myeasetrack.com/6544a71c-fc22-45d2-81d9-b092ab51a02e
302 0 B URL HTTP/1.1 myeasetrack.com/6544a71c-fc22-45d2-81d9-b092ab51a02e
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /6544a71c-fc22-45d2-81d9-b092ab51a02e HTTP/1.1
Host: myeasetrack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Mon, 05 Sep 2022 19:57:50 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://rt.bet9ja.click/o/s9xylh?site_id=147784&s1=wom8kskltimm83ri229q86gg
Pragma: no-cache
Set-Cookie: 6544a71c-fc22-45d2-81d9-b092ab51a02e-v4=VYX5bxq4QLW_koL9BYG9hKZjxL5GPbfUX5qTa2EMWSc; Max-Age=86400; Expires=Tue, 06-Sep-2022 19:57:50 GMT; Domain=myeasetrack.com; Path=/; HttpOnly
cc-v4=WOjZTmOSsukgc508rxCfJ8tU5EqHi1TIb0BVKhKBABMiQ7Ll4j4sl%2BoEKSkO1bWITdN7kf%2BZlCtlcMSlg%2FiTpL3N4znCyG0wKzV%2BLZx65pJ0nfNeYL1UJ6pS2i5iBc8G0QXUCCrYTuLAJMRKhvlIng%3D%3D; Max-Age=31536000; Expires=Tue, 05-Sep-2023 19:57:50 GMT; Domain=myeasetrack.com; Path=/; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4876
Expires: Mon, 05 Sep 2022 21:19:06 GMT
Date: Mon, 05 Sep 2022 19:57:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1d2d5a5cb5a0eb9006019ec8a8a7a60c
a97cb86a600ae223434604442f997504bc3a293b
fe016a09001e17224ac6ac11c76b7c4fa98bc99480575b6e0ae3ca22805148d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE016A09001E17224AC6AC11C76B7C4FA98BC99480575B6E0AE3CA22805148D3"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6033
Expires: Mon, 05 Sep 2022 21:38:23 GMT
Date: Mon, 05 Sep 2022 19:57:50 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0DvbF2EeIFXAIUvnXb5MAEqj9M0r12acxKs6dm0IlnLRQstJUP75uQ==
age: 67353
X-Firefox-Spdy: h2
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 44 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 47781622cfd615572bdb6676d41dc4af
2e9bf22f7b84b4e53b4f8148e8b88b624014c91e
873a2efe2113aa2c3963d766d9327b7c323dd5b364707b6c220854177fc22c77
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: UUINGQQ487DEcz-G-U8iX8Cc3FICfbp0LktyfWD7ocd5HaserU5Srw==
content-encoding: gzip
via: 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 19:44:26 GMT
content-type: application/json
content-length: 44217
age: 804
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 19:44:57 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3-L3QEGKheZldOcAd6u_9KlML6l8yv_H0Am_cAnZ9utPAkMlSuPYPw==
Age: 773
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 19:57:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 88a707e0c9f0d95f0307a4af0bcf7eca
963f971cf6e8f6c68ffb027cccaef0a4c4500d69
1b618140dc8d3e4e8dd80c95c0664ec9a0c53965135dd9877822b0e466b00f44
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 19:57:51 GMT
Last-Modified: Mon, 05 Sep 2022 19:11:16 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SpjmN83Bl343U6k44LducwEdn8H_O9z9LLmxYA98NvzdzoByR5-reA==
Age: 2796
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Mon, 05 Sep 2022 19:38:16 GMT
Expires: Mon, 05 Sep 2022 20:29:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: S13_QON4atWXnf8RNS8H3SNYZnrEkD04Ug6IERUxwXgzag0UAz1jQg==
Age: 1175
register.bet9ja.com/?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=
302 Found 0 B URL HTTP/2 register.bet9ja.com/?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid= HTTP/1.1
Host: register.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
location: /?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=&p=a&s=new
x-content-type-options: nosniff
content-length: 0
content-type: text/html; charset=UTF-8
date: Mon, 05 Sep 2022 19:57:51 GMT
set-cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; Domain=.bet9ja.com; Path=/; Expires=Mon, 05 Sep 2022 21:57:51 GMT; Max-Age=7200; HttpOnly
X-Firefox-Spdy: h2
register.bet9ja.com/?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=&p=a&s=new
200 OK 2.5 kB URL HTTP/2 register.bet9ja.com/?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=&p=a&s=new
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4007)
Hash d0c887929d7101ed44839ad1c4382b43
56e98cbc691732902c5c72f7305ecb24dc102264
7a9a2512503ce4bcfaf91e215d8e0a155cbb256ef8b2bfcf726e564b43967a18
GET /?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=&p=a&s=new HTTP/1.1
Host: register.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
content-encoding: gzip
x-akamai-transformed: 9 3108 0 pmb=mTOE,2
date: Mon, 05 Sep 2022 19:57:51 GMT
content-length: 2500
vary: Accept-Encoding
set-cookie: bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; Domain=.bet9ja.com; Path=/; Expires=Mon, 05 Sep 2022 21:57:51 GMT; Max-Age=7200; Secure
bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; Domain=.bet9ja.com; Path=/; Expires=Mon, 05 Sep 2022 21:57:51 GMT; Max-Age=7200; Secure
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b57a9dd04797bf34612c80361f1dffb3
56573166d8b9cd9b8dae19fd905e4f3293af306b
b03552109f1e7d1e482aa14614ffb1e38fb53ae4951152aab307b927674dad98
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1319
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:51 GMT
Last-Modified: Mon, 05 Sep 2022 19:35:52 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
200 OK 27 kB URL HTTP/2 cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 213d91de38a9305fdc5481c6090d5a5c
9c030a06ac22d50bd432fd23f754e7828bbd8e16
0b559eadddbd394de21f9d2e6b2855313a3a1bbd72f02e4f9c60455b1959dfc1
GET /cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17 HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Fri, 20 May 2022 09:10:59 GMT
accept-ranges: bytes
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: text/css
content-encoding: gzip
content-length: 26733
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:51 GMT
date: Mon, 05 Sep 2022 19:57:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/bet9ja/modules/ls-bundle-loader/v2.1.0/ls-bundle-loader.js?ver=v1
200 OK 48 kB URL HTTP/2 cnt.bet9ja.com/cdn/bet9ja/modules/ls-bundle-loader/v2.1.0/ls-bundle-loader.js?ver=v1
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (49132), with NEL line terminators
Hash 85ef5b9bee243ad4e785b2aa10646a99
9461aff7985ce71c0d859f108a2491ee90ed1c59
c317c87518575c5d530c533b7591e34f0fb12c8e23d751b4d88930bc4977ee8b
GET /cdn/bet9ja/modules/ls-bundle-loader/v2.1.0/ls-bundle-loader.js?ver=v1 HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Mon, 04 Nov 2019 13:33:21 GMT
accept-ranges: bytes
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
content-encoding: gzip
content-length: 47779
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:51 GMT
date: Mon, 05 Sep 2022 19:57:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
register.bet9ja.com/akam/13/630f51d3
200 OK 8.8 kB URL HTTP/2 register.bet9ja.com/akam/13/630f51d3
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (14356)
Hash fbcd18235ace1bf44b8af60b0f74aee9
9a078c80df566794a7c7da0e1e6fdba8aa6ec370
35d2f0345017b775835c483a9ca1cf318fa54272eb7d5ff51bdbd389fca36413
GET /akam/13/630f51d3 HTTP/1.1
Host: register.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=&p=a&s=new
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 09 Feb 2022 15:05:51 GMT
etag: "80418e10724a4544b208b7d7e16c7ca27c9432bf1d0769d2ba655fc2890d0019"
content-type: application/javascript
content-encoding: gzip
content-length: 8765
expires: Mon, 05 Sep 2022 19:57:51 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 05 Sep 2022 19:57:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cnt.bet9ja.com/cdn/bet9ja/modules/ls-common-ui/v2.2.2/responsive/common-ui.js
200 OK 20 kB URL HTTP/2 cnt.bet9ja.com/cdn/bet9ja/modules/ls-common-ui/v2.2.2/responsive/common-ui.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (51113)
Hash d7176d5a3e3a8581e60dbfbcf6290c6c
9b5ef6b03e87f7561bd52261ed6bbf927d494e57
9234be424e924d511d426df41adb14a3eef4f55ecbc6aaaa5086f85e005cb088
GET /cdn/bet9ja/modules/ls-common-ui/v2.2.2/responsive/common-ui.js HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Mon, 08 Mar 2021 15:28:00 GMT
etag: "16022d-c7d1-5bd08143c1209"
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
content-length: 20198
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:51 GMT
date: Mon, 05 Sep 2022 19:57:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/bet9ja/modules/eve/v6.0.0/eve.js
200 OK 168 kB URL HTTP/2 cnt.bet9ja.com/cdn/bet9ja/modules/eve/v6.0.0/eve.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65475)
Size 168 kB (167756 bytes)
Hash b8d8f0fc1ab4bd8fbf205d2d38c48cf5
fd395713f02fe570183c7ed35ea4f45448155fa7
080b50d398ad7b5d2e83510123839162967e085dc34e4f5fc402e74f9979cbe5
GET /cdn/bet9ja/modules/eve/v6.0.0/eve.js HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Thu, 15 Apr 2021 13:07:21 GMT
etag: "102382-5d99c-5c0028b3a6a85"
accept-ranges: bytes
access-control-allow-origin: *
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
content-length: 167756
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:51 GMT
date: Mon, 05 Sep 2022 19:57:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ex1ET4aD0IWOv6zK8Sp7AA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TY3uTFsMMb62GwrAzpYiQiYd7r0=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-WSXNG4S
200 OK 100 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-WSXNG4S
IP
File type ASCII text, with very long lines (59543)
Size 100 kB (100222 bytes)
Hash 0b071ec1d643742290b2c98ccf038841
93d975c7a231aee8ce0c5cfd5e5e6650b962c2a4
2500e182131a73e1f946684cc80c3c0f8fec92df5253a8983e93f7b583488b2d
GET /gtm.js?id=GTM-WSXNG4S HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Sep 2022 19:57:51 GMT
expires: Mon, 05 Sep 2022 19:57:51 GMT
cache-control: private, max-age=900
last-modified: Mon, 05 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100222
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/bet9ja/registration-02/js/responsive/bundle.min.js?v=3.9
200 OK 471 B URL HTTP/2 cnt.bet9ja.com/cdn/bet9ja/registration-02/js/responsive/bundle.min.js?v=3.9
IP
ASN #20940 Akamai International B.V.
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
GET /cdn/bet9ja/registration-02/js/responsive/bundle.min.js?v=3.9 HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Fri, 15 Jul 2022 14:18:12 GMT
accept-ranges: bytes
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
content-encoding: gzip
content-length: 239823
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:51 GMT
date: Mon, 05 Sep 2022 19:57:51 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/wall-e/components/header/img/bet9ja/desktop/logo.png
200 OK 8.0 kB URL HTTP/2 cnt.bet9ja.com/cdn/wall-e/components/header/img/bet9ja/desktop/logo.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 165 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash aa84b0366eb3a46480f246f979420f04
115349a24ef57a0a33883c40d2ffe2fe9db8a17b
e43f8b2717eda3913f88c77fe82bcfda2779fec71ed25b60d846c0eac20666ce
GET /cdn/wall-e/components/header/img/bet9ja/desktop/logo.png HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Mon, 11 Nov 2019 14:01:40 GMT
accept-ranges: bytes
content-length: 8003
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: image/png
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/bet9ja/registration-02/img/responsive/welcome-bonus-l.jpg
200 OK 108 kB URL HTTP/2 cnt.bet9ja.com/cdn/bet9ja/registration-02/img/responsive/welcome-bonus-l.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=0, bps=8, PhotometricIntepretation=RGB, orientation=upper-left, width=0], progressive, precision 8, 260x240, components 3\012- data
Size 108 kB (108146 bytes)
Hash 448b637cef25038ce206769ee04b40a1
a5f34a5117a64c1797efb2b6d6a0d4ecc760a54e
ee78a1959e777eb765c1171cd106ef8eeb6db0945efe3847f839fd282c8de590
GET /cdn/bet9ja/registration-02/img/responsive/welcome-bonus-l.jpg HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Tue, 17 Aug 2021 12:22:04 GMT
accept-ranges: bytes
content-length: 108146
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: image/jpeg
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/desktop/icon__instagrm-02.png
200 OK 762 B URL HTTP/2 cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/desktop/icon__instagrm-02.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 1421a0ec41e0c80452bfd7ae6ef1c046
835311c81cbe2c9d33f8e375e841adf4e785c2a6
b7a678b1a25661e9baf915190d0c30058dc972a7df287bb37f3fd05a56297637
GET /cdn/wall-e/components/footer/img/common/desktop/icon__instagrm-02.png HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Tue, 01 Sep 2020 11:32:58 GMT
etag: "41935-2fa-5ae3ee18e690f"
accept-ranges: bytes
content-length: 762
access-control-allow-origin: *
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/desktop/icon__fbook-02.png
200 OK 504 B URL HTTP/2 cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/desktop/icon__fbook-02.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 047aae96e38cfd84ab892e121c19537e
9d47ac61450a76425b3bddbc89321a234b15d2bb
96f787ef0b73bb852936c289adab21b38819d9fde03256982fba3c2db88bbfc5
GET /cdn/wall-e/components/footer/img/common/desktop/icon__fbook-02.png HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Tue, 01 Sep 2020 11:32:58 GMT
etag: "41934-1f8-5ae3ee18e690f"
accept-ranges: bytes
content-length: 504
access-control-allow-origin: *
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/desktop/icon__twittr-02.png
200 OK 723 B URL HTTP/2 cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/desktop/icon__twittr-02.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 900a22829ea9bc6579a126bc2dbc0f37
946bd793e793cc551f61f2f40e1d709eba7fa129
f272c3553f1f0770119108e1d7b6bf1148aaeebb61cce0124c7b5f5ae5fcc963
GET /cdn/wall-e/components/footer/img/common/desktop/icon__twittr-02.png HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Tue, 01 Sep 2020 11:32:58 GMT
etag: "41936-2d3-5ae3ee18e690f"
accept-ranges: bytes
content-length: 723
access-control-allow-origin: *
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/wall-e/components/footer/img/bet9ja/desktop/footer-region-bg-02.png
200 OK 1.4 kB URL HTTP/2 cnt.bet9ja.com/cdn/wall-e/components/footer/img/bet9ja/desktop/footer-region-bg-02.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 229 x 312, 8-bit colormap, non-interlaced\012- data
Hash 64bf67397b169fca88386e2d24003e6d
28add2b40a1b2c6dad749f5a55c147988ae68b2d
7faeea24c4f5e5492dbcbe1bb02e25c815e50c9285972bfaeec95abab36ef3c5
GET /cdn/wall-e/components/footer/img/bet9ja/desktop/footer-region-bg-02.png HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
last-modified: Tue, 01 Sep 2020 11:31:02 GMT
etag: "224a0-581-5ae3edaa3438d"
accept-ranges: bytes
content-length: 1409
access-control-allow-origin: *
content-type: image/png
strict-transport-security: max-age=31536000; includeSubDomains; preload
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/wall-e/components/footer/img/bet9ja/desktop/payment-icons-02.png
200 OK 53 kB URL HTTP/2 cnt.bet9ja.com/cdn/wall-e/components/footer/img/bet9ja/desktop/payment-icons-02.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 3099 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash 269ebed328ac4dcf49ec97f363ba51ea
b51e6ded4565a55502cc317a141fcd81f19c614c
bbe9eee7dc8016b945eda114fb0ae4a2e71886ef7383a1c8ad30b343c174d5d4
GET /cdn/wall-e/components/footer/img/bet9ja/desktop/payment-icons-02.png HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 05 May 2022 14:00:38 GMT
accept-ranges: bytes
content-length: 52665
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: image/png
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/icon__18-02.svg
200 OK 2.3 kB URL HTTP/2 cnt.bet9ja.com/cdn/wall-e/components/footer/img/common/icon__18-02.svg
IP
ASN #20940 Akamai International B.V.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with very long lines (3747), with no line terminators
Hash e57ca85d5a0de54e9dc6a8e3598c5a3c
70c380a65b0a758ad919f90f0d5774af73e7dbab
c62e9ac27a251b0743512720f4f3831f4b67c8a6fdcde8d88be365e3030fbe25
GET /cdn/wall-e/components/footer/img/common/icon__18-02.svg HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/cdn/bet9ja/registration-02/css/responsive/registration.min.css?ver=v1.0.17
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Tue, 01 Sep 2020 11:34:37 GMT
accept-ranges: bytes
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: image/svg+xml
content-encoding: gzip
content-length: 2263
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.bet9ja.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:08 GMT
expires: Thu, 31 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 433424
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.bet9ja.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:34:08 GMT
expires: Thu, 31 Aug 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 433424
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.bet9ja.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 02:02:22 GMT
expires: Sun, 03 Sep 2023 02:02:22 GMT
cache-control: public, max-age=31536000
age: 237330
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
register-api.bet9ja.com/clientregistration/NewRegistration/ValidatePromotionCode
200 OK 56 B URL HTTP/2 register-api.bet9ja.com/clientregistration/NewRegistration/ValidatePromotionCode
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 10227013e30f33075047c91da5c2cc79
c7e8dc175d720dd920e2bfdd1274e726c6ff8bff
56c2c97d5f4f3152fea394537fce032774509bcced3dc176d611db15b7a7544e
POST /clientregistration/NewRegistration/ValidatePromotionCode HTTP/1.1
Host: register-api.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://register.bet9ja.com
Content-Length: 42
Connection: keep-alive
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: https://register.bet9ja.com
access-control-allow-credentials: true
x-robots-tag: noindex,nofollow
content-length: 56
content-type: application/json; charset=utf-8
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
register-api.bet9ja.com/clientregistration/NewRegistration/GetInitData
200 OK 2.9 kB URL HTTP/2 register-api.bet9ja.com/clientregistration/NewRegistration/GetInitData
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with very long lines (10413), with no line terminators
Hash a1ae20aeedffdabdb0006b89edc99d86
d6866eccd321af0a595caec03df680745c6674b8
d1cc08a9765c13bcc2e0f457804ec86f4c027f4b72d108d7e7a8d340e6eae912
POST /clientregistration/NewRegistration/GetInitData HTTP/1.1
Host: register-api.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Content-Type: text/plain;charset=UTF-8
Origin: https://register.bet9ja.com
Content-Length: 2
Connection: keep-alive
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: https://register.bet9ja.com
access-control-allow-credentials: true
x-robots-tag: noindex,nofollow
content-type: application/json; charset=utf-8
content-encoding: gzip
content-length: 2916
date: Mon, 05 Sep 2022 19:57:52 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAAJ8
200 OK 37 kB URL HTTP/2 tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAAJ8
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (62459)
Hash d1e8e0417b0868e854400cb0e6ceeb8d
1419bde11cc6c05a0cf5cb29f751ad795fc58364
6f4cf9f5ff2645e7faf5b4bd28170d79efe32acf9bb9afa4595639578fc62511
GET /dist/tag-manager.js?id=STM-AAAAJ8 HTTP/1.1
Host: tm.ads.sportradar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
apigw-requestid: YAFIWikTjoEEPYg=
vary: Accept-Encoding
content-encoding: gzip
content-length: 37012
date: Mon, 05 Sep 2022 19:57:52 GMT
cache-control: max-age=900, public
x-n: S
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7b2f07b00d0a0c562a9a65441f2767dd
4d1fb6079f56f37321585dd8577ad458110e4477
07ec9be469ed8c669099620d4b7f88986c4c5f502cf5e4376ce0007c79ddb147
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "07EC9BE469ED8C669099620D4B7F88986C4C5F502CF5E4376CE0007C79DDB147"
Last-Modified: Sun, 04 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16700
Expires: Tue, 06 Sep 2022 00:36:12 GMT
Date: Mon, 05 Sep 2022 19:57:52 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/QlICLrcmjDo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/QlICLrcmjDo
IP
Hash f44856c1b0ffb0cba142242425584070
d0ea4bbeff9da7d5a6e06d8f46aab148c41cf493
1eeb76fb63cd00e5e325dd7cf0443d4f2e9938b416839c0c5344e820a9c27ad8
POST /s/gts1d4/QlICLrcmjDo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tgtag.io/tg.js?pid=tg-003828-001
200 OK 21 kB URL HTTP/2 tgtag.io/tg.js?pid=tg-003828-001
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1b93a34ce42933473e9e497a24c555a5
f778cd8c037b8ea4e4f30a893d564113a9300e97
885624e59ba53f181be1ca268b07bdf3cbbfcdb052e6d1ff4258cd139944716d
GET /tg.js?pid=tg-003828-001 HTTP/1.1
Host: tgtag.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtet3o_fcVnsvkof15ebyc0hbfrH1A5gNRbf4tZGD_buJjbyGJFL5lOGSDuo4E9r_paTvgohE1JciSMhRcgXu6nOBJ0UDpC
x-goog-generation: 1657792382676899
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 21170
content-encoding: gzip
x-goog-hash: crc32c=fhvZEQ==, md5=G5OjTOQpM0c+nkl6JMVVpQ==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 21170
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Access-Control-Allow-Origin
server: UploadServer
date: Mon, 05 Sep 2022 09:55:48 GMT
expires: Tue, 06 Sep 2022 09:55:48 GMT
cache-control: public, no-transform, max-age=86400, s-maxage=86400
age: 36124
last-modified: Thu, 14 Jul 2022 09:53:02 GMT
etag: "1b93a34ce42933473e9e497a24c555a5"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/QlICLrcmjDo
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/QlICLrcmjDo
IP
Hash f44856c1b0ffb0cba142242425584070
d0ea4bbeff9da7d5a6e06d8f46aab148c41cf493
1eeb76fb63cd00e5e325dd7cf0443d4f2e9938b416839c0c5344e820a9c27ad8
POST /s/gts1d4/QlICLrcmjDo HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
register.bet9ja.com/akam/13/pixel_630f51d3
200 OK 0 B URL HTTP/2 register.bet9ja.com/akam/13/pixel_630f51d3
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /akam/13/pixel_630f51d3 HTTP/1.1
Host: register.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2606
Origin: https://register.bet9ja.com
Connection: keep-alive
Referer: https://register.bet9ja.com/?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=&p=a&s=new
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxFb7AaDAQAAegs7DxGxzkuH5hEZ9gqrGkYxKK4KF46WPkr5Gpo7RoS42qnfnVqQCtCzXRiE/I79y+U4EBUooSM8tTyZo/SjSR4sS+AbMfZKOmxT0IaxJBAaaQeiUhWUG+6W/h+qQnbxOTWo10nFOP9ePuNfOxeFH4oiy4w1WrmPqBiA0QLvcoVxVW4hYXyyIW6jy6ySJKxRHuWCOadYip5K2tJp2qsSrxW/CaVilPP87RtLoo7Lji0yYCLiUNqAUnTzrqCjQd9sO8bRZMy968XgUv5ckxuLZPmYVYzQHt0smhJlSASSvqCVIKD/8trBe6CwJGD57h5JwMrGkKKr2A9V3hFpN11Z3Ele5tU+Y+OSfGtb3BTeGR0GwPtZM4zw68wM; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784; regQueryString=btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=&p=a&s=new; _gcl_au=1.1.847394676.1662407868
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 0
date: Mon, 05 Sep 2022 19:57:52 GMT
set-cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxRb7AaDAQAAIxA7DxE45QYVkbRyU+iVirSvKpPkuk9FK+fU3VF1GS2EsgCxahzPxMDMdBiciKFvyVledV/0LaTk+iwi7t9R1GbWIw5nnlVPrlnwRsMuRG+GgyHvMRC00B01WiPXBfxnlp4TQI89JHsjNq+Y4VAbeMjFHryDlfUJS2kDzrkx5XghFvwA0FgzRBXmA99ETi/AbOext73mAA+D26g4L+vl1cehQ6vmvBBERNjdQSydo9OWA1R6M3iAov3dhh7nL+V4wCaxM2B/T7IkeR9VUsFdVMeI42T666e5FKyzBGaaWv+QlS13qGjUQV8f0rGGPb04wbyg3e5cG4sSHYQCC8+HzG3mz9T7jal9GkNsm+oklX2NMLPxSL9H5aZU7rbne7Nm1amulkEv; Domain=.bet9ja.com; Path=/; Expires=Mon, 05 Sep 2022 21:57:51 GMT; Max-Age=7199; HttpOnly
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist/tracker.js
200 OK 12 kB URL HTTP/2 tracker.ads.sportradar.com/dist/tracker.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (34755)
Hash b34b13d85152f71b7fd15289c78c0583
0bb20191b022bbd0e75f2bbce7f6332886079c2c
7a3fc57394ecc6745eb6e18745aa1e5e5d05cb2237c4d0d754ab43d33863a84c
GET /dist/tracker.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 14:51:32 GMT
accept-ranges: bytes
server: AmazonS3
etag: "5ff82a1c468a89919e9437d33e0402cb"
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: hw2DqqUue5pPQWhm5UFHZBGu3KWs6FGMM-RM9kXcFsMbF7Lp-xbNlA==
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 05 Sep 2022 19:57:52 GMT
content-length: 11553
cache-control: max-age=900, public
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 7c5173c3d4d0b5f53b2f6e6c1c09db13
037fbebe05c79a4125c8cd3da3f1a070d1a6b317
9d8f3a94e97187350e5f7bd2c396534ec4630a03143f781ecd32d66825f68880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1310
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Last-Modified: Mon, 05 Sep 2022 19:36:02 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
tracker.ads.sportradar.com/dist//sp-2.14.0.js
200 OK 30 kB URL HTTP/2 tracker.ads.sportradar.com/dist//sp-2.14.0.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (64903)
Hash 44f237857b8d03f32b53fe551e83c95a
91536fe6c60d947d29dfcb5f04d09b752b5ccf03
a5e10dc2f3c729300afe8fe24aa430f57d91fdefa8112c0b35dd424ba612caa7
GET /dist//sp-2.14.0.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 14:51:32 GMT
accept-ranges: bytes
server: AmazonS3
etag: "8dba669b94e3865c9205ef8fd15ee4d1"
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: eZ_66sj2SbF4Mf2D-8i-wqygxXNg13RPKrfjFlQdYcaZk7FRxcchgg==
vary: Accept-Encoding
content-encoding: gzip
date: Mon, 05 Sep 2022 19:57:52 GMT
content-length: 30370
cache-control: max-age=900, public
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 7b2f07b00d0a0c562a9a65441f2767dd
4d1fb6079f56f37321585dd8577ad458110e4477
07ec9be469ed8c669099620d4b7f88986c4c5f502cf5e4376ce0007c79ddb147
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "07EC9BE469ED8C669099620D4B7F88986C4C5F502CF5E4376CE0007C79DDB147"
Last-Modified: Sun, 04 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16700
Expires: Tue, 06 Sep 2022 00:36:12 GMT
Date: Mon, 05 Sep 2022 19:57:52 GMT
Connection: keep-alive
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 3f374fc8f2f2087d84be2647b0a0f8b3
520ce308a3e18a79bcea586ca403ed2ceb4d8430
3436ca00ac0046dfae514c696b810d0d01180c67d49c5f6c7bfcf9d90cdb7453
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "3436CA00AC0046DFAE514C696B810D0D01180C67D49C5F6C7BFCF9D90CDB7453"
Last-Modified: Mon, 05 Sep 2022 10:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=1043
Expires: Mon, 05 Sep 2022 20:15:15 GMT
Date: Mon, 05 Sep 2022 19:57:52 GMT
Connection: keep-alive
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 3f374fc8f2f2087d84be2647b0a0f8b3
520ce308a3e18a79bcea586ca403ed2ceb4d8430
3436ca00ac0046dfae514c696b810d0d01180c67d49c5f6c7bfcf9d90cdb7453
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "3436CA00AC0046DFAE514C696B810D0D01180C67D49C5F6C7BFCF9D90CDB7453"
Last-Modified: Mon, 05 Sep 2022 10:00:00 UTC
Content-Length: 1586
Cache-Control: public, no-transform, must-revalidate, max-age=1043
Expires: Mon, 05 Sep 2022 20:15:15 GMT
Date: Mon, 05 Sep 2022 19:57:52 GMT
Connection: keep-alive
a.sportradarserving.com/pixel?type=js&aid=1036&id=1124
302 Moved Temporarily 0 B URL HTTP/1.1 a.sportradarserving.com/pixel?type=js&aid=1036&id=1124
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?type=js&aid=1036&id=1124 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:52 GMT
Location: https://a.sportradarserving.com/ul_cb/pixel?type=js&aid=1036&id=1124
Set-Cookie: zuuid=907dfe40-9471-4e01-a230-3cc9eb46ef88; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
c=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
a.sportradarserving.com/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
302 Moved Temporarily 0 B URL HTTP/1.1 a.sportradarserving.com/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId= HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:52 GMT
Location: https://a.sportradarserving.com/ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
Set-Cookie: zuuid=5dd8dce7-b9a3-4d7a-9677-3201025c58b3; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
c=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
a.sportradarserving.com/ul_cb/pixel?type=js&aid=1036&id=1124
200 OK 2.3 kB URL HTTP/1.1 a.sportradarserving.com/ul_cb/pixel?type=js&aid=1036&id=1124
IP
File type ASCII text, with very long lines (2325), with no line terminators
Hash 11d17c659b18c17b470e0538e7c1809e
eead5094a481aba1456cbe141593a91ea6d01173
0aadff23dbef749df2eb14e2fd62a7d72f91ea2e8acef9ee3546a6f1a597cba3
GET /ul_cb/pixel?type=js&aid=1036&id=1124 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Cookie: zuuid=907dfe40-9471-4e01-a230-3cc9eb46ef88; c=1662407872; zuuid_lu=1662407872
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Mon, 05 Sep 2022 19:57:52 GMT
Set-Cookie: zuuid=907dfe40-9471-4e01-a230-3cc9eb46ef88; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
cm2=!bidswitch,431737072; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
bss=!bidswitch,431665072; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 2325
Connection: keep-alive
a.sportradarserving.com/ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
302 Moved Temporarily 0 B URL HTTP/1.1 a.sportradarserving.com/ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId= HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Cookie: zuuid=5dd8dce7-b9a3-4d7a-9677-3201025c58b3; c=1662407872; zuuid_lu=1662407872
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:52 GMT
Location: https://x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=5dd8dce7-b9a3-4d7a-9677-3201025c58b3&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D5dd8dce7-b9a3-4d7a-9677-3201025c58b3
Set-Cookie: zuuid=5dd8dce7-b9a3-4d7a-9677-3201025c58b3; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1662407872; path=/; expires=Tue, 05-Sep-2023 19:57:52 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/s/gts1d4/Bz2q3fRhivk
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Bz2q3fRhivk
IP
Hash 5d1b373f4fce13d3132c9d7e0371cb8c
71b301bbbf128bf7da7c777354d89b57d0bbbb8a
7bff798b98fc4e78a129b613ac314352a42667523b17cd1a014d0827d431abf2
POST /s/gts1d4/Bz2q3fRhivk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/mhuqZ1vnJhs
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/mhuqZ1vnJhs
IP
Hash 086a78d14e0d886f227aed6b5f82c610
9b251c9e5b590ca47253c5f649e16c3d7a7d22a5
9174bbba8e89b59725132e038090a593efb04e4eefbef363521aae0bcedaa5bf
POST /s/gts1d4/mhuqZ1vnJhs HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api.feedad.com/1.1/web/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=907dfe40-9471-4e01-a230-3cc9eb46ef88
200 OK 42 B URL HTTP/2 api.feedad.com/1.1/web/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=907dfe40-9471-4e01-a230-3cc9eb46ef88
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /1.1/web/usersyncs?b=8461718b-151b-486e-8ea2-a9b349f07f98&u=907dfe40-9471-4e01-a230-3cc9eb46ef88 HTTP/1.1
Host: api.feedad.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
set-cookie: fa_8461718b-151b-486e-8ea2-a9b349f07f98_u=907dfe40-9471-4e01-a230-3cc9eb46ef88; Domain=.feedad.com; Path=/; Max-Age=2592000; HttpOnly; SameSite=None; Secure
x-cloud-trace-context: 49db2a7006fcfb1a697d7fe0373e1686
date: Mon, 05 Sep 2022 19:57:52 GMT
server: Google Frontend
content-length: 42
expires: Mon, 05 Sep 2022 19:57:52 GMT
cache-control: private
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash a54314d948f1f4d03e8c51c7e5df1d10
f242cf91da24052edc689c0e4256fbfa0c92e0b7
3e19ebb5060dfbb053c96ed42b74f7f3cc5743cbf17ba981dbb9eb9c3a23317d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1355
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:52 GMT
Last-Modified: Mon, 05 Sep 2022 19:35:17 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
scripts.prdredir.com/scripts/k_bet9ja.js
200 OK 292 B URL HTTP/2 scripts.prdredir.com/scripts/k_bet9ja.js
IP
Hash a8be5e1a011c51bc376e3fdbc8c5b45d
d834443ef7c20aa6596b8376e9a2882b7dc48070
f10a22ea63c0f02cfb679d723c0ef7d16007fdf56579fb7541883835b23d8d3a
GET /scripts/k_bet9ja.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: text/javascript; charset=utf-8
status: 200 OK
cache-control: max-age=0, public
access-control-allow-origin: *
x-request-id: 1bdc663d-8e40-4cf4-a2c5-1eb95ffce95c
etag: W/"95d838de11136e7964ca0eaa375bf294"
x-runtime: 0.005002
expires: 2022-08-06 19:57:52 UTC
x-powered-by: Phusion Passenger(R) 6.0.11
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RDmhb%2BFXdp821nY5SO1d1rtwauDLORnfivd4u4lfh650Qo1%2BoPLhcHZ4BZ21KbBIBCy4N19NOFHuglfL53SNWSDh977TEmA793AMMRYfqGd4Dh6GXDa0Y%2Fap0Z2PqTbLJK%2BDJUv4YA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 746189530b720b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cnt.bet9ja.com/cdn/bet9ja/common/favicon.ico?ver=v1
200 OK 1.4 kB URL HTTP/2 cnt.bet9ja.com/cdn/bet9ja/common/favicon.ico?ver=v1
IP
ASN #20940 Akamai International B.V.
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash acf0ac5fea03509d3229afd8a498f945
a30a2130d8adcf55b284573125b0a09be9de7d54
d4fceba19e1b31fb534ff5fa1a459cc6df252be831475d4fd23b2fb2d6bf54a7
GET /cdn/bet9ja/common/favicon.ico?ver=v1 HTTP/1.1
Host: cnt.bet9ja.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Cookie: ak_bmsc=FDC1B6B9DB6A8CD8294B94AE8D19E54B~000000000000000000000000000000~YAAQ3EwkFxRb7AaDAQAAIxA7DxE45QYVkbRyU+iVirSvKpPkuk9FK+fU3VF1GS2EsgCxahzPxMDMdBiciKFvyVledV/0LaTk+iwi7t9R1GbWIw5nnlVPrlnwRsMuRG+GgyHvMRC00B01WiPXBfxnlp4TQI89JHsjNq+Y4VAbeMjFHryDlfUJS2kDzrkx5XghFvwA0FgzRBXmA99ETi/AbOext73mAA+D26g4L+vl1cehQ6vmvBBERNjdQSydo9OWA1R6M3iAov3dhh7nL+V4wCaxM2B/T7IkeR9VUsFdVMeI42T666e5FKyzBGaaWv+QlS13qGjUQV8f0rGGPb04wbyg3e5cG4sSHYQCC8+HzG3mz9T7jal9GkNsm+oklX2NMLPxSL9H5aZU7rbne7Nm1amulkEv; bm_mi=C8988FC125EDA77B2FC70D8C69015E0D~YAAQ3EwkFxJb7AaDAQAACAw7DxFDxenpyjymHcwKCxvZGuAX4gNRmHvkJ1PIQXEv5i1FwkqPMLtjuNAmvY5SQoqJOX46lTme+58fIgeBIuJUNuXMq7o2bp0P7L/IOExsea0igHUneb08QyAwWoR8PW905kbk38+tq1SgTkf3Ji6DMJd/mjvIkxNILIwPX2Hmv//QHQb7ea8X/UnNAAKBB6VXPQ8GatjV/JMGkH7Rcw+jyQc8Njm35Efh+1sxZedpEryAjsxm6TetmHV9pwVY/SghYYHdKehns0K0rXFqDRi9cKURjU+9yr99GLddRw==~1; bm_sv=42F89ABC57BE3161B86370F99CC8C964~YAAQ3EwkFxNb7AaDAQAACAw7DxFHaaR58YlJt0bISIuj6QsrklhLu8AOQLQGnb6GShVO3a2cmSFZnXlFWatMcg/hd8fP095/Va8SROS1QdLCWNO1N2VphoZGbsfKXy7n50gKm+in37NfSok6btpTchqZ4ImSjPPpf5EOXlslyQ4j+dGXDJkY192r5B+KvLEVbMdHPvXQCeC8wzp9OhNV8B9P1mQQ/hV8QXI8GAD/IZ+Wryg3uY7nWsw+ReqarhD0~1; ftv=1; btag=a_147784b_7c_1129267650; promocode=147784; _gcl_au=1.1.847394676.1662407868; _tgsid=eyJwYWdlX3Nlc3Npb24iOiJmMDYzNzE1Yy00YmQ3LTRlYzEtYjA2My03ZGJkYTNkZmI4NWIifQ==; tg=d41d8cd98f00b204e9800998ecf8427e; _tguatd=eyJ0Z3NvdXJjZSI6IihkaXJlY3QpIn0=; _tgpc=9340b179-a34c-509b-a1cb-1333e97890f5; _tgci=d8f7da95-90d0-575c-8e18-2b6ca5b16906; _tgrsid=19e1145a-5b2f-5a5c-80f2-0a28ebfea7ed; _tglksd=eyJzIjoiMTllMTE0NWEtNWIyZi01YTVjLTgwZjItMGEyOGViZmVhN2VkIiwic3QiOjE2NjI0MDc4Njc4MDZ9; _tgsc=19e1145a-5b2f-5a5c-80f2-0a28ebfea7ed:1662407867841
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: Apache
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Thu, 05 Dec 2019 10:57:37 GMT
accept-ranges: bytes
content-length: 1406
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: image/x-icon
cache-control: public, max-age=86400
expires: Tue, 06 Sep 2022 19:57:52 GMT
date: Mon, 05 Sep 2022 19:57:52 GMT
X-Firefox-Spdy: h2
dnacdn.net/dna
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
server: Kestrel
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=uqhF8180M0RITmhlJTJCZkMwOUJGQlhaMUN2czAzaFFWNjR5aGcwbFZ1VndlNjVXRUR6NTBoSHUlMkZkYUt3WjlVTXJsd1N0Qw; expires=Sat, 30 Sep 2023 19:57:52 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 249077
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
d31qbv1cthcecs.cloudfront.net/atrk.js
200 OK 4.3 kB URL HTTP/1.1 d31qbv1cthcecs.cloudfront.net/atrk.js
IP
File type ASCII text, with very long lines (4255), with no line terminators
Hash d89453438fbf10dcf4c13265c40d5160
02d5f4e46c94bf34e12b2d773f63f643ea2b3518
5e84ce936bc3e3844a5d9efb3ac7d28107fa17234fa2a6c2bf3491fc284f0d4f
GET /atrk.js HTTP/1.1
Host: d31qbv1cthcecs.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 4255
Connection: keep-alive
Date: Sat, 13 Aug 2022 04:02:04 GMT
Last-Modified: Tue, 27 Apr 2021 18:03:54 GMT
ETag: "d89453438fbf10dcf4c13265c40d5160"
Cache-Control: max-age=26920000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UJCzn705fQs6uCF3dE8sOs5r5oFdd4a3M9fzk8bIw01Q5kKmJiiDcQ==
Age: 2044549
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Mon, 05 Sep 2022 18:41:12 GMT
expires: Mon, 05 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 4600
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4956
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Last-Modified: Mon, 05 Sep 2022 18:35:17 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/fbevents.js
200 OK 27 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash 53e4933126779cbf269a5819d467ad4b
1c3c6b27a0660a44717be304d90834cf2f9cf3ce
ed5ad968f7d95b37c817e86b54062702bef60b1ffd3977248aad23072af06b87
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: xiDgOzI9wsioaMR5V6NLQP+jvvNdsPZ3n57V2Yr/2TeqjdY417hhZvGyf2bQuQoTGMn+oPoVPel6h/VHf3or9Q==
content-length: 26752
x-fb-trip-id: 1904183273
date: Mon, 05 Sep 2022 19:57:53 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 807694d9fc72d098fe9c89e1fad1a76e
7d47a52d046cc02c6a514d2599806d744ea9c826
61a35012931f43dd8489a956319dc6edbe9cc868233e317eab56e8c8278d7e88
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 19:57:53 GMT
Last-Modified: Mon, 05 Sep 2022 18:55:11 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fooVChEwobtCAUYEFLmetHRHToPULUc-7Q2Jm2Hk7Tb24sIfExRrZg==
Age: 3762
ocsp.sectigo.com/
200 OK 471 B IP
Hash a959bf325cab4759e09e7505651912ae
af20df57e6e3376e0d1f607f45e87e96e11797c3
a0972cee9ef30dd6b8214d5094eac658510b82b8505cb5b2161bcc89a6d305bf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 19:57:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 01:56:49 GMT
Expires: Sat, 10 Sep 2022 01:56:48 GMT
Etag: "af20df57e6e3376e0d1f607f45e87e96e11797c3"
Cache-Control: max-age=366534,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746189564c60b50c-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13283
Expires: Mon, 05 Sep 2022 23:39:16 GMT
Date: Mon, 05 Sep 2022 19:57:53 GMT
Connection: keep-alive
eb2.3lift.com/xuid?mid=7963&xuid=907dfe40-9471-4e01-a230-3cc9eb46ef88&dongle=3oy7
200 OK 37 B URL HTTP/2 eb2.3lift.com/xuid?mid=7963&xuid=907dfe40-9471-4e01-a230-3cc9eb46ef88&dongle=3oy7
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 3eacd0132310ea44cad756b378a3bc07
e2216a7e9b73f5cb0279351c78ce61c33475cea7
bb229a48bee31f5d54ca12dc9bd960c63a671f0d4be86a054c1d324a44499d96
GET /xuid?mid=7963&xuid=907dfe40-9471-4e01-a230-3cc9eb46ef88&dongle=3oy7 HTTP/1.1
Host: eb2.3lift.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:53 GMT
content-type: image/gif
content-length: 37
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j96&aip=1&a=512357655&t=pageview&_s=1&dl=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&dp=%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&ul=en-us&de=UTF-8&dt=Bet9ja%20Registration%20%E2%80%93%20Sign%20up%20today%20for%20Nigeria%E2%80%99s%20Number%201&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAAC~&jid=6547974&gjid=1443736079&cid=1040180908.1662407868&tid=UA-61138412-1&sf=80&_gid=393523744.1662407868&_r=1>m=2wg8v0WSXNG4S&z=448752518
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j96&aip=1&a=512357655&t=pageview&_s=1&dl=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&dp=%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&ul=en-us&de=UTF-8&dt=Bet9ja%20Registration%20%E2%80%93%20Sign%20up%20today%20for%20Nigeria%E2%80%99s%20Number%201&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAAC~&jid=6547974&gjid=1443736079&cid=1040180908.1662407868&tid=UA-61138412-1&sf=80&_gid=393523744.1662407868&_r=1>m=2wg8v0WSXNG4S&z=448752518
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j96&aip=1&a=512357655&t=pageview&_s=1&dl=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&dp=%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&ul=en-us&de=UTF-8&dt=Bet9ja%20Registration%20%E2%80%93%20Sign%20up%20today%20for%20Nigeria%E2%80%99s%20Number%201&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAEABAAAAAC~&jid=6547974&gjid=1443736079&cid=1040180908.1662407868&tid=UA-61138412-1&sf=80&_gid=393523744.1662407868&_r=1>m=2wg8v0WSXNG4S&z=448752518 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://register.bet9ja.com
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://register.bet9ja.com
date: Mon, 05 Sep 2022 19:57:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13283
Expires: Mon, 05 Sep 2022 23:39:16 GMT
Date: Mon, 05 Sep 2022 19:57:53 GMT
Connection: keep-alive
x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=5dd8dce7-b9a3-4d7a-9677-3201025c58b3&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D5dd8dce7-b9a3-4d7a-9677-3201025c58b3
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=5dd8dce7-b9a3-4d7a-9677-3201025c58b3&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D5dd8dce7-b9a3-4d7a-9677-3201025c58b3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncd?dsp_id=409&user_group=1&user_id=5dd8dce7-b9a3-4d7a-9677-3201025c58b3&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D5dd8dce7-b9a3-4d7a-9677-3201025c58b3 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:53 GMT
Location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_group=1&user_id=5dd8dce7-b9a3-4d7a-9677-3201025c58b3&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D5dd8dce7-b9a3-4d7a-9677-3201025c58b3
Set-Cookie: tuuid=72194cec-c2a8-4d8c-9fa5-44d1c4521434; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7fe061740ad833cfe7ff0fe078d6810d
15d0fc3fdced758b5797361bae0fd53341e0581d
5409b6775bca5afd03901975c61c27f267efe2c8a8e739f05ebc52a938c5a368
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F022243d2-ac74-4a81-b31f-104b203bf550.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5459
x-amzn-requestid: a75bf8a5-dc96-4a88-9de5-b79d1d62ff21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XxB_bFMFoAMFkEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631049fc-2685c90962d8af5f4a7b5908;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 05:58:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rZh0s85w1Nt6qZdZybNBcQHEXMWQIJvtAyCbF4oWsYUOlIKuNS5Fpg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:38:48 GMT
age: 76745
etag: "15d0fc3fdced758b5797361bae0fd53341e0581d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 290f6551c5ac539ea60810b135750f17
3633391a8dd87ef10fcb0d04d7b309738affc4a7
d94d133faaf232cf15b5c3f38f5b45d87d70bce0668d607b5c66a8d3f836540f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7830
x-amzn-requestid: c56af3b5-2c48-4243-b220-d56a9be47990
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3H4JoAMFiMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-23ec24d867e3e5906fffa1a6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VgP7BDBmd5A5bAmRgO88geep419uZ0TQop4jEmRkx-q9rX4PUJZOCQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:16:55 GMT
age: 78058
etag: "3633391a8dd87ef10fcb0d04d7b309738affc4a7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=13ebf54e-a5e0-4a6b-8771-91b69c742db6
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=13ebf54e-a5e0-4a6b-8771-91b69c742db6
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=13ebf54e-a5e0-4a6b-8771-91b69c742db6 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:53 GMT
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=13ebf54e-a5e0-4a6b-8771-91b69c742db6
Set-Cookie: tuuid=8d549d86-4314-482f-a913-a17f2b8179df; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30bf854fd3e27e2313a3d26fc43b9990
032acf1bfb0c8e2cbce8f2ff4d2964424b044951
7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GuATNx2xnWnEl0cr_2ZWZo_jOWbHlSBYksIeHFDoHAK9o5Tf0PPliQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:03:29 GMT
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
content-type: image/jpeg
age: 78864
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 0e67c7a0ceeea97801466561b664c0ba
855912e814f1d41d610e62486162b5161f939f1d
cd3ae9d74bdacb116c513b2c07abf7ed96464ac2410ccccdc00e89d09ee2f46d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5992
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Last-Modified: Mon, 05 Sep 2022 18:18:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c4b2d6a516e93799b54fe2bbd6630f86
b5a7380f294876dd308c7fde294f36a425c1be01
7463878d8967ff31d7ce20d5a4408c23ad59123032a990c21a47df0881edcb86
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5377
x-amzn-requestid: 2adc68e8-1889-4233-8ac4-e2a8d44ccbdd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X_4XzF1FoAMF3AA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63163a98-5918897d7de556f75bbfab34;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 18:06:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DpNb6dBygeDbRbFWIkeXYVddcgxlSVuq4y73JvG315Xp-wkwiDhZyQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 18:09:25 GMT
age: 6508
etag: "b5a7380f294876dd308c7fde294f36a425c1be01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
vars.hotjar.com/box-1ada912494ba7fc7aca15fcef1c2a7ae.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-1ada912494ba7fc7aca15fcef1c2a7ae.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2431), with no line terminators
Hash 0b3d3f4206ab84d8861a8cc4b2ddbe66
4561b7c0419b65db5c1314be2143bd1734e88d89
ec42652b198c82469afbe5e6e69312a25425c1fd38d379cf3761b328ecd48e4a
GET /box-1ada912494ba7fc7aca15fcef1c2a7ae.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1044
date: Wed, 13 Jul 2022 08:33:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "0b3d3f4206ab84d8861a8cc4b2ddbe66"
last-modified: Wed, 13 Jul 2022 08:32:20 GMT
strict-transport-security: max-age=86400; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CM3E2loi447Ng2f_ShabCMKUEJY-wibPDt-qps_IKMUy0E_6AAT9Ww==
age: 4706687
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 0e67c7a0ceeea97801466561b664c0ba
855912e814f1d41d610e62486162b5161f939f1d
cd3ae9d74bdacb116c513b2c07abf7ed96464ac2410ccccdc00e89d09ee2f46d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5992
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Last-Modified: Mon, 05 Sep 2022 18:18:01 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 313
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca50f9c56ff869b0b63ca71b1a9f8170
13b16ca74113dfd52ccf23e6bb39307fc713f984
76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tR9oeUGtH0NFZdnZj93V6HysPnKOTJhhiEOTNwYdq-4xIzeBZblrhA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:58:46 GMT
age: 79147
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4956
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Last-Modified: Mon, 05 Sep 2022 18:35:17 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10318189f33f071dda64249ab9c8c5bb
e5b5b649a243e5c004d9923d19d4421d1ea96d23
3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: uz2NbcE4AmOvFQkhJALSpXCGizilya0TuFcczfEwtV09cGXtgVNlpQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:08:58 GMT
age: 78535
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
script.hotjar.com/modules.d5eb3c97b67a0b8958ff.js
200 OK 66 kB URL HTTP/2 script.hotjar.com/modules.d5eb3c97b67a0b8958ff.js
IP
File type Unicode text, UTF-8 text, with very long lines (48715)
Hash 5a03435fb2b1019b1b00d7bc5c267f72
6d9116f703cb7fced1cfb7eba229302f4950e4b0
555555e6799149ac64f285eb30f78583dfa52fc0d23dbb75c357897873b8cb97
GET /modules.d5eb3c97b67a0b8958ff.js HTTP/1.1
Host: script.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 65509
date: Fri, 02 Sep 2022 09:50:06 GMT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: "5a03435fb2b1019b1b00d7bc5c267f72"
last-modified: Fri, 02 Sep 2022 09:49:47 GMT
strict-transport-security: max-age=86400; includeSubDomains
x-content-type-options: nosniff
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: A6VTR8Egt3sftx_grz3RnelQ26dQdxCQSeIHdypXCnZOVOzGNjZMAA==
age: 295667
X-Firefox-Spdy: h2
certify.alexametrics.com/atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=Bet9ja%20Registration%20%E2%80%93%20Sign%20up%20today%20for%20Nigeria%E2%80%99s%20Number%201&time=1662407868157&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&random_number=706258520&sess_cookie=0c9453571830f3afefc201d6a16&sess_cookie_flag=1&user_cookie=0c9453571830f3afefc201d6a16&user_cookie_flag=1&dynamic=true&domain=bet9ja.com&account=/5f9l1aQeSI14B&jsv=20130128&user_lang=en-US
200 OK 43 B URL HTTP/1.1 certify.alexametrics.com/atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=Bet9ja%20Registration%20%E2%80%93%20Sign%20up%20today%20for%20Nigeria%E2%80%99s%20Number%201&time=1662407868157&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&random_number=706258520&sess_cookie=0c9453571830f3afefc201d6a16&sess_cookie_flag=1&user_cookie=0c9453571830f3afefc201d6a16&user_cookie_flag=1&dynamic=true&domain=bet9ja.com&account=/5f9l1aQeSI14B&jsv=20130128&user_lang=en-US
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 221d8352905f2c38b3cb2bd191d630b0
d804b495cb9b84b9007a25b5d85f9ae674004cde
89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
GET /atrk.gif?frame_height=939&frame_width=1280&iframe=0&title=Bet9ja%20Registration%20%E2%80%93%20Sign%20up%20today%20for%20Nigeria%E2%80%99s%20Number%201&time=1662407868157&time_zone_offset=0&screen_params=1280x1024x24&java_enabled=0&cookie_enabled=1&ref_url=&host_url=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&random_number=706258520&sess_cookie=0c9453571830f3afefc201d6a16&sess_cookie_flag=1&user_cookie=0c9453571830f3afefc201d6a16&user_cookie_flag=1&dynamic=true&domain=bet9ja.com&account=/5f9l1aQeSI14B&jsv=20130128&user_lang=en-US HTTP/1.1
Host: certify.alexametrics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 17 Jan 2011 20:41:40 GMT
x-amz-meta-alexa-last-modified: 20110117123941
Accept-Ranges: bytes
Server: AmazonS3
Date: Mon, 05 Sep 2022 03:28:58 GMT
ETag: "221d8352905f2c38b3cb2bd191d630b0"
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PX12mfubrXtB9Y9HqSudJpjd9ldhXS4OK_8Oxxh1Ka2hUBw9aXVzrg==
Age: 59336
ocsp.sectigo.com/
200 OK 471 B IP
Hash a959bf325cab4759e09e7505651912ae
af20df57e6e3376e0d1f607f45e87e96e11797c3
a0972cee9ef30dd6b8214d5094eac658510b82b8505cb5b2161bcc89a6d305bf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 19:57:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 01:56:49 GMT
Expires: Sat, 10 Sep 2022 01:56:48 GMT
Etag: "af20df57e6e3376e0d1f607f45e87e96e11797c3"
Cache-Control: max-age=366534,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746189565c31b518-OSL
dnacdn.net/dna
200 OK 169 B IP
Hash d8a7456fcbccdfd158b42dece56894a9
2dc2fd5100ed1551df16ff4ff6f7d583e3dc586d
a6cc0304a58aab3ed46df076de5174bf562512eb7abc55299877f3bd22ff8ec8
GET /dna HTTP/1.1
Host: dnacdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Cookie: browser_data=uqhF8180M0RITmhlJTJCZkMwOUJGQlhaMUN2czAzaFFWNjR5aGcwbFZ1VndlNjVXRUR6NTBoSHUlMkZkYUt3WjlVTXJsd1N0Qw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
set-cookie: browser_data=YDh1H180M0RITmhlJTJCZkMwOUJGQlhaMUN2czAzaFFWNjR5aGcwbFZ1VndlNjVXRURjVzFLaUFBVXBMUHNPMDNkNXNHakI; expires=Sat, 30 Sep 2023 19:57:52 GMT; domain=dnacdn.net; path=/; secure; samesite=none
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 267446
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=13ebf54e-a5e0-4a6b-8771-91b69c742db6
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=13ebf54e-a5e0-4a6b-8771-91b69c742db6
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=13ebf54e-a5e0-4a6b-8771-91b69c742db6 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:53 GMT
Location: //match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
Content-Length: 0
Connection: keep-alive
x.bidswitch.net/syncd?dsp_id=409&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/syncd?dsp_id=409&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncd?dsp_id=409&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:53 GMT
Location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
Set-Cookie: tuuid=e3a2a9aa-4874-4c86-b766-e8d73a0d4dcd; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
ocsp.sectigo.com/
200 OK 471 B IP
Hash a959bf325cab4759e09e7505651912ae
af20df57e6e3376e0d1f607f45e87e96e11797c3
a0972cee9ef30dd6b8214d5094eac658510b82b8505cb5b2161bcc89a6d305bf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 19:57:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 01:56:49 GMT
Expires: Sat, 10 Sep 2022 01:56:48 GMT
Etag: "af20df57e6e3376e0d1f607f45e87e96e11797c3"
Cache-Control: max-age=366534,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 746189569d27b50c-OSL
gum.criteo.com/sid/json?origin=onetag&domain=bet9ja.com&sn=FirefoxSyncframe&so=0&topUrl=register.bet9ja.com&info=YDh1H180M0RITmhlJTJCZkMwOUJGQlhaMUN2czAzaFFWNjR5aGcwbFZ1VndlNjVXRURjVzFLaUFBVXBMUHNPMDNkNXNHakI&idsd=2110735591,-842125353&cw=1&lsw=1
200 OK 790 B URL HTTP/2 gum.criteo.com/sid/json?origin=onetag&domain=bet9ja.com&sn=FirefoxSyncframe&so=0&topUrl=register.bet9ja.com&info=YDh1H180M0RITmhlJTJCZkMwOUJGQlhaMUN2czAzaFFWNjR5aGcwbFZ1VndlNjVXRURjVzFLaUFBVXBMUHNPMDNkNXNHakI&idsd=2110735591,-842125353&cw=1&lsw=1
IP
Hash 0a707e38f264230b1b9f56494a8e29a9
440c767f00935a4f5dae9edcf22fa9121f550118
1559d6ee65f26ebdd21d00e2b29590b97f0fa67d4a3bb01bb935bc4cd67e2b8d
GET /sid/json?origin=onetag&domain=bet9ja.com&sn=FirefoxSyncframe&so=0&topUrl=register.bet9ja.com&info=YDh1H180M0RITmhlJTJCZkMwOUJGQlhaMUN2czAzaFFWNjR5aGcwbFZ1VndlNjVXRURjVzFLaUFBVXBMUHNPMDNkNXNHakI&idsd=2110735591,-842125353&cw=1&lsw=1 HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/syncframe?topUrl=register.bet9ja.com&origin=onetag
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
server-processing-duration-in-ticks: 5893822
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
200 OK 43 B URL HTTP/1.1 x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /ul_cb/syncd?dsp_id=409&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: image/gif
Date: Mon, 05 Sep 2022 19:57:53 GMT
Content-Length: 43
Connection: keep-alive
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&gjid=1443736079&_gid=393523744.1662407868&_u=YEBAAEAAAAAAAC~&z=1475780674
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&gjid=1443736079&_gid=393523744.1662407868&_u=YEBAAEAAAAAAAC~&z=1475780674
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&gjid=1443736079&_gid=393523744.1662407868&_u=YEBAAEAAAAAAAC~&z=1475780674 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://register.bet9ja.com
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://register.bet9ja.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 05 Sep 2022 19:57:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=d52066a8-de04-42b8-af88-166779a76db8
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=d52066a8-de04-42b8-af88-166779a76db8
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=d52066a8-de04-42b8-af88-166779a76db8 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:53 GMT
Location: //match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
Content-Length: 0
Connection: keep-alive
static.hotjar.com/c/hotjar-95609.js?sv=7
200 OK 2.9 kB URL HTTP/2 static.hotjar.com/c/hotjar-95609.js?sv=7
IP
File type ASCII text, with very long lines (3788)
Hash 974145045de0a34dde27fd1de74888a3
9c554403e27480ab6926837bba0e10cfb593cdaa
7d9d28ae9d68702b32476f5d74451ea711348f63e1cbe60a47c45d242cf891b4
GET /c/hotjar-95609.js?sv=7 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Mon, 05 Sep 2022 19:57:44 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=604800; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
etag: W/eebe387314b52e6c3ee2a2691ac22db7
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _lweFMnYw_-owu2RxgxBTJTCbC8tyWHzcpLylP61QHIhREuh_vDPRg==
age: 7
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash a959bf325cab4759e09e7505651912ae
af20df57e6e3376e0d1f607f45e87e96e11797c3
a0972cee9ef30dd6b8214d5094eac658510b82b8505cb5b2161bcc89a6d305bf
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 05 Sep 2022 19:57:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 03 Sep 2022 01:56:49 GMT
Expires: Sat, 10 Sep 2022 01:56:48 GMT
Etag: "af20df57e6e3376e0d1f607f45e87e96e11797c3"
Cache-Control: max-age=366534,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74618956f8c80b4d-OSL
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=b72d47ad-3b21-479c-80bb-e235deaa469d
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=b72d47ad-3b21-479c-80bb-e235deaa469d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=b72d47ad-3b21-479c-80bb-e235deaa469d HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:53 GMT
Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=b72d47ad-3b21-479c-80bb-e235deaa469d
Set-Cookie: tuuid=c53dd0ad-a3f1-4301-8f10-2225fb320c14; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
c=1662407873; path=/; expires=Tue, 05-Sep-2023 19:57:53 GMT; domain=.bidswitch.net; samesite=none; secure
Content-Length: 0
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1931a32d83e4feb5268887bcb07fcc1e
6fb75c21ced29544dd6d7c3b0ef79adf65718a39
d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vc.hotjar.io/sessions/95609?s=0.25&r=0.2134297536407581
204 No Content 0 B URL HTTP/2 vc.hotjar.io/sessions/95609?s=0.25&r=0.2134297536407581
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sessions/95609?s=0.25&r=0.2134297536407581 HTTP/1.1
Host: vc.hotjar.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.bet9ja.com
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
cache-control: no-store
date: Mon, 05 Sep 2022 19:57:53 GMT
server: Python/3.7 aiohttp/3.5.4
x-cache: Miss from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TAIZXLGlyPpbFZrn6txVhYbwR8Rtnw4-sYyXnGlwmSOfitby-YBrHw==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 01ade6ac314f0d11bbb6902a763ab439
82baa6517cb7271681795eb202c06bf15748aa3a
bd39dd5c784b3a35e11ab8cb3d12b117cdf5d661a844f87ca14fddb9dfbdc6e5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Mon, 05 Sep 2022 19:57:53 GMT
Last-Modified: Mon, 05 Sep 2022 19:26:39 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: O2VRqVMruGKQVBmrtDF4altAHFo_Z5omGM-Sc5CyHtMLntXJ5brnBw==
Age: 1874
redirect.prod.experiment.routing.cloudfront.aws.a2z.com/x.png
204 No Content 0 B URL HTTP/2 redirect.prod.experiment.routing.cloudfront.aws.a2z.com/x.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /x.png HTTP/1.1
Host: redirect.prod.experiment.routing.cloudfront.aws.a2z.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 19:57:53 GMT
server: Server
X-Firefox-Spdy: h2
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 19:57:53 GMT
X-Firefox-Spdy: h2
x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=b72d47ad-3b21-479c-80bb-e235deaa469d
302 Moved Temporarily 0 B URL HTTP/1.1 x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=b72d47ad-3b21-479c-80bb-e235deaa469d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&cb=b72d47ad-3b21-479c-80bb-e235deaa469d HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Mon, 05 Sep 2022 19:57:53 GMT
Location: //match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
Content-Length: 0
Connection: keep-alive
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 19:57:53 GMT
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=1905516222795124&ev=PageView&dl=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&rl=&if=false&ts=1662407868558&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662407868557.710813038&it=1662407868311&coo=false&rqm=GET
200 OK 44 B URL HTTP/2 www.facebook.com/tr/?id=1905516222795124&ev=PageView&dl=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&rl=&if=false&ts=1662407868558&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662407868557.710813038&it=1662407868311&coo=false&rqm=GET
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b798f4ce7359fd815df4bdf76503b295
f8cc6addf1707ad236ad9970b0a48f9733d07da5
10d8d42d73a02ddb877101e72fbfa15a0ec820224d97cedee4cf92d571be5caa
GET /tr/?id=1905516222795124&ev=PageView&dl=https%3A%2F%2Fregister.bet9ja.com%2F%3Fbtag%3Da_147784b_7c_1129267650%26s1%3Dwom8kskltimm83ri229q86gg%26promocode%3D%26clickid%3D%26p%3Da%26s%3Dnew&rl=&if=false&ts=1662407868558&sw=1280&sh=1024&v=2.9.79&r=stable&ec=0&o=30&fbp=fb.1.1662407868557.710813038&it=1662407868311&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
date: Mon, 05 Sep 2022 19:57:53 GMT
expires: Mon, 05 Sep 2022 19:57:53 GMT
last-modified: Fri, 21 Dec 2012 00:00:01 GMT
cache-control: no-cache, must-revalidate, max-age=0
set-cookie:
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 44
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da4692f1529a23a6cfb04391e382c936
7befa8be966f1128ff3c25be47986e7fa7087de9
d8460cc7719813509b4e38be06b8d184306f9451695c3e1974c1d06e5c29039c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3df811ac19fde08f49ef246c29cef161
e1c8d54b357adaf32e80427028cc884fa35959e0
e2749178e0bf0c4045a96388a58029ddd92d13a866021737864cd68e11317292
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=907dfe40-9471-4e01-a230-3cc9eb46ef88&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.bet9ja.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 19:57:53 GMT
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&_u=YEBAAEAAAAAAAC~&z=1796030783
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&_u=YEBAAEAAAAAAAC~&z=1796030783
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&_u=YEBAAEAAAAAAAC~&z=1796030783 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 05 Sep 2022 19:57:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&_u=YEBAAEAAAAAAAC~&z=1796030783
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&_u=YEBAAEAAAAAAAC~&z=1796030783
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j96&tid=UA-61138412-1&cid=1040180908.1662407868&jid=6547974&_u=YEBAAEAAAAAAAC~&z=1796030783 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 05 Sep 2022 19:57:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash eebb383a38a8f985b59a62820595689b
4d7bbcdeaa48e211743257c973ae2559b404d561
c8cf6bfc6865d4b25e7ef0df77478f47c4043b639aed462a2c6a0ba5439c3522
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 19:57:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.mgid.com/mgsensor.js?d=1662407867653&source=gtm
200 OK 0 B URL HTTP/2 a.mgid.com/mgsensor.js?d=1662407867653&source=gtm
IP
GET /mgsensor.js?d=1662407867653&source=gtm HTTP/1.1
Host: a.mgid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: application/javascript
vary: Accept-Encoding
x-mg-request-uuid: 6d8b69f9-e063-419c-9af3-470107de619c
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=BcoS72Jut9d70Oc53lbyhALfsJVUPJY4tCgfOJ5aGOc-1662407872-0-AY57jDsXEbLp3W+Lbg+3+WKcvsZDRiIdp5XA0N7GGDkdmjG6GFFY0O9TaSFhdT9cP6Ktcp/10QsGw7t++61xix4=; path=/; expires=Mon, 05-Sep-22 20:27:52 GMT; domain=.mgid.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 74618952cb060b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gum.criteo.com/syncframe?topUrl=register.bet9ja.com&origin=onetag
200 OK 0 B URL HTTP/2 gum.criteo.com/syncframe?topUrl=register.bet9ja.com&origin=onetag
IP
GET /syncframe?topUrl=register.bet9ja.com&origin=onetag HTTP/1.1
Host: gum.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: text/html; charset=utf-8
server: Kestrel
cache-control: private, max-age=3600
set-cookie: uid=1b6d894b-f412-4c3f-b5ec-c156330899b7; expires=Sat, 30 Sep 2023 19:57:52 GMT; domain=.criteo.com; path=/; secure; samesite=none
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
server-processing-duration-in-ticks: 627182
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
scripts.prdredir.com/safeframe
200 OK 0 B URL HTTP/2 scripts.prdredir.com/safeframe
IP
GET /safeframe HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: text/html; charset=utf-8
status: 200 OK
cache-control: no-cache
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 2cb983ee-f84a-4552-aacc-e120411bb272
x-download-options: noopen
x-runtime: 0.003589
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R) 6.0.11
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gHF%2Bohv4OZNQtpNEdZBphskKJ%2Fq2nOfr%2F5AXYUI71dwsg%2FIJwSXqLZvv8hdLt2c4dszmKJcgdRTN4fmVASNwVup7fOSjoo1CFrw2%2F4pflAjD8I5sUaRnheLUSG%2F4rgUxDeJGCANJ1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74618953fcac0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
res-odx.op-mobile.opera.com/sp.js
200 OK 0 B URL HTTP/2 res-odx.op-mobile.opera.com/sp.js
IP
GET /sp.js HTTP/1.1
Host: res-odx.op-mobile.opera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: application/javascript; charset=utf8
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: https://imasdk.googleapis.com
access-control-expose-headers: Content-Length,Content-Range
cache-control: public, max-age=2678400
cf-bgj: minify
cf-polished: origSize=99526
etag: W/"63101d99-184c6"
last-modified: Thu, 01 Sep 2022 02:48:57 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 22391
expires: Thu, 06 Oct 2022 19:57:52 GMT
server: cloudflare
cf-ray: 74618955ff4ab521-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ag.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 ag.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: ag.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 101374
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
rt.bet9ja.click/o/s9xylh?site_id=147784&s1=wom8kskltimm83ri229q86gg
302 Found 0 B URL HTTP/2 rt.bet9ja.click/o/s9xylh?site_id=147784&s1=wom8kskltimm83ri229q86gg
IP
GET /o/s9xylh?site_id=147784&s1=wom8kskltimm83ri229q86gg HTTP/1.1
Host: rt.bet9ja.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Mon, 05 Sep 2022 19:57:51 GMT
content-type: text/html; charset=UTF-8
location: https://register.bet9ja.com/?btag=a_147784b_7c_1129267650&s1=wom8kskltimm83ri229q86gg&promocode=&clickid=
server: nginx
cache-control: no-cache, private
content-security-policy: default-src 'self' ;script-src 'self' 'unsafe-inline' data: *.googleapis.com *.twitter.com *.facebook.net www.googleadservices.com www.gstatic.com www.google.com google.com google.co.uk http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io use.fontawesome.com storage.bannernow.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com tagmanager.google.com maxcdn.bootstrapcdn.com cdn-images.mailchimp.com use.fontawesome.com;img-src 'self' * data:;font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.fontawesome.com;connect-src 'self' fonts.googleapis.com insights.hotjar.com wss://*.hotjar.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;frame-src 'self' www.google.com vars.hotjar.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io storage.bannernow.com;worker-src 'self' self blob: 'unsafe-inline';
set-cookie: XSRF-TOKEN=eyJpdiI6ImVKZDRXT09sZG9MTTU3dEhPTm50bkE9PSIsInZhbHVlIjoiRkJsRnFTMlVVcXZQNmNPV3BYcnkyNE5jK3BzcFZlSFAyc2xCQUZBRFZ0WXRvSUtoUGlMWTB6MndLT3B1MWJDMGF2V1FYN0dQaGpndHBoV1QzaHJSMDNYdUhRN2c5XC8wMUc3TXV3SEd6QWtLc2UrSnVGQ3VHR3dVeXBLT0pxdXAzIiwibWFjIjoiZjhiNzIzMzllMTM1NmJmZmU1ZjBlZjdkMDI1YjY5NTMxYWIyOTdjOWI2MDhkODVmZmNhMWI1MmVlYWQxYjY5ZSJ9; expires=Mon, 05-Sep-2022 21:57:51 GMT; Max-Age=7200; path=/; samesite=lax
rvn_app_session=eyJpdiI6ImVieWFsTWRUTHZtRCszdWc0ZHZyckE9PSIsInZhbHVlIjoiTk43TGdRY21rWHpmS2hGYmVKU0JwcFh5YlljaEMyRVIzd0szV0xYRGw4V1B3K3pTc3Rybm9xaUVBTjlmYjNNc0xJdnN3XC8yYk5NUE5hOVd1N1N5XC9TQVh3YUg0ajd0and6YTVYWUZ5WVQ5SCs4Z2w4ajRtUml0cTVGNkR0ak1xNCIsIm1hYyI6IjM5NDM2YzQxMjQwY2I5ZTVlYzM0NTA3NDQ0YzFmMjAzYzJiMjYxYmQzNDMwMmVkMjNkZTZmNzY0Y2E5YzgwMTYifQ%3D%3D; expires=Mon, 05-Sep-2022 21:57:51 GMT; Max-Age=7200; path=/; httponly; samesite=lax
campaign_4_lp_7_aff_559=eyJpdiI6IkFyRUJ3VmI5bkE0ZHNmRGFBWjkxSnc9PSIsInZhbHVlIjoiVWsyTnE2OElTdVZjdGNwRUk4Tlk2WmVLazhyallPanVKSEhxdW1jQURsaDZHN1V2SGpxZnpBVWdub0pMcktKSzBpenFpa1wvZW9vVXNrazNFT2NVSmdnPT0iLCJtYWMiOiI5ZTRjNTA2NWZhMjg3ZGRiY2MzNzFkZjI0NTkxOGM2ODhmMTMxMDViZWU0ZDE0NzU2MzEwNTMxMmUzYzQxNTBlIn0%3D; expires=Tue, 06-Sep-2022 19:57:51 GMT; Max-Age=86400; path=/; httponly; samesite=lax
campaign_1=eyJpdiI6IlhZaVNGakR6RVNMZkZrVGZ2WEhQUnc9PSIsInZhbHVlIjoiNWR5NU51Q1VxVldzd0VXQnV1NjBhekxtSGIydTFvMWpGQUt1N1VrbkJUWnVPMTBOSGJkSEQ5b3FcL2JNZjF2Z3M3TTFpMHVcL05hRU11bXRNcmFuK1VBaHhJRTdJb1dvcytqajE4YXZ4dVJZSDRqZHhKbENwNlRxbUxSWVlRRDVsR3JSdlJZUzJQSnJUNzZScWYrU2hKZlE9PSIsIm1hYyI6IjhmN2JjMjU1ZGNlNjEwODU4Nzk1ZjRlZTVmZGU5MTY3ZWFjYjEzMzU5YWY5NTI4NDgxOGI3OWY0MTQxZmIxZjIifQ%3D%3D; expires=Wed, 05-Oct-2022 19:57:51 GMT; Max-Age=2592000; path=/; httponly; samesite=lax
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,500,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,500,700
IP
GET /css?family=Roboto:400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cnt.bet9ja.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Sep 2022 19:57:51 GMT
date: Mon, 05 Sep 2022 19:57:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dynamic.criteo.com/js/ld/ld.js?a=95210
200 OK 0 B URL HTTP/2 dynamic.criteo.com/js/ld/ld.js?a=95210
IP
GET /js/ld/ld.js?a=95210 HTTP/1.1
Host: dynamic.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://register.bet9ja.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: application/javascript; charset=utf-8
server: Kestrel
cache-control: public,max-age=10800
content-encoding: br
vary: Origin, Accept-Encoding
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; preload;
X-Firefox-Spdy: h2
gem.gbc.criteo.com/newidsd
200 OK 0 B URL HTTP/2 gem.gbc.criteo.com/newidsd
IP
GET /newidsd HTTP/1.1
Host: gem.gbc.criteo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gum.criteo.com/
Origin: https://gum.criteo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 19:57:52 GMT
content-type: application/json; charset=utf-8
server: Kestrel
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-origin: https://gum.criteo.com
server-processing-duration-in-ticks: 101630
strict-transport-security: max-age=31536000; preload;
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
18.192.108.151
142.251.1.157
23.36.79.43
104.18.19.243
178.250.0.157
31.13.72.36
54.154.80.107
93.184.220.29