2 static.getbutton.io/widget/bundle.js
IP 104.26.14.221:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjectgetbutton.io
Fingerprint33:01:8C:4F:31:EF:74:D6:93:89:8F:EF:73:59:C5:D1:E6:2D:7C:D5
ValidityWed, 15 Nov 2023 03:46:05 GMT - Tue, 13 Feb 2024 03:46:04 GMT
Size 382 kB (382296 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widget/bundle.js HTTP/1.1
Host: static.getbutton.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.tordewa388.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 10:28:36 GMT
etag: W/"65671254-5d558"
expires: Mon, 04 Dec 2023 11:11:06 GMT
cache-control: max-age=14400
access-control-allow-origin: *
cf-cache-status: HIT
age: 222
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kF9K53RMugvp0YTP%2FgWz9Wa2QqudUza2S2lekS7sYNDC1YqDzd6lUG4WCLy4ePykAB0%2BwuaTCavveRQygc1PZxmgjtRl2XDVtdxO3dXYY99lapp1Kp8lLsZ2JPqwoAfzxBYL8xE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990eb98b712b-OSL
content-encoding: br
X-Firefox-Spdy: h2
embed.tawk.to/64baa2b5cc26a871b029ebe6/1h5sgn5f2
104.22.24.131200 OK 2.1 kB URL GET HTTP/2 embed.tawk.to/64baa2b5cc26a871b029ebe6/1h5sgn5f2
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2310), with no line terminators
Hash f4509b0d3099e4626b8cc4e71721c08e
c0d8b8434ca54a1df95f1b1c9e7f4f7bdbf64359
df8215a957d5f5bd766435c2a7f6cb581ebc5b47c5efc6c2daf6b5b7404e9b55
GET /64baa2b5cc26a871b029ebe6/1h5sgn5f2 HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-6567e780829"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302990e6eb256b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.tordewa388.com/func/cms/getBannerList?0.806309939299286
188.114.97.1200 OK 271 B URL GET HTTP/3 www.tordewa388.com/func/cms/getBannerList?0.806309939299286
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 994965c98a3abdef49e751bebaebfb15
7bc1ea854cf6a74599ea455bb6f3d67eb5921282
bc4456751ad7756129701da77556f8ee97261845d4cb662bf12324f611f1b205
GET /func/cms/getBannerList?0.806309939299286 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jd0Tbz36%2B66%2FcXfN7Zr0cnNwTYZraUGo25CAkbsOKHbQ9l2UkN2CM8XmIMjm0uCo1YWmRDFossKCmHOHPxrNMFm6R9DD8e6FTDMONKHSWnCRGWRMNXUHGG7JLNd8ozpvliJGIGY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990e5c04712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-2d0b383d.js
104.22.24.131200 OK 699 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-2d0b383d.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (725), with no line terminators
Hash 7c2c957f3cf80dadfd0cbb7c677a0869
30e8962bf64cc7349c9e61b40b8bab5aa598c63c
606127d882e34faee4895ad2cbf8a94d805fac37792c2cc2b9bc05ca3de743b1
GET /_s/v4/app/6567e780829/js/twk-chunk-2d0b383d.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"838903127a65ec440893b4945c40ca4a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274539
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d4c6356bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
va.tawk.to/log-performance/v3
104.22.24.131200 OK 0 B URL OPTIONS HTTP/3 va.tawk.to/log-performance/v3
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.tordewa388.com/
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:54 GMT
x-served-by: visitor-application-preemptive-q457
access-control-allow-origin: https://www.tordewa388.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 83029931d89656bd-OSL
alt-svc: h3=":443"; ma=86400
tawk.link/64baa2b5cc26a871b029ebe6/var/trigger-images/6a8ac2c6321d8ef15bf8baa6148949211a97368e.jpg
0.0.0.0 0 B URL GET tawk.link/64baa2b5cc26a871b029ebe6/var/trigger-images/6a8ac2c6321d8ef15bf8baa6148949211a97368e.jpg
IP 0.0.0.0:0
Requested by https://www.tordewa388.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /64baa2b5cc26a871b029ebe6/var/trigger-images/6a8ac2c6321d8ef15bf8baa6148949211a97368e.jpg HTTP/1.1
Host: tawk.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
www.tordewa388.com/plugins/validate/jquery.validate-min.js
188.114.97.1200 OK 22 kB URL GET HTTP/3 www.tordewa388.com/plugins/validate/jquery.validate-min.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/validate/jquery.validate-min.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NfVhs2QOTT4xjXzGuspbLpM236Q8og2tdpbosBrMKpBWCt%2Bj63Kf1vs9HVlScchIolhxT%2BRv4ozwF3mrURD2JQ5cgr1k9xMWzNPb6xczWrAV1z%2BdorY9cohkODECEnFOcgN5xG8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903da14712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/js/g8-sggl.js?0.4972213015732979
188.114.97.1200 OK 35 kB URL GET HTTP/3 www.tordewa388.com/js/g8-sggl.js?0.4972213015732979
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (6597), with CRLF line terminators
Hash 451a3f95a36df5a7b37a55a3fd4b5f02
af092b448d92a587958e3f7a8decf1f38a404b86
07d4c68d1a7f5b819a3edcbe62415caa6bd9983a2e62a05bbaeee7371d1e8c74
GET /js/g8-sggl.js?0.4972213015732979 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BeM6VPEbkzpFQ8%2BTZt0AE9lDoCfz4cgucvSPX2Y%2BR5BzCckbTLRXj2Y1HpVAkhfVC%2BvF9VGa909oHTC0UU3SXTwoI4HKAf0V9gN%2F0OYxupxsgQN9uy5Yceh%2F7dLvg48fKXdPQxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990b5933712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
va.tawk.to/v1/widget-settings?propertyId=64baa2b5cc26a871b029ebe6&widgetId=1h5sgn5f2
104.22.24.131200 OK 2.8 kB URL GET HTTP/3 va.tawk.to/v1/widget-settings?propertyId=64baa2b5cc26a871b029ebe6&widgetId=1h5sgn5f2
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (3257), with no line terminators
Hash 35deae464bd4b5618ebf8348075b66d8
e4f915c6bf0a5cd37e4bb9ce980f8ba219c83de2
c16cd072865c7230911f6a13d745b2a6c95c0474007b3397391472ccdfe8eb8b
GET /v1/widget-settings?propertyId=64baa2b5cc26a871b029ebe6&widgetId=1h5sgn5f2 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.tordewa388.com/
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:50 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-gcmc
access-control-allow-origin: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, max-age=7200, s-maxage=1800
etag: W/"2-5-0"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302991c2cd1b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-vendors.js
104.22.24.131200 OK 217 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-vendors.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size 217 kB (217124 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6567e780829/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:50 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"86b32a04921a039ace69980bacd1b639"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830299180f6f56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/6567e780829/js/twk-vendor.js
104.22.24.131200 OK 83 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6567e780829/js/twk-vendor.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6567e780829/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"ce3014b09c6dfbd6f92bc585fd840580"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830299180f6e56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.tordewa388.com/css/bootstrap.min.css
188.114.97.1200 OK 106 kB URL GET HTTP/3 www.tordewa388.com/css/bootstrap.min.css
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type assembler source, ASCII text, with very long lines (557)
Size 106 kB (106173 bytes)
Hash ba5bbe80ffee1ebbe2c7c17a98842a0a
7733956ebe56cf11bfe8358d541c7092fbc3c086
47e5eeb0373a7145bed10180eed4791bb660d79144982c45af011493dcad4791
GET /css/bootstrap.min.css HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q9ddiqg3y24nXcNEcf4nnc3ZxYIb9blCGuuxFKY2JJ0BRkbCAJp73MP7jKW%2FkFnpDcZlSaIQ9XULx2qWn7Vf%2FhGgJbak36CJmaTH64VDGP3lj1qMnqEnGyaiT1PaSPeMa5i21vw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830299031946712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/css/style.css
188.114.97.1200 OK 19 kB URL GET HTTP/3 www.tordewa388.com/dwb/css/style.css
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash b2d4e1635f7d91cc0ea4eb1922bcdc91
04f18aca2be4554e55661814a6cac99eacb51cb7
d220540547bbb82a41063e0c6c8c88a75d3b7a2678d1c2be4ab1517c1192ae05
GET /dwb/css/style.css HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aBcDM9Q5a8zHCWy7gO9cv4APIBP3uWsOcV9ynkKOwXn435LMpmeodnmuLX8tUMQ2dYYm7Z3XJ2GE4y3j%2BY1lZqqbkTsxB58nPGxWkIDWWViv%2BmuIFC52Inl54hB8hjoufTQjB2U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830299032963712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/js/core.js
188.114.97.1200 OK 55 kB URL GET HTTP/3 www.tordewa388.com/js/core.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type HTML document, ASCII text, with very long lines (19591)
Hash 8181d498c978a5256a50a8a96f7ecc76
295e5e1a8c96c5cfdef67284e83d71ab4dd4969f
65128dcfd4e5445863e410f355b81d9e17389936bca571a435d13ed47111461c
GET /js/core.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IIhwQlq2Md%2Fzhk%2Fm4EBQVbYevQXAnrMR06cy%2F3BRfRgNwyS%2BQ9aEvUgl9vEWLQwFwJp%2FnUgvqKy9uvPlfQ06JQ6JmUBvFn23CXQdjKr%2Fq8ZLS9iGaQcUqrYzFwk6d%2BmoaPBCgAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903ea19712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-9294da6c.js
104.22.24.131200 OK 18 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-9294da6c.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (18247), with no line terminators
Hash 4a934f60b0e4b198ececed0774a0158c
c041565694f3fb88115879a75dea89537218d9f7
9cd57a7b58359723533f77a410763b4325c4551cd829abaa707905386d2b0d94
GET /_s/v4/app/6567e780829/js/twk-chunk-9294da6c.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:52 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"4a934f60b0e4b198ececed0774a0158c"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274538
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d2c4756bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/func/common/getBank?0.30738521541220964
188.114.97.1200 OK 189 B URL GET HTTP/3 www.tordewa388.com/func/common/getBank?0.30738521541220964
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash f4a04c93276840bd25a065a328fad4e7
0005ffb5bce2c075d0d66e780f864335613bb3df
48fa82d07b36deafc12a05a76da13e5bf0253a53711fcd1202bdd45f8f684ea8
GET /func/common/getBank?0.30738521541220964 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: application/json;charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bNv2qbidXF6m1qQuP0dzmpB3l8EaNOunNMSDv%2BdMBnJawePlpCe4UNkiS564jvWkfpsBkosjZwQQH0ljAMbg3PixhnKZ5dwWk7W%2FGNmBwGYpdnvG39xoqIagh34I1MJReIM%2Frm0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990e7c1c712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-runtime.js
104.22.24.131200 OK 2.3 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6567e780829/js/twk-runtime.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2349), with no line terminators
Hash ffa9c4fa753ce4558b55880d7ab43af0
f50299c59611f6c3fcf87cbddff5e9e159e4e485
b8503dd2873e77dfa277741291889745e9725a5f440babf8ca3f0835a0dc03da
GET /_s/v4/app/6567e780829/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"336ff193946716a07a2c5d0a4665c9ed"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830299181f7c56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.tordewa388.com/dwb/js/template.js?0.16864446635217856
188.114.97.1200 OK 15 kB URL GET HTTP/3 www.tordewa388.com/dwb/js/template.js?0.16864446635217856
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type exported SGML document, ASCII text, with CRLF line terminators
Hash d4f23dd54f9e93164e5294734ac705f7
f268e40ea1872227e923ee46dfd1a783b5f5b141
a93e1260e3a61e777b0e03dc1331b6f2206af53f200bcc5140f20631350bd39e
GET /dwb/js/template.js?0.16864446635217856 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B8yh479IrLg15kz%2FiCK2zBE8FYMzuqZv5VBZ0nLf8gdoyrpLkUzvR7KHAz21UJl1PsCrKCtU4O7Pb0Gcy1xPfbHVqKCJ%2FFHAa0%2BiEvit2dFJdLUyhG0DMqspMOo4HXZcGw%2BoMQM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990b5932712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/js/settings.js
188.114.97.1200 OK 11 kB URL GET HTTP/3 www.tordewa388.com/js/settings.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/settings.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kkdlPuurdibEWyManhVTb9k0%2FhLakPYM6X46PRCJwmGb12WpQHMSib%2B5drTULqLJMtHPZT6KZm8VWpv63Rp4IPqdMab%2B2Ss%2B0iVK9C9eJSoEERXbeJA2AXdlooAYIVGtMdnVnNM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903ea16712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/js/bootstrap.min.js
188.114.97.1200 OK 37 kB URL GET HTTP/3 www.tordewa388.com/js/bootstrap.min.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (32003)
Hash c5b5b2fa19bd66ff23211d9f844e0131
791aa054a026bddc0de92bad6cf7a1c6e73713d5
2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a
GET /js/bootstrap.min.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9iohPZvwOYgJgg49ZSxit6wuVfnNnnp6NAZO5tHVCsvyX5g8Kx1v5tPSHPv2IEyRizA6Rn5gOJvw%2BoITD29Bi7NoiFQJmEcxD1qltU4LZc5gpgWNaflMpFgkFvnbIvbRkypM9V4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903da0e712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-main.js
104.22.24.131200 OK 121 B URL GET HTTP/2 embed.tawk.to/_s/v4/app/6567e780829/js/twk-main.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3b41342f7e3be590563e8e3b5ff770c7
c9ca54d23ea78b320f080b76e22bb6b4e704d55f
ef04d89daeed55613a63a4af62c147ce86e4a7f22c8ce700dd6bdb11ab187e43
GET /_s/v4/app/6567e780829/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830299180f6d56b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.tordewa388.com/common/images/tnm/202311/pm-03-640x300.jpg
188.114.97.1200 OK 54 kB URL GET HTTP/3 www.tordewa388.com/common/images/tnm/202311/pm-03-640x300.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x300, components 3\012- data
Hash 241d58cf2b54bd9e5ac0a5ec8642c63a
c3c3bcc738368685848dfc6d2d0aee7817a00497
67326b002faba917bb8efcb556b29de2b69fc80ff1dd5cf787c19df2ab0d52b0
GET /common/images/tnm/202311/pm-03-640x300.jpg HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: image/jpeg
content-length: 54104
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LO29Tx%2BKBI6dgahW2fGuxKTU2THhM7tm8EV7c33N9sYUDfq0%2FRonGJlgIkihMqUrafApedqkpaBA0Q%2F4pHH7xi%2BSxa%2BORv4mPS8%2F3aqV863wHo89OAwL7%2FIkGBlYYn9npZ90YhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8302990fbd2b712e-OSL
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/css/message-preview.css
104.22.24.131200 OK 41 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/css/message-preview.css
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (40699), with no line terminators
Hash c7393b57847a249cf71e453cff9c5693
2b151e46ff61023cac973343c951b4210cd4d374
7bd9666b0959d868276da481746b74e6a76fbc19f7957e528b8fb022367980bc
GET /_s/v4/app/6567e780829/css/message-preview.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=40832
access-control-allow-origin: *
etag: W/"cf4a08d496f49489af30571e3cbb48f3"
last-modified: Thu, 30 Nov 2023 01:39:50 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 274538
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992ebd9656bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tawk.link/64baa2b5cc26a871b029ebe6/var/trigger-images/6a8ac2c6321d8ef15bf8baa6148949211a97368e.jpg
188.114.97.1200 OK 30 kB URL GET HTTP/2 tawk.link/64baa2b5cc26a871b029ebe6/var/trigger-images/6a8ac2c6321d8ef15bf8baa6148949211a97368e.jpg
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttawk.link
Fingerprint07:2E:15:B8:C1:73:2A:B3:90:2C:C3:BA:32:0D:39:9C:F8:D1:E1:89
ValidityThu, 16 Nov 2023 12:44:32 GMT - Wed, 14 Feb 2024 12:44:31 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash 033441734d528687cffb006cc8ac3392
257bd088aed4a050f1210a74c3affe347b272d38
dfb86eb896a9c6c7c1f955fe7635bc6be8efe78336b93019a3c40afa407c6920
GET /64baa2b5cc26a871b029ebe6/var/trigger-images/6a8ac2c6321d8ef15bf8baa6148949211a97368e.jpg HTTP/1.1
Host: tawk.link
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 08:14:55 GMT
content-type: image/jpeg
x-powered-by: Express
strict-transport-security: max-age=600
cache-control: max-age=86400
cf-cache-status: MISS
last-modified: Mon, 04 Dec 2023 08:14:55 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kDsuTp9MzCx3y50zE%2FxpKSF5EMH7dybFzfYbPL5Jy69S307O4Zp%2FqOHFopnE7xQS%2BQ2a0QM0Vs3pnJp%2FxLSWJoUl%2FwKvc%2F6cv6vudkRTy6nAjtEAIxfaC08xMOE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83029936aed5b518-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.tordewa388.com/func/stl/getSlotGameList?categoryName=new&group=1
188.114.97.1200 OK 29 kB URL GET HTTP/3 www.tordewa388.com/func/stl/getSlotGameList?categoryName=new&group=1
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type JSON data\012- , ASCII text, with very long lines (28851), with no line terminators
Hash 9a657d61b0d8fdb63bc98c403afaaf80
5449f8b24bf92b4115d6aa7d9ef27dc3ea0b714e
cc904b1180ad31caf609ef482660e3ee076dcf36d01b822e7af79b28003a8b1e
GET /func/stl/getSlotGameList?categoryName=new&group=1 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:48 GMT
content-type: application/json;charset=ISO-8859-1
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yh%2B47Dv3Z0nV9dJ78cC9P7qKNzRDukuEFqLqwLWvQnWWQG0PyYHhiklcvjoxXzeyNWUetL3%2BF5z0xWSTIwVnMkLjrSfh3pJ7KWGN8D0Vn7kRl6%2FcFM32dfANcS3lYEUGiXGikGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990eac52712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
vsa58.tawk.to/s/?k=656d8a7cee771623a2cb1ca8&cver=0&pop=false&asver=1232&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYiLCJ2aWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYtSXJOQWt2MmdKeWV5Uk11R3gwd2RYIiwic2lkIjoiNjU2ZDhhN2NlZTc3MTYyM2EyY2IxY2E4IiwiaWF0IjoxNzAxNjc3NjkyLCJleHAiOjE3MDE2Nzk0OTIsImp0aSI6IlpXd3NON21xVzFWdGJjd2ZjZWdhQSJ9.jD7Uzvy0g0vVP3mskHaY0JFFuX1mTtK0CzKgOEgvl-Vm011EWWJNl4tU5NcjEMf89np2uJUOySpRypn3EjMuwg&EIO=3&transport=websocket&__t=OmpvGtV
104.22.25.131101 Switching Protocols 0 B URL GET HTTP/1.1 vsa58.tawk.to/s/?k=656d8a7cee771623a2cb1ca8&cver=0&pop=false&asver=1232&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYiLCJ2aWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYtSXJOQWt2MmdKeWV5Uk11R3gwd2RYIiwic2lkIjoiNjU2ZDhhN2NlZTc3MTYyM2EyY2IxY2E4IiwiaWF0IjoxNzAxNjc3NjkyLCJleHAiOjE3MDE2Nzk0OTIsImp0aSI6IlpXd3NON21xVzFWdGJjd2ZjZWdhQSJ9.jD7Uzvy0g0vVP3mskHaY0JFFuX1mTtK0CzKgOEgvl-Vm011EWWJNl4tU5NcjEMf89np2uJUOySpRypn3EjMuwg&EIO=3&transport=websocket&__t=OmpvGtV
IP 104.22.25.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=656d8a7cee771623a2cb1ca8&cver=0&pop=false&asver=1232&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYiLCJ2aWQiOiI2NGJhYTJiNWNjMjZhODcxYjAyOWViZTYtSXJOQWt2MmdKeWV5Uk11R3gwd2RYIiwic2lkIjoiNjU2ZDhhN2NlZTc3MTYyM2EyY2IxY2E4IiwiaWF0IjoxNzAxNjc3NjkyLCJleHAiOjE3MDE2Nzk0OTIsImp0aSI6IlpXd3NON21xVzFWdGJjd2ZjZWdhQSJ9.jD7Uzvy0g0vVP3mskHaY0JFFuX1mTtK0CzKgOEgvl-Vm011EWWJNl4tU5NcjEMf89np2uJUOySpRypn3EjMuwg&EIO=3&transport=websocket&__t=OmpvGtV HTTP/1.1
Host: vsa58.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.tordewa388.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4D7WfgnvMDZgdbZhHJ8FAg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Mon, 04 Dec 2023 08:14:53 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: WRHs5/lLWU73NbFTHOo97ihjkTo=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8302992dea495697-OSL
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/languages/id.js
104.22.24.131200 OK 16 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/languages/id.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6567e780829/languages/id.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:51 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"cb9fdd7bdab1462c01b24d9fd11af46f"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992068ea56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
va.tawk.to/log-performance/v3
104.22.24.131200 OK 5 B URL POST HTTP/3 va.tawk.to/log-performance/v3
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 38a8a3e3b4b6a6e4f295b2e0f899b1f0
474f5fac3d23afbaf16c5a31c98dfcd956e4c186
7652c7891ed06bce4174ab00a6ee9721daf6a4286929213ecb7daf42cd866615
POST /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.tordewa388.com/
Content-Type: application/json; charset=utf-8
Content-Length: 95
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:54 GMT
content-type: text/html; charset=utf-8
x-served-by: visitor-application-preemptive-l88m
access-control-allow-origin: https://www.tordewa388.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830299345b4256bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/dwb/js/common.js?0.5491134967735656
188.114.97.1200 OK 9.6 kB URL GET HTTP/3 www.tordewa388.com/dwb/js/common.js?0.5491134967735656
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (10479), with no line terminators
Hash 8f4dd0e5934c6bbe7f1e748e8046178c
ae6f0ef258fccb11154d8cf9fa6201bd19f33af4
f109ecb1ab5ed4c9d40223b09ad228235368c1b14625895ff23319b4cf071e6d
GET /dwb/js/common.js?0.5491134967735656 HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sZ6KPJGoFHeDXnlslIRwNY8K1LmWEWyELjLOCwOVOClCirmrTroi0%2BKMH3SOXCyAcpMLP7erpwIZvhLdpTeR7OjyfkiSTrvqL2eHPrVLUqaScKAX2feKyQyyjnKmbd9L6ZXcL0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8302990b592f712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/css/max-widget.css
104.22.24.131200 OK 78 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/css/max-widget.css
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d778223a957b2d3cdc540ff6547c0bfd
6fea621f551d26661f3a87c5d56d66b15afd0aca
799596c2833003b4bd92b1454ba52de29fb4fd07edb07648d64e567b0d293f85
GET /_s/v4/app/6567e780829/css/max-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=78180
access-control-allow-origin: *
etag: W/"0ab357443b798b4a1db6c4f22b1590f4"
last-modified: Thu, 30 Nov 2023 01:39:50 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 274538
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992ecd9d56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/
188.114.97.1200 OK 62 kB IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CiRK29QBFz1zXK7z4B2OYH4IOxgnYcmz4gZuDyfQIsfRfeP4eA%2FKzTSXxW%2BuncOmDpSWmXsZ%2F7b6VNqX3HvMHhupN33Dm94Is5%2BAgM4L7aF7KIbXy2kX4Hp8hHBhkepfty4YtUQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830299032967712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/
188.114.97.1200 OK 62 kB IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90; _ga_VMR2MD4EYG=GS1.1.1701677692.1.0.1701677692.0.0.0; _ga=GA1.1.1905073178.1701677693
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:47 GMT
content-type: text/html
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ndCcyVvncXiBC5LjaQmugi1z7ha1PW45Ff02Uskv06Fr1AP6ciPZe%2B4sgA8KISLEBO0ukiAaYCv%2Be%2BPRts2%2FOMaxXf6oa0ilTMtXwBKYcPbc9OvjVOCbDSb5Nin6V%2BK8eRR1hE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029909df93712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-app.js
104.22.24.131200 OK 151 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-app.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 04a9862af6efaf787bc8fb8e99ba6987
a57bb8f258eb1a60dc3b288a608ad8ef9fbecef3
ecc74c329a700e3e6ca29aed5ffe3c166cf39670c8b11573fa7f837f79a71b5c
GET /_s/v4/app/6567e780829/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.tordewa388.com
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:49 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 83029918299fb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.tordewa388.com/plugins/scroller/jquery.li-scroller.1.0.js
188.114.97.1200 OK 1.7 kB URL GET HTTP/3 www.tordewa388.com/plugins/scroller/jquery.li-scroller.1.0.js
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (1912), with no line terminators
Hash 68d89227a3520952f5aa87f80d799cc8
cb5525f4c3cdea8b8c587dff99edb56edb3b45b9
33b40e2d5593708686f25b0a1e620bdb6a90cb57ab21a4d10e6e0a2767279b79
GET /plugins/scroller/jquery.li-scroller.1.0.js HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/javascript
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QOeUIQOySNaYZpZm5iM26RvZ%2F9xm1kG%2FJ3EKQuDD5P5dB1F1rqcwxcKfvj2McnUVXGUJvzanss8L8GfsDuF2OA9D1EcvafebmrJoS%2FMPYmNNrkPx0SGYP6m7%2FNAkwZQrh0TCYGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83029903da15712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Fjalla+One
172.217.21.170200 OK 1.4 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Fjalla+One
IP 172.217.21.170:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1468), with no line terminators
Hash 70a2aa099a3e85e44357e3a58970cb53
032aa4d04538e24d8333af1dc48a0b852d596395
ec51097a73b339c3a9a9f261a6ae67ffc6ae4a6501aa2d22e313cf5f1ffb06ed
GET /css?family=Fjalla+One HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 08:14:47 GMT
date: Mon, 04 Dec 2023 08:14:47 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.tordewa388.com/dwb/css/jquery.alerts.css
188.114.97.1200 OK 1.4 kB URL GET HTTP/3 www.tordewa388.com/dwb/css/jquery.alerts.css
IP 188.114.97.1:443
Requested by https://www.tordewa388.com/
Certificate IssuerGoogle Trust Services LLC
Subjecttordewa388.com
Fingerprint19:C4:7B:1C:95:C9:56:C0:53:D2:51:58:08:3D:18:74:75:EB:FA:6E
ValiditySun, 26 Nov 2023 19:14:33 GMT - Sat, 24 Feb 2024 19:14:32 GMT
File type ASCII text, with very long lines (1567), with no line terminators
Hash 66c81d8c531c9427c5f287a96cd58c19
c7dcb503c12e3f185e064b676c20da03d60546cc
d4ff5f1e15fe6f237f0b475bc167ab9d446960c843dab1ead4fda2363e8d3a96
GET /dwb/css/jquery.alerts.css HTTP/1.1
Host: www.tordewa388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Cookie: JSESSIONID=413C599E932857A42D184662C4355D90
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:46 GMT
content-type: text/css
vary: Accept-Encoding
last-modified: Fri, 07 Feb 2014 06:28:00 GMT
cache-control: max-age=172800, must-revalidate
expires: Sun, 09 Feb 2014 06:28:00 GMT
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0EB%2FrhuobGGb72ji%2BBrWYTdzeUkTmyXMd65HHKNOKghqjQzLtOaO3Mai%2FHkkJGEWWVKFNmLg%2FDZCNNrYIx8kJTKkABY%2Bjn3fWGILscj6jy%2BWMos40%2FFGRjyHpnWhmtP5gMF4s3Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830299032964712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-2d0b9454.js
104.22.24.131200 OK 535 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-2d0b9454.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (557), with no line terminators
Hash 3f4a6312d60391bda06462d7321ffcdc
9f09295297840a36d2ac95344b39b0af1a729f82
28d61df22c079e51c45b6f87db516f03cb85cf3f2c3a970be369944c3f91bcf1
GET /_s/v4/app/6567e780829/js/twk-chunk-2d0b9454.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"c506281367048d4a134c9affbc68c8c6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274539
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d5c7456bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-f1565420.js
104.22.24.131200 OK 11 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-f1565420.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type data, ASCII text, with very long lines (11148), with no line terminators
Hash d1fe6c1930690afbf5513c8e034b8719
2beb0117a91b8eb90d7b9182195f1b9afe3698e9
6f036a8be7a7ec228e5069a900b82b8aaca326df673d670cb69da19f94d0cecf
GET /_s/v4/app/6567e780829/js/twk-chunk-f1565420.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"d1fe6c1930690afbf5513c8e034b8719"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274539
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d3c5756bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-4fe9d5dd.js
104.22.24.131200 OK 906 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6567e780829/js/twk-chunk-4fe9d5dd.js
IP 104.22.24.131:443
Requested by https://www.tordewa388.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (956), with no line terminators
Hash 7b31fafdf609238b7f4574e44057af5b
f4f849145e5beaff38b9e47e3c5c3e7e4945d70a
2b7dfb20a5ee49b709a4adc3412bd7d5e00539c1ef93a1a58c4ec58816c81ed3
GET /_s/v4/app/6567e780829/js/twk-chunk-4fe9d5dd.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.tordewa388.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 08:14:53 GMT
content-type: application/javascript
last-modified: Thu, 30 Nov 2023 01:39:51 GMT
etag: W/"1c5ecf371149feca23bd895ba9dfec4d"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 274539
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8302992d5c6c56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
104.21.38.253301 Moved Permanently 62 kB URL User Request GET HTTP/2 IP 104.21.38.253:443
Certificate IssuerLet's Encrypt
Subjectthordewabet388.com
FingerprintAF:FA:24:4B:05:15:BF:1D:AD:87:AB:04:82:45:A8:1D:79:D7:5D:33
ValiditySun, 19 Nov 2023 15:09:23 GMT - Sat, 17 Feb 2024 15:09:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: thordewabet388.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Mon, 04 Dec 2023 08:14:44 GMT
content-type: text/html
location: https://www.dewabet388ways.com/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FdmQ5F%2B60YuTgU50jAIsOh2pGw3lbHc%2BcSvbYZeLA0H6ME3O10isDM2QE2zv9TXBkw2xazVD%2B43RNrf1XY%2BWHdxKgISi%2Fog3JrXMbAqvKV1y4B125PJGf7BqOQ4B63iqtY2PfTk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830298f86e665696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
172.67.144.245301 Moved Permanently 62 kB URL User Request GET HTTP/2 IP 172.67.144.245:443
Certificate IssuerGoogle Trust Services LLC
Subjectdewabet388ways.com
Fingerprint3A:2A:AD:47:D6:E9:0B:06:4A:E1:F2:8B:FF:EB:6F:D0:80:15:BA:B3
ValidityFri, 24 Nov 2023 14:46:43 GMT - Thu, 22 Feb 2024 14:46:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.dewabet388ways.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Mon, 04 Dec 2023 08:14:45 GMT
content-type: text/html
location: https://www.tordewa388.com/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3hVW3LTAHfQOBCvdbK51fJhAheJqIwVJV%2FWivdq%2B1ZR4nftmhdgUIU1UPB2Rtq7IH%2BNqNhxZdUyg1BVVRKBdkGeNTIHytkMK6JVQ2oCavVQsW45hBA2Gup6XN6ByjohC5AGlCKIQCG3x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830298fbcc2a712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2