bedziepieklo.org/media/plg_captcha_recaptcha_invisible/css/recaptcha_invisible.min.css?f75bf8286c4c843eb1bd60ff227d15cc
33 B URL bedziepieklo.org/media/plg_captcha_recaptcha_invisible/css/recaptcha_invisible.min.css?f75bf8286c4c843eb1bd60ff227d15cc
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with no line terminators
Hash 88d739ddde8c002959bdab2d7596ec8c
d8b25bf2ae97d3c5cd7c911869ba9c02936ea293
cbea24f0a38b1c12322427bd007ed28302e87c358a448f98bc71950ee525dc30
GET /media/plg_captcha_recaptcha_invisible/css/recaptcha_invisible.min.css?f75bf8286c4c843eb1bd60ff227d15cc HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 19:42:46 GMT
etag: "21-63125cb6-9d1b999a1664c95d;;;"
accept-ranges: bytes
content-length: 33
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
bedziepieklo.org/media/vendor/joomla-custom-elements/css/joomla-alert.min.css?0.2.0
834 B URL bedziepieklo.org/media/vendor/joomla-custom-elements/css/joomla-alert.min.css?0.2.0
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (3964), with no line terminators
Hash fd76284f715e5177b028f7b18b7fc0f6
a008c7a18674876e5960d3895ad8b362c4983355
70afa630568bdfee5b7ce97098eeb038d6a1bb9af0a406dd0682efc9c00a2a29
GET /media/vendor/joomla-custom-elements/css/joomla-alert.min.css?0.2.0 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 19:42:18 GMT
etag: "f7c-63125c9a-1c3b3a3a4d42df87;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 834
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/components/com_sppagebuilder/assets/css/font-awesome-v4-shims.css
4.0 kB URL bedziepieklo.org/components/com_sppagebuilder/assets/css/font-awesome-v4-shims.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (26519)
Hash 2e4c3da4eae1c876a281d6ca5a7a5b4c
92ad084aab53b7aa8c761cd66bdfb1f79b9caed7
cfff9ea502195a7b96fe38deca9188a59b758deeecc2cd4e78aea7d911e638c6
GET /components/com_sppagebuilder/assets/css/font-awesome-v4-shims.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "684d-62fb81c2-6b5a189cd89250a2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3986
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/components/com_sppagebuilder/assets/css/font-awesome-5.min.css
12 kB URL bedziepieklo.org/components/com_sppagebuilder/assets/css/font-awesome-5.min.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (58041)
Hash b9c89a03009a0a20130b5780e1f8c3a8
8e220af1ce81e9150dc83bd9373f1bb12ac31f0c
f21711de37df6d092dcdc4058c8f14796ff7f4e42979853c1c36839906d20594
GET /components/com_sppagebuilder/assets/css/font-awesome-5.min.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "e36f-62fb81c2-853f99c63a0d5498;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 12217
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/components/com_sppagebuilder/assets/css/animate.min.css
3.5 kB URL bedziepieklo.org/components/com_sppagebuilder/assets/css/animate.min.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (53270)
Hash 876dbbabd7e53cb513f18441a546453c
10317f25f932b2b6a61ed3799e1d1519d72bef63
1ec1c0519da1b0a13b0670687ffb7bf3d3761fb31fe26fe4f2ed816865a0eeda
GET /components/com_sppagebuilder/assets/css/animate.min.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "d0b7-62fb81c2-2ba4e0a822bff80b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3477
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/components/com_sppagebuilder/assets/css/magnific-popup.css
1.5 kB URL bedziepieklo.org/components/com_sppagebuilder/assets/css/magnific-popup.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (5920), with no line terminators
Hash 02bdfbb4e8a7572521ca983cda648465
a8305cb2190573214d1187a2ad4689c3483f49b9
bedfcf708d4eb8aa69f75e34183121fee89c8167559fc125f9b4e640d16973e7
GET /components/com_sppagebuilder/assets/css/magnific-popup.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "1720-62fb81c2-d1cc1714fdfe6c85;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1545
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/plugins/system/helixultimate/assets/css/system-j4.min.css
1.4 kB URL bedziepieklo.org/plugins/system/helixultimate/assets/css/system-j4.min.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (5202), with no line terminators
Hash 67feabc224dc2bb47badf49570f2d928
fe33ec7395190252f1e4ee4a315ee58259112fa4
26ad2efdce0cf4b83c342896236ab64d6136b0cfd1ea8ff6601f3794572c1598
GET /plugins/system/helixultimate/assets/css/system-j4.min.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Thu, 30 Mar 2023 06:42:12 GMT
etag: "1452-64252f44-19365ef885bd17cc;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1418
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/templates/gourmand/css/presets/default.css
739 B URL bedziepieklo.org/templates/gourmand/css/presets/default.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (3432), with no line terminators
Hash 9e1b158b3acfdff03a02e821f771bae9
85890b2c18dba74c427b18c5e0173b7c4780a325
928fe383fc51bd8a28cc36253210df0d95aeb1e2b6f860d9ccd84434973ad6a2
GET /templates/gourmand/css/presets/default.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Wed, 27 Sep 2023 13:00:00 GMT
etag: "d68-65142750-32aa351da9ca2b74;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 739
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/templates/gourmand/css/fa-v4-shims.css
3.7 kB URL bedziepieklo.org/templates/gourmand/css/fa-v4-shims.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (11222)
Hash 2917bffe7ac18e8d200360b332796617
7191e104a19fbb02ecafe6579eac053d8b2460a1
7e2cd4645a438078ed2cb5af580856fb1f369c28bdcb0737880733a12a0e1db7
GET /templates/gourmand/css/fa-v4-shims.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:41:27 GMT
etag: "4419-62fb8267-dee494594ddc0fa3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3742
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/components/com_sppagebuilder/assets/css/sppagebuilder.css
27 kB URL bedziepieklo.org/components/com_sppagebuilder/assets/css/sppagebuilder.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0b43f0fa903c766a3678faedbc8ef00f
86044afa35bfe0cc1be75ae504ee3a83a5523364
e0abc96abce7bf683e45cfd5d40a8b1afccc24a444574d06939fa59a9ecdca34
GET /components/com_sppagebuilder/assets/css/sppagebuilder.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "2d191-62fb81c2-d853fd22be8b45dd;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 26661
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/templates/gourmand/css/bootstrap.min.css
21 kB URL bedziepieklo.org/templates/gourmand/css/bootstrap.min.css
IP
ASN #41079 Cyber_Folks S.A.
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash 013e3690bdc1d155b671ccf686cb4f33
a6d680205ad83eb642630574d3ab02148e560931
503027f9521db9a07fad539432046367bdf1537853953be5bb8a3bdce13675a4
GET /templates/gourmand/css/bootstrap.min.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:41:27 GMT
etag: "27b72-62fb8267-93612505f9b49bf;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 21148
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/templates/gourmand/css/font-awesome.min.css
12 kB URL bedziepieklo.org/templates/gourmand/css/font-awesome.min.css
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (59105)
Hash 192e694054764fb0d69278f11e208045
f20e36d1cc884e37d7f1cd1ec034cf8bdfb69653
f753d3bc8c58fb7edaa716770916be521450cd7c43a3d8e657eea24915742349
GET /templates/gourmand/css/font-awesome.min.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Tue, 16 Aug 2022 11:41:27 GMT
etag: "e79b-62fb8267-554b6c4303892b27;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 12379
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/templates/gourmand/css/template.css
12 kB URL bedziepieklo.org/templates/gourmand/css/template.css
IP
ASN #41079 Cyber_Folks S.A.
File type Unicode text, UTF-8 text, with very long lines (65496)
Hash 511fd153f5c675dd2daa4206d1216558
7fe12fa8594c593e1e6f704d1fca2473c57cef26
10e53f58dee5b4fd075d70ec684e05cc1d3aa66137d22b04d57fa8ce72b0b01e
GET /templates/gourmand/css/template.css HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: text/css
last-modified: Wed, 27 Sep 2023 13:00:00 GMT
etag: "13827-65142750-e1471a7b5b0ddca1;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 12126
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288
26 B URL bedziepieklo.org/media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with no line terminators
Hash 4784e5a3120a814edde6c6088aa30964
04499b98c0305b16b373dff09fe79d1290976288
47084350921ff4f9e4908afef36723b84de4247eaf51c403950638b9126c8f4b
GET /media/legacy/js/jquery-noconflict.min.js?04499b98c0305b16b373dff09fe79d1290976288 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:42:48 GMT
etag: "1a-63125cb8-7124c8189126ee22;;;"
accept-ranges: bytes
content-length: 26
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/media/plg_captcha_recaptcha_invisible/js/recaptcha.min.js?f75bf8286c4c843eb1bd60ff227d15cc
270 B URL bedziepieklo.org/media/plg_captcha_recaptcha_invisible/js/recaptcha.min.js?f75bf8286c4c843eb1bd60ff227d15cc
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (485), with no line terminators
Hash c25619d28dcc99b315f4ae4a9e7e2d6c
f18fb65509944ac9e10df6bf765d170b0cdf9c25
da47416a63c0c41f5aebcc3c59f0c1600564045712efeb8c178d4c9cb233a448
GET /media/plg_captcha_recaptcha_invisible/js/recaptcha.min.js?f75bf8286c4c843eb1bd60ff227d15cc HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:04 GMT
etag: "1e5-63125cc8-9586b86ed000c26f;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 270
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/system/js/core.min.js?bea7b244e267b04087cedcf531f6fe827a8e101f
3.0 kB URL bedziepieklo.org/media/system/js/core.min.js?bea7b244e267b04087cedcf531f6fe827a8e101f
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (7669), with no line terminators
Hash f4f13d71feeaaa288eccaffe6309d89c
bea7b244e267b04087cedcf531f6fe827a8e101f
5103852e410d9e0d00c93a200a4118ab452ab8b864e5f570dd9615cdeb4fdead
GET /media/system/js/core.min.js?bea7b244e267b04087cedcf531f6fe827a8e101f HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:08 GMT
etag: "1df5-63125ccc-cabda01af88c1fae;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3016
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/alert.min.js?5.1.3
591 B URL bedziepieklo.org/media/vendor/bootstrap/js/alert.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (1262), with no line terminators
Hash e16b45808bdffb2ab259b711a96e814e
be2a433a2eec61de69bbfcbb245e18bcec502b59
325d293230e8032e357e59be0b127fcc4fdb20ae352bff38940f953410a394b2
GET /media/vendor/bootstrap/js/alert.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "4ee-63125cd4-6dbbd7c48303ebf5;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 591
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/button.min.js?5.1.3
505 B URL bedziepieklo.org/media/vendor/bootstrap/js/button.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (1070), with no line terminators
Hash 3ae790e46541f29818b0eeb835ed33d9
05aac591a81441673cd4ff0ccdf1e74c8b393020
d1eaaa7cd60994908a86357d68b967716277b8b9726ddc497ba8a7033baede88
GET /media/vendor/bootstrap/js/button.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "42e-63125cd4-cb8e1a332458272e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 505
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/collapse.min.js?5.1.3
1.8 kB URL bedziepieklo.org/media/vendor/bootstrap/js/collapse.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (5430), with no line terminators
Hash 40782b2c28d610a452134af05869f234
699e0ec36d56bc07912e4fec2d1b6373056ed28b
4a6a90f3037a9e0c98b45f2bac3fe3fabc5f52d531c4475d1ea7c28133a2b433
GET /media/vendor/bootstrap/js/collapse.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "1536-63125cd4-be8bc848823592a8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1774
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/modal.min.js?5.1.3
2.9 kB URL bedziepieklo.org/media/vendor/bootstrap/js/modal.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (9114), with no line terminators
Hash 412c23972eec786b8d1d6a601bff47ff
6bb4e1f33070db4d035f35c76d77356ef4462e3b
07c4d684030f903a7191181757a25f584ae0768553888d5b13fd67b103f17008
GET /media/vendor/bootstrap/js/modal.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "239a-63125cd4-58f8a78e4f7b138a;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 2851
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/offcanvas.min.js?5.1.3
1.5 kB URL bedziepieklo.org/media/vendor/bootstrap/js/offcanvas.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (4340), with no line terminators
Hash 87bb3bcad0ab445da79e39a90b53543b
deb969c2d166a8b66f092d9b075b126e2eaa1020
db5201a5d9594ab916f8e36bc860ad6700c96dea5bcdc6f83108fb0a1fe6fe9c
GET /media/vendor/bootstrap/js/offcanvas.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "10f4-63125cd4-9fcc28bbcf32803c;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1513
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/popover.min.js?5.1.3
4.1 kB URL bedziepieklo.org/media/vendor/bootstrap/js/popover.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (14586), with no line terminators
Hash 6ec03ccdf271243ba6307886019418e9
dc861a0521b2726b7bf8ef2754d316aa96403988
8caa0c0a84974842ec9f0172966233ac6c00e075ab70f675fc83c13e161de35b
GET /media/vendor/bootstrap/js/popover.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "38fa-63125cd4-6b6b1fd7b6bf611f;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 4104
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/scrollspy.min.js?5.1.3
1.7 kB URL bedziepieklo.org/media/vendor/bootstrap/js/scrollspy.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (4906), with no line terminators
Hash 01564c48df34c4447e5a5dbb3cf9ea03
f440c7497a06d2aea612428343c6636b5844d320
1f8461e9dbe15714311eb0c113612e5efdf0c5670a7dafb715baa9da3b1be31d
GET /media/vendor/bootstrap/js/scrollspy.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "132a-63125cd4-8c31f5700e648621;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1704
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/tab.min.js?5.1.3
1.5 kB URL bedziepieklo.org/media/vendor/bootstrap/js/tab.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (4209), with no line terminators
Hash d1c85163e338d291c1ec82c7c28870cd
386ebeadacad69ce3f3f406547e72bb270e7a0a1
3da1cdb0639fcda1374ed320ccfb17711f783e41a4fcaccb1475733eb1811210
GET /media/vendor/bootstrap/js/tab.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "1071-63125cd4-1a15691b96298c61;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1522
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/toast.min.js?5.1.3
1.2 kB URL bedziepieklo.org/media/vendor/bootstrap/js/toast.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (3714), with no line terminators
Hash 9bad59252df51964ef975a6178788309
9c65c582c6877b2056f14dbc6bbf145aaff75dcb
ffa9b1570be8ea3a1a8e6228633de44db6cce0f36195517896c7ad8aaae77f44
GET /media/vendor/bootstrap/js/toast.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "e82-63125cd4-ca52ae3ab982cf08;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1203
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/system/js/showon.min.js?bfc733e48a923aaffb3d959cd04f176bad7d7d52
1.1 kB URL bedziepieklo.org/media/system/js/showon.min.js?bfc733e48a923aaffb3d959cd04f176bad7d7d52
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (3427), with no line terminators
Hash e5a409a69cc0370e8b1d7664e2e9c808
bfc733e48a923aaffb3d959cd04f176bad7d7d52
f2a5ec2718af622c0945ae644cdeac14a458318330b71f9ee1e2e88b761db86b
GET /media/system/js/showon.min.js?bfc733e48a923aaffb3d959cd04f176bad7d7d52 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:04 GMT
etag: "d63-63125cc8-6f7ce212c57cec35;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1146
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/system/js/messages.min.js?7425e8d1cb9e4f061d5e30271d6d99b085344117
1.6 kB URL bedziepieklo.org/media/system/js/messages.min.js?7425e8d1cb9e4f061d5e30271d6d99b085344117
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (5419), with no line terminators
Hash 29393d6876c415988d12287821f432ec
7425e8d1cb9e4f061d5e30271d6d99b085344117
d5d2e5ff36a371736c74fc21effdb456e0fd7ad1d7a93dd44a65e24c03e64b8b
GET /media/system/js/messages.min.js?7425e8d1cb9e4f061d5e30271d6d99b085344117 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:08 GMT
etag: "152b-63125ccc-e27ed27ee26d399f;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1555
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/components/com_sppagebuilder/assets/js/jquery.parallax.js
377 B URL bedziepieklo.org/components/com_sppagebuilder/assets/js/jquery.parallax.js
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (898), with no line terminators
Hash 2263a15d623dacad22a4d1eee8f2fa82
2b50b47ccf6e2e0e8625b6956e8117381bd4c4c7
729937c36d78cfec1fd6e3d8529885be8254ccc286bc5b16e721896bd106bbc3
GET /components/com_sppagebuilder/assets/js/jquery.parallax.js HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "382-62fb81c2-c325a2a4e16b6e73;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 377
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
www.googletagmanager.com/gtag/js?id=G-LVY7L2B462
86 kB URL www.googletagmanager.com/gtag/js?id=G-LVY7L2B462
IP
File type ASCII text, with very long lines (3034)
Hash 39f0799f392d123dfa5fcf1a5681c637
34bcab7d5aa9894e9a44d438783a2e9987f1fcd6
04787cf077e98debd30d3c739bf3ce9619b24fb8ed2616fefffc069db6d3bd0f
GET /gtag/js?id=G-LVY7L2B462 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 08:36:17 GMT
expires: Tue, 28 Nov 2023 08:36:17 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86030
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bedziepieklo.org/components/com_sppagebuilder/assets/js/sppagebuilder.js
19 kB URL bedziepieklo.org/components/com_sppagebuilder/assets/js/sppagebuilder.js
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (29381)
Hash 336e2aef6088a5528d0199b30f94d87e
99a4586e16c23b591793b50f1c982e685359080c
df9d06b9ad5f1e00724a0efa904888ac078fd9a69713b838f67b9496fd39d481
GET /components/com_sppagebuilder/assets/js/sppagebuilder.js HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "12125-62fb81c2-2a84eb20130b3f4d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 18856
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/components/com_sppagebuilder/assets/js/jquery.magnific-popup.min.js
7.0 kB URL bedziepieklo.org/components/com_sppagebuilder/assets/js/jquery.magnific-popup.min.js
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (20090)
Hash 4f2d6a1c55076612823b27988f44f5c4
517ccc357670e3550e9d3db45390db4b02ff7829
2f7a4ead4f2d60a4826fbb8c2541e76298028f3a1a12c4aa9745a6875d964650
GET /components/com_sppagebuilder/assets/js/jquery.magnific-popup.min.js HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Tue, 16 Aug 2022 11:38:42 GMT
etag: "4efb-62fb81c2-8a1cd29e91547c3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 7021
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/templates/gourmand/js/main.js
2.3 kB URL bedziepieklo.org/templates/gourmand/js/main.js
IP
ASN #41079 Cyber_Folks S.A.
Hash 0491618258762bd1a60aa5730e5f8145
1bc1c1a4aac09d9f212558c6ac8cb606921a61fa
0ab4011c50a07e5958479a0dbe82641cf575d9a2cef1d4ac3d9ea5f2abda1e64
GET /templates/gourmand/js/main.js HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Tue, 16 Aug 2022 11:41:27 GMT
etag: "2124-62fb8267-11daada9ec533449;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 2325
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/dropdown.min.js?5.1.3
2.8 kB URL bedziepieklo.org/media/vendor/bootstrap/js/dropdown.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (8427), with no line terminators
Hash 026c5c2dadd6c055305785142d5f3631
738e6498dc0fb3d8062be7e118f5b49425c13a78
be67ee104529610309755bba9fffa7c90b0c4d2df2dd8d88f5ef3456962dd201
GET /media/vendor/bootstrap/js/dropdown.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "20eb-63125cd4-cca8474d6e565074;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 2782
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/carousel.min.js?5.1.3
3.0 kB URL bedziepieklo.org/media/vendor/bootstrap/js/carousel.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (9751), with no line terminators
Hash 16e0c594807af28ebe09e519feb4dca0
8d8628049611dc00b124d740b0ceb7a3017a990b
b24341d89e3853b9a3457c119dc28b2130b6bb9b1d94337112d03db9508b51bc
GET /media/vendor/bootstrap/js/carousel.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "2617-63125cd4-5c12e88aa774b930;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 2996
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/images/2023/05/10/bedzoepieklox2.png
270 kB URL bedziepieklo.org/images/2023/05/10/bedzoepieklox2.png
IP
ASN #41079 Cyber_Folks S.A.
File type PNG image data, 1182 x 1182, 8-bit/color RGBA, non-interlaced\012- data
Size 270 kB (270281 bytes)
Hash 23c108567a904e2eeebfeae036a22ea1
38ead3cbc2eade3559f5c285913eae162cd79db2
aeebcb55b219f0adaf70f8fa7ca5be04cf327ecf8d72cb1480e8739f3de9a8a4
GET /images/2023/05/10/bedzoepieklox2.png HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/png
last-modified: Wed, 10 May 2023 07:13:19 GMT
etag: "41fc9-645b440f-6aff990b452aa92a;;;"
accept-ranges: bytes
content-length: 270281
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2023/05/11/thermomix.jpg
41 kB URL bedziepieklo.org/images/2023/05/11/thermomix.jpg
IP
ASN #41079 Cyber_Folks S.A.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 569x513, components 3\012- data
Hash 9b0520bcf9c8cdc5a14e008cc420ad87
3833bcbff62778fc8f3fa1c8abf302c5a26878cc
0610693c1ab3fd18e3d51d48c265cd13232dd98a60f394e472ac3779c7305db1
GET /images/2023/05/11/thermomix.jpg HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/jpeg
last-modified: Thu, 11 May 2023 09:51:35 GMT
etag: "a028-645cbaa7-33b958d42c087092;;;"
accept-ranges: bytes
content-length: 41000
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2022/08/16/chilli.jpg
128 kB URL bedziepieklo.org/images/2022/08/16/chilli.jpg
IP
ASN #41079 Cyber_Folks S.A.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:16 15:17:54], baseline, precision 8, 1200x324, components 3\012- data
Size 128 kB (128147 bytes)
Hash 078bc898cc31f21e433f4aff9b01cf13
fda66580b777dc2c8782ab50485e3d5e20b1b27c
f679d7a737587477eea2c350ba7a5ab404263004575fbcce8e254934d199a06f
GET /images/2022/08/16/chilli.jpg HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/jpeg
last-modified: Tue, 16 Aug 2022 13:18:26 GMT
etag: "1f493-62fb9922-7f9e8580368b3082;;;"
accept-ranges: bytes
content-length: 128147
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2022/08/16/66392086_1150833515127563_5751255178380574720_n.png
77 kB URL bedziepieklo.org/images/2022/08/16/66392086_1150833515127563_5751255178380574720_n.png
IP
ASN #41079 Cyber_Folks S.A.
File type PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced\012- data
Hash 64bd14b3ec90ebd3e52635aedbd24115
80024a1ac10a071025293158181006fcf891322c
5517882fe339a00cc95ebd213599242d1cc92fed1e4842f78b607351e9fd5061
GET /images/2022/08/16/66392086_1150833515127563_5751255178380574720_n.png HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/png
last-modified: Tue, 16 Aug 2022 12:47:35 GMT
etag: "12b0c-62fb91e7-5d1319cddadeca28;;;"
accept-ranges: bytes
content-length: 76556
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2022/08/16/logo_kobylka.jpg
19 kB URL bedziepieklo.org/images/2022/08/16/logo_kobylka.jpg
IP
ASN #41079 Cyber_Folks S.A.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Macintosh), datetime=2020:03:09 09:53:31], baseline, precision 8, 378x152, components 3\012- data
Hash cae45b998b3174a8f12b3b17d1be7698
3ae370d40ba6d73595b539091130f10b9b811ac3
c43afdc0049bd52ec6191442755d4fc09702d260415cdcc1783fa1f9d975e4eb
GET /images/2022/08/16/logo_kobylka.jpg HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/jpeg
last-modified: Tue, 16 Aug 2022 12:49:34 GMT
etag: "4aeb-62fb925e-8b1b809ce9cf2030;;;"
accept-ranges: bytes
content-length: 19179
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2022/08/16/dzikibill.jpg
23 kB URL bedziepieklo.org/images/2022/08/16/dzikibill.jpg
IP
ASN #41079 Cyber_Folks S.A.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 274x328, components 3\012- data
Hash b8cf115a4d3f427de36b96ef789195f9
b5de017b7a75aa46685028960676bd4455a595c1
8079dbe6ecb1e475c90017bdd5b448baa270eaf55e89f891ed4d79ab3dedbfe9
GET /images/2022/08/16/dzikibill.jpg HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/jpeg
last-modified: Tue, 16 Aug 2022 12:54:40 GMT
etag: "5b57-62fb9390-245b905655ad9280;;;"
accept-ranges: bytes
content-length: 23383
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2023/05/10/zarcar.png
3.6 kB URL bedziepieklo.org/images/2023/05/10/zarcar.png
IP
ASN #41079 Cyber_Folks S.A.
File type PNG image data, 187 x 78, 8-bit colormap, non-interlaced\012- data
Hash aeb0803fc891b8dd453126480a246fef
4d0d3384b67a7648d993f83fae27ac63a8afcc8f
d2edd433767c0243d91b6979a61b4281b4ab7a1afc508cf266155cbd5410e878
GET /images/2023/05/10/zarcar.png HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/png
last-modified: Wed, 10 May 2023 07:14:53 GMT
etag: "df2-645b446d-875aab228ee85743;;;"
accept-ranges: bytes
content-length: 3570
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2023/05/10/kartonat.png
2.6 kB URL bedziepieklo.org/images/2023/05/10/kartonat.png
IP
ASN #41079 Cyber_Folks S.A.
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash 4f814c0ffcb3698d5cea035d62c1910a
903a72ea0757ef29e36b90244ac8a34f4b4d671e
9c76d946102da31a12714c256b0ff4d75d6e75ad5f3491946716e6aae7493747
GET /images/2023/05/10/kartonat.png HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/png
last-modified: Wed, 10 May 2023 07:14:50 GMT
etag: "a04-645b446a-b437015e2ae2773;;;"
accept-ranges: bytes
content-length: 2564
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2023/05/10/fama.png
2.6 kB URL bedziepieklo.org/images/2023/05/10/fama.png
IP
ASN #41079 Cyber_Folks S.A.
File type PNG image data, 130 x 130, 8-bit colormap, non-interlaced\012- data
Hash bbe4c3fa409f7ac93b81662b1dc5095b
1f1b3bea9cdd6c5e735fe6d072f32d4db9e3222c
05bff71a7d3401c5e0b05a621ae757e8baefd57b98696cc028fd43ad1d36f4bc
GET /images/2023/05/10/fama.png HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/png
last-modified: Wed, 10 May 2023 07:16:34 GMT
etag: "a19-645b44d2-fe6d002b2f5c4a0f;;;"
accept-ranges: bytes
content-length: 2585
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/media/vendor/jquery/js/jquery.min.js?3.6.0
30 kB URL bedziepieklo.org/media/vendor/jquery/js/jquery.min.js?3.6.0
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /media/vendor/jquery/js/jquery.min.js?3.6.0 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:42:18 GMT
etag: "15d9d-63125c9a-8c88ca6fd1f4d4fb;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 30267
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/dom.min.js?5.1.3
6.0 kB URL bedziepieklo.org/media/vendor/bootstrap/js/dom.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (17424), with no line terminators
Hash 449d4dff01797afe214d8d72036c27bf
71ae0fbc7bfabf6c66a3d61296c509210614cefb
caf0f7492c40aabf0c43de093ce07997dd67a971599b94926094f48fef8175dc
GET /media/vendor/bootstrap/js/dom.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/media/vendor/bootstrap/js/collapse.min.js?5.1.3
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:18 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "4410-63125cd4-ddafe05083340cfb;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 6013
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
bedziepieklo.org/media/vendor/bootstrap/js/popper.min.js?5.1.3
7.6 kB URL bedziepieklo.org/media/vendor/bootstrap/js/popper.min.js?5.1.3
IP
ASN #41079 Cyber_Folks S.A.
File type ASCII text, with very long lines (24745), with no line terminators
Hash fe1ec41ede8d914ab7af472b2beabef7
51bdba4f2b0597279943c28957c7c7b2ecc42338
82e73805f16ce8a697400a79de8b3452424157e5836912953df55366370d50cc
GET /media/vendor/bootstrap/js/popper.min.js?5.1.3 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/media/vendor/bootstrap/js/popover.min.js?5.1.3
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:18 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 19:43:16 GMT
etag: "60a9-63125cd4-a5f287613f506fc6;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 7635
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
bedziepieklo.org/images/2022/08/24/lm_logo2019.02.png
654 kB URL bedziepieklo.org/images/2022/08/24/lm_logo2019.02.png
IP
ASN #41079 Cyber_Folks S.A.
File type PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced\012- data
Size 654 kB (654543 bytes)
Hash 54655d92a4d957e38764d7f1d3395422
703fbf9224e2a3e95da6fc785f73308d1f671cdd
f869d5b3c2bb15663c060f3c0d87f20557ee0579fc88c46673e8e5f068f326d8
GET /images/2022/08/24/lm_logo2019.02.png HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:17 GMT
content-type: image/png
last-modified: Wed, 24 Aug 2022 06:34:57 GMT
etag: "9fccf-6305c691-f27f40226df683a7;;;"
accept-ranges: bytes
content-length: 654543
date: Tue, 28 Nov 2023 08:36:17 GMT
server: LiteSpeed
vary: User-Agent
pl21121155.toprevenuegate.com/d5/81/d7/d581d79a55b1c15b4bda499be7965608.js
23 kB URL pl21121155.toprevenuegate.com/d5/81/d7/d581d79a55b1c15b4bda499be7965608.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59694), with no line terminators
Hash 1226a339c6f495fdc7d40d6d6d3452ec
6bd453c5aa365bc14da87880d9d62673f56dd482
f98fd113b63009d1cbd437e83402faebc6f87eef6dcc854df31b39e07f149820
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /d5/81/d7/d581d79a55b1c15b4bda499be7965608.js HTTP/1.1
Host: pl21121155.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 08:36:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6b6f74dc2c0ee698649374d8f8940c33
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pl21121411.toprevenuegate.com/860ac2feae2722970f8f96040e3d26c8/invoke.js
9.3 kB URL pl21121411.toprevenuegate.com/860ac2feae2722970f8f96040e3d26c8/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25055), with no line terminators
Hash f6b5759a0bddd8746dcd939cfffd3579
2ad60503d6590226cd7be2824266fb029b12d8ab
8c68d138936de474edd16f2478947e4908b4a3dd02ea16167df21df4944765b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /860ac2feae2722970f8f96040e3d26c8/invoke.js HTTP/1.1
Host: pl21121411.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 801a71c33eb7eb1fb16faa2f79fe9b87
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.highcpmcreativeformat.com/a0d7c40304e8f3b4f32dafe5230dc24c/invoke.js
11 kB URL www.highcpmcreativeformat.com/a0d7c40304e8f3b4f32dafe5230dc24c/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (29592), with no line terminators
Hash 5f8f518b45b8eaaf98939c62a17b50bf
f8e3193734df64c63ad2a34f6746801cdab56842
a3d7f1f4861cfb090f85eb3c076d587ee16109b6313012e2e67f7b1d91c213e9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a0d7c40304e8f3b4f32dafe5230dc24c/invoke.js HTTP/1.1
Host: www.highcpmcreativeformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 135e15aeefddc5cb2eb71f53fd4dd652
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pl21175764.toprevenuegate.com/be/2c/b0/be2cb0ab9067049b49e8e32facf16885.js
15 kB URL pl21175764.toprevenuegate.com/be/2c/b0/be2cb0ab9067049b49e8e32facf16885.js
IP
File type ASCII text, with very long lines (42804), with no line terminators
Hash 9b4f2a0a1cdf3656f8889b4c3273c67e
659257fe8ede75a1d0343d066d9ad6aa8a3583ec
800e0911796004b72324e2f45cdbcf9f6127d2d479817dd5ccd48d1e60c96574
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /be/2c/b0/be2cb0ab9067049b49e8e32facf16885.js HTTP/1.1
Host: pl21175764.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f6870a8224306a98861b3a3b8defd79a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.mok-kobylka.pl/images/LOGO_MOK_NEW.png
121 kB URL www.mok-kobylka.pl/images/LOGO_MOK_NEW.png
IP
ASN #39566 Smarthost sp. z o.o.
File type PNG image data, 1794 x 686, 8-bit/color RGBA, non-interlaced\012- data
Size 121 kB (120691 bytes)
Hash d8abda5fc8649659ddd76b6b2aeb9f41
c130ceb0dd4aa826fa8bd97badcf3e5f161a4f7d
9fa9b00237b928083018550a754e26d9a48d4e7e8b0e8ea30ef4c67fd8ae01a9
GET /images/LOGO_MOK_NEW.png HTTP/1.1
Host: www.mok-kobylka.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 08:36:18 GMT
Server: Apache
Last-Modified: Fri, 16 Jul 2021 09:48:21 GMT
Accept-Ranges: bytes
Content-Length: 120691
Expires: Wed, 27 Nov 2024 08:36:18 GMT
X-Content-Type-Options: nosniff, nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: sameorigin
Cache-Control: max-age=31536000, public
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: image/png
proftrafficcounter.com/stats
40 B URL proftrafficcounter.com/stats
IP
File type ASCII text, with no line terminators
Hash ddd50a41d4a7bff61dc11ff37f3b5529
be90b1a1f0f3d1d6c4260f78c8da1983df3051c0
a86b96f9474fe70f03dc494a0051fbe9802d0b2f9c99a696e306e3a53ebe888b
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
Origin: https://bedziepieklo.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://bedziepieklo.org
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=e78f5392-2678-4a25-94cf-e87b49a6a3d0:3:1; expires=Fri, 25 Nov 2033 08:36:18 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
40 B URL proftrafficcounter.com/stats
IP
File type ASCII text, with no line terminators
Hash c062a564b31f1874f052506cf603f48a
8dc97d14caf6363e1e2961f5eaed78f304c3cc7c
3a4a2c0459b1ebd5e3f2c216d37b8f1c50ddd941f7a88be9ed08263381bcd020
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
Origin: https://bedziepieklo.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://bedziepieklo.org
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=78b59c75-757b-48a6-8cb0-56975389c0e9:1:1; expires=Fri, 25 Nov 2033 08:36:18 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
40 B URL proftrafficcounter.com/stats
IP
File type ASCII text, with no line terminators
Hash 451d69533454ea7c366dba518f771822
8f7a601eb65f37052b5f9c2753a71e2210026dd2
58b6549ffe56c3f8dfdd0cc52b9d84d3b77d3425e67329f7aafc03a6ebfbfced
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
Origin: https://bedziepieklo.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://bedziepieklo.org
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=645dadab-0d28-4b55-8ac4-6c2e2563d43d:1:1; expires=Fri, 25 Nov 2033 08:36:18 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
40 B URL proftrafficcounter.com/stats
IP
File type ASCII text, with no line terminators
Hash 569764b765900a0bdfb9b17bbcc71e01
472570442b52b60a9b67972b2ad5610495d00043
8ad7894158d0470fbc0aad4af2e61604ff317f82cf2ad745d38f5596351bbe55
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
Origin: https://bedziepieklo.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:18 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://bedziepieklo.org
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=3e740095-3118-4f8a-a236-e9e64415cb5f:1:1; expires=Fri, 25 Nov 2033 08:36:18 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d9751.004676170223!2d21.1965589!3d52.3386601!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x471ec5f41d1f953d%3A0x688ec2fdf8814e29!2sPlac%2015-go%20Sierpnia!5e0!3m2!1spl!2spl!4v1683710450739!5m2!1spl!2spl
1.2 kB URL www.google.com/maps/embed?pb=!1m14!1m8!1m3!1d9751.004676170223!2d21.1965589!3d52.3386601!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x471ec5f41d1f953d%3A0x688ec2fdf8814e29!2sPlac%2015-go%20Sierpnia!5e0!3m2!1spl!2spl!4v1683710450739!5m2!1spl!2spl
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2390)
Hash 9336e0fe796b9d102c93aaf28bf23c0c
dcc02d1b57b6534357ac056c64547b21e940e99a
717da260835b1a4e436295b635820eb6b6e6a00c6638b05261a409e9307e5616
GET /maps/embed?pb=!1m14!1m8!1m3!1d9751.004676170223!2d21.1965589!3d52.3386601!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x471ec5f41d1f953d%3A0x688ec2fdf8814e29!2sPlac%2015-go%20Sierpnia!5e0!3m2!1spl!2spl!4v1683710450739!5m2!1spl!2spl HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bedziepieklo.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
pragma: no-cache
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-JR4zrj68p0LLEwouEKCoHA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-type: text/html; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 28 Nov 2023 08:36:18 GMT
server: scaffolding on HTTPServer2
content-length: 1225
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
proceedglad.com/pixel/purst?dl=0&th=0&sc=0&rs=1225&rd=1225&fd=817&bv=23.11.v.9&tmpl=70
0 B URL proceedglad.com/pixel/purst?dl=0&th=0&sc=0&rs=1225&rd=1225&fd=817&bv=23.11.v.9&tmpl=70
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1225&rd=1225&fd=817&bv=23.11.v.9&tmpl=70 HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:18 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
bedziepieklo.org/templates/gourmand/fonts/fa-brands-400.woff2
78 kB URL bedziepieklo.org/templates/gourmand/fonts/fa-brands-400.woff2
IP
ASN #41079 Cyber_Folks S.A.
File type Web Open Font Format (Version 2), TrueType, length 78472, version 331.-31327\012- data
Hash 0c9f225e8f69c622f681cf1ed973cc3d
9e355abda14ee62a7987b2ba7e2e887d33337e25
529d0a7b3944929222155bca3272ba1a87acc2faa09b2ed26a713872b7ff8794
GET /templates/gourmand/fonts/fa-brands-400.woff2 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://bedziepieklo.org/templates/gourmand/css/font-awesome.min.css
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:18 GMT
content-type: font/woff2
last-modified: Tue, 16 Aug 2022 11:41:27 GMT
etag: "13288-62fb8267-44f8a0caa57e2a84;;;"
accept-ranges: bytes
content-length: 78472
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/templates/gourmand/fonts/fa-regular-400.woff2
14 kB URL bedziepieklo.org/templates/gourmand/fonts/fa-regular-400.woff2
IP
ASN #41079 Cyber_Folks S.A.
File type Web Open Font Format (Version 2), TrueType, length 13588, version 331.-31327\012- data
Hash 847712aaabbeba674afdda86d31cab17
c07631a91ee71c0a1a84a3151db42b1f2d9a9692
b3b8c21edfe6c5e402fdc607366fd8d15949a65914f58134733dc68922bc8d61
GET /templates/gourmand/fonts/fa-regular-400.woff2 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://bedziepieklo.org/templates/gourmand/css/font-awesome.min.css
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:18 GMT
content-type: font/woff2
last-modified: Tue, 16 Aug 2022 11:41:27 GMT
etag: "3514-62fb8267-8471ec9c7b5a6cfc;;;"
accept-ranges: bytes
content-length: 13588
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/templates/gourmand/fonts/fa-solid-900.woff2
80 kB URL bedziepieklo.org/templates/gourmand/fonts/fa-solid-900.woff2
IP
ASN #41079 Cyber_Folks S.A.
File type Web Open Font Format (Version 2), TrueType, length 80252, version 331.-31327\012- data
Hash 9ae050d1876ac1763eb6afe4264e6d5a
72344eab2e7431eec313caa21f266cbfda7caf60
6c916669cf923b4f1b2db5c5107c83b6ca205e7ad0dcd840b251e63f0c8d28a2
GET /templates/gourmand/fonts/fa-solid-900.woff2 HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://bedziepieklo.org/templates/gourmand/css/font-awesome.min.css
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:18 GMT
content-type: font/woff2
last-modified: Tue, 16 Aug 2022 11:41:27 GMT
etag: "1397c-62fb8267-e40d37df836970e5;;;"
accept-ranges: bytes
content-length: 80252
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2022/08/16/tlo.jpg
401 kB URL bedziepieklo.org/images/2022/08/16/tlo.jpg
IP
ASN #41079 Cyber_Folks S.A.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:16 15:23:58], baseline, precision 8, 3942x1400, components 3\012- data
Size 401 kB (401043 bytes)
Hash b5f0a7c242acb944f52b7d0a12e41003
5835a4db9a2e2f8aa19639af4ca366ecdd3b409d
17a9f17e85e58088b7c07d5744adeadecb8c6d2689a16d65efc20d6ef8326091
GET /images/2022/08/16/tlo.jpg HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:18 GMT
content-type: image/jpeg
last-modified: Tue, 16 Aug 2022 13:24:21 GMT
etag: "61e93-62fb9a85-2ac743f7fc135d53;;;"
accept-ranges: bytes
content-length: 401043
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
vary: User-Agent
bedziepieklo.org/images/2022/08/16/tlo1.jpg
612 kB URL bedziepieklo.org/images/2022/08/16/tlo1.jpg
IP
ASN #41079 Cyber_Folks S.A.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2022:08:16 15:26:20], baseline, precision 8, 3942x1400, components 3\012- data
Size 612 kB (612128 bytes)
Hash 0b06bca4020402d00a52829f3f5a1c56
77f31f1a1548d81be62a9556ae5d77e80532c960
4285b406eb576009cf1dd3bbbd453218e9a01284a642f32f3050781c9e3280cb
GET /images/2022/08/16/tlo1.jpg HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Tue, 05 Dec 2023 08:36:18 GMT
content-type: image/jpeg
last-modified: Tue, 16 Aug 2022 13:26:44 GMT
etag: "95720-62fb9b14-cc40789a8390f307;;;"
accept-ranges: bytes
content-length: 612128
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
vary: User-Agent
www.youtube.com/s/player/63e90c30/www-player.css
49 kB URL www.youtube.com/s/player/63e90c30/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash fe1c53d51cb92c2a5d115aaa327f89ff
121246c952d00cbe64196f9afb88823f1190ce13
0d3110815e47322fa8c8821c53234f4f90ff9107501b4d74741dfe6e8250e24a
GET /s/player/63e90c30/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48811
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 08:33:35 GMT
expires: Tue, 26 Nov 2024 08:33:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 02:45:49 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 86564
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=pl®ion=pl&callback=onApiLoad
63 kB URL maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=pl®ion=pl&callback=onApiLoad
IP
File type ASCII text, with very long lines (2470)
Hash 97219f8d7052c1b2f7719f2fd6487ec7
a2de219f47426463c96b5a7a5e58c94f7654a998
97f9542ed5e6bf6065cb0a13931c7343b95d884b8a9e4592d7ae0e2240f59b17
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=pl®ion=pl&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
timing-allow-origin: *
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=1800
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 28 Nov 2023 08:36:19 GMT
server: scaffolding on HTTPServer2
content-length: 63300
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
joblouder.com/ntv.json?key=860ac2feae2722970f8f96040e3d26c8&vstc=4
17 kB URL joblouder.com/ntv.json?key=860ac2feae2722970f8f96040e3d26c8&vstc=4
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (17274), with no line terminators
Hash dd2b7b83973a05496ab4c6ffc312f1b0
e0fb6351e79441faa440bc20cb4b40c01f4aeb13
01e1012a4d6d0f40b0dc0f26be4219c6d1f9aef20e57c243a7acff4dbe9bc12f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=860ac2feae2722970f8f96040e3d26c8&vstc=4 HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
Origin: https://bedziepieklo.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: application/json
Content-Length: 17274
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://bedziepieklo.org
Access-Control-Allow-Origin: https://bedziepieklo.org
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=21020912; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
nlec860ac2feae2722970f8f96040e3d26c8=[2019380,2229329,2229337,2229333]; expires=Tue, 28 Nov 2023 08:36:24 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b4a5d3587eb20b7eed3d15e259ae0dea
Strict-Transport-Security: max-age=0; includeSubdomains
www.youtube.com/s/player/63e90c30/www-embed-player.vflset/www-embed-player.js
99 kB URL www.youtube.com/s/player/63e90c30/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (682)
Hash 29d728b01da2b497000a84aba115257e
84fb48d68c9bac9efb1d3aec0a32c0ded4cb461a
c31a04c8fb061c363792f34fb8b368d710ca6baa750e58ad587699d916aa5a52
GET /s/player/63e90c30/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 08:33:35 GMT
expires: Tue, 26 Nov 2024 08:33:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 02:45:49 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 86564
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
banquetunarmedgrater.com/advertisers.js
0 B URL banquetunarmedgrater.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:19 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: dd15a054ca01edf8636d1a3b513de1ad
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 08:36:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HME%2Fe1NM15Dipyu6FJORZUZW93uthRYfP4hovQNxr2V0xoirU6f29s%2Fx5pCDjF0UptSBMcRMp7Om9s1aWMp0oln3ZEbwfKxDdVLlb01sCt34M9R6JjV2iv%2BHC02YHSVGZ%2BFYQtbO5eCT4cM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d148542c3bb521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/base.js
781 kB URL www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (555)
Size 781 kB (781027 bytes)
Hash c502246556fb79bbbb83d4f036ea963f
4ab8182f4453dd4808b94aa76d98eb08e46128ae
7896bc3b93023bc401267007bec8ff688d9c42021c94eb9289cdac09c58ffb54
GET /s/player/63e90c30/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 781027
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 08:39:02 GMT
expires: Tue, 26 Nov 2024 08:39:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 02:45:49 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 86237
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
friendshipmale.com/sfp.js
43 kB URL friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:19 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 70573e926cf2ee276e357144ae649815
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 08:36:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BcBNNkbOT2ptJ1bG3by9ZWT8PtU9n%2BKDHPHRbipK5z%2BS9pypwFF7Bsrygt6kPb9ZDw3VpQHwoJHlKaqClQr2IAhHNXCaZwUWiUXi6jPcb2AKl1RFpxjqQhz8eTXcE9tx5v5d250%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d148503d184e13-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
15 kB URL fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:26:09 GMT
expires: Fri, 22 Nov 2024 23:26:09 GMT
cache-control: public, max-age=31536000
age: 378610
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
proceedglad.com/sbar.json?key=be2cb0ab9067049b49e8e32facf16885
4.1 kB URL proceedglad.com/sbar.json?key=be2cb0ab9067049b49e8e32facf16885
IP
File type JSON data\012- , ASCII text, with very long lines (5772), with no line terminators
Hash 404c59b433a8da1ea150f63fa343e6de
4e82bb51f63bde045f5b7d3aa214aef42d7b67ae
325bf449924785f337802c3203bd60b89923c62621442f8bec0bb457d065238d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=be2cb0ab9067049b49e8e32facf16885 HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
Origin: https://bedziepieklo.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://bedziepieklo.org
Access-Control-Allow-Origin: https://bedziepieklo.org
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=21075265; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
slecbe2cb0ab9067049b49e8e32facf16885=[4766299]; expires=Tue, 28 Nov 2023 08:36:24 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3d5930dc15780fb24914e38c699e6709
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
maps.gstatic.com/maps-api-v3/embed/js/55/2/intl/pl_ALL/init_embed.js
61 kB URL maps.gstatic.com/maps-api-v3/embed/js/55/2/intl/pl_ALL/init_embed.js
IP
File type ASCII text, with very long lines (3230)
Hash aac1da6ef16361f72d6ed8a882565404
0e425b04c2dd218ee68433e8250846ba4bfe05ec
6bc8d0dc30762a61d80c8046157b3a30a94e475d78d0ad632c5fc07e8d27cff3
GET /maps-api-v3/embed/js/55/2/intl/pl_ALL/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 61353
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 19:46:24 GMT
expires: Wed, 20 Nov 2024 19:46:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 19:44:39 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 564595
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
27 kB URL friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:18 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 742280191ce4b9db2719a85bb9462fdc
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 08:36:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qFXkqtIaK1E6BPAsyz5zbAhIhtt3OlHJhPXSRQEmIb6ZFhNYR2XXLCoOeRS3xVbW0uGwupJd2c2zIymgYZ6ZOjzjPi3UcIr2tTR%2BGyWjgprcjSQnwoqwjocCEScxzAe%2BTe2f3Hk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d148502d084e13-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4sjRRSu3o2XFRRdL14kCIKKZKo7ySRxkdV1XRkcZ2Z%2FMXis7qrOlKl0NVXd6UxOgwOyx4Ae1FPPl%2FmBusjuHyAsGUGWAXH6sszB%2BRNEEBaP0tlA9EG%2F977%2B3uH73qsv99JzQpGys41P9UgqxZaaNVp9c1NGXGe2unan6tIavVLdlNFy40p1WCYzeNelzRp9q%2FqxCHp6yaMupS51qzekEaEeLs1YyPh%2Bx611aK3h1dxmA0Pzf2xTB5Y54INz8jIkL57bevwQMpgi6j%2B4Lmwv0fE7H%2FVTxRJtMOBHd6NepLMI%2FUUbGgdhdDSfhrYFId9cgI6O5g6gB%2FulA%2FiyIM4TF350NJcJf3DwTKmvICL4%2FHlkgymEmkKyKQK9C8lPCRBwrK0j6h%2BuaZOx7WcsK9mCVJ7%2BDZkVpPLHK4j6P11Tcli9rVWaSB1ZDMMccjiF7E4Rp8dIRg5kdowg%2BQKS%2F0aWnq4i6u%2BvW6UheT5zL%2BUUMpxCiTGYdZCWn3SQhg7S2EGfn1VZsxNS2gr9sF5vN4IgqNeDoNle5k1eb7RDijQo5Y2RxGMEaozA7CA2O%2BjJMUz6CHYrh%2BUObFIQ5%2BYOBjxHJggyS5AxgkwSZAlBNsgPuLKezQ%2B5sqnvzqs3r%2FV8opPuHjvQSVdEZC8%2BJy%2BVe3Hef%2FQXeuKs2l6mLPBCwYTX8rxOi4btsLNMG1TUubcctGFlDmkvzKyOZEGWvnoRsSzI5T8T%2BOwYVh0jkBfBUhcsm7Q8CrY1abQpRtEDX%2FCRFLEUPaVr2nTBdY44qSDZdvbUOXl1dqPXfm9ABCdXf730Xjx5cgmByRGbHJ%2FLXwi66t7kls7I%2Fi2dWfJwPU5kX45Yeb%2FbCUvExR8%2BEduZNnzluh1%2F%2F0FQEmV7%2F46wySqLuIy6lvx4TXIuzA1tAkF%2BXrGbwt9I7da11ERpvLrx4Y2VfmyEtVJHUzB5uv4PAlmQyhuXZy%2FzhdO3Ic0UJs3RT0%2FIPCD1MYJ4BzZeqLeawKjFjB87yNJ8Yjx%2F8VNJAiUWmPk57H%2Bwv%2Bj37D10TQUs2UXUzzEwOQYqB1Nj2PTSJInNydXH35bxHXxVmfjKVPZ9ZdTXs9UW5PXKzTJ9Vqa7sPKsKpohDQX1hB92%2FLDFKO%2BEjY7POq5o%2BU3mIrGFEIe7%2FwIAAP%2F%2FAQAA%2F%2F%2FnmMWFgAQAAA%3D%3D
7 B URL joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4sjRRSu3o2XFRRdL14kCIKKZKo7ySRxkdV1XRkcZ2Z%2FMXis7qrOlKl0NVXd6UxOgwOyx4Ae1FPPl%2FmBusjuHyAsGUGWAXH6sszB%2BRNEEBaP0tlA9EG%2F977%2B3uH73qsv99JzQpGys41P9UgqxZaaNVp9c1NGXGe2unan6tIavVLdlNFy40p1WCYzeNelzRp9q%2FqxCHp6yaMupS51qzekEaEeLs1YyPh%2Bx611aK3h1dxmA0Pzf2xTB5Y54INz8jIkL57bevwQMpgi6j%2B4Lmwv0fE7H%2FVTxRJtMOBHd6NepLMI%2FUUbGgdhdDSfhrYFId9cgI6O5g6gB%2FulA%2FiyIM4TF350NJcJf3DwTKmvICL4%2FHlkgymEmkKyKQK9C8lPCRBwrK0j6h%2BuaZOx7WcsK9mCVJ7%2BDZkVpPLHK4j6P11Tcli9rVWaSB1ZDMMccjiF7E4Rp8dIRg5kdowg%2BQKS%2F0aWnq4i6u%2BvW6UheT5zL%2BUUMpxCiTGYdZCWn3SQhg7S2EGfn1VZsxNS2gr9sF5vN4IgqNeDoNle5k1eb7RDijQo5Y2RxGMEaozA7CA2O%2BjJMUz6CHYrh%2BUObFIQ5%2BYOBjxHJggyS5AxgkwSZAlBNsgPuLKezQ%2B5sqnvzqs3r%2FV8opPuHjvQSVdEZC8%2BJy%2BVe3Hef%2FQXeuKs2l6mLPBCwYTX8rxOi4btsLNMG1TUubcctGFlDmkvzKyOZEGWvnoRsSzI5T8T%2BOwYVh0jkBfBUhcsm7Q8CrY1abQpRtEDX%2FCRFLEUPaVr2nTBdY44qSDZdvbUOXl1dqPXfm9ABCdXf730Xjx5cgmByRGbHJ%2FLXwi66t7kls7I%2Fi2dWfJwPU5kX45Yeb%2FbCUvExR8%2BEduZNnzluh1%2F%2F0FQEmV7%2F46wySqLuIy6lvx4TXIuzA1tAkF%2BXrGbwt9I7da11ERpvLrx4Y2VfmyEtVJHUzB5uv4PAlmQyhuXZy%2FzhdO3Ic0UJs3RT0%2FIPCD1MYJ4BzZeqLeawKjFjB87yNJ8Yjx%2F8VNJAiUWmPk57H%2Bwv%2Bj37D10TQUs2UXUzzEwOQYqB1Nj2PTSJInNydXH35bxHXxVmfjKVPZ9ZdTXs9UW5PXKzTJ9Vqa7sPKsKpohDQX1hB92%2FLDFKO%2BEjY7POq5o%2BU3mIrGFEIe7%2FwIAAP%2F%2FAQAA%2F%2F%2FnmMWFgAQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4sjRRSu3o2XFRRdL14kCIKKZKo7ySRxkdV1XRkcZ2Z%2FMXis7qrOlKl0NVXd6UxOgwOyx4Ae1FPPl%2FmBusjuHyAsGUGWAXH6sszB%2BRNEEBaP0tlA9EG%2F977%2B3uH73qsv99JzQpGys41P9UgqxZaaNVp9c1NGXGe2unan6tIavVLdlNFy40p1WCYzeNelzRp9q%2FqxCHp6yaMupS51qzekEaEeLs1YyPh%2Bx611aK3h1dxmA0Pzf2xTB5Y54INz8jIkL57bevwQMpgi6j%2B4Lmwv0fE7H%2FVTxRJtMOBHd6NepLMI%2FUUbGgdhdDSfhrYFId9cgI6O5g6gB%2FulA%2FiyIM4TF350NJcJf3DwTKmvICL4%2FHlkgymEmkKyKQK9C8lPCRBwrK0j6h%2BuaZOx7WcsK9mCVJ7%2BDZkVpPLHK4j6P11Tcli9rVWaSB1ZDMMccjiF7E4Rp8dIRg5kdowg%2BQKS%2F0aWnq4i6u%2BvW6UheT5zL%2BUUMpxCiTGYdZCWn3SQhg7S2EGfn1VZsxNS2gr9sF5vN4IgqNeDoNle5k1eb7RDijQo5Y2RxGMEaozA7CA2O%2BjJMUz6CHYrh%2BUObFIQ5%2BYOBjxHJggyS5AxgkwSZAlBNsgPuLKezQ%2B5sqnvzqs3r%2FV8opPuHjvQSVdEZC8%2BJy%2BVe3Hef%2FQXeuKs2l6mLPBCwYTX8rxOi4btsLNMG1TUubcctGFlDmkvzKyOZEGWvnoRsSzI5T8T%2BOwYVh0jkBfBUhcsm7Q8CrY1abQpRtEDX%2FCRFLEUPaVr2nTBdY44qSDZdvbUOXl1dqPXfm9ABCdXf730Xjx5cgmByRGbHJ%2FLXwi66t7kls7I%2Fi2dWfJwPU5kX45Yeb%2FbCUvExR8%2BEduZNnzluh1%2F%2F0FQEmV7%2F46wySqLuIy6lvx4TXIuzA1tAkF%2BXrGbwt9I7da11ERpvLrx4Y2VfmyEtVJHUzB5uv4PAlmQyhuXZy%2FzhdO3Ic0UJs3RT0%2FIPCD1MYJ4BzZeqLeawKjFjB87yNJ8Yjx%2F8VNJAiUWmPk57H%2Bwv%2Bj37D10TQUs2UXUzzEwOQYqB1Nj2PTSJInNydXH35bxHXxVmfjKVPZ9ZdTXs9UW5PXKzTJ9Vqa7sPKsKpohDQX1hB92%2FLDFKO%2BEjY7POq5o%2BU3mIrGFEIe7%2FwIAAP%2F%2FAQAA%2F%2F%2FnmMWFgAQAAA%3D%3D HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21020912; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec860ac2feae2722970f8f96040e3d26c8=[2019380,2229329,2229337,2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 27b02c957ea50da1ca05a41d357257bc
Strict-Transport-Security: max-age=0; includeSubdomains
proceedglad.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3l1PIqLuxYMwxxVkUj0%2FyYx7WDauWYMxiftDDp7qryfl1HQ1Vd3Tk%2FESDMgeR1Tw2PkmP6jLsutREGTiRQKC40FyMCDecxH2LDMZGH1Q9d73vjp833v12X52Tigydrb5ge1rY9hCvUxLN7Z0LG3uS%2BsPSiEt05ulLR0v1m6WepPLdd8Oab1M3yzdVaJtFyo0pDSkYWlFOxXZ3sKUhU4eN8Nyk5ZrlXJYr6Hn%2Fo99FsCzALJ7Tl6FluMXtn95Bi1GiDtP7yjfTm3y1rudzLDUOnTl8cO4Hds8RmdeRi5AFB%2FPXsP6MSFfX4GNj2cOYLsHEwfgekyCP0Lw%2BHgmE7x7eKmUG6gYXL6IvDuCMiNoNoKwe9DyNwIIifUNxJ2jdetytnPJsgk7Jtee%2FwOdj8m1P68j7jxZNrpXum9Nlmobe%2FSiAro3gm6NkGQnSPsBdH4CkX4KLX8lC8%2FXEHcONryx0LKYutd6BB2NYNQAzAfIJkcHyKIAWRKgI89KrN6MKF2KeFStNmpCiGpViHpjUdZltdaIKDIxkTdAmgwgzADC7SJxu2jrAVz2E%2Fx2AS8D%2BHRMgg930ZUFckWQe4KcEeSaIE8J8m5xKI2v%2BOJIGp%2FxcJYrs1wthjZt7bNDm7ZUTPaTc%2FLKZC7B7a9uo63OSlxVBKeMN%2BniEq01ea2pGqpaiZiIwsVGow6vC2h%2FZWq1r8dk4YuXkegxee0iBWcn8OYEQl8Fy94Ay4dLFQq2Paw1KPrxU65kX6tEq7axZetakLZAkl5DuhPsm3Py%2BnRH7%2F3wEZQ4vfVl%2F6%2B7T65%2FAuEKJK7Ax%2FpngpZ5NLxnc3Jwz%2BaePNtIUt3RfTbZ3%2F2Uperqt%2B%2Brndw6uXrHD765LSbEpHz8QPl0jcVSxy1PvlvWUiq3Yp1Q5MdVv6X4Zua3lzMXZ8na5jsrq53EKe%2B1jUdgekzIxfcQekxeuvDTv3nj4d%2FQbgSXFehkp2QW0PYEItmFT%2BY9bwmcmWOeBMizYugqfN40msCoOWa8gP8P5vN63z9CywVg6R7iToGuK9A1BZgZwGdXh2niTm%2F9Xp0GuAmG3LjggBtnPr8crtdnJVWPaKRoRfGoyaMlRmUzqjU5a4ZqiddZiNSPlTra%2BxcAAP%2F%2FAQAA%2F%2F%2Fkp9OtcwQAAA%3D%3D
7 B URL proceedglad.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3l1PIqLuxYMwxxVkUj0%2FyYx7WDauWYMxiftDDp7qryfl1HQ1Vd3Tk%2FESDMgeR1Tw2PkmP6jLsutREGTiRQKC40FyMCDecxH2LDMZGH1Q9d73vjp833v12X52Tigydrb5ge1rY9hCvUxLN7Z0LG3uS%2BsPSiEt05ulLR0v1m6WepPLdd8Oab1M3yzdVaJtFyo0pDSkYWlFOxXZ3sKUhU4eN8Nyk5ZrlXJYr6Hn%2Fo99FsCzALJ7Tl6FluMXtn95Bi1GiDtP7yjfTm3y1rudzLDUOnTl8cO4Hds8RmdeRi5AFB%2FPXsP6MSFfX4GNj2cOYLsHEwfgekyCP0Lw%2BHgmE7x7eKmUG6gYXL6IvDuCMiNoNoKwe9DyNwIIifUNxJ2jdetytnPJsgk7Jtee%2FwOdj8m1P68j7jxZNrpXum9Nlmobe%2FSiAro3gm6NkGQnSPsBdH4CkX4KLX8lC8%2FXEHcONryx0LKYutd6BB2NYNQAzAfIJkcHyKIAWRKgI89KrN6MKF2KeFStNmpCiGpViHpjUdZltdaIKDIxkTdAmgwgzADC7SJxu2jrAVz2E%2Fx2AS8D%2BHRMgg930ZUFckWQe4KcEeSaIE8J8m5xKI2v%2BOJIGp%2FxcJYrs1wthjZt7bNDm7ZUTPaTc%2FLKZC7B7a9uo63OSlxVBKeMN%2BniEq01ea2pGqpaiZiIwsVGow6vC2h%2FZWq1r8dk4YuXkegxee0iBWcn8OYEQl8Fy94Ay4dLFQq2Paw1KPrxU65kX6tEq7axZetakLZAkl5DuhPsm3Py%2BnRH7%2F3wEZQ4vfVl%2F6%2B7T65%2FAuEKJK7Ax%2FpngpZ5NLxnc3Jwz%2BaePNtIUt3RfTbZ3%2F2Uperqt%2B%2Brndw6uXrHD765LSbEpHz8QPl0jcVSxy1PvlvWUiq3Yp1Q5MdVv6X4Zua3lzMXZ8na5jsrq53EKe%2B1jUdgekzIxfcQekxeuvDTv3nj4d%2FQbgSXFehkp2QW0PYEItmFT%2BY9bwmcmWOeBMizYugqfN40msCoOWa8gP8P5vN63z9CywVg6R7iToGuK9A1BZgZwGdXh2niTm%2F9Xp0GuAmG3LjggBtnPr8crtdnJVWPaKRoRfGoyaMlRmUzqjU5a4ZqiddZiNSPlTra%2BxcAAP%2F%2FAQAA%2F%2F%2Fkp9OtcwQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3l1PIqLuxYMwxxVkUj0%2FyYx7WDauWYMxiftDDp7qryfl1HQ1Vd3Tk%2FESDMgeR1Tw2PkmP6jLsutREGTiRQKC40FyMCDecxH2LDMZGH1Q9d73vjp833v12X52Tigydrb5ge1rY9hCvUxLN7Z0LG3uS%2BsPSiEt05ulLR0v1m6WepPLdd8Oab1M3yzdVaJtFyo0pDSkYWlFOxXZ3sKUhU4eN8Nyk5ZrlXJYr6Hn%2Fo99FsCzALJ7Tl6FluMXtn95Bi1GiDtP7yjfTm3y1rudzLDUOnTl8cO4Hds8RmdeRi5AFB%2FPXsP6MSFfX4GNj2cOYLsHEwfgekyCP0Lw%2BHgmE7x7eKmUG6gYXL6IvDuCMiNoNoKwe9DyNwIIifUNxJ2jdetytnPJsgk7Jtee%2FwOdj8m1P68j7jxZNrpXum9Nlmobe%2FSiAro3gm6NkGQnSPsBdH4CkX4KLX8lC8%2FXEHcONryx0LKYutd6BB2NYNQAzAfIJkcHyKIAWRKgI89KrN6MKF2KeFStNmpCiGpViHpjUdZltdaIKDIxkTdAmgwgzADC7SJxu2jrAVz2E%2Fx2AS8D%2BHRMgg930ZUFckWQe4KcEeSaIE8J8m5xKI2v%2BOJIGp%2FxcJYrs1wthjZt7bNDm7ZUTPaTc%2FLKZC7B7a9uo63OSlxVBKeMN%2BniEq01ea2pGqpaiZiIwsVGow6vC2h%2FZWq1r8dk4YuXkegxee0iBWcn8OYEQl8Fy94Ay4dLFQq2Paw1KPrxU65kX6tEq7axZetakLZAkl5DuhPsm3Py%2BnRH7%2F3wEZQ4vfVl%2F6%2B7T65%2FAuEKJK7Ax%2FpngpZ5NLxnc3Jwz%2BaePNtIUt3RfTbZ3%2F2Uperqt%2B%2Brndw6uXrHD765LSbEpHz8QPl0jcVSxy1PvlvWUiq3Yp1Q5MdVv6X4Zua3lzMXZ8na5jsrq53EKe%2B1jUdgekzIxfcQekxeuvDTv3nj4d%2FQbgSXFehkp2QW0PYEItmFT%2BY9bwmcmWOeBMizYugqfN40msCoOWa8gP8P5vN63z9CywVg6R7iToGuK9A1BZgZwGdXh2niTm%2F9Xp0GuAmG3LjggBtnPr8crtdnJVWPaKRoRfGoyaMlRmUzqjU5a4ZqiddZiNSPlTra%2BxcAAP%2F%2FAQAA%2F%2F%2Fkp9OtcwQAAA%3D%3D HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21075265; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecbe2cb0ab9067049b49e8e32facf16885=[4766299]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a75cd0a5b2c6d003602ed247bb7fdba8
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg
28 kB URL cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 1dcde64d47d24d151a1433ecf4403dd7
443d6704b5a294e000084d7a8ac823e526093928
d11bcd65a82589c2c31d6fd87cb16ec673dd5640462ad3d20ff53e014a435376
GET /cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:19 GMT
content-type: image/jpeg
content-length: 27832
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:58 GMT
etag: "5eaa8542-6cb8"
expires: Thu, 30 Nov 2023 08:36:19 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg
32 kB URL cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash 3528385dd0c31dbd2e5bfc4af7a6bec5
832c580ffd7711115d6c036ab4232f5bd88480a4
bfbfeebfcb679ca578055235614cc679b0757bad272996ef89b7fd5615a2db75
GET /cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:19 GMT
content-type: image/jpeg
content-length: 32471
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:05 GMT
etag: "5eaa850d-7ed7"
expires: Thu, 30 Nov 2023 08:36:19 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
24 kB URL cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash d71c872fb9f50bd9383abc0721d1d51e
1f69b40ef2f95798b4e0fd738d630ad4319cd739
6b4a622b9de1ffab8fe905fc8c4633994c732476664b5190ceedd62a3795ab08
GET /cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:19 GMT
content-type: image/jpeg
content-length: 24518
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:34 GMT
etag: "5eaa852a-5fc6"
expires: Thu, 30 Nov 2023 08:36:19 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
bedziepieklo.org/
19 kB IP
ASN #41079 Cyber_Folks S.A.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18468), with CRLF, LF line terminators
Hash f1ee877ee288b319c00e1c016ecc1741
53162f47294bb1c50ca0d91d7b292588cea16f00
93410e01a37df4cea406c71717d1143d243262572459518a85ad93ea29d2dd57
GET / HTTP/1.1
Host: bedziepieklo.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: 5485af425a7a6ffd71006bffc639b2a7=e5e493458c81892149363ad0c9f32211
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
cross-origin-opener-policy: same-origin
content-type: text/html; charset=utf-8
expires: Wed, 17 Aug 2005 00:00:00 GMT
last-modified: Tue, 28 Nov 2023 08:36:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
vary: Accept-Encoding,User-Agent
date: Tue, 28 Nov 2023 08:36:18 GMT
server: LiteSpeed
cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg
23 kB URL cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 9a2dc4fe2ebb70df2dfb1566d22970b8
b85a5f4ef7bd68b834d03d8b9a552e2e546e8701
1983c705f5f4315c8cd002183eb9ed3c846abed8fc2a6f0a073185c249552efd
GET /cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:19 GMT
content-type: image/jpeg
content-length: 22757
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:56:41 GMT
etag: "5eaa84b9-58e5"
expires: Thu, 30 Nov 2023 08:36:19 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
proceedglad.com/watch.992408358052.js?key=a0d7c40304e8f3b4f32dafe5230dc24c&kw=%5B%5D&refer=https%3A%2F%2Fbedziepieklo.org%2F&tz=0&dev=e&res=14.3095&uuid=e78f5392-2678-4a25-94cf-e87b49a6a3d0%3A3%3A1
0 B URL proceedglad.com/watch.992408358052.js?key=a0d7c40304e8f3b4f32dafe5230dc24c&kw=%5B%5D&refer=https%3A%2F%2Fbedziepieklo.org%2F&tz=0&dev=e&res=14.3095&uuid=e78f5392-2678-4a25-94cf-e87b49a6a3d0%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.992408358052.js?key=a0d7c40304e8f3b4f32dafe5230dc24c&kw=%5B%5D&refer=https%3A%2F%2Fbedziepieklo.org%2F&tz=0&dev=e&res=14.3095&uuid=e78f5392-2678-4a25-94cf-e87b49a6a3d0%3A3%3A1 HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
Origin: https://bedziepieklo.org
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://bedziepieklo.org
Access-Control-Allow-Origin: https://bedziepieklo.org
Access-Control-Allow-Credentials: true
Location: https://proceedglad.com/watch.992408358052.js?key=a0d7c40304e8f3b4f32dafe5230dc24c&kw=%5B%5D&refer=https%3A%2F%2Fbedziepieklo.org%2F&tz=0&dev=e&res=14.3095&uuid=e78f5392-2678-4a25-94cf-e87b49a6a3d0%3A3%3A1&shu=5bbe348eaf5d8f3d707294ffd6e2f515ce2d7376864994c1994aaa139a65ec3254c6ebd044dd14e39445b1e89cbb71cccfe1a558f1dd26535257ee58a75e5ea0226b8177516bb1ea4c015d588bc4a67a44d6dd5e25312111b7308e5f58bddc&pst=1701160639&rmtc=t
Set-Cookie: u_pl=21075282; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.Y_lDFCpCTo6rPCGw6jLp7azTjtQapYXbViJTYUAV6WE; expires=Tue, 28 Nov 2023 08:37:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bce94a907b7e8d0046ee819845abc144
Strict-Transport-Security: max-age=0; includeSubdomains
maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/util.js
55 kB URL maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/util.js
IP
File type ASCII text, with very long lines (562)
Hash a462a3b2d795dea7467ecaccc7971a48
256b916f9a286da0ad07af71e41c2fe48395821f
5755f78ca8bec3bff78976d84d2e7f94a5dc40520ddb23384d172aead70368cc
GET /maps-api-v3/api/js/55/2/intl/pl_ALL/util.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 55066
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 19:45:46 GMT
expires: Wed, 20 Nov 2024 19:45:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 19:44:48 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 564633
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/common.js
57 kB URL maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/common.js
IP
File type ASCII text, with very long lines (5883)
Hash e6d476a3ae118abc528b65857d5088f9
0791413cb7b709b336ea3fac973180a66b580b0a
56e3499ef674a9d2fb84c41c5bdc4a63922b6979725d33404b2590b3641dbbbd
GET /maps-api-v3/api/js/55/2/intl/pl_ALL/common.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57114
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 19:45:46 GMT
expires: Wed, 20 Nov 2024 19:45:46 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 19:44:48 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 564633
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/map.js
24 kB URL maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/map.js
IP
File type ASCII text, with very long lines (2401)
Hash fa0f952bfaec6b08c4370c5021fe51be
421fd4890da75ac6df1615c596a80d0f2d21463a
bbff659dba61bb9f2ebc71e2694c90b7c2b451202cf91bbb152c6e6e4e3a51a7
GET /maps-api-v3/api/js/55/2/intl/pl_ALL/map.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 23848
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 19:45:54 GMT
expires: Wed, 20 Nov 2024 19:45:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 19:44:48 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 564625
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/overlay.js
1.3 kB URL maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/overlay.js
IP
File type ASCII text, with very long lines (1152)
Hash 72811b1b3d489a33529cae4d4920a451
228bcc2ff8d72a7aeef67e1bd3a19ff995d84e44
df1712ec436eb3ab7acadc2955780e2004e4243628282588fc1353fde99bc160
GET /maps-api-v3/api/js/55/2/intl/pl_ALL/overlay.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 1274
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 19:45:54 GMT
expires: Wed, 20 Nov 2024 19:45:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 19:44:48 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 564625
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/onion.js
8.9 kB URL maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/onion.js
IP
File type ASCII text, with very long lines (2559)
Hash db65b8f8596ce56733276510e03b3bbb
d1b7e6e8be830313122b77cbed3d4a96253164b4
708a70a15874ecec193dba72d4cea24d735730f1122687ab4e19266ad11c06c9
GET /maps-api-v3/api/js/55/2/intl/pl_ALL/onion.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 8909
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 19:45:54 GMT
expires: Wed, 20 Nov 2024 19:45:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 19:44:48 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 564625
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/search_impl.js
1.2 kB URL maps.googleapis.com/maps-api-v3/api/js/55/2/intl/pl_ALL/search_impl.js
IP
File type ASCII text, with very long lines (1470)
Hash 57c662113ed7798014c24af4ea6fb2bf
4d69f9852ca0457c7644d7ef1c5d2e7c9562b984
c98b28fb8e05534400c7ad284ce9966c678c097f5a0018a361177c7d3a414041
GET /maps-api-v3/api/js/55/2/intl/pl_ALL/search_impl.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 1227
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Nov 2023 19:45:54 GMT
expires: Wed, 20 Nov 2024 19:45:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 19:44:48 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 564625
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1
15 kB URL www.youtube.com/embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (46361)
Hash c975a329b298fa3f04261e3389dd27ad
95e35448281805640b8640a197635bf45931b067
918d55b0b8afc936125caae810002be4fdf3293c3f2502e9e5f75c5be38de295
GET /embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 28 Nov 2023 08:36:18 GMT
strict-transport-security: max-age=31536000
content-security-policy-report-only: require-trusted-types-for 'script';report-uri /cspreport
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=rMAlbY8oAkA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=McduF0eoyss; Domain=.youtube.com; Expires=Sun, 26-May-2024 08:36:18 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Sun, 26-May-2024 08:36:18 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+231; expires=Thu, 27-Nov-2025 08:36:18 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRyt3h1B1oMf60UQGQRFQSbdPTOZGReJxjUSjEn2i%2BCxuqp6Uk5NV1PVPT2ZUzAgexzQg3rqvMkHrkF2%2FwBhmQiyBMWdy5KDuXtRQVg8Ss8ORH%2FQv49%2Bv8N771ef76ZnxEVKT9c%2F1gOpFJ2rV9zyGxsy4jqz5dWbZc%2BtuFfKGzKar10p94tkem97br3ivln%2BULCOnvNdz3U91ysvSSNC3Z%2BbopDxUcurtNxKza949Rr65v%2BzTR1Y6oD3zsgLkHzy1OaDe5BsjKh796qwnUTHb33QTRVNtEGPH96KOpHOInTP29A4CKPD2Ta0nRDy1QXo6HCmALq3VyhAICfEeeQhiA5nNBH09p8wDRREhIA%2Fg6w3hlBjSDoG0zuQ%2FCEBGMfqGqLuwao2Gd16gtICnZDS478hswkp%2FfYiou73i0r2yze0ShOpI4t%2BmEP2x5DtMeL0GMnAgcyOwZLPIPkvZO7xCqLu3ppVGpLnU%2FVSjiHDMZQYgloHafFJB2noII0ddPlpmdZboes2wiCsVps1xli1yli9Oc%2FrvFprhi5SVtAbIomHYGoIZrYRm2105BAmvQ%2B7mcNyBzaZEOfaNno8RyYIMkuQUYJMEmQJQdbL97myvs0PuLJp4M2qP6vVfKST9i7d10lbRGQ3PiPPF744797%2FCx1xWm7Ou5T5oaDCb%2Fh%2Bq%2BGGzbA179ZcUeX%2BPGvCyhzSXphKHcgJmfviWcRyQi7%2FkSCgx7DqGExeBE090GzU8F3QzVGt6WIQ3Q0EH0gRS9FRuqJNG1zniJMSki1nV52Rl6Y3erX0CQQ7Wfjp0jvx6NElMJMjNjk%2BlT8StNXt0XWdkb3rOrPk3lqcyK4c0OJ%2BNxKaiIt3PhJbmTZ8%2BaodfvseK4CiPbopbLJCIy6jtiXfLUrOhVnShgnyw7LdEMF6ajcXUxOl8cr6%2B0vL3dgIa6WOxqDy4do%2FYHJCSq9dnr7M537%2BE9KMYdIc3fSEzAJSH4PF27DxycKdl4%2Be9l7%2FHVYTGHW%2BE8QXkaX5yPjB%2BU8lCZQ4n2mQw%2F5nDs77XXsbbVMCTXYQdXP0TI6eykHVEDa9NEpic7Lw4OsivkGgSqNAmdJeoIz6ckJe%2BbVW%2BHttanKRbsHK03Ldq4lm0GwwzgPBuNfwq82q6%2Fqc1xot4bWQ2IkQBzv%2FAgAA%2F%2F8BAAD%2F%2F4k2%2BjCABAAA
7 B URL joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRyt3h1B1oMf60UQGQRFQSbdPTOZGReJxjUSjEn2i%2BCxuqp6Uk5NV1PVPT2ZUzAgexzQg3rqvMkHrkF2%2FwBhmQiyBMWdy5KDuXtRQVg8Ss8ORH%2FQv49%2Bv8N771ef76ZnxEVKT9c%2F1gOpFJ2rV9zyGxsy4jqz5dWbZc%2BtuFfKGzKar10p94tkem97br3ivln%2BULCOnvNdz3U91ysvSSNC3Z%2BbopDxUcurtNxKza949Rr65v%2BzTR1Y6oD3zsgLkHzy1OaDe5BsjKh796qwnUTHb33QTRVNtEGPH96KOpHOInTP29A4CKPD2Ta0nRDy1QXo6HCmALq3VyhAICfEeeQhiA5nNBH09p8wDRREhIA%2Fg6w3hlBjSDoG0zuQ%2FCEBGMfqGqLuwao2Gd16gtICnZDS478hswkp%2FfYiou73i0r2yze0ShOpI4t%2BmEP2x5DtMeL0GMnAgcyOwZLPIPkvZO7xCqLu3ppVGpLnU%2FVSjiHDMZQYgloHafFJB2noII0ddPlpmdZboes2wiCsVps1xli1yli9Oc%2FrvFprhi5SVtAbIomHYGoIZrYRm2105BAmvQ%2B7mcNyBzaZEOfaNno8RyYIMkuQUYJMEmQJQdbL97myvs0PuLJp4M2qP6vVfKST9i7d10lbRGQ3PiPPF744797%2FCx1xWm7Ou5T5oaDCb%2Fh%2Bq%2BGGzbA179ZcUeX%2BPGvCyhzSXphKHcgJmfviWcRyQi7%2FkSCgx7DqGExeBE090GzU8F3QzVGt6WIQ3Q0EH0gRS9FRuqJNG1zniJMSki1nV52Rl6Y3erX0CQQ7Wfjp0jvx6NElMJMjNjk%2BlT8StNXt0XWdkb3rOrPk3lqcyK4c0OJ%2BNxKaiIt3PhJbmTZ8%2BaodfvseK4CiPbopbLJCIy6jtiXfLUrOhVnShgnyw7LdEMF6ajcXUxOl8cr6%2B0vL3dgIa6WOxqDy4do%2FYHJCSq9dnr7M537%2BE9KMYdIc3fSEzAJSH4PF27DxycKdl4%2Be9l7%2FHVYTGHW%2BE8QXkaX5yPjB%2BU8lCZQ4n2mQw%2F5nDs77XXsbbVMCTXYQdXP0TI6eykHVEDa9NEpic7Lw4OsivkGgSqNAmdJeoIz6ckJe%2BbVW%2BHttanKRbsHK03Ldq4lm0GwwzgPBuNfwq82q6%2Fqc1xot4bWQ2IkQBzv%2FAgAA%2F%2F8BAAD%2F%2F4k2%2BjCABAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskRRyt3h1B1oMf60UQGQRFQSbdPTOZGReJxjUSjEn2i%2BCxuqp6Uk5NV1PVPT2ZUzAgexzQg3rqvMkHrkF2%2FwBhmQiyBMWdy5KDuXtRQVg8Ss8ORH%2FQv49%2Bv8N771ef76ZnxEVKT9c%2F1gOpFJ2rV9zyGxsy4jqz5dWbZc%2BtuFfKGzKar10p94tkem97br3ivln%2BULCOnvNdz3U91ysvSSNC3Z%2BbopDxUcurtNxKza949Rr65v%2BzTR1Y6oD3zsgLkHzy1OaDe5BsjKh796qwnUTHb33QTRVNtEGPH96KOpHOInTP29A4CKPD2Ta0nRDy1QXo6HCmALq3VyhAICfEeeQhiA5nNBH09p8wDRREhIA%2Fg6w3hlBjSDoG0zuQ%2FCEBGMfqGqLuwao2Gd16gtICnZDS478hswkp%2FfYiou73i0r2yze0ShOpI4t%2BmEP2x5DtMeL0GMnAgcyOwZLPIPkvZO7xCqLu3ppVGpLnU%2FVSjiHDMZQYgloHafFJB2noII0ddPlpmdZboes2wiCsVps1xli1yli9Oc%2FrvFprhi5SVtAbIomHYGoIZrYRm2105BAmvQ%2B7mcNyBzaZEOfaNno8RyYIMkuQUYJMEmQJQdbL97myvs0PuLJp4M2qP6vVfKST9i7d10lbRGQ3PiPPF744797%2FCx1xWm7Ou5T5oaDCb%2Fh%2Bq%2BGGzbA179ZcUeX%2BPGvCyhzSXphKHcgJmfviWcRyQi7%2FkSCgx7DqGExeBE090GzU8F3QzVGt6WIQ3Q0EH0gRS9FRuqJNG1zniJMSki1nV52Rl6Y3erX0CQQ7Wfjp0jvx6NElMJMjNjk%2BlT8StNXt0XWdkb3rOrPk3lqcyK4c0OJ%2BNxKaiIt3PhJbmTZ8%2BaodfvseK4CiPbopbLJCIy6jtiXfLUrOhVnShgnyw7LdEMF6ajcXUxOl8cr6%2B0vL3dgIa6WOxqDy4do%2FYHJCSq9dnr7M537%2BE9KMYdIc3fSEzAJSH4PF27DxycKdl4%2Be9l7%2FHVYTGHW%2BE8QXkaX5yPjB%2BU8lCZQ4n2mQw%2F5nDs77XXsbbVMCTXYQdXP0TI6eykHVEDa9NEpic7Lw4OsivkGgSqNAmdJeoIz6ckJe%2BbVW%2BHttanKRbsHK03Ldq4lm0GwwzgPBuNfwq82q6%2Fqc1xot4bWQ2IkQBzv%2FAgAA%2F%2F8BAAD%2F%2F4k2%2BjCABAAA HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21020912; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec860ac2feae2722970f8f96040e3d26c8=[2019380,2229329,2229337,2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 655fdd58fd19e953b2595d9bd0090ab3
Strict-Transport-Security: max-age=0; includeSubdomains
joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzo6XePDHevEigyAoyKS6ZyYz4yKrcY0EY5L9RfBY3VU9Kaemq6nqnp7MKRiQPQ7oQT11vskP1EV2%2FwBhmQiyBMWdy5KD%2BQ8UQVg8Ss8OjPug33tff%2B%2Fwfe%2FVFwfpBaFI2fnWJ3oglWJL9Qotv7ktI64zW964VXZphV4pb8touXal3C%2BS6b3j0nqFvlX%2BSAQdveRRl1KXuuVVaUSo%2B0tTFjK%2B23IrLVqpeRW3XkPfPItt6sAyB7x3QV6G5JPndh7ehwzGiLr3rgnbSXT89ofdVLFEG%2FT4ye2oE%2BksQnfehsZBGJ3MpqHthJCvF6Cjk5kD6N5h4QC%2BnBDnsQs%2FOpnJhN87eqrUVxARfP48st4YQo0h2RiB3ofkjwgQcGxsIuoeb2iTsd2nLCvYCSk9%2BQcym5DSH68g6v64omS%2FfFOrNJE6suiHOWR%2FDNkeI05PkQwcyOwUQfI5JP%2BNLD1ZR9Q93LRKQ%2FJ86l7KMWQ4hhJDMOsgLT7pIA0dpLGDLj8vs3orpLQR%2BmG12qwFQVCtBkG9uczrvFprhhRpUMgbIomHCNQQgdlDbPbQkUOY9AHsTg7LHdhkQpzre%2BjxHJkgyCxBxggySZAlBFkvP%2BLKejY%2F5sqmvjur3qxW85FO2gfsSCdtEZGD%2BIK8VOzFee%2FB3%2BiI83JzmbLACwUTXsPzWg0aNsPWMq1RUeXectCElTmkXZhaHcgJWfryBcRyQi7%2FlcBnp7DqFIG8BJa6YNmo4VGwnVGtSTGI7vmCD6SIpegoXdGmDa5zxEkJya5zoC7Iq9MbvV66DhGcXf1l8d149HgRgckRmxyfyZ8J2urO6IbOyOENnVlyfzNOZFcOWHG%2FmwlLxKXvPxa7mTZ87Zodfvd%2BUBBFe%2FeWsMk6i7iM2pb8sCI5F2ZVm0CQn9bstvC3Uruzkpoojde3Plhd68ZGWCt1NAaTjzb%2FRSAnpPTG5enLfPHXPyHNGCbN0U3PyCwg9SmCeA82nqu3msCo%2BYwfLyBL85Hx%2FPlPJQmUmGPm57D%2Fw%2F68P7B30DYlsGQfUTdHz%2BToqRxMDWHTxVESm7OrD78p4lv4qjTylSkd%2Bsqorybktd9r0%2F0W6dMi3YaV52VRD2koqCf8sOWHDUZ5K6y1fNZyRcOvMxeJnQhxvP8fAAAA%2F%2F8BAAD%2F%2F%2FvHbSCABAAA
7 B URL joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzo6XePDHevEigyAoyKS6ZyYz4yKrcY0EY5L9RfBY3VU9Kaemq6nqnp7MKRiQPQ7oQT11vskP1EV2%2FwBhmQiyBMWdy5KD%2BQ8UQVg8Ss8OjPug33tff%2B%2Fwfe%2FVFwfpBaFI2fnWJ3oglWJL9Qotv7ktI64zW964VXZphV4pb8touXal3C%2BS6b3j0nqFvlX%2BSAQdveRRl1KXuuVVaUSo%2B0tTFjK%2B23IrLVqpeRW3XkPfPItt6sAyB7x3QV6G5JPndh7ehwzGiLr3rgnbSXT89ofdVLFEG%2FT4ye2oE%2BksQnfehsZBGJ3MpqHthJCvF6Cjk5kD6N5h4QC%2BnBDnsQs%2FOpnJhN87eqrUVxARfP48st4YQo0h2RiB3ofkjwgQcGxsIuoeb2iTsd2nLCvYCSk9%2BQcym5DSH68g6v64omS%2FfFOrNJE6suiHOWR%2FDNkeI05PkQwcyOwUQfI5JP%2BNLD1ZR9Q93LRKQ%2FJ86l7KMWQ4hhJDMOsgLT7pIA0dpLGDLj8vs3orpLQR%2BmG12qwFQVCtBkG9uczrvFprhhRpUMgbIomHCNQQgdlDbPbQkUOY9AHsTg7LHdhkQpzre%2BjxHJkgyCxBxggySZAlBFkvP%2BLKejY%2F5sqmvjur3qxW85FO2gfsSCdtEZGD%2BIK8VOzFee%2FB3%2BiI83JzmbLACwUTXsPzWg0aNsPWMq1RUeXectCElTmkXZhaHcgJWfryBcRyQi7%2FlcBnp7DqFIG8BJa6YNmo4VGwnVGtSTGI7vmCD6SIpegoXdGmDa5zxEkJya5zoC7Iq9MbvV66DhGcXf1l8d149HgRgckRmxyfyZ8J2urO6IbOyOENnVlyfzNOZFcOWHG%2FmwlLxKXvPxa7mTZ87Zodfvd%2BUBBFe%2FeWsMk6i7iM2pb8sCI5F2ZVm0CQn9bstvC3Uruzkpoojde3Plhd68ZGWCt1NAaTjzb%2FRSAnpPTG5enLfPHXPyHNGCbN0U3PyCwg9SmCeA82nqu3msCo%2BYwfLyBL85Hx%2FPlPJQmUmGPm57D%2Fw%2F68P7B30DYlsGQfUTdHz%2BToqRxMDWHTxVESm7OrD78p4lv4qjTylSkd%2Bsqorybktd9r0%2F0W6dMi3YaV52VRD2koqCf8sOWHDUZ5K6y1fNZyRcOvMxeJnQhxvP8fAAAA%2F%2F8BAAD%2F%2F%2FvHbSCABAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzo6XePDHevEigyAoyKS6ZyYz4yKrcY0EY5L9RfBY3VU9Kaemq6nqnp7MKRiQPQ7oQT11vskP1EV2%2FwBhmQiyBMWdy5KD%2BQ8UQVg8Ss8OjPug33tff%2B%2Fwfe%2FVFwfpBaFI2fnWJ3oglWJL9Qotv7ktI64zW964VXZphV4pb8touXal3C%2BS6b3j0nqFvlX%2BSAQdveRRl1KXuuVVaUSo%2B0tTFjK%2B23IrLVqpeRW3XkPfPItt6sAyB7x3QV6G5JPndh7ehwzGiLr3rgnbSXT89ofdVLFEG%2FT4ye2oE%2BksQnfehsZBGJ3MpqHthJCvF6Cjk5kD6N5h4QC%2BnBDnsQs%2FOpnJhN87eqrUVxARfP48st4YQo0h2RiB3ofkjwgQcGxsIuoeb2iTsd2nLCvYCSk9%2BQcym5DSH68g6v64omS%2FfFOrNJE6suiHOWR%2FDNkeI05PkQwcyOwUQfI5JP%2BNLD1ZR9Q93LRKQ%2FJ86l7KMWQ4hhJDMOsgLT7pIA0dpLGDLj8vs3orpLQR%2BmG12qwFQVCtBkG9uczrvFprhhRpUMgbIomHCNQQgdlDbPbQkUOY9AHsTg7LHdhkQpzre%2BjxHJkgyCxBxggySZAlBFkvP%2BLKejY%2F5sqmvjur3qxW85FO2gfsSCdtEZGD%2BIK8VOzFee%2FB3%2BiI83JzmbLACwUTXsPzWg0aNsPWMq1RUeXectCElTmkXZhaHcgJWfryBcRyQi7%2FlcBnp7DqFIG8BJa6YNmo4VGwnVGtSTGI7vmCD6SIpegoXdGmDa5zxEkJya5zoC7Iq9MbvV66DhGcXf1l8d149HgRgckRmxyfyZ8J2urO6IbOyOENnVlyfzNOZFcOWHG%2FmwlLxKXvPxa7mTZ87Zodfvd%2BUBBFe%2FeWsMk6i7iM2pb8sCI5F2ZVm0CQn9bstvC3Uruzkpoojde3Plhd68ZGWCt1NAaTjzb%2FRSAnpPTG5enLfPHXPyHNGCbN0U3PyCwg9SmCeA82nqu3msCo%2BYwfLyBL85Hx%2FPlPJQmUmGPm57D%2Fw%2F68P7B30DYlsGQfUTdHz%2BToqRxMDWHTxVESm7OrD78p4lv4qjTylSkd%2Bsqorybktd9r0%2F0W6dMi3YaV52VRD2koqCf8sOWHDUZ5K6y1fNZyRcOvMxeJnQhxvP8fAAAA%2F%2F8BAAD%2F%2F%2FvHbSCABAAA HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21020912; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec860ac2feae2722970f8f96040e3d26c8=[2019380,2229329,2229337,2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c22b96ace7816221a8838cca79377895
Strict-Transport-Security: max-age=0; includeSubdomains
joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3p3fZX8HP9aLFxkEQUEm3T0zmRkXWY1rJBiT7BfBY3VV9aScmq6mqnt6MqdgQPY4oAf11HkmH6iL7P4BwjIRZAmK25clB%2FMnLIKweJROBkZf6Pejn%2FfwPM9bX%2BylZ8RFSk83PtEjqRRdaNbc6pubMuI6s9W1O1XPrbnXqpsyWmxcqw7LZAbveG6z5r5V%2FUiwnl7wXc91PderLksjQj1cOEch4%2Fsdr9Zxaw2%2F5jUbGJr%2FzjZ1YKkDPjgjL0Py4n9bjx9Csimi%2FoMbwvYSHb%2F9YT9VNNEGA350N%2BpFOovQn7ehcRBGR7NtaFsQ8vUl6OhopgB6sF8qQCAL4jz1EERHM5oIBgcXTAMFESHg%2F0c2mEKoKSSdguldSP6EAIxjbR1R%2F3BNm4xuX6C0RAtSef4XZFaQyh%2BvIOr%2FuKTksHpbqzSROrIYhjnkcArZnSJOj5GMHMjsGCz5HJL%2FRhaeryLq769bpSF5fq5eyilkOIUSY1DrIC0%2F6SANHaSxgz4%2FrdJmJ3TdVhiE9Xq7wRir1xlrthd5k9cb7dBFykp6YyTxGEyNwcwOYrODnhzDpI9gt3JY7sAmBXFu7mDAc2SCILMEGSXIJEGWEGSD%2FIAr69v8kCubBt6s%2BrNazyc66e7RA510RUT24jPyUumL896jP9ETp9X2okuZHwoq%2FJbvd1pu2A47i27DFXXuL7I2rMwh7aVzqSNZkIUvX0AsC3L1WYKAHsOqYzB5GTT1QLNJy3dBtyaNtotR9CAQfCRFLEVP6Zo2XXCdI04qSLadPXVGXj2%2F0euVuxDs5PovV96NJ0%2BvgJkcscnxmfyZoKvuTW7pjOzf0pklD9fjRPbliJb3u53QRFz%2B%2FmOxnWnDV27Y8XfvsxIo2%2Ft3hE1WacRl1LXkhyXJuTDL2jBBflqxmyLYSO3WUmqiNF7d%2BGB5pR8bYa3U0RRUPln%2FG0wWpPLG1fOX%2BeKvzyDNFCbN0U9PyCwg9TFYvAMbz9lbTWDUfCeIK8jSfGL8YP5TSQIl5jMNcth%2FzcG837P30DUV0GQXUT%2FHwOQYqBxUjWHTK5MkNifXH39TxrcIVGUSKFPZD5RRXxXktd8bpb83y%2FTphdNWnlabXkO0g3aLcR4Ixr2WX2%2FXXdfnvNHqCK%2BDxBZCHO7%2BAwAA%2F%2F8BAAD%2F%2F1MCt7SABAAA
7 B URL joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3p3fZX8HP9aLFxkEQUEm3T0zmRkXWY1rJBiT7BfBY3VV9aScmq6mqnt6MqdgQPY4oAf11HkmH6iL7P4BwjIRZAmK25clB%2FMnLIKweJROBkZf6Pejn%2FfwPM9bX%2BylZ8RFSk83PtEjqRRdaNbc6pubMuI6s9W1O1XPrbnXqpsyWmxcqw7LZAbveG6z5r5V%2FUiwnl7wXc91PderLksjQj1cOEch4%2Fsdr9Zxaw2%2F5jUbGJr%2FzjZ1YKkDPjgjL0Py4n9bjx9Csimi%2FoMbwvYSHb%2F9YT9VNNEGA350N%2BpFOovQn7ehcRBGR7NtaFsQ8vUl6OhopgB6sF8qQCAL4jz1EERHM5oIBgcXTAMFESHg%2F0c2mEKoKSSdguldSP6EAIxjbR1R%2F3BNm4xuX6C0RAtSef4XZFaQyh%2BvIOr%2FuKTksHpbqzSROrIYhjnkcArZnSJOj5GMHMjsGCz5HJL%2FRhaeryLq769bpSF5fq5eyilkOIUSY1DrIC0%2F6SANHaSxgz4%2FrdJmJ3TdVhiE9Xq7wRir1xlrthd5k9cb7dBFykp6YyTxGEyNwcwOYrODnhzDpI9gt3JY7sAmBXFu7mDAc2SCILMEGSXIJEGWEGSD%2FIAr69v8kCubBt6s%2BrNazyc66e7RA510RUT24jPyUumL896jP9ETp9X2okuZHwoq%2FJbvd1pu2A47i27DFXXuL7I2rMwh7aVzqSNZkIUvX0AsC3L1WYKAHsOqYzB5GTT1QLNJy3dBtyaNtotR9CAQfCRFLEVP6Zo2XXCdI04qSLadPXVGXj2%2F0euVuxDs5PovV96NJ0%2BvgJkcscnxmfyZoKvuTW7pjOzf0pklD9fjRPbliJb3u53QRFz%2B%2FmOxnWnDV27Y8XfvsxIo2%2Ft3hE1WacRl1LXkhyXJuTDL2jBBflqxmyLYSO3WUmqiNF7d%2BGB5pR8bYa3U0RRUPln%2FG0wWpPLG1fOX%2BeKvzyDNFCbN0U9PyCwg9TFYvAMbz9lbTWDUfCeIK8jSfGL8YP5TSQIl5jMNcth%2FzcG837P30DUV0GQXUT%2FHwOQYqBxUjWHTK5MkNifXH39TxrcIVGUSKFPZD5RRXxXktd8bpb83y%2FTphdNWnlabXkO0g3aLcR4Ixr2WX2%2FXXdfnvNHqCK%2BDxBZCHO7%2BAwAA%2F%2F8BAAD%2F%2F1MCt7SABAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3p3fZX8HP9aLFxkEQUEm3T0zmRkXWY1rJBiT7BfBY3VV9aScmq6mqnt6MqdgQPY4oAf11HkmH6iL7P4BwjIRZAmK25clB%2FMnLIKweJROBkZf6Pejn%2FfwPM9bX%2BylZ8RFSk83PtEjqRRdaNbc6pubMuI6s9W1O1XPrbnXqpsyWmxcqw7LZAbveG6z5r5V%2FUiwnl7wXc91PderLksjQj1cOEch4%2Fsdr9Zxaw2%2F5jUbGJr%2FzjZ1YKkDPjgjL0Py4n9bjx9Csimi%2FoMbwvYSHb%2F9YT9VNNEGA350N%2BpFOovQn7ehcRBGR7NtaFsQ8vUl6OhopgB6sF8qQCAL4jz1EERHM5oIBgcXTAMFESHg%2F0c2mEKoKSSdguldSP6EAIxjbR1R%2F3BNm4xuX6C0RAtSef4XZFaQyh%2BvIOr%2FuKTksHpbqzSROrIYhjnkcArZnSJOj5GMHMjsGCz5HJL%2FRhaeryLq769bpSF5fq5eyilkOIUSY1DrIC0%2F6SANHaSxgz4%2FrdJmJ3TdVhiE9Xq7wRir1xlrthd5k9cb7dBFykp6YyTxGEyNwcwOYrODnhzDpI9gt3JY7sAmBXFu7mDAc2SCILMEGSXIJEGWEGSD%2FIAr69v8kCubBt6s%2BrNazyc66e7RA510RUT24jPyUumL896jP9ETp9X2okuZHwoq%2FJbvd1pu2A47i27DFXXuL7I2rMwh7aVzqSNZkIUvX0AsC3L1WYKAHsOqYzB5GTT1QLNJy3dBtyaNtotR9CAQfCRFLEVP6Zo2XXCdI04qSLadPXVGXj2%2F0euVuxDs5PovV96NJ0%2BvgJkcscnxmfyZoKvuTW7pjOzf0pklD9fjRPbliJb3u53QRFz%2B%2FmOxnWnDV27Y8XfvsxIo2%2Ft3hE1WacRl1LXkhyXJuTDL2jBBflqxmyLYSO3WUmqiNF7d%2BGB5pR8bYa3U0RRUPln%2FG0wWpPLG1fOX%2BeKvzyDNFCbN0U9PyCwg9TFYvAMbz9lbTWDUfCeIK8jSfGL8YP5TSQIl5jMNcth%2FzcG837P30DUV0GQXUT%2FHwOQYqBxUjWHTK5MkNifXH39TxrcIVGUSKFPZD5RRXxXktd8bpb83y%2FTphdNWnlabXkO0g3aLcR4Ixr2WX2%2FXXdfnvNHqCK%2BDxBZCHO7%2BAwAA%2F%2F8BAAD%2F%2F1MCt7SABAAA HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21020912; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec860ac2feae2722970f8f96040e3d26c8=[2019380,2229329,2229337,2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ab288a2ae00ffa5e81b20be896a22989
Strict-Transport-Security: max-age=0; includeSubdomains
joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4sjRRSu3o2XFRRdL14kCIKKZLo7ySRxkdV1XRkcZ2Z%2FMXisrqrOlKl0NVXd6UxOgwOyx4Ae1FPPl%2FmBusjuHyAsGUGWAXH6sszB%2BRNEEBaP0tlA9EG%2F977%2B3uH73qsv99Jz4iKlZxuf6pFUii41a271zU0ZcZ3Z6tqdqufW3CvVTRktN65Uh2Uyg3c9t1lz36p%2BLFhPL%2Fmu57qe61VvSCNCPVyasZDx%2FY5X67i1hl%2Fzmg0Mzf%2BxTR1Y6oAPzsnLkLx4buvxQ0g2RdR%2FcF3YXqLjdz7qp4om2mDAj%2B5GvUhnEfqLNjQOwuhoPg1tC0K%2BuQAdHc0dQA%2F2SwcIZEGcJx6C6GguE8Hg4JnSQEFECPjzyAZTCDWFpFMwvQvJTwnAONbWEfUP17TJ6PYzlpZsQSpP%2F4bMClL54xVE%2FZ%2BuKTms3tYqTaSOLIZhDjmcQnaniNNjJCMHMjsGS76A5L%2BRpaeriPr761ZpSJ7P3Es5hQynUGIMah2k5ScdpKGDNHbQ52dV2uyErtsKg7BebzcYY%2FU6Y832Mm%2FyeqMdukhZKW%2BMJB6DqTGY2UFsdtCTY5j0EexWDssd2KQgzs0dDHiOTBBkliCjBJkkyBKCbJAfcGV9mx9yZdPAm1d%2FXuv5RCfdPXqgk66IyF58Tl4q9%2BK8%2F%2Bgv9MRZtb3sUuaHggq%2F5fudlhu2w86y23BFnfvLrA0rc0h7YWZ1JAuy9NWLiGVBLv%2BZIKDHsOoYTF4ETT3QbNLyXdCtSaPtYhQ9CAQfSRFL0VO6pk0XXOeIkwqSbWdPnZNXZzd67fcGBDu5%2Buul9%2BLJk0tgJkdscnwufyHoqnuTWzoj%2B7d0ZsnD9TiRfTmi5f1uJzQRF3%2F4RGxn2vCV63b8%2FQesJMr2%2Fh1hk1UacRl1LfnxmuRcmBvaMEF%2BXrGbIthI7da11ERpvLrx4Y2VfmyEtVJHU1B5uv4PmCxI5Y3Ls5f5wunbkGYKk%2BbopydkHpD6GCzegY0X6q0mMGoxE8QOsjSfGD9Y%2FFSSQIkFpkEO%2Bx8cLPo9ew9dUwFNdhH1cwxMjoHKQdUYNr00SWJzcvXxt2V8h0BVJoEylf1AGfX1bLUFeb1ys0yflekurDyrNr2GaAftFuM8EIx7Lb%2Ferruuz3mj1RFeB4kthDjc%2FRcAAP%2F%2FAQAA%2F%2F%2FzkEtjgAQAAA%3D%3D
7 B URL joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4sjRRSu3o2XFRRdL14kCIKKZLo7ySRxkdV1XRkcZ2Z%2FMXisrqrOlKl0NVXd6UxOgwOyx4Ae1FPPl%2FmBusjuHyAsGUGWAXH6sszB%2BRNEEBaP0tlA9EG%2F977%2B3uH73qsv99Jz4iKlZxuf6pFUii41a271zU0ZcZ3Z6tqdqufW3CvVTRktN65Uh2Uyg3c9t1lz36p%2BLFhPL%2Fmu57qe61VvSCNCPVyasZDx%2FY5X67i1hl%2Fzmg0Mzf%2BxTR1Y6oAPzsnLkLx4buvxQ0g2RdR%2FcF3YXqLjdz7qp4om2mDAj%2B5GvUhnEfqLNjQOwuhoPg1tC0K%2BuQAdHc0dQA%2F2SwcIZEGcJx6C6GguE8Hg4JnSQEFECPjzyAZTCDWFpFMwvQvJTwnAONbWEfUP17TJ6PYzlpZsQSpP%2F4bMClL54xVE%2FZ%2BuKTms3tYqTaSOLIZhDjmcQnaniNNjJCMHMjsGS76A5L%2BRpaeriPr761ZpSJ7P3Es5hQynUGIMah2k5ScdpKGDNHbQ52dV2uyErtsKg7BebzcYY%2FU6Y832Mm%2FyeqMdukhZKW%2BMJB6DqTGY2UFsdtCTY5j0EexWDssd2KQgzs0dDHiOTBBkliCjBJkkyBKCbJAfcGV9mx9yZdPAm1d%2FXuv5RCfdPXqgk66IyF58Tl4q9%2BK8%2F%2Bgv9MRZtb3sUuaHggq%2F5fudlhu2w86y23BFnfvLrA0rc0h7YWZ1JAuy9NWLiGVBLv%2BZIKDHsOoYTF4ETT3QbNLyXdCtSaPtYhQ9CAQfSRFL0VO6pk0XXOeIkwqSbWdPnZNXZzd67fcGBDu5%2Buul9%2BLJk0tgJkdscnwufyHoqnuTWzoj%2B7d0ZsnD9TiRfTmi5f1uJzQRF3%2F4RGxn2vCV63b8%2FQesJMr2%2Fh1hk1UacRl1LfnxmuRcmBvaMEF%2BXrGbIthI7da11ERpvLrx4Y2VfmyEtVJHU1B5uv4PmCxI5Y3Ls5f5wunbkGYKk%2BbopydkHpD6GCzegY0X6q0mMGoxE8QOsjSfGD9Y%2FFSSQIkFpkEO%2Bx8cLPo9ew9dUwFNdhH1cwxMjoHKQdUYNr00SWJzcvXxt2V8h0BVJoEylf1AGfX1bLUFeb1ys0yflekurDyrNr2GaAftFuM8EIx7Lb%2Ferruuz3mj1RFeB4kthDjc%2FRcAAP%2F%2FAQAA%2F%2F%2FzkEtjgAQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4sjRRSu3o2XFRRdL14kCIKKZLo7ySRxkdV1XRkcZ2Z%2FMXisrqrOlKl0NVXd6UxOgwOyx4Ae1FPPl%2FmBusjuHyAsGUGWAXH6sszB%2BRNEEBaP0tlA9EG%2F977%2B3uH73qsv99Jz4iKlZxuf6pFUii41a271zU0ZcZ3Z6tqdqufW3CvVTRktN65Uh2Uyg3c9t1lz36p%2BLFhPL%2Fmu57qe61VvSCNCPVyasZDx%2FY5X67i1hl%2Fzmg0Mzf%2BxTR1Y6oAPzsnLkLx4buvxQ0g2RdR%2FcF3YXqLjdz7qp4om2mDAj%2B5GvUhnEfqLNjQOwuhoPg1tC0K%2BuQAdHc0dQA%2F2SwcIZEGcJx6C6GguE8Hg4JnSQEFECPjzyAZTCDWFpFMwvQvJTwnAONbWEfUP17TJ6PYzlpZsQSpP%2F4bMClL54xVE%2FZ%2BuKTms3tYqTaSOLIZhDjmcQnaniNNjJCMHMjsGS76A5L%2BRpaeriPr761ZpSJ7P3Es5hQynUGIMah2k5ScdpKGDNHbQ52dV2uyErtsKg7BebzcYY%2FU6Y832Mm%2FyeqMdukhZKW%2BMJB6DqTGY2UFsdtCTY5j0EexWDssd2KQgzs0dDHiOTBBkliCjBJkkyBKCbJAfcGV9mx9yZdPAm1d%2FXuv5RCfdPXqgk66IyF58Tl4q9%2BK8%2F%2Bgv9MRZtb3sUuaHggq%2F5fudlhu2w86y23BFnfvLrA0rc0h7YWZ1JAuy9NWLiGVBLv%2BZIKDHsOoYTF4ETT3QbNLyXdCtSaPtYhQ9CAQfSRFL0VO6pk0XXOeIkwqSbWdPnZNXZzd67fcGBDu5%2Buul9%2BLJk0tgJkdscnwufyHoqnuTWzoj%2B7d0ZsnD9TiRfTmi5f1uJzQRF3%2F4RGxn2vCV63b8%2FQesJMr2%2Fh1hk1UacRl1LfnxmuRcmBvaMEF%2BXrGbIthI7da11ERpvLrx4Y2VfmyEtVJHU1B5uv4PmCxI5Y3Ls5f5wunbkGYKk%2BbopydkHpD6GCzegY0X6q0mMGoxE8QOsjSfGD9Y%2FFSSQIkFpkEO%2Bx8cLPo9ew9dUwFNdhH1cwxMjoHKQdUYNr00SWJzcvXxt2V8h0BVJoEylf1AGfX1bLUFeb1ys0yflekurDyrNr2GaAftFuM8EIx7Lb%2Ferruuz3mj1RFeB4kthDjc%2FRcAAP%2F%2FAQAA%2F%2F%2FzkEtjgAQAAA%3D%3D HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21020912; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec860ac2feae2722970f8f96040e3d26c8=[2019380,2229329,2229337,2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e2eb83582e6315122da51e5c2441be13
Strict-Transport-Security: max-age=0; includeSubdomains
joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzo6XePDHevEigyAoyKS7ZyYz4yKrcY0EY5L9RfBYXVU9Kaemq6nqnp7MKRiQPQ7oQT11vskP1EV2%2FwBhmQiyBMWdy5KD%2BQ8UQVg8Ss8OjPug33tff%2B%2Fwfe%2FVFwfpBXGR0vOtT%2FRAKkWX6hW3%2FOa2jLjObHnjVtlzK%2B6V8raMlmtXyv0imd47nluvuG%2BVPxKso5d813Ndz%2FXKq9KIUPeXpixkfLflVVpupeZXvHoNffMstqkDSx3w3gV5GZJPntt5eB%2BSjRF1710TtpPo%2BO0Pu6miiTbo8ZPbUSfSWYTuvA2NgzA6mU1D2wkhXy9ARyczB9C9w8IBAjkhzmMPQXQyk4mgd%2FRUaaAgIgT8eWS9MYQaQ9IxmN6H5I8IwDg2NhF1jze0yejuU5YW7ISUnvwDmU1I6Y9XEHV%2FXFGyX76pVZpIHVn0wxyyP4ZsjxGnp0gGDmR2CpZ8Dsl%2FI0tP1hF1Dzet0pA8n7qXcgwZjqHEENQ6SItPOkhDB2nsoMvPy7TeCl23EQZhtdqsMcaqVcbqzWVe59VaM3SRskLeEEk8BFNDMLOH2OyhI4cw6QPYnRyWO7DJhDjX99DjOTJBkFmCjBJkkiBLCLJefsSV9W1%2BzJVNA29W%2FVmt5iOdtA%2FokU7aIiIH8QV5qdiL896Dv9ER5%2BXmskuZHwoq%2FIbvtxpu2Axby27NFVXuL7MmrMwh7cLU6kBOyNKXLyCWE3L5rwQBPYVVp2DyEmjqgWajhu%2BC7oxqTReD6F4g%2BECKWIqO0hVt2uA6R5yUkOw6B%2BqCvDq90eul6xDs7Oovi%2B%2FGo8eLYCZHbHJ8Jn8maKs7oxs6I4c3dGbJ%2Fc04kV05oMX9biY0EZe%2B%2F1jsZtrwtWt2%2BN37rCCK9u4tYZN1GnEZtS35YUVyLsyqNkyQn9bstgi2Uruzkpoojde3Plhd68ZGWCt1NAaVjzb%2FBZMTUnrj8vRlvvjrn5BmDJPm6KZnZBaQ%2BhQs3oON5%2BqtJjBqPhPEC8jSfGT8YP5TSQIl5pgGOez%2FcDDvD%2BwdtE0JNNlH1M3RMzl6KgdVQ9h0cZTE5uzqw2%2BK%2BBaBKo0CZUqHgTLqqwl57ffadL9F%2BrRIt2Hlebnu1UQzaDYY54Fg3Gv41WbVdX3Oa42W8FpI7ESI4%2F3%2FAAAA%2F%2F8BAAD%2F%2F%2B%2FP48aABAAA
7 B URL joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzo6XePDHevEigyAoyKS7ZyYz4yKrcY0EY5L9RfBYXVU9Kaemq6nqnp7MKRiQPQ7oQT11vskP1EV2%2FwBhmQiyBMWdy5KD%2BQ8UQVg8Ss8OjPug33tff%2B%2Fwfe%2FVFwfpBXGR0vOtT%2FRAKkWX6hW3%2FOa2jLjObHnjVtlzK%2B6V8raMlmtXyv0imd47nluvuG%2BVPxKso5d813Ndz%2FXKq9KIUPeXpixkfLflVVpupeZXvHoNffMstqkDSx3w3gV5GZJPntt5eB%2BSjRF1710TtpPo%2BO0Pu6miiTbo8ZPbUSfSWYTuvA2NgzA6mU1D2wkhXy9ARyczB9C9w8IBAjkhzmMPQXQyk4mgd%2FRUaaAgIgT8eWS9MYQaQ9IxmN6H5I8IwDg2NhF1jze0yejuU5YW7ISUnvwDmU1I6Y9XEHV%2FXFGyX76pVZpIHVn0wxyyP4ZsjxGnp0gGDmR2CpZ8Dsl%2FI0tP1hF1Dzet0pA8n7qXcgwZjqHEENQ6SItPOkhDB2nsoMvPy7TeCl23EQZhtdqsMcaqVcbqzWVe59VaM3SRskLeEEk8BFNDMLOH2OyhI4cw6QPYnRyWO7DJhDjX99DjOTJBkFmCjBJkkiBLCLJefsSV9W1%2BzJVNA29W%2FVmt5iOdtA%2FokU7aIiIH8QV5qdiL896Dv9ER5%2BXmskuZHwoq%2FIbvtxpu2Axby27NFVXuL7MmrMwh7cLU6kBOyNKXLyCWE3L5rwQBPYVVp2DyEmjqgWajhu%2BC7oxqTReD6F4g%2BECKWIqO0hVt2uA6R5yUkOw6B%2BqCvDq90eul6xDs7Oovi%2B%2FGo8eLYCZHbHJ8Jn8maKs7oxs6I4c3dGbJ%2Fc04kV05oMX9biY0EZe%2B%2F1jsZtrwtWt2%2BN37rCCK9u4tYZN1GnEZtS35YUVyLsyqNkyQn9bstgi2Uruzkpoojde3Plhd68ZGWCt1NAaVjzb%2FBZMTUnrj8vRlvvjrn5BmDJPm6KZnZBaQ%2BhQs3oON5%2BqtJjBqPhPEC8jSfGT8YP5TSQIl5pgGOez%2FcDDvD%2BwdtE0JNNlH1M3RMzl6KgdVQ9h0cZTE5uzqw2%2BK%2BBaBKo0CZUqHgTLqqwl57ffadL9F%2BrRIt2Hlebnu1UQzaDYY54Fg3Gv41WbVdX3Oa42W8FpI7ESI4%2F3%2FAAAA%2F%2F8BAAD%2F%2F%2B%2FP48aABAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuzo6XePDHevEigyAoyKS7ZyYz4yKrcY0EY5L9RfBYXVU9Kaemq6nqnp7MKRiQPQ7oQT11vskP1EV2%2FwBhmQiyBMWdy5KD%2BQ8UQVg8Ss8OjPug33tff%2B%2Fwfe%2FVFwfpBXGR0vOtT%2FRAKkWX6hW3%2FOa2jLjObHnjVtlzK%2B6V8raMlmtXyv0imd47nluvuG%2BVPxKso5d813Ndz%2FXKq9KIUPeXpixkfLflVVpupeZXvHoNffMstqkDSx3w3gV5GZJPntt5eB%2BSjRF1710TtpPo%2BO0Pu6miiTbo8ZPbUSfSWYTuvA2NgzA6mU1D2wkhXy9ARyczB9C9w8IBAjkhzmMPQXQyk4mgd%2FRUaaAgIgT8eWS9MYQaQ9IxmN6H5I8IwDg2NhF1jze0yejuU5YW7ISUnvwDmU1I6Y9XEHV%2FXFGyX76pVZpIHVn0wxyyP4ZsjxGnp0gGDmR2CpZ8Dsl%2FI0tP1hF1Dzet0pA8n7qXcgwZjqHEENQ6SItPOkhDB2nsoMvPy7TeCl23EQZhtdqsMcaqVcbqzWVe59VaM3SRskLeEEk8BFNDMLOH2OyhI4cw6QPYnRyWO7DJhDjX99DjOTJBkFmCjBJkkiBLCLJefsSV9W1%2BzJVNA29W%2FVmt5iOdtA%2FokU7aIiIH8QV5qdiL896Dv9ER5%2BXmskuZHwoq%2FIbvtxpu2Axby27NFVXuL7MmrMwh7cLU6kBOyNKXLyCWE3L5rwQBPYVVp2DyEmjqgWajhu%2BC7oxqTReD6F4g%2BECKWIqO0hVt2uA6R5yUkOw6B%2BqCvDq90eul6xDs7Oovi%2B%2FGo8eLYCZHbHJ8Jn8maKs7oxs6I4c3dGbJ%2Fc04kV05oMX9biY0EZe%2B%2F1jsZtrwtWt2%2BN37rCCK9u4tYZN1GnEZtS35YUVyLsyqNkyQn9bstgi2Uruzkpoojde3Plhd68ZGWCt1NAaVjzb%2FBZMTUnrj8vRlvvjrn5BmDJPm6KZnZBaQ%2BhQs3oON5%2BqtJjBqPhPEC8jSfGT8YP5TSQIl5pgGOez%2FcDDvD%2BwdtE0JNNlH1M3RMzl6KgdVQ9h0cZTE5uzqw2%2BK%2BBaBKo0CZUqHgTLqqwl57ffadL9F%2BrRIt2Hlebnu1UQzaDYY54Fg3Gv41WbVdX3Oa42W8FpI7ESI4%2F3%2FAAAA%2F%2F8BAAD%2F%2F%2B%2FP48aABAAA HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21020912; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec860ac2feae2722970f8f96040e3d26c8=[2019380,2229329,2229337,2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 946d372772c7646ee5e8ac27ac67898f
Strict-Transport-Security: max-age=0; includeSubdomains
proceedglad.com/watch.992408358052.js?key=a0d7c40304e8f3b4f32dafe5230dc24c&kw=%5B%5D&refer=https%3A%2F%2Fbedziepieklo.org%2F&tz=0&dev=e&res=14.3095&uuid=e78f5392-2678-4a25-94cf-e87b49a6a3d0%3A3%3A1&shu=5bbe348eaf5d8f3d707294ffd6e2f515ce2d7376864994c1994aaa139a65ec3254c6ebd044dd14e39445b1e89cbb71cccfe1a558f1dd26535257ee58a75e5ea0226b8177516bb1ea4c015d588bc4a67a44d6dd5e25312111b7308e5f58bddc&pst=1701160639&rmtc=t
642 B URL proceedglad.com/watch.992408358052.js?key=a0d7c40304e8f3b4f32dafe5230dc24c&kw=%5B%5D&refer=https%3A%2F%2Fbedziepieklo.org%2F&tz=0&dev=e&res=14.3095&uuid=e78f5392-2678-4a25-94cf-e87b49a6a3d0%3A3%3A1&shu=5bbe348eaf5d8f3d707294ffd6e2f515ce2d7376864994c1994aaa139a65ec3254c6ebd044dd14e39445b1e89cbb71cccfe1a558f1dd26535257ee58a75e5ea0226b8177516bb1ea4c015d588bc4a67a44d6dd5e25312111b7308e5f58bddc&pst=1701160639&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (603)
Hash f6d9a8529a747f06a5929ea7e9f5c2e4
6e6e308ffd3cab57b29ae344db5a62990cba5d66
e54f7cec89916f0f229861595c1422662c5d54491f067341fdf047766f4eb64c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.992408358052.js?key=a0d7c40304e8f3b4f32dafe5230dc24c&kw=%5B%5D&refer=https%3A%2F%2Fbedziepieklo.org%2F&tz=0&dev=e&res=14.3095&uuid=e78f5392-2678-4a25-94cf-e87b49a6a3d0%3A3%3A1&shu=5bbe348eaf5d8f3d707294ffd6e2f515ce2d7376864994c1994aaa139a65ec3254c6ebd044dd14e39445b1e89cbb71cccfe1a558f1dd26535257ee58a75e5ea0226b8177516bb1ea4c015d588bc4a67a44d6dd5e25312111b7308e5f58bddc&pst=1701160639&rmtc=t HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bedziepieklo.org
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21075282; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecbe2cb0ab9067049b49e8e32facf16885=[4766299]; ain=eyJhbGciOiJIUzI1NiJ9.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.Y_lDFCpCTo6rPCGw6jLp7azTjtQapYXbViJTYUAV6WE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:19 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://bedziepieklo.org
Access-Control-Allow-Origin: https://bedziepieklo.org
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=e78f5392-2678-4a25-94cf-e87b49a6a3d0:3:1; expires=Tue, 05 Dec 2023 08:36:19 GMT; secure; SameSite=None
iprc17a9abb18cc213d17c2a02e6ef05c24d=2717342; expires=Wed, 29 Nov 2023 10:36:19 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
pdhtkv27=true; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
uncs27=1; expires=Wed, 29 Nov 2023 08:36:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 919f2f7161711f1628a6f33ffd3b3121
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i2343810&2i1378784&2e1&3u14&4m2&1u600&2u450&5m5&1e0&5spl&6spl&10b1&12b1&client=google-maps-embed&token=55876
56 kB URL maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i2343810&2i1378784&2e1&3u14&4m2&1u600&2u450&5m5&1e0&5spl&6spl&10b1&12b1&client=google-maps-embed&token=55876
IP
File type PNG image data, 600 x 450, 8-bit colormap, non-interlaced\012- data
Hash 78bc638c9b6aca5c74a712383bd93fe4
2f2041dfea7f12c90ea2e82f6cf1db9b97c2c24a
7c2b2793ef86a08f58f0ff040959750903f5d74b2de8386418c74f96ece89c65
GET /maps/api/js/StaticMapService.GetMapImage?1m2&1i2343810&2i1378784&2e1&3u14&4m2&1u600&2u450&5m5&1e0&5spl&6spl&10b1&12b1&client=google-maps-embed&token=55876 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
date: Tue, 28 Nov 2023 08:36:20 GMT
expires: Wed, 29 Nov 2023 08:36:20 GMT
cache-control: public, max-age=86400
server: scaffolding on HTTPServer2
content-length: 55736
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=118
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
9.0 kB URL cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a56f06ca83ee06488a213b352e00bd90
aec437b74eb6f1143683872fb2d664286da4a664
7144c526762a9d91bdde1939194c2835f2cb1afe0ebac298bbdf1e9239b539ec
GET /si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:20 GMT
content-type: image/png
content-length: 9016
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:51:52 GMT
etag: "655b7288-2338"
expires: Thu, 30 Nov 2023 08:36:20 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
20 kB URL cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash ea31001ce8fa95eb2ac1617515105332
d505ca04808c25cfa33a555c96886f421ddbbde7
0267f5cd21fe5609405724c20d6f021b8932a696ada766b8e86e42c670000ab3
GET /si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:20 GMT
content-type: image/png
content-length: 20001
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:52:40 GMT
etag: "655b72b8-4e21"
expires: Thu, 30 Nov 2023 08:36:20 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
591 B URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:20 GMT
content-type: image/png
content-length: 591
last-modified: Mon, 21 Feb 2022 10:06:44 GMT
etag: "62136434-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1484364
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mb1Wf2HX8zgDNo7xYPcLOs8zC8XPZce%2FjLBoG4HNrdY2ifVdWRSJkPw9VS8TkA8crbehUOQejW2AjUyy5mgOWJg2bewC7MPtrUup9oejSlCmvqSt5GUaeCajFWgUUGbHQb37lm%2BPakyJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d14859ca477747-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/api/stats/qoe?cpn=gCdMZeXOEVJPvAca&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C2602%2C73492%2C54572%2C250418%2C53633%2C84737%2C25688%2C9541%2C1089%2C5877%2C394%2C26439494%2C4054%2C1930%2C5181%2C7900%2C1469%2C1556%2C2040%2C7229%2C859%2C1094%2C206%2C2110%2C3126%2C4070%2C5670%2C1242%2C9734%2C1689&cl=583866920&seq=1&event=streamingstats&docid=9Zmlow-hhAU&qclc=ChBnQ2RNWmVYT0VWSlB2QWNhEAE&embargoed=0&cbr=Firefox&cbrver=105.0&c=WEB_EMBEDDED_PLAYER&cver=1.20231119.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.002:ER&cmt=0.002:0.000,0.002:0.000&error=0.002:auth::0.000:0;a6s.0;r.This_video_is_unavailable&vis=0.002:0&bh=0.002:0.000
0 B URL www.youtube.com/api/stats/qoe?cpn=gCdMZeXOEVJPvAca&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C2602%2C73492%2C54572%2C250418%2C53633%2C84737%2C25688%2C9541%2C1089%2C5877%2C394%2C26439494%2C4054%2C1930%2C5181%2C7900%2C1469%2C1556%2C2040%2C7229%2C859%2C1094%2C206%2C2110%2C3126%2C4070%2C5670%2C1242%2C9734%2C1689&cl=583866920&seq=1&event=streamingstats&docid=9Zmlow-hhAU&qclc=ChBnQ2RNWmVYT0VWSlB2QWNhEAE&embargoed=0&cbr=Firefox&cbrver=105.0&c=WEB_EMBEDDED_PLAYER&cver=1.20231119.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.002:ER&cmt=0.002:0.000,0.002:0.000&error=0.002:auth::0.000:0;a6s.0;r.This_video_is_unavailable&vis=0.002:0&bh=0.002:0.000
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/stats/qoe?cpn=gCdMZeXOEVJPvAca&el=embedded&ns=yt&fexp=v1%2C23983296%2C21348%2C2602%2C73492%2C54572%2C250418%2C53633%2C84737%2C25688%2C9541%2C1089%2C5877%2C394%2C26439494%2C4054%2C1930%2C5181%2C7900%2C1469%2C1556%2C2040%2C7229%2C859%2C1094%2C206%2C2110%2C3126%2C4070%2C5670%2C1242%2C9734%2C1689&cl=583866920&seq=1&event=streamingstats&docid=9Zmlow-hhAU&qclc=ChBnQ2RNWmVYT0VWSlB2QWNhEAE&embargoed=0&cbr=Firefox&cbrver=105.0&c=WEB_EMBEDDED_PLAYER&cver=1.20231119.00.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.002:ER&cmt=0.002:0.000,0.002:0.000&error=0.002:auth::0.000:0;a6s.0;r.This_video_is_unavailable&vis=0.002:0&bh=0.002:0.000 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Visitor-Id: CgtNY2R1RjBlb3lzcyiCzZarBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231119.00.00
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701160583962&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C0%2C0%2C0%2C0&vis=1&wgl=true&ca_type=image
Content-Type: application/x-www-form-urlencoded
Content-Length: 226
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
date: Tue, 28 Nov 2023 08:36:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
x-content-type-options: nosniff
server: Video Stats Server
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
0 B URL jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 28 Nov 2023 08:36:20 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/embed.js
18 kB URL www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/embed.js
IP
File type ASCII text, with very long lines (3391)
Hash 50bbf688f33e38d5f7c5f2a73c02aa7a
67f82d27e93488dad1da215155fedb8744066738
d5277513b55f5e850101f15939c3dde471282e1a737d4d54cd347d4c28aa99c2
GET /s/player/63e90c30/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/9Zmlow-hhAU?playlist=9Zmlow-hhAU&iv_load_policy=3&enablejsapi=1&disablekb=1&autoplay=1&controls=0&showinfo=0&rel=0&loop=1&wmode=transparent&widgetid=1&mute=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 17775
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 27 Nov 2023 08:39:02 GMT
expires: Tue, 26 Nov 2024 08:39:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Nov 2023 02:45:49 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 86238
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
proceedglad.com/pixel/sbe?t=3&error=timeout
0 B URL proceedglad.com/pixel/sbe?t=3&error=timeout
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbe?t=3&error=timeout HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Cookie: u_pl=21075282; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMTA3NTI4MiwiayI6ImEwZDdjNDAzMDRlOGYzYjRmMzJkYWZlNTIzMGRjMjRjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozMTE3ODM5LCJwaWQiOjEzMDYyMjgsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyNywicHQiOjQsInBrIjoiZnV3MWVmcGFkNCIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2JlZHppZXBpZWtsby5vcmcvIn19.Y_lDFCpCTo6rPCGw6jLp7azTjtQapYXbViJTYUAV6WE; uid_id2=e78f5392-2678-4a25-94cf-e87b49a6a3d0:3:1; iprc17a9abb18cc213d17c2a02e6ef05c24d=2717342; pdhtkv27=true; uncs27=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:20 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
33 kB URL jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 8052562a51702b1a07066758f83a825c
86837ec483c2a575e0522516bb5a38501b82cd08
f69c87cea7947750eca003fbe4229705b37f48b6540189cef7614e3374b4551c
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 28 Nov 2023 08:36:20 GMT
server: ESF
cache-control: private
content-length: 32616
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
694 B URL fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Hash cb2c9df74facee436bb99358b04d9bab
4bf65a78e6a0566051b5b47b75e8b0deac478071
e40dbc6da95b47d932014e5a93f35b13a341a37ea6fe7559dca041dc77271cd6
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 28 Nov 2023 08:36:20 GMT
date: Tue, 28 Nov 2023 08:36:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
114 B URL jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1bbb87373454381a4216d9a1c722fa2d
600c0fb97dfd73d974d3000635d3958abe6ec889
265ac3e2225ef2b84adddc0141ddee8eed81a508f4cabd6226924d0059a1e554
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 883
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 28 Nov 2023 08:36:20 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
conqueredallrightswell.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=21075282
1.4 kB URL conqueredallrightswell.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=21075282
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (492)
Hash 8b9dcb6fa733345fe6de532bedcff5a6
1122caf619aae1d63d8d35438f6f639d30783aac
f19cd52dc84a660860952f883763260821ce8b7cf88815b271e820dd55bb4a25
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=21075282 HTTP/1.1
Host: conqueredallrightswell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bedziepieklo.org/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 08:36:20 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Wed, 29 Nov 2023 08:36:20 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.I8yZHN6mx0rcAjInnI4Ih3-oKCaXdf-XPP2LTqhfAaI; expires=Tue, 28 Nov 2023 08:37:20 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 517a2beb867c9f39373265fa3cefe519
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
conqueredallrightswell.com/api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTIxMDc1MjgyJnBzdD0xNzAxMTYwNjQwJnJlZmVyPWh0dHBzJTNBJTJGJTJGYmVkemllcGlla2xvLm9yZyUyRiZybXRjPXQmc2h1PTAxMjc5NzkxNzNhM2VmNmQxNDY1MDc0OTg2NjgwYjM5MTZjMmQ5YTZmOGJkODdhODI5N2FiNmU2ODI3OGE5NTM4YWU4Yjk2NzdkM2M5N2NhOGQ0OTk1ODQyZDkxNTU3MTE5NjQ3NmNjZmUxYjc1NzJjZGU1NTdlNDllNTE2ZDcwN2U0MThlMWFlOTNmOTYwZGJhYzkyZDJlYTgyMGU2NzRlNmUyODA4ZDcyYzMzNzBiZWNmODBkYmQ5MmFlZjRhNjVhOWE5ZA%3D%3D&uuid=&pii=&in=false
0 B URL conqueredallrightswell.com/api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTIxMDc1MjgyJnBzdD0xNzAxMTYwNjQwJnJlZmVyPWh0dHBzJTNBJTJGJTJGYmVkemllcGlla2xvLm9yZyUyRiZybXRjPXQmc2h1PTAxMjc5NzkxNzNhM2VmNmQxNDY1MDc0OTg2NjgwYjM5MTZjMmQ5YTZmOGJkODdhODI5N2FiNmU2ODI3OGE5NTM4YWU4Yjk2NzdkM2M5N2NhOGQ0OTk1ODQyZDkxNTU3MTE5NjQ3NmNjZmUxYjc1NzJjZGU1NTdlNDllNTE2ZDcwN2U0MThlMWFlOTNmOTYwZGJhYzkyZDJlYTgyMGU2NzRlNmUyODA4ZDcyYzMzNzBiZWNmODBkYmQ5MmFlZjRhNjVhOWE5ZA%3D%3D&uuid=&pii=&in=false
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/users?token=L2R5ZmMxazA5P2tleT04NjM3MDViY2JiNGI2YTU1NGRkYjM1OTY2NTM5NWE2ZiZwc2lkPTIxMDc1MjgyJnBzdD0xNzAxMTYwNjQwJnJlZmVyPWh0dHBzJTNBJTJGJTJGYmVkemllcGlla2xvLm9yZyUyRiZybXRjPXQmc2h1PTAxMjc5NzkxNzNhM2VmNmQxNDY1MDc0OTg2NjgwYjM5MTZjMmQ5YTZmOGJkODdhODI5N2FiNmU2ODI3OGE5NTM4YWU4Yjk2NzdkM2M5N2NhOGQ0OTk1ODQyZDkxNTU3MTE5NjQ3NmNjZmUxYjc1NzJjZGU1NTdlNDllNTE2ZDcwN2U0MThlMWFlOTNmOTYwZGJhYzkyZDJlYTgyMGU2NzRlNmUyODA4ZDcyYzMzNzBiZWNmODBkYmQ5MmFlZjRhNjVhOWE5ZA%3D%3D&uuid=&pii=&in=false HTTP/1.1
Host: conqueredallrightswell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://conqueredallrightswell.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.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.I8yZHN6mx0rcAjInnI4Ih3-oKCaXdf-XPP2LTqhfAaI; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 08:36:21 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://violationphysics.click/c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2fb0c5ee0a11b8f1db90e6be9fd1b58f&COST_CPA=0.100000&PLACEMENT_ID=16122660&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625
Set-Cookie: iprc89daa7c71e0d156b67f1715d75f7f95f=4641329; expires=Wed, 29 Nov 2023 08:36:21 GMT
pdhtkv=true; expires=Wed, 29 Nov 2023 08:36:21 GMT
uncs=1; expires=Wed, 29 Nov 2023 08:36:21 GMT
pdhtkv28=true; expires=Wed, 29 Nov 2023 08:36:21 GMT
uncs28=1; expires=Wed, 29 Nov 2023 08:36:21 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: caea61ec9f67ac5f8d69c44148a67dc2
Strict-Transport-Security: max-age=0; includeSubdomains
violationphysics.click/c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2fb0c5ee0a11b8f1db90e6be9fd1b58f&COST_CPA=0.100000&PLACEMENT_ID=16122660&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625
0 B URL violationphysics.click/c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2fb0c5ee0a11b8f1db90e6be9fd1b58f&COST_CPA=0.100000&PLACEMENT_ID=16122660&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=wkroiqew1c9guvr0kbe2&SUB_ID_SHORT=2fb0c5ee0a11b8f1db90e6be9fd1b58f&COST_CPA=0.100000&PLACEMENT_ID=16122660&CAMPAIGN_ID=882703&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2569625 HTTP/1.1
Host: violationphysics.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Tue, 28 Nov 2023 08:36:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=h9p28plpdv; expires=Wed, 29-Nov-2023 08:36:22 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=h9p28plpdv-h9p28plpdv-hq1m-0-q5a4bl-ftxofe-ft8pdz-6d015e; expires=Wed, 29-Nov-2023 08:36:22 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://vvfal.rigelbetelgeuse.top/?pl=zKByXHsQK0ydGD7DogbGyA&click_id=6a432h9p28plpdv32e&sub_id=16122660
Strict-Transport-Security: max-age=31536000
vvfal.rigelbetelgeuse.top/?pl=zKByXHsQK0ydGD7DogbGyA&click_id=6a432h9p28plpdv32e&sub_id=16122660
0 B URL vvfal.rigelbetelgeuse.top/?pl=zKByXHsQK0ydGD7DogbGyA&click_id=6a432h9p28plpdv32e&sub_id=16122660
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=zKByXHsQK0ydGD7DogbGyA&click_id=6a432h9p28plpdv32e&sub_id=16122660 HTTP/1.1
Host: vvfal.rigelbetelgeuse.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://conqueredallrightswell.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 28 Nov 2023 08:36:22 GMT
content-length: 0
location: https://vvfal.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
set-cookie: zKByXHsQK0ydGD7DogbGyA=5; max-age=345600; path=/; samesite=lax
__pl=d1579df0-d72d-41d1-a750-0b97fd650ba4; expires=Fri, 28 Nov 2025 08:36:22 GMT; path=/; samesite=lax
__cap=1; max-age=3600; path=/; samesite=lax
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UBABRAnSpITzEkKQEAuWb5q5nvL5GuIz8F9SCUPnHK5OJG0qG1YEzCLAiFoTxqWAI36hR7%2FlzURUHymyh4YvRKk3BCA7rQH6uPcPV66YA%2BQo9StzANH%2F1X5XTHQRsLWZjYwD0eWh1Hy7pR4t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d14868edfe0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
vvfal.veinmaster.top/eyes-robot/assets/1.png
11 kB URL vvfal.veinmaster.top/eyes-robot/assets/1.png
IP
File type PNG image data, 179 x 278, 8-bit colormap, non-interlaced\012- data
Hash a6fa8154cc36da494df7b5103329c15a
3a2310088bcec14f7c0187f8409a5af5395665e8
967b8859fedb2c63afc8ae6ae2839fdd40f0e26af85adc6605a629f3c0ed0837
GET /eyes-robot/assets/1.png HTTP/1.1
Host: vvfal.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:22 GMT
content-type: image/png
content-length: 10591
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
etag: "65644f17-295f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xplh4u8CkUTd5QtG4QdTVqQNxIQz6utugtj6b8M5REL8GvJ13KsafcQRY3xMehXgNiEVcnUzeFxkC62AevndG%2B4t5nYqxIxLlnwXNN%2BIQyTDvvUNC3KwwPoGsnXVRnuCrs91xSfTcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486b0cc40b31-OSL
alt-svc: h3=":443"; ma=86400
vvfal.veinmaster.top/eyes-robot/assets/2.png
1.1 kB URL vvfal.veinmaster.top/eyes-robot/assets/2.png
IP
File type PNG image data, 94 x 19, 8-bit colormap, non-interlaced\012- data
Hash d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: vvfal.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:22 GMT
content-type: image/png
content-length: 1061
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
etag: "65644f17-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aFwjzKAiW3lzCv2oPx7TRp2iphicShEoy3ihKWvqCQ7SMB%2FcqSZSelc0kg6WhAH%2FrWOfmFz7ciGXvLxAFf%2BK5c3qImqxQNoJb6cbXd3DwQSEQtdFEp%2BE8wQacV6IbZhVLKFtFXTk%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486b0cc50b31-OSL
alt-svc: h3=":443"; ma=86400
vvfal.veinmaster.top/eyes-robot/assets/trls.js
13 kB URL vvfal.veinmaster.top/eyes-robot/assets/trls.js
IP
File type Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Hash 0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b
GET /eyes-robot/assets/trls.js HTTP/1.1
Host: vvfal.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:22 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
etag: W/"65644f17-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IOpaWHn3gOWHrxiBcQ%2Bpg39S7QkVYy5%2BNRDFhXiDkbFb4AeKDLoJ92QLTAvLIhBTU%2Ft6E8yH%2FmYb2%2B%2B6Vkai4be131oUe%2FHooGRdLhYiSJRCKljRfRKTspoj9cMfKVBYsE1qAS1Paw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486b0cbc0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
vvfal.veinmaster.top/favicon.ico
0 B URL vvfal.veinmaster.top/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: vvfal.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 28 Nov 2023 08:36:23 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 2187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hd08usNWMmyiMrWEC%2Fud1YYoz%2BkHkKH5G0HmcpcNcctgOje4TCDRmVqJy66HA3sbf%2FVUJJ8usYw4ihaFlMllopUDO1RmN1rUM5tFBknnshtgXjPbwKeIh%2BVzmQ6DnyWz%2FeB%2FcskNyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486c0d2e0b31-OSL
alt-svc: h3=":443"; ma=86400
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
9.3 kB URL www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP
File type ASCII text, with very long lines (28368)
Hash 9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Nov 2023 18:21:37 GMT
expires: Mon, 25 Nov 2024 18:21:37 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 137686
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
9.9 kB URL www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP
File type ASCII text, with very long lines (38231)
Hash 0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 05:05:31 GMT
expires: Fri, 22 Nov 2024 05:05:31 GMT
cache-control: public, max-age=31536000
age: 444652
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnstatic.veinmaster.top/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&appspot=&d=https%3A%2F%2Fcdnstatic.veinmaster.top&timeout=30&tb=true
24 kB URL cdnstatic.veinmaster.top/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&appspot=&d=https%3A%2F%2Fcdnstatic.veinmaster.top&timeout=30&tb=true
IP
File type Unicode text, UTF-8 text, with very long lines (31624), with no line terminators
Hash 0ee39769d8a0c18e12c021eb501267c1
095adfa5abbc177ddcafca810ae950ed07a40851
565557eea64cbf4b9c562942a116ff65f946d99b1a8ca521960afead39e5a39d
GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&appspot=&d=https%3A%2F%2Fcdnstatic.veinmaster.top&timeout=30&tb=true HTTP/1.1
Host: cdnstatic.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:23 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: BYPASS
set-cookie: __psu=2667389d-d268-47e7-8743-d917a4098ba5; expires=Fri, 28 Nov 2025 08:36:23 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FtOFfYuN4OMEDrXUA9%2BqoXqC73zYVyevC5hJHnFf0Nymql7Uj4fWlCtEu%2FaFzW5nzKNwiGFj6GbiDrWCdVr71OLAD5IZ4otxySLC3%2BrrMf2ML1uFReLC2FBPkKuaBwrC4Qgb4K5FWw5ngJo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486b6cf20b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
a.veinmaster.top/eyes-robot/assets/2.png
1.1 kB URL a.veinmaster.top/eyes-robot/assets/2.png
IP
File type PNG image data, 94 x 19, 8-bit colormap, non-interlaced\012- data
Hash d708fbf0358752a082f5a394b74adda8
231c1527b4b039eb3af7d7e9eb5587ed87f6ea81
09d12e3c0e65fda26b9073e70e02fb24fa6941a4a3b1b81211b6470f00769ea5
GET /eyes-robot/assets/2.png HTTP/1.1
Host: a.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:23 GMT
content-type: image/png
content-length: 1061
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
etag: "65644f17-425"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3418
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Uvga9DGZytwf%2FAei2eshPuKM4HR9aQ39HqPlsrFBXnFOpZ0N9U%2Bc7oBjatCxdAF0kgRpmJrFmqczei%2BcJPjndwgpfZyCq4schaqZfkzV5YtXDgXWA%2FhKSsc6O6uUwoWBeZi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486e0e2e0b31-OSL
alt-svc: h3=":443"; ma=86400
a.veinmaster.top/eyes-robot/assets/trls.js
13 kB URL a.veinmaster.top/eyes-robot/assets/trls.js
IP
File type Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators
Hash 0cdacbfa8d68265ac3893b159a75682a
a85878b59036d00ac878739dc187305bc29df8c3
2fb2aad4f3b3426df4bb5633b627f529940bd06d0690f6b11cfcf42f0fea3e4b
GET /eyes-robot/assets/trls.js HTTP/1.1
Host: a.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:23 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
etag: W/"65644f17-2af6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tgjLlIyqye5XhOQYUHC3npS4CDoT6POSW3fdUkhBLilhRkxJHV9%2B55L2b4xIcFCR5FYYMGL8f6BaGkOayQjEsVIyhWRtXXxQHNUL4BpEmmXr2O90edKHYsBWd09nElC46w6Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486dfe200b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
vvfal.veinmaster.top/shared-js/assets/static-pl-v2.js?v=2
1.2 kB URL vvfal.veinmaster.top/shared-js/assets/static-pl-v2.js?v=2
IP
Hash 23029d0db88e630f8240554c4250ec28
155a740199eece9e22062c272292db5167214331
f2139fce982256b853d7db927bc2a32eea43e8f953e2a3aa410f059129ed1da1
GET /shared-js/assets/static-pl-v2.js?v=2 HTTP/1.1
Host: vvfal.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:22 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
etag: W/"65644f17-dbe"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YZZyjMgpaIYegSPRuaT%2FSUkIsPRYBQmJYwE%2B0WWJzT8ORRTbPg%2BJZxqxhU7McaWiHsl7SeAWuYLBcTH3PLpgzNKCphs66EJi3LIQV3XZaK7WpuNRoSvtppgA4SkXdsrXkD3jTYO3Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486b0cc70b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdnstatic.veinmaster.top/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&appspot=&d=https%3A%2F%2Fcdnstatic.veinmaster.top&timeout=30&tb=true
23 kB URL cdnstatic.veinmaster.top/ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&appspot=&d=https%3A%2F%2Fcdnstatic.veinmaster.top&timeout=30&tb=true
IP
File type Unicode text, UTF-8 text, with very long lines (31624), with no line terminators
Hash 2e498025d4fc678cb968c7107bdaf21a
0306909a04bdff19db11a9efda18a17dd144ee65
d8f1096bd96dad9a1b5a24915d85ee95d33672f6f1894a0f19dc4fa0b847a93f
GET /ps/ps.js?&edg=true&sw=&fullscreen=true&pl=true&pp=false&id=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&appspot=&d=https%3A%2F%2Fcdnstatic.veinmaster.top&timeout=30&tb=true HTTP/1.1
Host: cdnstatic.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.veinmaster.top/
Cookie: __psu=2667389d-d268-47e7-8743-d917a4098ba5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:23 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=17R%2BnpwX9QgeMm2tqTxMoM7RYk08KChHMeWJ2zI7wldBZ%2B42kibMqTTVgXkkC3SxM4S%2FYB2hXV%2B4onpB%2FgpGTL%2FbCWuW5aLrEZHE7QMxnWmZzmTcIhH88WPR3GCasxpd0idewJcTbmgWsDk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486e3e440b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
a.veinmaster.top/shared-js/assets/static-pl-v2.js?v=2
11 kB URL a.veinmaster.top/shared-js/assets/static-pl-v2.js?v=2
IP
Hash 23029d0db88e630f8240554c4250ec28
155a740199eece9e22062c272292db5167214331
f2139fce982256b853d7db927bc2a32eea43e8f953e2a3aa410f059129ed1da1
GET /shared-js/assets/static-pl-v2.js?v=2 HTTP/1.1
Host: a.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://a.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:23 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
etag: W/"65644f17-dbe"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8D6S%2Bdn2mK5eU9ODEY4f2mUHdMO%2FjsrvHGXpVAvrqu2ARvbYLEotkp1CJTiHxdDHhrsiiXDlHYO51Owxzum5Tsrkk5o7NemysLQkFDWP8p7zwTLVgYcWV4k%2BIQRp15IAvqrn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1486e0e320b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.toprevenuegate.com/zj77nccnbs?key=7c1ef88f2943ca666bff02795f23060d
1.3 kB URL www.toprevenuegate.com/zj77nccnbs?key=7c1ef88f2943ca666bff02795f23060d
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (416)
Hash 9f59578bdd51763b01bab94c8855bb6e
b604ce6ae88bc40b51b176a1354a716f51d4529d
ec35dac54abe6d0d1e9bcb685b25de78c9685eb3f9582264c44b94d1c88cc16a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /zj77nccnbs?key=7c1ef88f2943ca666bff02795f23060d HTTP/1.1
Host: www.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=19854905; expires=Wed, 29 Nov 2023 08:36:24 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.s86lgFNLhwDkrFbU8GgXsC4yY5HExbPvZkUcXjcepMk; expires=Tue, 28 Nov 2023 08:37:24 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4ea324708639d80150d841ae38242d1b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
a.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
1.4 kB URL a.veinmaster.top/eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 676bda11344b80429881cb1da5d3c12b
6cf077b09a1f1acbdaab9c1f649428ab152c468b
a7c437eb2c0783165f417fc89a9bb8196b9f24a1099aedc682e1238ac57d2823
GET /eyes-robot/?pl=zKByXHsQK0ydGD7DogbGyA&sm=eyes-robot&click_id=6a432h9p28plpdv32e&sub_id=16122660&nrid=759f255e4007485c8eac9583bcf38dda&hash=6A9P01yXA-Tp86oYVCWyZg&exp=1701160882 HTTP/1.1
Host: a.veinmaster.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://vvfal.veinmaster.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 08:36:23 GMT
content-type: text/html
last-modified: Mon, 27 Nov 2023 08:11:03 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8fvsjY5%2Bpj8osi3sIRXAiowJzNqrJzEmOKizznIbxxBlywB8BHskDdP0KQaimaK85NGluL1nG1LFMoK7yIKwRHyoCBgLTmxfggmONNd%2BOMcrDDUHlz6DBoo5Kw5VVwQlRS%2FF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d1486d3dd80b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=19854905
307 Temporary Redirect 0 B URL User Request GET HTTP/2 adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=19854905
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Certificate IssuerTrustwave Holdings, Inc.
Subjectaffiliates.kindredplc.com
Fingerprint9C:1F:91:86:77:41:76:62:71:CD:11:FD:80:70:B7:83:58:47:BF:4F
ValidityThu, 17 Aug 2023 06:39:43 GMT - Fri, 16 Aug 2024 06:38:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=19854905 HTTP/1.1
Host: adserving.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.toprevenuegate.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://www.unibet.com/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; domain=.unibet.com; expires=Thu, 28-Nov-3022 08:36:25 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-azure-ref: 0iaZlZQAAAADfzW/beZbhSa/ZxoUMd9TdU1ZHMjBFREdFMDYyMAAyZDk5MzlkMy05NTUxLTQ2ZmYtOGEyNi01ZWZmY2FhMWQ5OGM=
x-cache: CONFIG_NOCACHE
date: Tue, 28 Nov 2023 08:36:24 GMT
content-length: 0
X-Firefox-Spdy: h2
www.unibet.com/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950
301 Moved Permanently 0 B URL User Request GET HTTP/2 www.unibet.com/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950
IP
ASN #47171 Unibet Services Limited
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950 HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.toprevenuegate.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 28 Nov 2023 08:36:25 GMT
content-length: 0
location: https://www.unibet.com:443/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A94151521-37950
set-cookie: JSESSIONID=node012hqqxro7hdsv1cqnfpvh2ibpj2358658.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict
__ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; Path=/; Domain=.unibet.com; Expires=Thu, 27-Nov-2025 08:36:25 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr=ST.0.T; Path=/; Domain=.unibet.com; Expires=Thu, 27-Nov-2025 08:36:25 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr_ref="https://www.toprevenuegate.com/"; Path=/; Domain=.unibet.com; Expires=Thu, 27-Nov-2025 08:36:25 GMT; Max-Age=63072000; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
netwid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
CLAIM_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affiliateId=1; Path=/; Domain=.unibet.com; Secure; SameSite=None
B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; Path=/; Domain=.unibet.com; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BID=37950; Path=/; Domain=.unibet.com; Secure; SameSite=None
PID=94151521; Path=/; Domain=.unibet.com; Secure; SameSite=None
CHID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; Path=/; Domain=.unibet.com; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BOCAID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
PRODUCT_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; Path=/; Domain=.unibet.com; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
clientId=polopoly_desktop; Domain=www.unibet.com; Path=/; SameSite=None; Secure
referer: https://www.toprevenuegate.com/
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Tue, 28 Nov 2023 08:36:25 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
X-Firefox-Spdy: h2
www.unibet.com/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A94151521-37950
301 Moved Permanently 0 B URL User Request GET HTTP/2 www.unibet.com/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A94151521-37950
IP
ASN #47171 Unibet Services Limited
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&sref=ADST&ADST=19854905&affiliateId=1&pid=94151521&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A127656177%3A94151521-37950 HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.toprevenuegate.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 28 Nov 2023 08:36:25 GMT
content-length: 0
location: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Tue, 28 Nov 2023 08:36:25 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/gambling-commission.png
302 Found 0 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/gambling-commission.png
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nu/pop/sportsbook/multisports/gambling-commission.png HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Tue, 28 Nov 2023 08:36:25 GMT
content-length: 0
location: https://www.unibet.com/
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d1487d1eb056c1-OSL
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 30 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (65451)
Hash a09e13ee94d51c524b7e2a728c7d4039
0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae
160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 02:56:35 GMT
expires: Fri, 22 Nov 2024 02:56:35 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 452390
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
200 OK 956 B URL GET HTTP/2 a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
IP
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
Hash fd48e87ecd4d06d9c5df490b91dc813e
a65a437db44444634e4f41732c590c1d14433b3f
2f786ae3f4577ed970f60aa7a9edf726300a740fdb360a8364db7ff4b7ca8e47
GET /unibet/bannerflow/scripts/master_tag.js HTTP/1.1
Host: a1s-cdn.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: application/javascript
content-length: 956
last-modified: Mon, 25 Apr 2022 12:19:34 GMT
etag: "3bc-5dd7996cc0ce1"
cache-control: max-age=1800, public, must-revalidate
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s-cdn.unibet.com; Path=/; SameSite=None; Secure
accept-ranges: bytes
X-Firefox-Spdy: h2
www.unibet.com/
200 OK 12 kB IP
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
File type gzip compressed data\012- data
Hash a7ecba192400940bbae84f9a12270115
b68b17eb92eebc91da247a62a1948699ab9cffda
856e8e184a324e921dda8d90de2cdfb9f492b276fe1bf2b382893523acd5350f
GET / HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; clientId=polopoly_desktop; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: text/html;charset=utf-8
x-request-id: 7e2a9f805cbfdd9e3e5c3657b7f1ad05
x-ua-compatible: IE=Edge,chrome=1,requiresActiveX=true
cache-control: public, max-age=0, s-maxage=60
expires: Tue, 28 Nov 2023 08:36:18 GMT
vary: accept-encoding
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/css/all.css
200 OK 114 kB URL GET HTTP/2 use.fontawesome.com/releases/v5.7.1/css/all.css
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (54456), with no line terminators
Size 114 kB (114187 bytes)
Hash 7b1d7f457d056ace7b230b587b9f3753
4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b
9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf
GET /releases/v5.7.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
last-modified: Fri, 22 Sep 2023 01:45:49 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 1493151
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OxGTIuScAgxPgQdz892VSKes4MFltSQt1Unr%2FuymN%2BqWIXZ8ajogmkA5nECBFnN0l2ru57mCxADfUpBThUMFJyGaTrJI7Wp%2BiQSIzdWciYNswP0C3DAPbCLsCTAdknLMuDS8qpGl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d1487d990766b1-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/app-sports-icon.svg
200 OK 21 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/app-sports-icon.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (15888), with no line terminators
Hash 2e6f9dbfba55dfa91376da363e813261
b14b92d60cdf76622b9f91b3a56c7a8d98649c23
ec5264587927f5d20d839f8f7d97e98e8dd4d9cce69ffd27a0d63d13d2102498
GET /nu/pop/sportsbook/multisports/app-sports-icon.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d0ea156c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 361437
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702DCB4E58"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: Lm+dv7pV36kTdto2PoEyYQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 76cbcfd3-901e-004e-01cc-1c3c8a000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PF2RVHC
200 OK 67 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PF2RVHC
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (25136)
Hash 9209a90e1a5ba322d1addd341786edc8
35e2afdbdf197485abef5abc8441fc9c0449599f
9b3eebc944099668c3c66f2d815429edd1f8d2ecc24e11ff51cf01090e98fc02
GET /gtm.js?id=GTM-PF2RVHC HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 08:36:26 GMT
expires: Tue, 28 Nov 2023 08:36:26 GMT
cache-control: private, max-age=900
last-modified: Tue, 28 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 67132
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
200 OK 21 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
Hash cd7901ab004cbe23cf68ae6b0486a998
11c4422439ed8b081e672eceef735ed1fcad6e90
01d6d6271e9cfda8348fcde699bbb334310b6ba858f1d01fbe2b08b6ceba6c1b
GET /nu/pop/sportsbook/multisports/1-styles.css HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: text/css; charset=utf-8
cf-ray: 82d1487cfe8a56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 442107
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702AA0A0C4"
last-modified: Wed, 13 Sep 2023 15:43:24 GMT
vary: Accept-Encoding
content-md5: zXkBqwBMviPPaK5rBIapmA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: dda9c37d-401e-0010-5ea4-13d76a000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/custom.js
200 OK 18 kB URL GET HTTP/2 welcome.unibet.com/custom.js
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
Hash 7bf01e92dd55d5fa298f55fbcb9afd30
4db58eaa64d33bce2d1ae88d5ed6919d8986f8dc
2c13bba84b390447c18343fd8319ca7aea45208f53fb3143ed27c354fd5b2b1f
GET /custom.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: application/javascript
cf-ray: 82d1487cfe9856c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 454976
etag: W/"0x8DA115DA300B0C1"
last-modified: Tue, 29 Mar 2022 08:25:09 GMT
vary: Accept-Encoding
content-md5: e/Aekt1V1fopj1X7y5r9MA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: b3159e82-501e-0041-530e-134ae6000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/icon-trust.svg
200 OK 16 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/icon-trust.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1066), with no line terminators
Hash f64e07dc4e791d707923de158a7ad439
17b1069ca64b16e2c16e56bc638fd3df5c9634aa
323e94b4a6a0b33de9b79d4dac91274635e005ba31335ac6f961af518f976ffe
GET /nu/pop/sportsbook/multisports/icon-trust.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d1eab56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 453497
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702CDF8B61"
last-modified: Wed, 13 Sep 2023 15:43:28 GMT
vary: Accept-Encoding
content-md5: 9k4H3E55HXB5I94VinrUOQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: edf675d7-401e-005d-54c3-0b1886000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/app-store-ro.svg
200 OK 79 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/app-store-ro.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1356)
Hash 7a982245aa6326903b0e7893885e42fb
47fa69cfed4819f23a8764170e04f5744bd47cd6
18b0e4aa1e8678befe4e7db06e054447b9f96684d817b6424a6b8824042a45fb
GET /nu/pop/sportsbook/multisports/app-store-ro.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d0ea356c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 449262
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702DD4C2C5"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: epgiRapjJpA7DniTiF5C+w==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: f0a9fb76-d01e-005f-5e18-15a63e000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/utv-logo.svg
200 OK 807 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/utv-logo.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document, ASCII text, with very long lines (853), with no line terminators
Hash f15fae382cc1d3e2e193f9c40c15a343
d11f4a64118554c780b89adee4599c9a87ed00f4
933e872ad40b252a87a6010ca407ba9085c3859340d2075a4dca4374d084bcda
GET /nu/pop/sportsbook/multisports/utv-logo.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d0e9f56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 527114
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702B2489E0"
last-modified: Wed, 13 Sep 2023 15:43:25 GMT
vary: Accept-Encoding
content-md5: QazcDvviTF55mXL/M8kCWQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 83e30576-601e-0028-58a9-1673aa000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:57:34 GMT
expires: Fri, 22 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 445132
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2
200 OK 74 kB URL GET HTTP/2 use.fontawesome.com/releases/v5.7.1/webfonts/fa-solid-900.woff2
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998\012- data
Hash 3638e62ea50e6f5859b6a15276c25c87
f5aa1a463e223a294a42b314e1c63a614d594ec0
9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9
GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: font/woff2
content-length: 74320
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "3638e62ea50e6f5859b6a15276c25c87"
last-modified: Fri, 22 Sep 2023 01:45:51 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 1479890
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UzmnP4H6N2%2BUrKmL0yq5hr5OvcjeJyTRJBUNFYcuHHjslys5G7WuYMnjgT87CUJTvWHEjIOsGjT%2Fdk3TVfOFcJXyUkvDE934SIJKrj6RHxI%2Fn5NncF3AZCXEGIMrrCvtxuf6AlNt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d1487f1b4b66b1-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 17:28:13 GMT
expires: Fri, 22 Nov 2024 17:28:13 GMT
cache-control: public, max-age=31536000
age: 400093
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/unibet-logo.svg
200 OK 3.2 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/unibet-logo.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (3287), with no line terminators
Hash 910a470c87e6907732caefbe1b43f25c
709f3846db3c983a502d081a17c95404c545141c
c1912c86d189996a4995f3c142f73f88150fd922a203f914e1a17992f07a2db5
GET /nu/pop/sportsbook/multisports/unibet-logo.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d0e9c56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 582117
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702B55A494"
last-modified: Wed, 13 Sep 2023 15:43:25 GMT
vary: Accept-Encoding
content-md5: cw5jdwcrd9gLyjDZb7Y7Jw==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 4e5092f0-d01e-005f-0959-e6a63e000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/widget/betslip/betslip.js
200 OK 15 kB URL GET HTTP/2 welcome.unibet.com/widget/betslip/betslip.js
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type ASCII text, with very long lines (693)
Hash 5770dc60397ffb834d1280aa7bcebbd0
f0bbf2136b83babe5a8f70eeff2308279e9a0d3a
42e08e8d4858e610d87679ab66e8a7cf4b575614c0aa1423d8a1c0245bda9a52
GET /widget/betslip/betslip.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 82d1487e4fc856c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 347566
cache-control: public, max-age=900, immutable
etag: W/"0x8D67ACF6D112CB5"
last-modified: Tue, 15 Jan 2019 09:54:22 GMT
vary: Accept-Encoding
content-md5: V3DcYDl/+4NNEoCqe8670A==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 5135171d-601e-0075-7649-0c792e000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/icon-sports.svg
200 OK 1.5 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/icon-sports.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1513), with no line terminators
Hash 49bb8022b31261533a9fc360618129c2
35ab11ba839506015fe62c50a79bf3aff01d049c
559f2bd484ade1ad03ed79c5a5de1604fe9acc174164d3fd28d68eff7acbe2b3
GET /nu/pop/sportsbook/multisports/icon-sports.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d1eaf56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 348485
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702D1E3897"
last-modified: Wed, 13 Sep 2023 15:43:28 GMT
vary: Accept-Encoding
content-md5: Kch+tYuo05USS5JaESq1rA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 89ff6622-901e-005e-7ca4-16f9e2000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.unibet.com/kindred_snow/s3.7.0/kindred_s.js
200 OK 74 kB URL GET HTTP/2 www.unibet.com/kindred_snow/s3.7.0/kindred_s.js
IP
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
File type ASCII text, with very long lines (65378)
Hash 3fb00dbb8acb3c68fd5ddb674f22bb88
cf7bc4f71f0ff66037ac2e564963ff4c2737e766
7d3d84e73da67922341950d1542a5a5da2420ea18026e314a9aec22f631e4246
GET /kindred_snow/s3.7.0/kindred_s.js HTTP/1.1
Host: www.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=BLP.1.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; clientId=polopoly_desktop; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: application/javascript
last-modified: Tue, 28 Nov 2023 08:17:02 GMT
vary: Accept-Encoding
etag: W/"6565a1fe-12240"
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.com/index.html
content-encoding: gzip
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/favicon.ico
200 OK 421 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/favicon.ico
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash ad2d9f441c6692a806c7b427bb3e536d
4978e1ffc5b62c3e2231d22aeb8f7ac679764abe
95efe0e48a145adb6c6c385cecb0e2a7a3dd2e9a3f7a01ca0647e373602770ed
GET /nu/pop/sportsbook/multisports/favicon.ico HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: image/x-icon
cf-ray: 82d1487fd91e56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 527044
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702ABA666E"
last-modified: Wed, 13 Sep 2023 15:43:24 GMT
vary: Accept-Encoding
content-md5: rS2fRBxmkqgGx7Qnuz5TbQ==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: ac00a8bf-d01e-0002-5b3a-14acba000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/com-payments.svg
200 OK 32 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/com-payments.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bf06fba2ca517eddb1cc60ed26f47758
d184102516fbb91e198b99a09ac6f739d13d836d
6a91f72758fb0426e2cf9b5f36432666b620d80d825989e9dd6175a251c78475
GET /nu/pop/sportsbook/multisports/com-payments.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d2eb856c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 527190
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702B7E8320"
last-modified: Wed, 13 Sep 2023 15:43:26 GMT
vary: Accept-Encoding
content-md5: vwb7ospRft2xzGDtJvR3WA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: a95fdfb0-e01e-0019-5dda-1592b9000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/Unibet_Pro_2020.woff2
200 OK 11 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/Unibet_Pro_2020.woff2
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type Web Open Font Format (Version 2), TrueType, length 10924, version 1.0\012- data
Hash 0ea5bcff84ae44840b6e9c9d12c8b963
6c827e1adb18775d2fdfbbbfef63cc9b66243ed2
b4e210ac58fe8fb176e24c58ffdbd0e7b40dded1314769dbcebdc413998b882b
GET /nu/pop/sportsbook/multisports/Unibet_Pro_2020.woff2 HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: font/woff2
content-length: 10924
cf-ray: 82d1487ee86756c1-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 454885
cache-control: public, max-age=900, immutable
etag: "0x8DBB4702DB224D1"
last-modified: Wed, 13 Sep 2023 15:43:29 GMT
vary: Accept-Encoding
content-md5: DqW8/4SuRIQLbpydEsi5Yw==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 079c49b7-601e-0028-537f-0c73aa000000
x-ms-version: 2014-02-14
server: cloudflare
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/icon-expert.svg
200 OK 966 B URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/icon-expert.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1004), with no line terminators
Hash 60530a8226b6f89fbd6e188cd9bdb2fc
5ff9b1d4f00eb8dc12ecb50e0a87abadf144a17d
1c0ec6dc6f122167b6c09d4cafb6ab7312fa4908ba74693ea7105730a5a2ed93
GET /nu/pop/sportsbook/multisports/icon-expert.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d1eac56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 457119
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702CE70450"
last-modified: Wed, 13 Sep 2023 15:43:28 GMT
vary: Accept-Encoding
content-md5: Z4302O+bSqlX5UM92U+35A==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: aee50919-501e-006e-6628-0d472d000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
200 OK 17 kB URL User Request GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
IP
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521 HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.toprevenuegate.com/
DNT: 1
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: text/html; charset=utf-8
cf-ray: 82d1487b0cc956c1-OSL
cf-cache-status: MISS
access-control-allow-origin: *
cache-control: public, max-age=900, immutable
last-modified: Wed, 13 Sep 2023 15:43:24 GMT
vary: Accept-Encoding
content-md5: aY23filpvIp9zBTCFZm2tg==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 27e828f2-101e-001d-55d5-211fbe000000
x-ms-version: 2014-02-14
set-cookie: btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F;max-age=2592000; domain=.unibet.com;path=/;secure;samesite=none;httponly
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg
200 OK 25 kB URL GET HTTP/2 cdn.bannerflow.com/resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1D:7A:63:AD:26:C4:EA:3F:E9:47:1D:1D:DE:FF:EF:66:52:E5:DD:F7
ValidityThu, 09 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7857f5fa35651d9795bac512238caaf4
107c2b86078dd49ffd18c76724bd290018719037
bf1b321fe365e6fdb5429bcebb8a6b5b9ed554d84f4eced5e69cc31038455a81
GET /resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: eFf1+jVlHZeVusUSI4yq9A==
last-modified: Mon, 07 Dec 2020 10:23:00 GMT
etag: W/"0x8D89A9A12E2A33B"
x-ms-request-id: b31b4379-501e-0041-450f-134ae6000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 475
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d14882fbeab52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500
200 OK 6.4 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (6530), with no line terminators
Hash feddc562097e437af08febef83792dbe
4d1d430f50e555657f1a135bcf655877597b38ca
284e88ea80c2a259fedfeb2cd060bd55616e22a73693c779061741385239c46b
GET /css?family=Roboto:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 28 Nov 2023 08:36:25 GMT
date: Tue, 28 Nov 2023 08:36:25 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bannerflow-feed-builder.azurewebsites.net/api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no
200 OK 4.7 kB URL GET HTTP/2 bannerflow-feed-builder.azurewebsites.net/api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerMicrosoft Corporation
Subject*.azurewebsites.net
Fingerprint0A:12:F7:66:D9:79:A1:83:48:0D:FC:30:BC:F5:BD:27:AF:F4:1A:84
ValidityTue, 01 Aug 2023 09:55:22 GMT - Thu, 27 Jun 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (5178), with no line terminators
Hash 631915d845ca82d33ab60022714e1ff6
30f782357bfb04d2a311b19a4e116c7a0d00253a
225138234c65e4185b4d10ccddffeec9f5b674156fb2ca1819f5a89baf92f4a0
GET /api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no HTTP/1.1
Host: bannerflow-feed-builder.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Tue, 28 Nov 2023 08:36:25 GMT
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-expose-headers: Request-Context
cache-control: no-cache
content-encoding: gzip
expires: -1
pragma: no-cache
set-cookie: ARRAffinity=48768a3b039304e9b1fa7ae91a032ba86cf010beddc152b2be007691832f4002;Path=/;HttpOnly;Secure;Domain=bannerflow-feed-builder.azurewebsites.net
ARRAffinitySameSite=48768a3b039304e9b1fa7ae91a032ba86cf010beddc152b2be007691832f4002;Path=/;HttpOnly;SameSite=None;Secure;Domain=bannerflow-feed-builder.azurewebsites.net
vary: Accept-Encoding
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:f631c08e-9610-47b7-82c9-c925628cdde1
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
www.toprevenuegate.com/api/users?token=L3pqNzduY2NuYnM_a2V5PTdjMWVmODhmMjk0M2NhNjY2YmZmMDI3OTVmMjMwNjBkJnBzdD0xNzAxMTYwNjQ0JnJtdGM9dCZzaHU9YWM5ZTYwNzc2NTE1Yjc0OGQyMzNhMmM2NjBmMjIwNjYyMmVjY2EwODJmZmM4ZTMzZjgzMmM1OTY1MWRlOWU2MzgwYmRlOWY4NWNmZTY1MjNmNzg3NDBhMGU4ZGYyYmViYjcwMDEyMzE3N2IxZWNkOWE2NzQ4OTVhNWM3YTQyZGYzY2I4NjJkMWI3YTI5MDQ5MzY2N2NhMWY1MmIxZDZiZWU2ZjVmZjgwNTM1MGM4ZWNkMWVlZWM1MTI3MWE0MWJmMTQ%3D&uuid=&pii=&in=false
302 Found 17 kB URL User Request GET HTTP/1.1 www.toprevenuegate.com/api/users?token=L3pqNzduY2NuYnM_a2V5PTdjMWVmODhmMjk0M2NhNjY2YmZmMDI3OTVmMjMwNjBkJnBzdD0xNzAxMTYwNjQ0JnJtdGM9dCZzaHU9YWM5ZTYwNzc2NTE1Yjc0OGQyMzNhMmM2NjBmMjIwNjYyMmVjY2EwODJmZmM4ZTMzZjgzMmM1OTY1MWRlOWU2MzgwYmRlOWY4NWNmZTY1MjNmNzg3NDBhMGU4ZGYyYmViYjcwMDEyMzE3N2IxZWNkOWE2NzQ4OTVhNWM3YTQyZGYzY2I4NjJkMWI3YTI5MDQ5MzY2N2NhMWY1MmIxZDZiZWU2ZjVmZjgwNTM1MGM4ZWNkMWVlZWM1MTI3MWE0MWJmMTQ%3D&uuid=&pii=&in=false
IP
Certificate IssuerLet's Encrypt
Subjecttoprevenuegate.com
Fingerprint7D:44:5C:97:A8:B4:D2:87:5C:7C:4E:B7:DA:3A:38:99:85:00:67:40
ValidityFri, 20 Oct 2023 09:02:00 GMT - Thu, 18 Jan 2024 09:01:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /api/users?token=L3pqNzduY2NuYnM_a2V5PTdjMWVmODhmMjk0M2NhNjY2YmZmMDI3OTVmMjMwNjBkJnBzdD0xNzAxMTYwNjQ0JnJtdGM9dCZzaHU9YWM5ZTYwNzc2NTE1Yjc0OGQyMzNhMmM2NjBmMjIwNjYyMmVjY2EwODJmZmM4ZTMzZjgzMmM1OTY1MWRlOWU2MzgwYmRlOWY4NWNmZTY1MjNmNzg3NDBhMGU4ZGYyYmViYjcwMDEyMzE3N2IxZWNkOWE2NzQ4OTVhNWM3YTQyZGYzY2I4NjJkMWI3YTI5MDQ5MzY2N2NhMWY1MmIxZDZiZWU2ZjVmZjgwNTM1MGM4ZWNkMWVlZWM1MTI3MWE0MWJmMTQ%3D&uuid=&pii=&in=false HTTP/1.1
Host: www.toprevenuegate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.toprevenuegate.com/zj77nccnbs?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=19854905
Cookie: u_pl=19854905; ain=eyJhbGciOiJIUzI1NiJ9.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.s86lgFNLhwDkrFbU8GgXsC4yY5HExbPvZkUcXjcepMk; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 08:36:24 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=15135578&sref=ADST&ADST=19854905
Set-Cookie: pdhtkv=true; expires=Wed, 29 Nov 2023 08:36:24 GMT
uncs=1; expires=Wed, 29 Nov 2023 08:36:24 GMT
pdhtkv28=true; expires=Wed, 29 Nov 2023 08:36:24 GMT
uncs28=1; expires=Wed, 29 Nov 2023 08:36:24 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d025cc922bdadbd2beefb5bc08f783ec
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
200 OK 1.1 kB URL GET HTTP/2 cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1D:7A:63:AD:26:C4:EA:3F:E9:47:1D:1D:DE:FF:EF:66:52:E5:DD:F7
ValidityThu, 09 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1065), with no line terminators
Hash 8994f187d31c33e41e6af6c078d8b4f3
e65a39fb2b4d56343b2af57a19ba38612eaa262f
e4f28e35c66413fc59cb5bdb97c30fd7de981c9408b0f38068c3f71661f52872
GET /resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: DtBEzXf8HuXNecd90Rx/1w==
last-modified: Fri, 27 Nov 2020 14:00:01 GMT
etag: W/"0x8D892DCBC244A27"
x-ms-request-id: 850b18b8-b01e-003b-137b-0c57a6000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 375
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d14882ebe4b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/1-main.js
200 OK 4.5 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/1-main.js
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (4762), with no line terminators
Hash cc638d634c8efd9452a05f3ed63a2c15
d680da0e128220e8310269d900408fb3727eca2d
9d2ff7f3c0209be9a5ba2736e033c4117893aed259278008797f0bfd43dea7fb
GET /nu/pop/sportsbook/multisports/1-main.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 82d1487cfe9056c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 264229
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702E1B3700"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: BPxI3njL/F0VV+nfOZx3Mw==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 0799503c-801e-0042-7d02-19ab82000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg
200 OK 4.9 kB URL GET HTTP/2 cdn.bannerflow.com/resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1D:7A:63:AD:26:C4:EA:3F:E9:47:1D:1D:DE:FF:EF:66:52:E5:DD:F7
ValidityThu, 09 Mar 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4999), with no line terminators
Hash 7506851c12654bfc54bb813a52957b68
b88e0179a85912068c3480f522a8b0958a23046c
0217e3f9fd1201390e06eee878ccbf84feba0077e7cdd01754170f78e18c274d
GET /resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: FAAw5O0EvruykoHDQoRDMA==
last-modified: Fri, 27 Nov 2020 14:00:02 GMT
etag: W/"0x8D892DCBC6EB927"
x-ms-request-id: 90577b5d-e01e-0026-0f98-165a1a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 462
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d14882ebdbb52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/google-play-ro.svg
200 OK 5.7 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/google-play-ro.svg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5942), with no line terminators
Hash e78a89d4d455992dad24f8d5a66e1d25
bff521852ffdf8934c26a627aaea680d84cd08bb
cba1b2c9cc48a01ef1a542ec799e6005cedf390479ad761b3840c999b6ed8b70
GET /nu/pop/sportsbook/multisports/google-play-ro.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: image/svg+xml
cf-ray: 82d1487d1eaa56c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 444958
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702DDE5E49"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: 2fR27yW0b9kBp/ebW9u59A==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: e2bacc6f-401e-0010-6202-1cd76a000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Nov 2023 21:36:53 GMT
expires: Thu, 21 Nov 2024 21:36:53 GMT
cache-control: public, max-age=31536000
age: 471573
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/read_json.js
200 OK 5.4 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/read_json.js
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type HTML document, ASCII text, with very long lines (5609), with no line terminators
Hash 41e296392bf29f4381ad03c8314479cd
6fd53f13908be09218cff171d1bf6d9a9e954e19
58020e44456892a4b398728d98b53b09fc9a208593afedc66ac2636721932d9d
GET /nu/pop/sportsbook/multisports/read_json.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 82d1487cfe9356c1-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 358775
cache-control: public, max-age=900, immutable
etag: W/"0x8DBB4702E25208C"
last-modified: Wed, 13 Sep 2023 15:43:30 GMT
vary: Accept-Encoding
content-md5: rGS1nJi75Qz2m2yY+jlYXA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 348b4653-601e-0038-3c49-0cb6c2000000
x-ms-version: 2014-02-14
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/nu/pop/sportsbook/multisports/1-background-black.jpg
200 OK 98 kB URL GET HTTP/2 welcome.unibet.com/nu/pop/sportsbook/multisports/1-background-black.jpg
IP
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectwelcome.unibet.com
Fingerprint65:16:31:49:1A:CB:F9:ED:27:02:3C:2B:51:B5:B0:7D:DC:1A:9D:E2
ValidityMon, 30 Oct 2023 17:30:52 GMT - Sun, 28 Jan 2024 17:30:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x936, components 3\012- data
Hash 8e6d9af5ef1badfe9295b8fc96793c28
e37cdf4093dc0a47246be7360e7945f91991f073
de89de8196b23a00db8e35bca40fdb4253d970492a31396d5861c2e99d691407
GET /nu/pop/sportsbook/multisports/1-background-black.jpg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:26 GMT
content-type: image/jpeg
content-length: 98453
cf-ray: 82d1487ec84c56c1-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 356235
cache-control: public, max-age=900, immutable
etag: "0x8DBB4702B1549FF"
last-modified: Wed, 13 Sep 2023 15:43:25 GMT
vary: Accept-Encoding
content-md5: jm2a9e8brf6Slbj8lnk8KA==
x-ms-blob-type: BlockBlob
x-ms-lease-state: available
x-ms-lease-status: unlocked
x-ms-request-id: 0ff811ce-901e-0013-7152-1c360e000000
x-ms-version: 2014-02-14
server: cloudflare
X-Firefox-Spdy: h2
a1s.unibet.com/orval/tracking/lastclick.min.js
200 OK 1.8 kB URL GET HTTP/2 a1s.unibet.com/orval/tracking/lastclick.min.js
IP
ASN #47171 Unibet Services Limited
Requested by https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:127656177:94151521-37950&btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F&bid=37950&campaignId=2799402&pid=94151521
Certificate IssuerLet's Encrypt
Subjectunibet.com
Fingerprint1A:B0:7B:63:FE:17:68:E4:1E:85:13:D5:3D:2C:46:01:FC:B2:4C:84
ValidityMon, 06 Nov 2023 00:18:08 GMT - Sun, 04 Feb 2024 00:18:07 GMT
File type ASCII text, with very long lines (1881), with no line terminators
Hash 695e4c30089ed5d35b5096257b69bbec
64897f4cdac1a6e4f5d6ed9dcb8b246e3b942841
40fab43e8fa29c9c648a5d56139fe8c35b1fbfb5c826d2fd58c4ceec7a548206
GET /orval/tracking/lastclick.min.js HTTP/1.1
Host: a1s.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a94151521%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1701160585083)%5c%2f%22%2c%22CookieTag%22%3a%223795094151521451240919C20231128836%22%7d%5d; NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%2210629822318%7c1%22%7d%5d; __ucbt=node012hqqxro7hdsv1cqnfpvh2ibp; uniattr=ST.0.T; uniattr_ref="https://www.toprevenuegate.com/"; affiliateId=1; B-TAG=127656177_3D1C0DD3DAF04F3489EF359E3B03048F; BID=37950; PID=94151521; REFERER=https%3A%2F%2Fwww.toprevenuegate.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D127656177_3D1C0DD3DAF04F3489EF359E3B03048F%26sref%3DADST%26ADST%3D19854905%26affiliateId%3D1%26pid%3D94151521%26bid%3D37950; btag=127656177_3D1C0DD3DAF04F3489EF359E3B03048F
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 08:36:25 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 05 Aug 2022 12:55:42 GMT
etag: W/"705-5e57dfbd5830d"
cache-control: max-age=1800, public, must-revalidate
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s.unibet.com; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
195.78.67.42
192.243.61.225
85.184.96.5
104.16.80.126
104.40.147.180
18.157.203.0