adsgoa.com/tracking.php
185.32.28.169 25 B IP 185.32.28.169:0
ASN #15699 OGIC Informatica S.L.
File type ASCII text, with no line terminators
Hash bb1ca97ec761fc37101737ba0aa2e7c5
0b99cebe565822c64ac5d84aecb00fe40e59cbd3
d98ee0e5f9399db9381014c9f890f896d3fcb272c2a7a521d0a13aa23085a284
GET /tracking.php HTTP/1.1
Host: adsgoa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 02 Oct 2023 06:32:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Refresh: 0; url=https://c.adup.app/37221?pixel=1696228323goa651a63e3dcf8f&subid=0
Content-Encoding: gzip
e1.o.lencr.org/
23.36.76.226 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6a3e77b86f34db496882be01c86efcd8
fa2b6142723e427934eba57d1a4310428de439f2
d3299386706861ee96dc1a0ece69ddaa071bd9abcfc215f4dd42778841f68a72
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D3299386706861EE96DC1A0ECE69DDAA071BD9ABCFC215F4DD42778841F68A72"
Last-Modified: Sun, 01 Oct 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21542
Expires: Mon, 02 Oct 2023 12:31:10 GMT
Date: Mon, 02 Oct 2023 06:32:08 GMT
Connection: keep-alive
c.adup.app/37221?pixel=1696228323goa651a63e3dcf8f&subid=0
68.183.246.137 3.8 kB URL c.adup.app/37221?pixel=1696228323goa651a63e3dcf8f&subid=0
IP 68.183.246.137:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 069d20e4ef96959e10a96b56ec451f0a
af8dc5640ed3d9af7743a034e83c5d02591b5c82
844802daf43a52c232bf50ff0f2a337b50b615cb6ec24c12dfa0ba6ac26ba184
GET /37221?pixel=1696228323goa651a63e3dcf8f&subid=0 HTTP/1.1
Host: c.adup.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: Express
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
content-type: text/html; charset=utf-8
content-length: 3841
etag: W/"f01-r43FZA7T2a93Q6A06DxdAlkbXII"
vary: Accept-Encoding
date: Mon, 02 Oct 2023 06:32:08 GMT
X-Firefox-Spdy: h2
aditmedia.g2afse.com/click?pid=930&offer_id=19112&sub2=f08ba1a7_ae29f&sub1=pub73bd435590a94c54a34520738f8b481c
34.141.179.97 0 B URL aditmedia.g2afse.com/click?pid=930&offer_id=19112&sub2=f08ba1a7_ae29f&sub1=pub73bd435590a94c54a34520738f8b481c
IP 34.141.179.97:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=930&offer_id=19112&sub2=f08ba1a7_ae29f&sub1=pub73bd435590a94c54a34520738f8b481c HTTP/1.1
Host: aditmedia.g2afse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://track.thatconvertingoffer.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 02 Oct 2023 06:32:10 GMT
content-length: 0
location: http://free.aditsafeweb.com/?utm_medium=952609343f334fe029f30c3db8f3af175ae2c745&utm_campaign=RON&1=930_f08ba1a7_ae29f&cid=651a63eaa161810001bdc86a
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=651a63eaa161810001bdc86a; expires=Tue, 01 Oct 2024 06:32:10 GMT; secure; SameSite=None
afoffers={"19112":1696228330}; expires=Tue, 01 Oct 2024 06:32:10 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
free.aditsafeweb.com/favicon.ico
99.198.108.198 1.2 kB URL free.aditsafeweb.com/favicon.ico
IP 99.198.108.198:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 91abe01116ab422c598e9c8af72cf4da
0f2815fe8e067d48537ad168225ab4674271fa27
b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc
GET /favicon.ico HTTP/1.1
Host: free.aditsafeweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.aditsafeweb.com/proc.php?27fe9b198b1fd385b6e725405edff9dcd61033c2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 02 Oct 2023 06:32:11 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Wed, 31 Jul 2019 07:48:51 GMT
etag: "5d4147e3-47e"
expires: Tue, 03 Oct 2023 06:32:11 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
free.aditsafeweb.com/proc.php?27fe9b198b1fd385b6e725405edff9dcd61033c2
99.198.108.198 5.0 kB URL free.aditsafeweb.com/proc.php?27fe9b198b1fd385b6e725405edff9dcd61033c2
IP 99.198.108.198:0
File type gzip compressed data, from Unix\012- data
Hash 6440e9a6893a7fe11fa15b7602756fad
fd6304309b4354bc43427a84a529c741b9143bf8
48292827ba69d30837808b3bd5b265fc8b608a608fa209cd6007335a5b122ce3
GET /proc.php?27fe9b198b1fd385b6e725405edff9dcd61033c2 HTTP/1.1
Host: free.aditsafeweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://free.aditsafeweb.com/?utm_medium=952609343f334fe029f30c3db8f3af175ae2c745&utm_campaign=RON&1=930_f08ba1a7_ae29f&cid=651a63eaa161810001bdc86a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 02 Oct 2023 06:32:10 GMT
content-type: text/html; charset=UTF-8
location: https://www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723
vary: Accept-Encoding
x-powered-by: PHP/8.2.0
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
accept-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version
content-encoding: gzip
X-Firefox-Spdy: h2
www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723&eyeg=ac4d9c7a2b689c49942d6b4e9ce20c76&eyer=0.9494733034893305&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=free.aditsafeweb.com
51.68.85.158 0 B URL www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723&eyeg=ac4d9c7a2b689c49942d6b4e9ce20c76&eyer=0.9494733034893305&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=free.aditsafeweb.com
IP 51.68.85.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723&eyeg=ac4d9c7a2b689c49942d6b4e9ce20c76&eyer=0.9494733034893305&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=free.aditsafeweb.com HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Mon, 02 Oct 2023 06:32:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723&eyeg=3&eyer=0.9494733034893305&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=free.aditsafeweb.com
www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723&eyeg=3&eyer=0.9494733034893305&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=free.aditsafeweb.com
51.68.85.158 0 B URL www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723&eyeg=3&eyer=0.9494733034893305&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=free.aditsafeweb.com
IP 51.68.85.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7285245203915472962&website=4723-42a38914&placement=4723&eyeg=3&eyer=0.9494733034893305&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=free.aditsafeweb.com HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Mon, 02 Oct 2023 06:32:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000694fe6fb0479e46d2c7493b7e9a64dda1002-202310-flb*5688507-49bf8*M7285245203915472962*sl_5688507-49bf8*1d2a24b4d2369ce6802f96f980bd0cde96cd1e3e*4723-42a38914*4723
www.marketfoog.co/favicon.ico
51.68.85.158 0 B URL www.marketfoog.co/favicon.ico
IP 51.68.85.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Mon, 02 Oct 2023 06:32:11 GMT
Connection: keep-alive
ocsp.godaddy.com/
192.124.249.23 2.1 kB IP 192.124.249.23:0
Hash 140e2edc667e21eb08bfb79af3000f15
fa8777404180adb817b90861e611c3342981cc5c
2e8e7a96c94c4d95057b6e663f66f70918c6b73c9ed1f97cb55c51600ad264d0
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 02 Oct 2023 06:32:11 GMT
Content-Type: application/ocsp-response
Content-Length: 2108
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 02 Oct 2023 00:21:39 GMT
Expires: Tue, 03 Oct 2023 00:21:39 GMT
ETag: "fa8777404180adb817b90861e611c3342981cc5c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000694fe6fb0479e46d2c7493b7e9a64dda1002-202310-flb*5688507-49bf8*M7285245203915472962*sl_5688507-49bf8*1d2a24b4d2369ce6802f96f980bd0cde96cd1e3e*4723-42a38914*4723
34.91.27.112 0 B URL admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000694fe6fb0479e46d2c7493b7e9a64dda1002-202310-flb*5688507-49bf8*M7285245203915472962*sl_5688507-49bf8*1d2a24b4d2369ce6802f96f980bd0cde96cd1e3e*4723-42a38914*4723
IP 34.91.27.112:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000694fe6fb0479e46d2c7493b7e9a64dda1002-202310-flb*5688507-49bf8*M7285245203915472962*sl_5688507-49bf8*1d2a24b4d2369ce6802f96f980bd0cde96cd1e3e*4723-42a38914*4723 HTTP/1.1
Host: admoustache.media-412.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 02 Oct 2023 06:32:11 GMT
content-length: 0
location: https://www.cogliatu.com/rc/a91581ead4?affclick=651a63ebce0e7d0001f6eb65&pubid=503
x-adjust-use-original-forwarded-for: 1
referer:
referrer-policy: no-referrer
set-cookie: afclick=651a63ebce0e7d0001f6eb65; expires=Tue, 01 Oct 2024 06:32:11 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.15.101 471 B IP 104.18.15.101:0
Hash 36e4e80413ac91eb31c815434024d6ce
c90d461ee5fe7f817fbf190f262bef5814f12a0f
c86925abd4f244bbe51cc5a56c794564cc0b0465d01f89599bfd633726e4644f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 02 Oct 2023 06:32:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 01 Oct 2023 04:52:17 GMT
Expires: Sun, 08 Oct 2023 04:52:16 GMT
Etag: "c90d461ee5fe7f817fbf190f262bef5814f12a0f"
Cache-Control: max-age=511801,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80fae82d3f76568a-OSL
get.contenfordphone.com/sl?id=6322ddd4737205d3c53c3d47&pid=2243&sub1=30affC1696228332aff2d74950731408a781a168&sub5=29625655
34.90.81.51 0 B URL get.contenfordphone.com/sl?id=6322ddd4737205d3c53c3d47&pid=2243&sub1=30affC1696228332aff2d74950731408a781a168&sub5=29625655
IP 34.90.81.51:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=6322ddd4737205d3c53c3d47&pid=2243&sub1=30affC1696228332aff2d74950731408a781a168&sub5=29625655 HTTP/1.1
Host: get.contenfordphone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://q-w-c.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 02 Oct 2023 06:32:14 GMT
content-length: 0
location: https://gauglola.top/finance-survey.html?z=5944329&offer_id=9758&var=2243_29625655&ymid=651a63eedac66c0001f81452
x-adjust-use-original-forwarded-for: 1
referer:
referrer-policy: no-referrer
set-cookie: afclick=651a63eedac66c0001f81452; expires=Tue, 01 Oct 2024 06:32:14 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
q-w-c.click/favicon.ico
185.66.201.8 15 kB IP 185.66.201.8:0
ASN #201702 skHosting.eu s.r.o.
Hash d832d3498d367eee971f026d5475e508
60bf07d088f29df020acd13534ea2167972a5843
f8fdff83364a46d277b35c67de21aa8c22fad1585bb4a1ecfd75af3618d11c8d
GET /favicon.ico HTTP/1.1
Host: q-w-c.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://q-w-c.click/go.php?go=https%3A%2F%2Fget.contenfordphone.com%2Fsl%3Fid%3D6322ddd4737205d3c53c3d47%26pid%3D2243%26sub1%3D30affC1696228332aff2d74950731408a781a168%26sub5%3D29625655&do=51d5fb002fe9eb850e894f11890468f2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 02 Oct 2023 06:32:13 GMT
content-type: text/html
etag: W/"61b0d57b-17"
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: br
X-Firefox-Spdy: h2
gauglola.top/js/_core-survey.c50428f8.js
172.67.141.42 58 kB URL gauglola.top/js/_core-survey.c50428f8.js
IP 172.67.141.42:0
File type ASCII text, with very long lines (65457)
Hash e06f11c2f1c40f146e254a36042cb7bc
8150f6ac28946a13943ab5dcedf71b7e9a5b6258
11aafc29b4d5bd161796ae037efece7149718207183896ff53030fe1443af8d9
GET /js/_core-survey.c50428f8.js HTTP/1.1
Host: gauglola.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:14 GMT
content-type: application/javascript
last-modified: Fri, 29 Sep 2023 09:37:27 GMT
vary: Accept-Encoding
etag: W/"65169ad7-370db"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6222
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xiVWxRxaMQHlUecPh6DRHUVFGczNgEywMB6wUEDUfUSdYZyZ3rlRBpgL3h6hpEQZDe7se%2FftKbVX8phoJPxmTr6rJ1XFIhNcXs0qPwOPPyBetnZdLE8MKj3jPmry2Hk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae8339fd7b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gauglola.top/finance-survey.html?z=5944329&offer_id=9758&var=2243_29625655&ymid=651a63eedac66c0001f81452
172.67.141.42 14 kB URL gauglola.top/finance-survey.html?z=5944329&offer_id=9758&var=2243_29625655&ymid=651a63eedac66c0001f81452
IP 172.67.141.42:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5616), with no line terminators
Hash 6297c0b73e3cc6079615cf2cb79ff35e
e31d172f3167a8d5e3a28d12dd85954960a80756
6160d29197761b1b4dab7dca3ee8b62cad9a8a6660e43c82d45d241f9dfcc0c1
GET /finance-survey.html?z=5944329&offer_id=9758&var=2243_29625655&ymid=651a63eedac66c0001f81452 HTTP/1.1
Host: gauglola.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 02 Oct 2023 06:32:14 GMT
content-type: text/html
last-modified: Fri, 29 Sep 2023 09:37:28 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=URm0zLd45VpHBCvV9COIgUeh1jCzL1RCzi2MxPp7QicoGF%2F%2BgWPFC14n05vaNEDtT%2BZVnJufaLWkg%2FMUSnHq2F2KPbtDHedPkcUvEMzkAvuVPQTaSuaXNF6tuAxuiI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae831aa3a56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sikrebettingsider.com/wp-content/plugins/brand-management-extended/public/css/brand-management-campaign-shortcode.css
172.67.194.156200 OK 0 B URL GET HTTP/3 sikrebettingsider.com/wp-content/plugins/brand-management-extended/public/css/brand-management-campaign-shortcode.css
IP 172.67.194.156:443
Requested by https://sikrebettingsider.com/casino/krypto/
Certificate IssuerGoogle Trust Services LLC
Subjectsikrebettingsider.com
Fingerprint31:D9:A3:AD:24:D7:2B:A3:05:89:C8:CA:5F:E8:79:19:7E:0A:4F:72
ValidityFri, 11 Aug 2023 08:03:10 GMT - Thu, 09 Nov 2023 08:03:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/brand-management-extended/public/css/brand-management-campaign-shortcode.css HTTP/1.1
Host: sikrebettingsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sikrebettingsider.com/casino/krypto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:16 GMT
content-type: text/css
content-length: 0
last-modified: Thu, 05 May 2022 10:11:15 GMT
etag: "6273a2c3-0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
referrer-policy: unsafe-url
cf-cache-status: HIT
age: 314897
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fy4FohEhUIM9NTsP40UaHAvbmnqTGMvwiT50TL4FnhVxIEsi2217bt4vuSOHN4BDgYlJ7KCOnYi1AKP6jPQd8IG1A0KLAmSUaqg0klF%2BsU1EwfQZ%2FeH8vGHG4gxKtbSzIFGVmFSYeIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80fae83f1a60b503-OSL
alt-svc: h3=":443"; ma=86400
track.thatconvertingoffer.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
172.67.131.126 32 kB URL track.thatconvertingoffer.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js
IP 172.67.131.126:0
File type ASCII text, with very long lines (7331), with no line terminators
Hash 9f7453db1794f0b1e59807939be7271b
7955053537bc7d0e95e90ffcfa1b31b1c89af4a0
7e3ebae255249554f4b2a30065c047a720a1444b45345514dcaeba4b9f8adfa9
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/dffb14d6/main.js HTTP/1.1
Host: track.thatconvertingoffer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: AWSALB=XaK91sUaMcCtBSfdoLLG5zDwlvTB7/JE2CLvrm0z1EeD9b32aOmQ6EQgfJcKuNB8X1fGRXaAMB0GTCKMv358yX0Db/n3KOv//hOk1bVWZdfsGvJXdPqzlTQlDBTT
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:09 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
cache-control: max-age=14400, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g44e0a5EiBOIxde9g4TbeTcyhsu7tw%2BCM%2Fz%2BMy331WqGx34NGuJ7gfPsUxMEpHRQza2QyU%2BYkYj4KBBPrT0RMnp61exZ7xyabfq5K%2BNVhh2G05V4bCkuSlIGm17gvjY50h9xN8mrtOermJrmHmzJcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae8148f01067b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sikrebettingsider.com/wp-content/uploads/2022/04/IMG-20210111-083138-024-1-150x150.jpg.webp
172.67.194.156 2.9 kB URL sikrebettingsider.com/wp-content/uploads/2022/04/IMG-20210111-083138-024-1-150x150.jpg.webp
IP 172.67.194.156:0
Certificate IssuerGoogle Trust Services LLC
Subjectsikrebettingsider.com
Fingerprint31:D9:A3:AD:24:D7:2B:A3:05:89:C8:CA:5F:E8:79:19:7E:0A:4F:72
ValidityFri, 11 Aug 2023 08:03:10 GMT - Thu, 09 Nov 2023 08:03:09 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3fa4f92ab9186d958c06ac0d51fa914c
49ae810064597e623b0733a26ba636ef0ed53db9
33903d7b1c4cb02eccda39d2dfad4d18eaa872f36fe5f26339145b58c7b30d3e
GET /wp-content/uploads/2022/04/IMG-20210111-083138-024-1-150x150.jpg.webp HTTP/1.1
Host: sikrebettingsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sikrebettingsider.com/casino/krypto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:17 GMT
content-type: image/webp
content-length: 2944
last-modified: Thu, 20 Oct 2022 07:13:25 GMT
etag: "6350f515-b80"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
referrer-policy: unsafe-url
cf-cache-status: HIT
age: 311599
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LUIyjXlAzg9axpNq17iZ92nRHCIRVdOsJuQwclTlGxho7LhtuJa20IdDD4keZz9J%2FmdI4JMiNrisKviWuSbAP40D%2BQ7uEgRbZ3QQDXGDVn0Z94FfQx3%2FS%2BreBHlaayJDS66BidH73U0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80fae8431d43b503-OSL
alt-svc: h3=":443"; ma=86400
sikrebettingsider.com/wp-content/plugins/cookie-notice/css/front.min.css
172.67.194.156200 OK 5.3 kB URL GET HTTP/3 sikrebettingsider.com/wp-content/plugins/cookie-notice/css/front.min.css
IP 172.67.194.156:443
Requested by https://sikrebettingsider.com/casino/krypto/
Certificate IssuerGoogle Trust Services LLC
Subjectsikrebettingsider.com
Fingerprint31:D9:A3:AD:24:D7:2B:A3:05:89:C8:CA:5F:E8:79:19:7E:0A:4F:72
ValidityFri, 11 Aug 2023 08:03:10 GMT - Thu, 09 Nov 2023 08:03:09 GMT
File type ASCII text, with very long lines (5338), with no line terminators
Hash 53b4f25b1cd48b11b011bae0ab1ac6d5
236f4c06deba046efb42a6596231598d47e5fe45
550a476aa3c336373b4348bbfa6e332e9899d82aa46b22874ef0b1154da4ed55
GET /wp-content/plugins/cookie-notice/css/front.min.css HTTP/1.1
Host: sikrebettingsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sikrebettingsider.com/casino/krypto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:16 GMT
content-type: text/css
last-modified: Wed, 31 Aug 2022 08:02:17 GMT
vary: Accept-Encoding
etag: W/"630f1589-14d6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
referrer-policy: unsafe-url
cf-cache-status: HIT
age: 314897
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hfju2svOXCZg1y5CCNW2LUZqEDEhFMY8xTHaPlU3JjTcGGql5aadXkEp2mGAri45X55K0sRddJg7re1XG7apinVuaFErXWogNcNrqUD8umnsT%2BFUMMcOboFBNBjKtV9OpCHpYq45tYs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae83f1a5db503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sikrebettingsider.com/wp-content/uploads/2023/07/bc-game.svg
172.67.194.156200 OK 16 kB URL GET HTTP/3 sikrebettingsider.com/wp-content/uploads/2023/07/bc-game.svg
IP 172.67.194.156:443
Requested by https://sikrebettingsider.com/casino/krypto/
Certificate IssuerGoogle Trust Services LLC
Subjectsikrebettingsider.com
Fingerprint31:D9:A3:AD:24:D7:2B:A3:05:89:C8:CA:5F:E8:79:19:7E:0A:4F:72
ValidityFri, 11 Aug 2023 08:03:10 GMT - Thu, 09 Nov 2023 08:03:09 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (3309)
Hash 9783a2f74da544e52277cbefee2c7a32
ea5d5c0e3736df25acf7446aa6675c2e2eba68e4
674ea12fc284fe0f2500d27c48b6f4e0d831369bc609043e98a231b84cc54777
GET /wp-content/uploads/2023/07/bc-game.svg HTTP/1.1
Host: sikrebettingsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sikrebettingsider.com/casino/krypto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:17 GMT
content-type: image/svg+xml
last-modified: Wed, 26 Jul 2023 05:09:47 GMT
vary: Accept-Encoding
etag: W/"64c0aa9b-3eb1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
referrer-policy: unsafe-url
cf-cache-status: HIT
age: 303339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DFSOOlQlt2Kib4FaCejRkbm9pK7ktSpXcc8tv5looRBSbWTHVJU1v2am95zEsmQ4sC1JrwYIxC8cmZ%2FMFL%2F4WAQZhFGSZsrcZWORcUDqr9tvTBx3DX8M5SqQZgbu%2FsMRGNN2k44zJ5w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae842ed22b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sikrebettingsider.com/wp-content/uploads/2023/06/megadice-logo-1.svg
172.67.194.156200 OK 7.0 kB URL GET HTTP/3 sikrebettingsider.com/wp-content/uploads/2023/06/megadice-logo-1.svg
IP 172.67.194.156:443
Requested by https://sikrebettingsider.com/casino/krypto/
Certificate IssuerGoogle Trust Services LLC
Subjectsikrebettingsider.com
Fingerprint31:D9:A3:AD:24:D7:2B:A3:05:89:C8:CA:5F:E8:79:19:7E:0A:4F:72
ValidityFri, 11 Aug 2023 08:03:10 GMT - Thu, 09 Nov 2023 08:03:09 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (7215), with no line terminators
Hash 60fa420d05ac5667b3fd2c23d19e5daa
aff06f6631c13ef5723648e12c66a1de5d96a13e
3dd771f643650dd038ff0508da74dfab4669272ad82e11f4ee8661b58e9abf55
GET /wp-content/uploads/2023/06/megadice-logo-1.svg HTTP/1.1
Host: sikrebettingsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sikrebettingsider.com/casino/krypto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:17 GMT
content-type: image/svg+xml
last-modified: Tue, 13 Jun 2023 09:56:25 GMT
vary: Accept-Encoding
etag: W/"64883d49-1b80"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
referrer-policy: unsafe-url
cf-cache-status: HIT
age: 313478
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2FNgKcphhX659Lawt8YXsisW8nP3lzvCNcM397l3ool60x29G0YPzE%2F0Qv9kHcdWbuSTT28QaRCnZZV0rnm3KCZjnTH5IVsqNl%2BUQOvib7PAxwg94pPPn4MhuvH9ASuE7%2FmRw5pVAo0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae842cd0cb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sikrebettingsider.com/wp-content/uploads/2022/07/pribet.svg
172.67.194.156200 OK 2.0 kB URL GET HTTP/3 sikrebettingsider.com/wp-content/uploads/2022/07/pribet.svg
IP 172.67.194.156:443
Requested by https://sikrebettingsider.com/casino/krypto/
Certificate IssuerGoogle Trust Services LLC
Subjectsikrebettingsider.com
Fingerprint31:D9:A3:AD:24:D7:2B:A3:05:89:C8:CA:5F:E8:79:19:7E:0A:4F:72
ValidityFri, 11 Aug 2023 08:03:10 GMT - Thu, 09 Nov 2023 08:03:09 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2035), with no line terminators
Hash eb8b8475f4e2231f43e4cbf4458cd15a
a32214129268e0f7d47d6aec10a846fe1b7ab79d
a66f4a4de624b2a87b052009d15afecb1de93757f229b6532a2f4902bdb1fbb8
GET /wp-content/uploads/2022/07/pribet.svg HTTP/1.1
Host: sikrebettingsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sikrebettingsider.com/casino/krypto/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:17 GMT
content-type: image/svg+xml
last-modified: Tue, 05 Jul 2022 04:42:22 GMT
vary: Accept-Encoding
etag: W/"62c3c12e-7dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
referrer-policy: unsafe-url
cf-cache-status: HIT
age: 242416
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W0yXKySeenjMOn4GY6vsTuYfgbI2IMyOnc2zaGOEr2bVx681%2B%2Fj4GB5FvfxZlDrUwiqABfGgbLaWKhMcvUaAuumh5RzRMZi7HWawu6sTxRIMa5COvUDJAz6WoYyM0zhTefwggEfG9S8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae842fd30b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
sikrebettingsider.com/wp-content/plugins/brand-management-extended/public/images/offer-down.svg
172.67.194.156200 OK 521 B URL GET HTTP/3 sikrebettingsider.com/wp-content/plugins/brand-management-extended/public/images/offer-down.svg
IP 172.67.194.156:443
Requested by https://sikrebettingsider.com/casino/krypto/
Certificate IssuerGoogle Trust Services LLC
Subjectsikrebettingsider.com
Fingerprint31:D9:A3:AD:24:D7:2B:A3:05:89:C8:CA:5F:E8:79:19:7E:0A:4F:72
ValidityFri, 11 Aug 2023 08:03:10 GMT - Thu, 09 Nov 2023 08:03:09 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (538), with no line terminators
Hash 0b8287bb319cf364164e65ee0eafd4eb
cdf5c1a9fe0c3b25d47e9afa5ab8e04d88ab87d2
f155867ca144566bfaa83197690b686c6bcf9239f48b45eb1e7eccaf51408497
GET /wp-content/plugins/brand-management-extended/public/images/offer-down.svg HTTP/1.1
Host: sikrebettingsider.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://sikrebettingsider.com/wp-content/cache/min/1/wp-content/plugins/brand-management-extended/public/css/brand-management-public.css?ver=1695962220
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 02 Oct 2023 06:32:16 GMT
content-type: image/svg+xml
last-modified: Thu, 05 May 2022 10:11:15 GMT
vary: Accept-Encoding
etag: W/"6273a2c3-209"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
referrer-policy: unsafe-url
cf-cache-status: HIT
age: 314896
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FPAP0f3WxFfMLeA1wQz8xD0EdmrYvb9vAYJV%2B%2BHjeM2eUmFSt4UMoE7mUBXFU3jjnvoxTajtQQVT2ocXkZ9EsXujvITvY5eJIS3RyrdEa6MgzqORmd%2BfO%2BSRQVQUsrXiUwbcx800E8Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80fae8406b2cb503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400