cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
5.6 kB URL cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:00 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1124533
expires: Mon, 16 Sep 2024 19:22:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BAawOZjoBg5aETWPR0aeUetRh1MNQESTN%2Fkdb%2FMz3P9ioSg%2FYxBGizEk8XGKg9%2FmJ0teYCmgsCyVhOVLLlUbVLNho3L2xzC51FAhXDV%2FUVdidhzPR0Wio%2FegFbUEcsZvVIcEMMEj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61ce629bb1bfe-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 0bbd1e938700d156e361c1ab8640f3bd
20e70357b360a225b5094714bc89889fd045aa14
7e4f05e6aba3abeaf61da9d17ed8d5518df3bc493c3b319eb29faa4c282fb8db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
471 B IP
Hash adbb6302b8be892000bf7c8c4c5a2e97
0b780450d12df193042754e56d90cceb08070716
34d1594a3e130635b3f501ce979e899d84c8a5975424552d73c577d2ac8e10e3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:00 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 03:15:40 GMT
Expires: Tue, 03 Oct 2023 03:15:39 GMT
Etag: "0b780450d12df193042754e56d90cceb08070716"
Cache-Control: max-age=460807,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61ce81bfb56c4-OSL
cdn.runative-syndicate.com/sdk/v1/n.js
200 OK 4.7 kB URL GET HTTP/2 cdn.runative-syndicate.com/sdk/v1/n.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectcdn.runative-syndicate.com
Fingerprint02:F0:38:EF:40:04:37:37:62:83:6D:8C:CB:8E:4E:5C:B7:90:3F:CC
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (591)
Hash 4f95bc9a8fcbb08ff0cf9d18199980c7
6a2e68337c988abe1a71cbeeb45a537eb7aa0c25
653b2325d22c32a353ca70c93bc56b618a4af7a2294790bd639527ad0d3632ba
GET /sdk/v1/n.js HTTP/1.1
Host: cdn.runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:00 GMT
content-type: application/javascript
content-length: 4710
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"623b3bef-3202"
content-encoding: gzip
age: 22573
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans
1.1 kB URL fonts.googleapis.com/css?family=Open+Sans
IP
File type gzip compressed data, max compression\012- data
Hash 1659589c3f90ed9f0f5d5bde7b62bd65
2b84d5d8b5581bdc748f3a96a1a8d1bd4c8a32cc
2305b101bbd27e17ff3ff74d11ff56e224320ec1355dd8253d20a58d431b6271
GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 27 Sep 2023 19:22:00 GMT
date: Wed, 27 Sep 2023 19:22:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
platitudefivesnack.com/bd/33/ee/bd33eec695a36a5eee547fef54685028.js
17 kB URL platitudefivesnack.com/bd/33/ee/bd33eec695a36a5eee547fef54685028.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (53778), with no line terminators
Hash e5cfe2a3ad91bcbe3feaeef0093d3cd5
c7960c855ee930b7cb9dc04305429cc761329831
5c023eb12f39d05f5571dcaa1520f4409863df3011e21957e36969f57a5b4a85
GET /bd/33/ee/bd33eec695a36a5eee547fef54685028.js HTTP/1.1
Host: platitudefivesnack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 27 Sep 2023 19:22:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a20a5608f44991f1cc75ed9b0b31b5f3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sectigo.com/
471 B IP
Hash 2fe22651ed12d0d8c3eea6b05835b989
499a1e3c043de39b97de7cd80bcf825c76b09eea
faf4284422d9670f4cb6e5c7381c77322626346428b9c6027a615126abb02955
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 24 Sep 2023 11:24:30 GMT
Expires: Sun, 01 Oct 2023 11:24:29 GMT
Etag: "499a1e3c043de39b97de7cd80bcf825c76b09eea"
Cache-Control: max-age=317186,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61cecdda6568b-OSL
cdn.runative-syndicate.com/sdk/v1/n.js
200 OK 4.7 kB URL GET HTTP/2 cdn.runative-syndicate.com/sdk/v1/n.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectcdn.runative-syndicate.com
Fingerprint02:F0:38:EF:40:04:37:37:62:83:6D:8C:CB:8E:4E:5C:B7:90:3F:CC
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (591)
Hash 4f95bc9a8fcbb08ff0cf9d18199980c7
6a2e68337c988abe1a71cbeeb45a537eb7aa0c25
653b2325d22c32a353ca70c93bc56b618a4af7a2294790bd639527ad0d3632ba
GET /sdk/v1/n.js HTTP/1.1
Host: cdn.runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript
content-length: 4710
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"623b3bef-3202"
content-encoding: gzip
age: 22574
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.runative-syndicate.com/sdk/v1/n.js
200 OK 4.7 kB URL GET HTTP/2 cdn.runative-syndicate.com/sdk/v1/n.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectcdn.runative-syndicate.com
Fingerprint02:F0:38:EF:40:04:37:37:62:83:6D:8C:CB:8E:4E:5C:B7:90:3F:CC
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (591)
Hash 4f95bc9a8fcbb08ff0cf9d18199980c7
6a2e68337c988abe1a71cbeeb45a537eb7aa0c25
653b2325d22c32a353ca70c93bc56b618a4af7a2294790bd639527ad0d3632ba
GET /sdk/v1/n.js HTTP/1.1
Host: cdn.runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript
content-length: 4710
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"623b3bef-3202"
content-encoding: gzip
age: 22574
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash b8902f031110680f998035e374a958e9
767e9ea86658a88e719c016c6ccbe8ef246b33d3
ed12c8b2a987840c4a1676bbb40a6577017544b3bacab0f24ab0d60033a31b3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
19 kB URL fonts.gstatic.com/s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18664, version 1.0\012- data
Hash 8d1c44b2bf75a4e6f1bd141f9a965f4f
1e5dfdb7ca5ee8e823f9f5787f84b18fbdc38434
441e23601fe7525a142857c98cbb2784997579d51a17f736d7964dceee609709
GET /s/opensans/v36/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mavanimes.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18664
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 09:27:11 GMT
expires: Wed, 25 Sep 2024 09:27:11 GMT
cache-control: public, max-age=31536000
age: 122090
last-modified: Thu, 14 Sep 2023 01:36:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash c84db2aa974ecd33b439a3a6124cea47
a55ea70feb23dfce1365b7aeb60cd3047b0ca1bb
5b6308af9df276542b1f5542a75827208cc0cb612feffc28efd3ef79da97d97a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
471 B IP
Hash 9352528ad11844866503645adb664311
cdc67d4403158151e5d634410ab30093dfd10494
4c20c45667bd23b34498d7587c0f88958a7bfd6c76f775ccb0d962506aa5fde1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 07:27:29 GMT
Expires: Mon, 02 Oct 2023 07:27:28 GMT
Etag: "cdc67d4403158151e5d634410ab30093dfd10494"
Cache-Control: max-age=389104,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61cee9831568b-OSL
cdn.run-syndicate.com/sdk/v1/n.css
8.3 kB URL cdn.run-syndicate.com/sdk/v1/n.css
IP
File type ASCII text, with very long lines (8277), with no line terminators
Hash 37ebbc4b85fb5383d08547f5fe9d8d9f
99dac34980b1fd00028f76e782444bdf948724c5
24b59f4e4fbf1d4a988ffa478952ceb54e0b2f0774da926bcd2cc0376200dbfe
GET /sdk/v1/n.css HTTP/1.1
Host: cdn.run-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: text/css
content-length: 8277
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
etag: "623b3bef-2055"
x-robots-tag: noindex, nofollow
age: 22878
accept-ranges: bytes
X-Firefox-Spdy: h2
www.mavanimes.co/wp-content/cache/minify/ef526.js
74 kB URL www.mavanimes.co/wp-content/cache/minify/ef526.js
IP
File type ASCII text, with very long lines (65245)
Hash 2366b124ab194b68f218de2546dd0a1b
38d69c65ca6d0083c71fed1f809f9e7fee36b3b7
5fc72ae6ccc204cee9dfda9223fea9106a315b40f4787afa26a5af5c86b15718
GET /wp-content/cache/minify/ef526.js HTTP/1.1
Host: www.mavanimes.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/jigokuraku-09-vostfr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:00 GMT
content-type: application/x-javascript
cf-bgj: minify
cf-polished: origSize=114966
last-modified: Tue, 26 Sep 2023 19:50:27 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6360
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZjMTZyFmiPpUGjy9z57G4jnlnR17HEzvGc%2FMoF%2FZLw2HScd4Do%2BzTiMmItlpPkNGLYaocfuvbL8RSmByNsAmO1aytDjVrFSKcOguP%2BER0suLzPL%2FPNYtucgBZUzO5oSDxKWn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61ce5ffc156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.mavanimes.co/wp-content/cache/minify/c2431.js
26 kB URL www.mavanimes.co/wp-content/cache/minify/c2431.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b2d9f64b31136b7040be5d532e4399e6
7e899940ae08601705de0e2603d5d84733aedbdc
8d2a7e0522eb3980ecd820fd547734275bd09cf241e65f339cdb239c5c45c1e9
GET /wp-content/cache/minify/c2431.js HTTP/1.1
Host: www.mavanimes.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/jigokuraku-09-vostfr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:00 GMT
content-type: application/x-javascript
cf-bgj: minify
cf-polished: origSize=87642
last-modified: Tue, 26 Sep 2023 18:05:20 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1399
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=219NDnHqEsntk9RGSB21LyBRTLQWcvJrRXT8%2B42RIQubpeH2iRuIvj5GQZWPGGIsCWXW8G1KR0tD0X9MuYUJRvumZZjVnYKkC7tY%2FeBVx7Cbq4xP7nxvB0dMY5FWIjLq6Ts0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61ce6c93256c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
judicialfizzysoftball.com/86/f3/2c/86f32c7f018e7bea0d999d8785cfb4fa.js
13 kB URL judicialfizzysoftball.com/86/f3/2c/86f32c7f018e7bea0d999d8785cfb4fa.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37122), with no line terminators
Hash 352b077b87774eceb4a1b56dfe7a3f94
63eabc7d51feb6bcfd1c12cadb434f3bedbf9ff8
b1ffa8882e7fafe3bccf5bd1a2ae3f7e002f8bae8dce7e5438e106745eb742b8
GET /86/f3/2c/86f32c7f018e7bea0d999d8785cfb4fa.js HTTP/1.1
Host: judicialfizzysoftball.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 27 Sep 2023 19:22:01 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 63a814daf3697148ec5be10a9cb03e9c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.runative-syndicate.com/sdk/v1/n.js
200 OK 4.7 kB URL GET HTTP/2 cdn.runative-syndicate.com/sdk/v1/n.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectcdn.runative-syndicate.com
Fingerprint02:F0:38:EF:40:04:37:37:62:83:6D:8C:CB:8E:4E:5C:B7:90:3F:CC
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (591)
Hash 4f95bc9a8fcbb08ff0cf9d18199980c7
6a2e68337c988abe1a71cbeeb45a537eb7aa0c25
653b2325d22c32a353ca70c93bc56b618a4af7a2294790bd639527ad0d3632ba
GET /sdk/v1/n.js HTTP/1.1
Host: cdn.runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript
content-length: 4710
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"623b3bef-3202"
content-encoding: gzip
age: 22574
accept-ranges: bytes
X-Firefox-Spdy: h2
streamtape.com/adgpt.js
20 B IP
File type ASCII text, with no line terminators
Hash 69a305bcdc8e061bbd43294a477a3678
506582a1d912d546f5942d95ffae95ec7f4c37ce
8964d85afd6d5d84b97872464646809c952ab900cdf5c5d7c3b7b4bdb74202fa
GET /adgpt.js HTTP/1.1
Host: streamtape.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/e/8BMaxrqyOjiozBw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 20
last-modified: Tue, 28 Mar 2023 18:04:25 GMT
etag: "64232c29-14"
cache-control: max-age=345600
cf-cache-status: HIT
age: 6642
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kc0zO3nBXYBETVmE2SBLG8Jqyrmn1ONyjfOlWVUeEA8rwQpoJXL6JQ2126pqMRsslwWbSHhVf5H55HIKDSUXeCjQ6VWL0bkAI7HTnfZWc0umh5Oie6EKDrYOkIP99JOKtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61cf17e86b4ed-OSL
alt-svc: h3=":443"; ma=86400
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 5e2fc0793d6fa2c83e44a7d46c0eccc7
8ddcc404eb44d8b4650970e2df4b5d83f7108c3b
c63c619e164cc057f702911db333e91122ffc5194268ce53b907ac9b8780ab47
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 27 Sep 2023 19:22:01 GMT
Last-Modified: Wed, 27 Sep 2023 18:09:45 GMT
Server: ECAcc (ska/F791)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Yn_VCZbXQoeFmRaijYogjfeDKqIL_SKjVrUD5vICjABhY0mOSihSXw==
Age: 4336
st.chatango.com/js/gz/emb.js
24 kB URL st.chatango.com/js/gz/emb.js
IP
File type ASCII text, with very long lines (1651)
Hash c1a289685475db88938201b4a2735cb6
b3e9e7e9104c3e76ea85fe3d20c5978d038355f0
509a9e10fd20643e27986373ca0342aa25d85a7c60772c80fe0a2d73593c877e
GET /js/gz/emb.js HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Sep 2023 19:22:01 GMT
Content-Type: application/x-javascript
Content-Length: 23805
Last-Modified: Mon, 25 Sep 2023 13:02:22 GMT
Connection: keep-alive
Expires: Wed, 27 Sep 2023 19:22:01 GMT
Cache-Control: max-age=0
Content-Encoding: gzip
Accept-Ranges: bytes
cdn.runative-syndicate.com/sdk/v1/n.js
200 OK 4.7 kB URL GET HTTP/2 cdn.runative-syndicate.com/sdk/v1/n.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectcdn.runative-syndicate.com
Fingerprint02:F0:38:EF:40:04:37:37:62:83:6D:8C:CB:8E:4E:5C:B7:90:3F:CC
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (591)
Hash 4f95bc9a8fcbb08ff0cf9d18199980c7
6a2e68337c988abe1a71cbeeb45a537eb7aa0c25
653b2325d22c32a353ca70c93bc56b618a4af7a2294790bd639527ad0d3632ba
GET /sdk/v1/n.js HTTP/1.1
Host: cdn.runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript
content-length: 4710
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"623b3bef-3202"
content-encoding: gzip
age: 22574
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 01e05b1d883bfa8b798168cef6373dbc
1d5379ef2b6ffc970abc2583e80213bf7174cfc5
97bc5d79e99b0bddcbc38f525112d841f5be532b0625eff9dcfd7105a942c138
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
professionalswebcheck.com/stats
40 B URL professionalswebcheck.com/stats
IP
File type ASCII text, with no line terminators
Hash e84fe77456419d194b42fddf6a84d606
e2832da00764e685b871e37ef211e60325035eec
919017e12ad953b1ca14dda5791164fc77403efeb7aaced58886e2adcd0e2c57
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mavanimes.co
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.mavanimes.co
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=960d3ddf-7b02-4771-baf8-c42ae66420e0:2:1; expires=Sat, 24 Sep 2033 19:22:01 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sectigo.com/
472 B IP
Hash 8f05e79c79fe66d220ee8afa2b69653a
57951f0585411c9a5902225d314e5118eb537174
1514370cda902e995229edb037cd67cf4cc601e1334c172d8a01bef1f6c75868
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 27 Sep 2023 11:13:57 GMT
Expires: Wed, 04 Oct 2023 11:13:56 GMT
Etag: "57951f0585411c9a5902225d314e5118eb537174"
Cache-Control: max-age=575333,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61cf27e46568b-OSL
ocsp.sectigo.com/
472 B IP
Hash 8f05e79c79fe66d220ee8afa2b69653a
57951f0585411c9a5902225d314e5118eb537174
1514370cda902e995229edb037cd67cf4cc601e1334c172d8a01bef1f6c75868
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 27 Sep 2023 11:13:57 GMT
Expires: Wed, 04 Oct 2023 11:13:56 GMT
Etag: "57951f0585411c9a5902225d314e5118eb537174"
Cache-Control: max-age=575124,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61cf27a0e56c4-OSL
ocsp.sectigo.com/
472 B IP
Hash 8f05e79c79fe66d220ee8afa2b69653a
57951f0585411c9a5902225d314e5118eb537174
1514370cda902e995229edb037cd67cf4cc601e1334c172d8a01bef1f6c75868
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 27 Sep 2023 11:13:57 GMT
Expires: Wed, 04 Oct 2023 11:13:56 GMT
Etag: "57951f0585411c9a5902225d314e5118eb537174"
Cache-Control: max-age=576682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61cf2da8c56c4-OSL
ocsp.sectigo.com/
472 B IP
Hash 8f05e79c79fe66d220ee8afa2b69653a
57951f0585411c9a5902225d314e5118eb537174
1514370cda902e995229edb037cd67cf4cc601e1334c172d8a01bef1f6c75868
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 27 Sep 2023 11:13:57 GMT
Expires: Wed, 04 Oct 2023 11:13:56 GMT
Etag: "57951f0585411c9a5902225d314e5118eb537174"
Cache-Control: max-age=576682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61cf2dec9568b-OSL
lcdn.tsyndicate.com/images/9/5/446617989ca349b905461eb7d95d6ce76d3614/300x250.webp
4.4 kB URL GET lcdn.tsyndicate.com/images/9/5/446617989ca349b905461eb7d95d6ce76d3614/300x250.webp
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a4ab33b86698f3ac653bc015b98e1662
aa74828addf13ab8457b976b48d04eff6035acac
8eee03e9c10dc5e12ef431a226157ccb874521039a712730594e2da2f66c93ba
GET /images/9/5/446617989ca349b905461eb7d95d6ce76d3614/300x250.webp HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: image/webp
content-length: 4351
server: nginx
last-modified: Fri, 04 Mar 2022 12:31:23 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6222069b-10e8"
content-encoding: gzip
age: 4831072
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/0/3/1e1d2d425a52ddf72f0c25d5aa0afae1425f5d/300x250.webp
5.6 kB URL GET lcdn.tsyndicate.com/images/0/3/1e1d2d425a52ddf72f0c25d5aa0afae1425f5d/300x250.webp
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 274x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 34e90ce08109973217895ca28accf6a8
56fa8c51f8e25761bfa696c515c06dccc104417d
fd37c2bfe9371464ced2745993ae378745db438d1d703fc6226f913cef585087
GET /images/0/3/1e1d2d425a52ddf72f0c25d5aa0afae1425f5d/300x250.webp HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: image/webp
content-length: 5585
server: nginx
last-modified: Fri, 04 Mar 2022 12:31:24 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6222069c-15ba"
content-encoding: gzip
age: 4830914
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.runative-syndicate.com/sdk/v1/n.js
200 OK 4.7 kB URL GET HTTP/2 cdn.runative-syndicate.com/sdk/v1/n.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectcdn.runative-syndicate.com
Fingerprint02:F0:38:EF:40:04:37:37:62:83:6D:8C:CB:8E:4E:5C:B7:90:3F:CC
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (591)
Hash 4f95bc9a8fcbb08ff0cf9d18199980c7
6a2e68337c988abe1a71cbeeb45a537eb7aa0c25
653b2325d22c32a353ca70c93bc56b618a4af7a2294790bd639527ad0d3632ba
GET /sdk/v1/n.js HTTP/1.1
Host: cdn.runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: application/javascript
content-length: 4710
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"623b3bef-3202"
content-encoding: gzip
age: 22575
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/0/3/8d1c15bf04a752f8d83ba4f4e56cd0a3d0c898/300x250.webp
8.0 kB URL lcdn.tsyndicate.com/images/0/3/8d1c15bf04a752f8d83ba4f4e56cd0a3d0c898/300x250.webp
IP
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ac3425a3a477ee2df2a1bd4b9eb07e18
4182ce95176b84d125d74dc3030f9b1cee338fea
b8d38f923ed5997002a91166e5b347f5842052f9331ff500c5be9b879300200f
GET /images/0/3/8d1c15bf04a752f8d83ba4f4e56cd0a3d0c898/300x250.webp HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: image/webp
content-length: 7957
server: nginx
last-modified: Fri, 04 Mar 2022 12:31:22 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6222069a-1efe"
content-encoding: gzip
age: 4831066
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/b/f/d13fbe69e2b843334099c4259eac92a70957b3/300x250.webp
9.6 kB URL GET lcdn.tsyndicate.com/images/b/f/d13fbe69e2b843334099c4259eac92a70957b3/300x250.webp
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 287x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f9599d758e57f513aec91b4708c447ca
18816f3fab1c1c34ab3de5d5136619f1b02f6cf4
cef6e05a22e09c43b1eaa63711b0b0ff426398b8a5e2dac633d1d4c0e37dfec5
GET /images/b/f/d13fbe69e2b843334099c4259eac92a70957b3/300x250.webp HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: image/webp
content-length: 9639
server: nginx
last-modified: Fri, 04 Mar 2022 12:31:24 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6222069c-2590"
content-encoding: gzip
age: 4830991
accept-ranges: bytes
X-Firefox-Spdy: h2
run-syndicate.com/do2/e75f9b489a4b498cb3eeb18f9a2b341a/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_AFnpv
200 OK 19 kB URL GET HTTP/2 run-syndicate.com/do2/e75f9b489a4b498cb3eeb18f9a2b341a/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_AFnpv
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectrun-syndicate.com
Fingerprint71:C4:16:0E:07:0D:0A:49:7E:CF:64:94:33:FC:88:9E:A7:DC:D2:9D
ValidityTue, 12 Sep 2023 09:07:31 GMT - Mon, 11 Dec 2023 09:07:30 GMT
Hash 991a11d62b1df34b95e4fd5f795054ac
56e7275d7048ada63a06d1e8765008d0f30c5ca2
7fe2667114b507f924e829d61e554968d6fd49161b350cb7e4cfcb022c4250da
GET /do2/e75f9b489a4b498cb3eeb18f9a2b341a/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_AFnpv HTTP/1.1
Host: run-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: 99760d8576c67ca8
set-cookie: ts_uid=50616659-2253-4625-a505-0e1d87be737f; expires=Wed, 27 Mar 2024 19:22:01 GMT; domain=.run-syndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.runative-syndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash e586f3615d7edfe3d0d0aac0a0d657a4
b7151674735df7e297962744450d779d0c4acbb5
c271324e149ef7f48380ef441b82088a82391c31c8ec70243b2162e80607ea5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh.limosiwooable.com/gYdKnf9ZCZ8QXhl9/58191
26 B URL lh.limosiwooable.com/gYdKnf9ZCZ8QXhl9/58191
IP
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
GET /gYdKnf9ZCZ8QXhl9/58191 HTTP/1.1
Host: lh.limosiwooable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Sep 2023 19:22:02 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://streamtape.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Thu, 28-Sep-2023 19:22:02 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwVyM0KgkAUhuE5hxiIJPjCC%2FAKTMsWbrNl6MIrMIsYGObIzNjP3WeLd%2FG8SilOE7CZkNRlXhd5dcjLUwV6gtsOPDroVvx7%2BII8uDiCvcOmC1ayRmYXlz9i9TfIYHu25pP1YudoxAXw0roZbvaxv%2FRX0KQJHEUzONxTBXrp3Q9e7B3R; expires=Thu, 28-Sep-2023 19:22:02 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
d2ohmkyg5w2c18.cloudfront.net/?kmhod=994193
200 OK 148 kB URL GET HTTP/2 d2ohmkyg5w2c18.cloudfront.net/?kmhod=994193
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15955)
Size 148 kB (147929 bytes)
Hash 65674df4398e4e2aa78387851ed5498e
f634310ff2779a500e4cc0a2824a1144fa68e28b
b2a0aa49e3a52f6b7af9883c9306c5638e4ac2a704c4e3eb5342ebd79ddbb98c
GET /?kmhod=994193 HTTP/1.1
Host: d2ohmkyg5w2c18.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 147929
date: Wed, 27 Sep 2023 19:22:02 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: FbsNCO9WoXn-UKucECKuWjR-QDPkQX39xamcFWA3cnOKw2vvZRCYVQ==
X-Firefox-Spdy: h2
cdn.runative-syndicate.com/sdk/v1/n.js
200 OK 4.7 kB URL GET HTTP/2 cdn.runative-syndicate.com/sdk/v1/n.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectcdn.runative-syndicate.com
Fingerprint02:F0:38:EF:40:04:37:37:62:83:6D:8C:CB:8E:4E:5C:B7:90:3F:CC
ValidityWed, 14 Jun 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (591)
Hash 4f95bc9a8fcbb08ff0cf9d18199980c7
6a2e68337c988abe1a71cbeeb45a537eb7aa0c25
653b2325d22c32a353ca70c93bc56b618a4af7a2294790bd639527ad0d3632ba
GET /sdk/v1/n.js HTTP/1.1
Host: cdn.runative-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: application/javascript
content-length: 4710
server: nginx
last-modified: Wed, 23 Mar 2022 15:25:35 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"623b3bef-3202"
content-encoding: gzip
age: 22575
accept-ranges: bytes
X-Firefox-Spdy: h2
lcdn.tsyndicate.com/images/2/7/a98e6453e29cc7a26f5117a4d6e67b8d9c07b6/300x250.webp
5.0 kB URL GET lcdn.tsyndicate.com/images/2/7/a98e6453e29cc7a26f5117a4d6e67b8d9c07b6/300x250.webp
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subjectlcdn.tsyndicate.com
FingerprintAA:DB:E6:65:05:5A:83:46:D1:77:83:25:84:3D:B2:B5:F5:99:97:00
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4e8ec87de2ec4648ed86437f56f59c24
d5a19180223f770d48adc5887968a6eb8727b502
228b3eecf930db3a503a06050159520a9c9c9dc4196418d8ffb5e869683e4609
GET /images/2/7/a98e6453e29cc7a26f5117a4d6e67b8d9c07b6/300x250.webp HTTP/1.1
Host: lcdn.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: image/webp
content-length: 5035
server: nginx
last-modified: Fri, 04 Mar 2022 12:31:22 GMT
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
etag: W/"6222069a-1394"
content-encoding: gzip
age: 4830986
accept-ranges: bytes
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XkmCFDTI6IZVrUoNGwBY0yY2q0EHPDjI0WMmbAKAgDR5mOY8SIeBimzpiMY2TIMDjmY4uDN1TSqGFDzMqiTmOEKVMjTA4ZZHDUIJNjJ0QydhbSkAHjRkURcOro1MExhg0YPOHAWSiDKY0cD-fAmcg2x1sbGx-OaTNXBw0YMmLAoMGTjJmFNmQ8FOPGDV3ANfwyFtHGDUaGHMk-hNP5c4wbdc_WkcOGbo4bMHLggCuijoyMaOjQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMWK6iN7mBRsXcNDA-QGnxxgdZe7UsRPnjZgZ8MPQIBkmDgwudWAgtkGmh40Z2eFgAw5SxSAgWTLcQEYNNdwgRlVj4KefDDbM0cMMfsEA2AwS7idGDxTmkJkNNHRIoRjX9QCDCzDEYKINcKQoBQ1qMGHFEVTMoAYddsxAxRlHhFGDZ3DgIIceTsihhhJIOLEEDHW0QIQTSLQxQw1PRBFFFS1YQUMSRBiRhRUwfHHFGEqUMR8ZZNwBhRVk3KDEGWMEAQMSdlxRBxFTwJBGDWK00YISYURx5wxh3OEEFGu0wcaTVbQhxBBSKCEDE0WEIUcLb1ShRgw80tGCE3UYkUcUZMCnhBp3zMHEGWkE8cUZVYApRRVpvDhYeYclttiLa5SRxx3S9SdFGWdoepAcJcgwhBJpnPHGGquFQW2zQ1jxxBRUGCEFtmfIEQYddaRBRxltlOEGHdjOQYccBbWRhmfYpsEGG2nIy-4QM5QQRA7YhmEHSthKUQe5YpSB7RNwqMvGGwZhS0QY9ubRxht0pPGGG9hm8cbBains7ByrYduEwGE8ly62VryRBrPO0vHxHNja8QbNzpbAr785xDjHGwfhPIS78IYhL73OQistteJe66y23HprMsoql_EiGTL4J8PVMfTQq2Il5rdfqipeTQOIduVwdQ09OPHE1Tb00AbV-ZYxx3ZvXH2D3HSne3d0KxBh9xoyw7GCE-OmMfAKSBS07Aqo4YBHDjCs4KLYFGYF4tU5XOgVaXQ99AboOkgmAhlvtJHRHay7MLcdKdf99xtejTHuQlvMcAMLM-DQxWhy_KTDii2OFobFQFOk32SPDc_iWXLYUZhbD9VRbkZhzGB772XkYJIY8pkUk1OU59RCDGI0tJVHZYjhkVdpFKZRDC5Q7sJYLjREg1dyfBF_Rjmgn_3wpz-v1CEMGWnCG_RgLzaE4QU1YBEIUICFGMRgByBgwrzqgAcQ4EFAXyARBqPHkNiwKAUgOAJK1vCGF5BFMS1qEQiM8LIymOENeHiBBekHg9oJTwRu84p0vjCGHwbxIWz4YRGc4JWD2OEL8GoNQxp0AxzMYEDLE4EczmCZ0tUAB7s7XRmeKAY5LAQHOHiIE79wMTLQRUBnIYMcaMcW0SmkdMDDYR7E8hB4NW8guuGNb17Auju4rm92w9sLvHKHjASohw9BgyMRs7-8RC8jc6TDuKTTAueY63w5cAHWmvjDg3xhlBZRHUMwg4Ox1CAxqbzNKkXUyrokZix4-QoU7QaHL9xull90JSwhIga-iNEMPWHDREaTxIXQZgykeaK4MkbHFd3gMDU4yxhMI4M-KCAg&r=1&s=31164942b26e83dd957b78b35c57bff5e902bb9e1f9bc1ba38e8399fa858c3a71695842521&w=t&ir=95x79
35 B URL pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XkmCFDTI6IZVrUoNGwBY0yY2q0EHPDjI0WMmbAKAgDR5mOY8SIeBimzpiMY2TIMDjmY4uDN1TSqGFDzMqiTmOEKVMjTA4ZZHDUIJNjJ0QydhbSkAHjRkURcOro1MExhg0YPOHAWSiDKY0cD-fAmcg2x1sbGx-OaTNXBw0YMmLAoMGTjJmFNmQ8FOPGDV3ANfwyFtHGDUaGHMk-hNP5c4wbdc_WkcOGbo4bMHLggCuijoyMaOjQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMWK6iN7mBRsXcNDA-QGnxxgdZe7UsRPnjZgZ8MPQIBkmDgwudWAgtkGmh40Z2eFgAw5SxSAgWTLcQEYNNdwgRlVj4KefDDbM0cMMfsEA2AwS7idGDxTmkJkNNHRIoRjX9QCDCzDEYKINcKQoBQ1qMGHFEVTMoAYddsxAxRlHhFGDZ3DgIIceTsihhhJIOLEEDHW0QIQTSLQxQw1PRBFFFS1YQUMSRBiRhRUwfHHFGEqUMR8ZZNwBhRVk3KDEGWMEAQMSdlxRBxFTwJBGDWK00YISYURx5wxh3OEEFGu0wcaTVbQhxBBSKCEDE0WEIUcLb1ShRgw80tGCE3UYkUcUZMCnhBp3zMHEGWkE8cUZVYApRRVpvDhYeYclttiLa5SRxx3S9SdFGWdoepAcJcgwhBJpnPHGGquFQW2zQ1jxxBRUGCEFtmfIEQYddaRBRxltlOEGHdjOQYccBbWRhmfYpsEGG2nIy-4QM5QQRA7YhmEHSthKUQe5YpSB7RNwqMvGGwZhS0QY9ubRxht0pPGGG9hm8cbBains7ByrYduEwGE8ly62VryRBrPO0vHxHNja8QbNzpbAr785xDjHGwfhPIS78IYhL73OQistteJe66y23HprMsoql_EiGTL4J8PVMfTQq2Il5rdfqipeTQOIduVwdQ09OPHE1Tb00AbV-ZYxx3ZvXH2D3HSne3d0KxBh9xoyw7GCE-OmMfAKSBS07Aqo4YBHDjCs4KLYFGYF4tU5XOgVaXQ99AboOkgmAhlvtJHRHay7MLcdKdf99xtejTHuQlvMcAMLM-DQxWhy_KTDii2OFobFQFOk32SPDc_iWXLYUZhbD9VRbkZhzGB772XkYJIY8pkUk1OU59RCDGI0tJVHZYjhkVdpFKZRDC5Q7sJYLjREg1dyfBF_Rjmgn_3wpz-v1CEMGWnCG_RgLzaE4QU1YBEIUICFGMRgByBgwrzqgAcQ4EFAXyARBqPHkNiwKAUgOAJK1vCGF5BFMS1qEQiM8LIymOENeHiBBekHg9oJTwRu84p0vjCGHwbxIWz4YRGc4JWD2OEL8GoNQxp0AxzMYEDLE4EczmCZ0tUAB7s7XRmeKAY5LAQHOHiIE79wMTLQRUBnIYMcaMcW0SmkdMDDYR7E8hB4NW8guuGNb17Auju4rm92w9sLvHKHjASohw9BgyMRs7-8RC8jc6TDuKTTAueY63w5cAHWmvjDg3xhlBZRHUMwg4Ox1CAxqbzNKkXUyrokZix4-QoU7QaHL9xull90JSwhIga-iNEMPWHDREaTxIXQZgykeaK4MkbHFd3gMDU4yxhMI4M-KCAg&r=1&s=31164942b26e83dd957b78b35c57bff5e902bb9e1f9bc1ba38e8399fa858c3a71695842521&w=t&ir=95x79
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XkmCFDTI6IZVrUoNGwBY0yY2q0EHPDjI0WMmbAKAgDR5mOY8SIeBimzpiMY2TIMDjmY4uDN1TSqGFDzMqiTmOEKVMjTA4ZZHDUIJNjJ0QydhbSkAHjRkURcOro1MExhg0YPOHAWSiDKY0cD-fAmcg2x1sbGx-OaTNXBw0YMmLAoMGTjJmFNmQ8FOPGDV3ANfwyFtHGDUaGHMk-hNP5c4wbdc_WkcOGbo4bMHLggCuijoyMaOjQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMWK6iN7mBRsXcNDA-QGnxxgdZe7UsRPnjZgZ8MPQIBkmDgwudWAgtkGmh40Z2eFgAw5SxSAgWTLcQEYNNdwgRlVj4KefDDbM0cMMfsEA2AwS7idGDxTmkJkNNHRIoRjX9QCDCzDEYKINcKQoBQ1qMGHFEVTMoAYddsxAxRlHhFGDZ3DgIIceTsihhhJIOLEEDHW0QIQTSLQxQw1PRBFFFS1YQUMSRBiRhRUwfHHFGEqUMR8ZZNwBhRVk3KDEGWMEAQMSdlxRBxFTwJBGDWK00YISYURx5wxh3OEEFGu0wcaTVbQhxBBSKCEDE0WEIUcLb1ShRgw80tGCE3UYkUcUZMCnhBp3zMHEGWkE8cUZVYApRRVpvDhYeYclttiLa5SRxx3S9SdFGWdoepAcJcgwhBJpnPHGGquFQW2zQ1jxxBRUGCEFtmfIEQYddaRBRxltlOEGHdjOQYccBbWRhmfYpsEGG2nIy-4QM5QQRA7YhmEHSthKUQe5YpSB7RNwqMvGGwZhS0QY9ubRxht0pPGGG9hm8cbBains7ByrYduEwGE8ly62VryRBrPO0vHxHNja8QbNzpbAr785xDjHGwfhPIS78IYhL73OQistteJe66y23HprMsoql_EiGTL4J8PVMfTQq2Il5rdfqipeTQOIduVwdQ09OPHE1Tb00AbV-ZYxx3ZvXH2D3HSne3d0KxBh9xoyw7GCE-OmMfAKSBS07Aqo4YBHDjCs4KLYFGYF4tU5XOgVaXQ99AboOkgmAhlvtJHRHay7MLcdKdf99xtejTHuQlvMcAMLM-DQxWhy_KTDii2OFobFQFOk32SPDc_iWXLYUZhbD9VRbkZhzGB772XkYJIY8pkUk1OU59RCDGI0tJVHZYjhkVdpFKZRDC5Q7sJYLjREg1dyfBF_Rjmgn_3wpz-v1CEMGWnCG_RgLzaE4QU1YBEIUICFGMRgByBgwrzqgAcQ4EFAXyARBqPHkNiwKAUgOAJK1vCGF5BFMS1qEQiM8LIymOENeHiBBekHg9oJTwRu84p0vjCGHwbxIWz4YRGc4JWD2OEL8GoNQxp0AxzMYEDLE4EczmCZ0tUAB7s7XRmeKAY5LAQHOHiIE79wMTLQRUBnIYMcaMcW0SmkdMDDYR7E8hB4NW8guuGNb17Auju4rm92w9sLvHKHjASohw9BgyMRs7-8RC8jc6TDuKTTAueY63w5cAHWmvjDg3xhlBZRHUMwg4Ox1CAxqbzNKkXUyrokZix4-QoU7QaHL9xull90JSwhIga-iNEMPWHDREaTxIXQZgykeaK4MkbHFd3gMDU4yxhMI4M-KCAg&r=1&s=31164942b26e83dd957b78b35c57bff5e902bb9e1f9bc1ba38e8399fa858c3a71695842521&w=t&ir=95x79 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WYuUEGRwwxMMK0MJMDB5kWNMLYgNGiZJkyLWaQGYNDzI0yOWyQySniYZg6YzKOkSHD4JgcIg_eqIGyhg0xLcQchRojTJkaYXLI6FhjZ0-IZOwspCEDxo2KIuDUEbNwhowYK33CgbNQhlMaOR7OgTNRx4ycMGzkmPFwTBu6OmjAeAuDhk8yZhbakPFQjBs3dQXXyElZRBs3GBm6LfsQzufQMW7YRVtHDpu6OW7AiJ1XRB0ZGdHQoQNnjo4XL-yQyWOGzRk1Y_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-WAdQ09OPEE1jb00MbJKZcxR3dvYH2D3HRbfbd0KxBh9xoxw7GCE-GmEfAKZxqE0Aqq4YBHDjCswOJ-_XX0IdY5XPiVaXU99AboOnRGxhttZHTH6i7MTXXdf7_x1RjhLrTFDDewMAMOXZQmR1A6pLhiaWFU_DNF_FUWWfAqoiWHHYjB9VAd42YUxgy0744TSmLQh9J2UFE-BlViNNSVGDmUIQb6X6WBmAg5xOAC5S6Q5UJDNHwlxxfuZxT__CmyH_6-UocwZKQJb9ADvdgQhhfUQEUgQAEWYhCDHYCACfGqAx5AgIcBfcEGNLDg8xgyGxWlAARHENga3vCCsoRtRSsCgRFcVgYzvAEPL6Cg_GAwO-CJwG1fmc4XxuBDID6EDT4sghO-cpA9ues1DGnQDXAwAwIlTwRyOANmSlcDHOROBE38ghjksBAc4OAhYbQYGeoyILSQQQ6y84voFFI6390wD2N5iLuWN5Dd9OY3L1jdHVrXt3PF7gVfuUNGBMTDh6BhkYvJn16elxE40iFc02nBc8jVghjkwAVZY6IPD_KFUFokdQzRDA7IUoO3nBI3qQzRKu3yFhrMAAaP4ZPd4PCF2sWyi6x0JUTE0Bcw1vAnbJhIaZAYOhGMwTROTFwcU3QDxdQALWNAjQz6oICAAA%3D%3D&r=1&s=8b33e89893bfc8d659a9475f9d045fc2e1a20b60085a88673a5705fab5ef563c1695842521&w=t&ir=95x79
35 B URL pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WYuUEGRwwxMMK0MJMDB5kWNMLYgNGiZJkyLWaQGYNDzI0yOWyQySniYZg6YzKOkSHD4JgcIg_eqIGyhg0xLcQchRojTJkaYXLI6FhjZ0-IZOwspCEDxo2KIuDUEbNwhowYK33CgbNQhlMaOR7OgTNRx4ycMGzkmPFwTBu6OmjAeAuDhk8yZhbakPFQjBs3dQXXyElZRBs3GBm6LfsQzufQMW7YRVtHDpu6OW7AiJ1XRB0ZGdHQoQNnjo4XL-yQyWOGzRk1Y_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-WAdQ09OPEE1jb00MbJKZcxR3dvYH2D3HRbfbd0KxBh9xoxw7GCE-GmEfAKZxqE0Aqq4YBHDjCswOJ-_XX0IdY5XPiVaXU99AboOnRGxhttZHTH6i7MTXXdf7_x1RjhLrTFDDewMAMOXZQmR1A6pLhiaWFU_DNF_FUWWfAqoiWHHYjB9VAd42YUxgy0744TSmLQh9J2UFE-BlViNNSVGDmUIQb6X6WBmAg5xOAC5S6Q5UJDNHwlxxfuZxT__CmyH_6-UocwZKQJb9ADvdgQhhfUQEUgQAEWYhCDHYCACfGqAx5AgIcBfcEGNLDg8xgyGxWlAARHENga3vCCsoRtRSsCgRFcVgYzvAEPL6Cg_GAwO-CJwG1fmc4XxuBDID6EDT4sghO-cpA9ues1DGnQDXAwAwIlTwRyOANmSlcDHOROBE38ghjksBAc4OAhYbQYGeoyILSQQQ6y84voFFI6390wD2N5iLuWN5Dd9OY3L1jdHVrXt3PF7gVfuUNGBMTDh6BhkYvJn16elxE40iFc02nBc8jVghjkwAVZY6IPD_KFUFokdQzRDA7IUoO3nBI3qQzRKu3yFhrMAAaP4ZPd4PCF2sWyi6x0JUTE0Bcw1vAnbJhIaZAYOhGMwTROTFwcU3QDxdQALWNAjQz6oICAAA%3D%3D&r=1&s=8b33e89893bfc8d659a9475f9d045fc2e1a20b60085a88673a5705fab5ef563c1695842521&w=t&ir=95x79
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WYuUEGRwwxMMK0MJMDB5kWNMLYgNGiZJkyLWaQGYNDzI0yOWyQySniYZg6YzKOkSHD4JgcIg_eqIGyhg0xLcQchRojTJkaYXLI6FhjZ0-IZOwspCEDxo2KIuDUEbNwhowYK33CgbNQhlMaOR7OgTNRx4ycMGzkmPFwTBu6OmjAeAuDhk8yZhbakPFQjBs3dQXXyElZRBs3GBm6LfsQzufQMW7YRVtHDpu6OW7AiJ1XRB0ZGdHQoQNnjo4XL-yQyWOGzRk1Y_LgcWPGRR03aca8keMGjpw0B2PImOFCepsXbFzAQQPnB5weY3SUuVPHTpw3YmbID0ODRtU4MLjUgbFYZw8bM2iHgw0ehRHDgGXJwFENNdwgBlZj6MefDDbM0cNfKwk2g4T9idEDhTlsNhmHFIqBXQ8wuABDDCTaAMeJS9CxxBBZTJFGEDHIgYQUVQxRhh4wFJcGEmRI0cQQUiCxRBlX5BHDFDXEcQYWcFDxRgtHMHFGFS3YUMYTYawRBhY22IFEGXE8QQYVMEQxhBNuxBEFbzbY8ER8V9RgxxdyxHDFDHBkUVQTcYxxxRJ35GAGDUbAUMQVSOShRQtOwCBHDWnEAQcTY2SxREdN6AEHElDQmEYYP9mhBhlr3HDGF1smQQSPabRo2HmKMUZDi2uUkccd05HRgxRlnBGGHAfJUYIMQyiRxhlvrNFamHUsO4QVT0xBhRFSWHuGHGHQUUcadJTRRhlu0GHtHHTIUVAbaYBmbRpssJEGvOoOMUMJQeRgbRh2lDGGtVLUIa4YZVj7BBzosvGGQdYSEQa9ebTxBh1pvOGGtVm8YfBaCTM7R2vWNgFwGNCda60Vb6ShLLN0eDyHtXa8MTOzJejLbw4vzvHGQTcPwa67YcArL7POQistuNKunO223TJrsh0o31tGi2TI8J8MWMfQQ64xNIb1DChiTcOHd-WAdQ09OPEE1jb00MbJKZcxR3dvYH2D3HRbfbd0KxBh9xoxw7GCE-GmEfAKZxqE0Aqq4YBHDjCswOJ-_XX0IdY5XPiVaXU99AboOnRGxhttZHTH6i7MTXXdf7_x1RjhLrTFDDewMAMOXZQmR1A6pLhiaWFU_DNF_FUWWfAqoiWHHYjB9VAd42YUxgy0744TSmLQh9J2UFE-BlViNNSVGDmUIQb6X6WBmAg5xOAC5S6Q5UJDNHwlxxfuZxT__CmyH_6-UocwZKQJb9ADvdgQhhfUQEUgQAEWYhCDHYCACfGqAx5AgIcBfcEGNLDg8xgyGxWlAARHENga3vCCsoRtRSsCgRFcVgYzvAEPL6Cg_GAwO-CJwG1fmc4XxuBDID6EDT4sghO-cpA9ues1DGnQDXAwAwIlTwRyOANmSlcDHOROBE38ghjksBAc4OAhYbQYGeoyILSQQQ6y84voFFI6390wD2N5iLuWN5Dd9OY3L1jdHVrXt3PF7gVfuUNGBMTDh6BhkYvJn16elxE40iFc02nBc8jVghjkwAVZY6IPD_KFUFokdQzRDA7IUoO3nBI3qQzRKu3yFhrMAAaP4ZPd4PCF2sWyi6x0JUTE0Bcw1vAnbJhIaZAYOhGMwTROTFwcU3QDxdQALWNAjQz6oICAAA%3D%3D&r=1&s=8b33e89893bfc8d659a9475f9d045fc2e1a20b60085a88673a5705fab5ef563c1695842521&w=t&ir=95x79 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAKFOGBg0zMmq0ICMGhpgWNMKYMdNCzIwxNlqspIFjBg4ZMcJwjCHiYZg6YzKOkSHD4JgcYUaWuSGSRg0bJ8UcPZmzTI0wOWSQwVGDTI6eEMnYWUhDBowbFUXAqSNm4QycNmD4hANnYUgbNHI8nANnoo4ZOeLayDHj4Zg2dXXQgIETBg2fZMwstCHjoRg3buwOrhHYxsM2bjAyfGv2IRzQomPcCJm2jhw2dnPcgJHj5sM6MjKioUMHzhwdL17YIZPHDJszasbkwePGjIs6btKMeSPHDRw5aQ7GkDHDxfQ2L9i4gIMGzg84PcboKHOnjp04b1zOmBHGY844MLjUgcHYBpkeNsywHQ424JBTDASaJcMNZNRQww1iXDWGfvzJYMMcPQAmGGEU9idGDxbmwJkNNnRooRjZ9QCDCzDEYKINcKR4Bxp60BDHGVbgIcYXQZTxBQxpIFFHHmrIkcUcU5wBQxO41RCEDUPYgAYTS0FJRgtLvAGDFW-o0UQOcNxxRg04PKHFHEO0kAUbRqBBhR021HGEHUVQN0YSedCQBxNDWNGEGDdIQYYVVYTxBBNv5KjFDE8o4QQWSCgBAxVSiJEDEVW4cQQZMBSqUhV3tKCFEfHVEBKKSMyRBBNJ3PHFGVUkQYQUVaTx4mHoLdYYDS-uUUYed1D3nxRlnBGGHAfJUYIMQyiRxhlvrOFaGNIu2-cTU1BhhBTWniFHGHTUkQYdZbRRhht0WDsHHXIU1EYaoVmbBhtspPFuukPMUEIQOVgbhh1ljGGtFHWEK0YZ1j4Bx7lsvGGQtUSEMW8ebbxBRxpvuGFtFm8UzBbCzM7hmrVN_BtGdOZay2UayjJLR8dzWGvHGzEzW0K--4KZxhxvHFTzEOu2G8a78TLrLLTSflsts1Zgqy23zJZsx8n2lvEiGTIAKMPVMfSgawyOXT2DilfTAOJTeV1dQw9OPHG1DT20YTLKZczh3RtX3xD33FXbPd0KRNS9xstwrOAEuGkAvAISBSW7wmo44JEDDCu4uF9_W4F4dQ4ZgnWaXQ-98bkOlYlAxhttZHTH6i7IPTXdfr8B1hjgLrTFDDewYFMXpskRlA4rtmhaGBT3TBF_lkkGPItpyWFHYjF4JkId4mYUxkvX41BGDiiJUR9K3J00-RhUidFQV5aWIYalYKWRmAg5xODC5C6U5UJDNIAlxxfuZxT__CuyH_7AUocwZKQJb9DDvNgQhhfUgEUgQAEWYhCDHYCACfCqAx5AgAcCfQEvFnQeQ2jDohSA4AgBW8MbXmAWsLWoRSAwAsvKYIY34OEFFJQfDGb3OxG0DSzU-cIYevjDh7Chh0VwAlgOYocvtAs2DHnQDWpSIOSJQA5nyAzpyJQ705WhiWKQw0JwgIOHMPELFSODXQiUFjLIQXZ_CZ1CSNc7G-aBLA9pl_IGwhvfAOcFq7tD6_hmrti9ACx3yMiAdvgQNCiSMfnbi_My8kY6gIs6LYDOuFoQgxy4AGtL7OFBvgBKi6SOIZvBQVlMlRY6tCE3qBSRKkOCk7LoJSxOrBscvlC7WJJplTjxiRj84kUz_IQNEzHNESlimNM08VsXg-OKbrCYGqRlDKmRQR8UEBA%3D&r=1&s=cc18ff6ae25afd2ce648e73a0f451c88e8906148e86c174af4e5b8badf13a1421695842521&w=t&ir=95x79
200 OK 35 B URL GET HTTP/2 pxl.tsyndicate.com/api/v1/p/p.gif?p=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-o0UQOcNxxRg04PKHFHEO0kAUbRqBBhR021HGEHUVQN0YSedCQBxNDWNGEGDdIQYYVVYTxBBNv5KjFDE8o4QQWSCgBAxVSiJEDEVW4cQQZMBSqUhV3tKCFEfHVEBKKSMyRBBNJ3PHFGVUkQYQUVaTx4mHoLdYYDS-uUUYed1D3nxRlnBGGHAfJUYIMQyiRxhlvrOFaGNIu2-cTU1BhhBTWniFHGHTUkQYdZbRRhht0WDsHHXIU1EYaoVmbBhtspPFuukPMUEIQOVgbhh1ljGGtFHWEK0YZ1j4Bx7lsvGGQtUSEMW8ebbxBRxpvuGFtFm8UzBbCzM7hmrVN_BtGdOZay2UayjJLR8dzWGvHGzEzW0K--4KZxhxvHFTzEOu2G8a78TLrLLTSflsts1Zgqy23zJZsx8n2lvEiGTIAKMPVMfSgawyOXT2DilfTAOJTeV1dQw9OPHG1DT20YTLKZczh3RtX3xD33FXbPd0KRNS9xstwrOAEuGkAvAISBSW7wmo44JEDDCu4uF9_W4F4dQ4ZgnWaXQ-98bkOlYlAxhttZHTH6i7IPTXdfr8B1hjgLrTFDDewYFMXpskRlA4rtmhaGBT3TBF_lkkGPItpyWFHYjF4JkId4mYUxkvX41BGDiiJUR9K3J00-RhUidFQV5aWIYalYKWRmAg5xODC5C6U5UJDNIAlxxfuZxT__CuyH_7AUocwZKQJb9DDvNgQhhfUgEUgQAEWYhCDHYCACfCqAx5AgAcCfQEvFnQeQ2jDohSA4AgBW8MbXmAWsLWoRSAwAsvKYIY34OEFFJQfDGb3OxG0DSzU-cIYevjDh7Chh0VwAlgOYocvtAs2DHnQDWpSIOSJQA5nyAzpyJQ705WhiWKQw0JwgIOHMPELFSODXQiUFjLIQXZ_CZ1CSNc7G-aBLA9pl_IGwhvfAOcFq7tD6_hmrti9ACx3yMiAdvgQNCiSMfnbi_My8kY6gIs6LYDOuFoQgxy4AGtL7OFBvgBKi6SOIZvBQVlMlRY6tCE3qBSRKkOCk7LoJSxOrBscvlC7WJJplTjxiRj84kUz_IQNEzHNESlimNM08VsXg-OKbrCYGqRlDKmRQR8UEBA%3D&r=1&s=cc18ff6ae25afd2ce648e73a0f451c88e8906148e86c174af4e5b8badf13a1421695842521&w=t&ir=95x79
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjecttsyndicate.com
Fingerprint6F:0A:52:34:11:74:C9:81:80:1B:8A:77:92:6C:D3:13:DB:AF:DA:65
ValidityTue, 12 Sep 2023 09:07:30 GMT - Mon, 11 Dec 2023 09:07:29 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=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-o0UQOcNxxRg04PKHFHEO0kAUbRqBBhR021HGEHUVQN0YSedCQBxNDWNGEGDdIQYYVVYTxBBNv5KjFDE8o4QQWSCgBAxVSiJEDEVW4cQQZMBSqUhV3tKCFEfHVEBKKSMyRBBNJ3PHFGVUkQYQUVaTx4mHoLdYYDS-uUUYed1D3nxRlnBGGHAfJUYIMQyiRxhlvrOFaGNIu2-cTU1BhhBTWniFHGHTUkQYdZbRRhht0WDsHHXIU1EYaoVmbBhtspPFuukPMUEIQOVgbhh1ljGGtFHWEK0YZ1j4Bx7lsvGGQtUSEMW8ebbxBRxpvuGFtFm8UzBbCzM7hmrVN_BtGdOZay2UayjJLR8dzWGvHGzEzW0K--4KZxhxvHFTzEOu2G8a78TLrLLTSflsts1Zgqy23zJZsx8n2lvEiGTIAKMPVMfSgawyOXT2DilfTAOJTeV1dQw9OPHG1DT20YTLKZczh3RtX3xD33FXbPd0KRNS9xstwrOAEuGkAvAISBSW7wmo44JEDDCu4uF9_W4F4dQ4ZgnWaXQ-98bkOlYlAxhttZHTH6i7IPTXdfr8B1hjgLrTFDDewYFMXpskRlA4rtmhaGBT3TBF_lkkGPItpyWFHYjF4JkId4mYUxkvX41BGDiiJUR9K3J00-RhUidFQV5aWIYalYKWRmAg5xODC5C6U5UJDNIAlxxfuZxT__CuyH_7AUocwZKQJb9DDvNgQhhfUgEUgQAEWYhCDHYCACfCqAx5AgAcCfQEvFnQeQ2jDohSA4AgBW8MbXmAWsLWoRSAwAsvKYIY34OEFFJQfDGb3OxG0DSzU-cIYevjDh7Chh0VwAlgOYocvtAs2DHnQDWpSIOSJQA5nyAzpyJQ705WhiWKQw0JwgIOHMPELFSODXQiUFjLIQXZ_CZ1CSNc7G-aBLA9pl_IGwhvfAOcFq7tD6_hmrti9ACx3yMiAdvgQNCiSMfnbi_My8kY6gIs6LYDOuFoQgxy4AGtL7OFBvgBKi6SOIZvBQVlMlRY6tCE3qBSRKkOCk7LoJSxOrBscvlC7WJJplTjxiRj84kUz_IQNEzHNESlimNM08VsXg-OKbrCYGqRlDKmRQR8UEBA%3D&r=1&s=cc18ff6ae25afd2ce648e73a0f451c88e8906148e86c174af4e5b8badf13a1421695842521&w=t&ir=95x79 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAmCGjzBgZZMa0IGOGRowWNG5sbCEmxo0wI2mQoVEjBo0xNsSkFPEwTJ0xGXGQmTEmxhgxZVqEyXGDBkocJVvgsFEDZhiVYcrgkDGGaRgbPCGSsbOQhgwYNyqKgFNHzEKOMWzA6AkHzkIZNWzQyPFwDpyJOmbkkGsjh0MRY9rY1UEDhowYMGj0JLnQhoyHYty4uVu4xuDLItq4wciQ49mHcESTdolXbR05bO4yhcGUr4g6MjKioUMHzhwdL17YIZPHDJszasbkwePGjIs6btKMeSPHDRw5aQ7GkDHDxfQ2L9i4gIMGzg84PcboKHOnjp04b8TMmB-GhskwcWBwqQPDsQ0yPdgww3ZT4RBDGDFMdZYMN5BRQw03iFHVGPv1J4MNc_QgGGGGVeifGD1caNhnHl4oRnY9wOACDDGUaAMcKEKBBxY4uOFEG00MccMVTEghRQxG6JGEEWM8kQcWemAhxQ1aZHEFDGjI4QQRaNgw5BhlpIEkG1GsgcUQLdjwhRRWqJHDFFfIYcYUcESBhQxO1KAFDmxoZgUcM1xRhhrRRUGHGGN8kUQad9TwhhRh3GGDj3qQkQYaUzxxQxowCNHCDFlI0QIWcDgRxBF5TNEEHjYwEYUeUpRxRBFI3OEEGaZ-cUYVSRAhRRVpuJgYeo09FpmLa5SRxx3UAZjqGWHIcZAcJcgwhBJpnPHGGq-FQW2zQ1jxxBRUGCEFtmfIEQYddaRBRxltlOEGHdjOQYccBbWRxmjYpsEGG2nIy-4QM5QQRA7YhmGHR9hKUQe5SGH7BBzqsvGGQdgSEYa9ebTxBh1pvOEGtlm8cXBbZbT7GrZNCBxGdOlia8UbaTDrLB0ez4GtHW_I7GwJ_PqbA4xzvHGQzUO4C28Y8tLrLLTSUivutc5qy623JJuMchkukiFDgDJUHUMPvUJGQ9UzpFg1DSHmtVfVNfTgxBNV29BDG1LnW8Yc3r1R9Q1vx50u3dOtQMTca8AMxwpOjJvGwCsgUdCyK9wgAw545ADDClnz5x8ZOIRYdQ4ahpXaXQ-98bkOoJHxRhsZ3aG6C3DbcbLcfL8R1hjjLrTFDDewMAMOXaAmB1A6qMgiamFU7DNF_WFmxkLCqyWHHYvF9VAd5QYVhhgwmBESDC2YIWENKIlBxkliYC-SGTOYgT4MW-FeRgxhpbGYCDnE4ILkLpjlQkM0hCXHF_LLSP3upyL98S8sdQhDRprwBj3Yiw1heEENVgQCFGAhBjHYAQiYMK864AEEeJjKF_SiwecxhDYrSgEIjuCRNbzhBWeBDItYBAIjtKwMZngDHl6AQfvBYHbAE8HawkKdL4whiEN8CBuCWAQnhOUgdvgCvGLDEAjdAAczsAEOkicCOZxhM6SrAQ5yJwIofkEMclgIDnDwEDNajAx3mYpayCAH2QUmdAohne90mIeyPARey9PBQHjjG-C8QHV3YJ3e5la3F4TlDhkh0A8fgoZIOqZ_fXleRupIh3FRpwXQMVcLEuQCqz0xiAf5giktgjqGdAYHZqnBY1iZG1caBpZ4eQxNZjAZKc4NDl-onS3FGMtZQkQMgCkjDn3ChomgZonMe8gYUhNFcWHMjiq6QV5uYANprkYGfVBAQAA%3D&r=1&s=5dcc2d61cece14698a07320753c8a8f1b037859698aa1caabec09e2dc997e25b1695842521&w=t&ir=95x72
35 B URL pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAmCGjzBgZZMa0IGOGRowWNG5sbCEmxo0wI2mQoVEjBo0xNsSkFPEwTJ0xGXGQmTEmxhgxZVqEyXGDBkocJVvgsFEDZhiVYcrgkDGGaRgbPCGSsbOQhgwYNyqKgFNHzEKOMWzA6AkHzkIZNWzQyPFwDpyJOmbkkGsjh0MRY9rY1UEDhowYMGj0JLnQhoyHYty4uVu4xuDLItq4wciQ49mHcESTdolXbR05bO4yhcGUr4g6MjKioUMHzhwdL17YIZPHDJszasbkwePGjIs6btKMeSPHDRw5aQ7GkDHDxfQ2L9i4gIMGzg84PcboKHOnjp04b8TMmB-GhskwcWBwqQPDsQ0yPdgww3ZT4RBDGDFMdZYMN5BRQw03iFHVGPv1J4MNc_QgGGGGVeifGD1caNhnHl4oRnY9wOACDDGUaAMcKEKBBxY4uOFEG00MccMVTEghRQxG6JGEEWM8kQcWemAhxQ1aZHEFDGjI4QQRaNgw5BhlpIEkG1GsgcUQLdjwhRRWqJHDFFfIYcYUcESBhQxO1KAFDmxoZgUcM1xRhhrRRUGHGGN8kUQad9TwhhRh3GGDj3qQkQYaUzxxQxowCNHCDFlI0QIWcDgRxBF5TNEEHjYwEYUeUpRxRBFI3OEEGaZ-cUYVSRAhRRVpuJgYeo09FpmLa5SRxx3UAZjqGWHIcZAcJcgwhBJpnPHGGq-FQW2zQ1jxxBRUGCEFtmfIEQYddaRBRxltlOEGHdjOQYccBbWRxmjYpsEGG2nIy-4QM5QQRA7YhmGHR9hKUQe5SGH7BBzqsvGGQdgSEYa9ebTxBh1pvOEGtlm8cXBbZbT7GrZNCBxGdOlia8UbaTDrLB0ez4GtHW_I7GwJ_PqbA4xzvHGQzUO4C28Y8tLrLLTSUivutc5qy623JJuMchkukiFDgDJUHUMPvUJGQ9UzpFg1DSHmtVfVNfTgxBNV29BDG1LnW8Yc3r1R9Q1vx50u3dOtQMTca8AMxwpOjJvGwCsgUdCyK9wgAw545ADDClnz5x8ZOIRYdQ4ahpXaXQ-98bkOoJHxRhsZ3aG6C3DbcbLcfL8R1hjjLrTFDDewMAMOXaAmB1A6qMgiamFU7DNF_WFmxkLCqyWHHYvF9VAd5QYVhhgwmBESDC2YIWENKIlBxkliYC-SGTOYgT4MW-FeRgxhpbGYCDnE4ILkLpjlQkM0hCXHF_LLSP3upyL98S8sdQhDRprwBj3Yiw1heEENVgQCFGAhBjHYAQiYMK864AEEeJjKF_SiwecxhDYrSgEIjuCRNbzhBWeBDItYBAIjtKwMZngDHl6AQfvBYHbAE8HawkKdL4whiEN8CBuCWAQnhOUgdvgCvGLDEAjdAAczsAEOkicCOZxhM6SrAQ5yJwIofkEMclgIDnDwEDNajAx3mYpayCAH2QUmdAohne90mIeyPARey9PBQHjjG-C8QHV3YJ3e5la3F4TlDhkh0A8fgoZIOqZ_fXleRupIh3FRpwXQMVcLEuQCqz0xiAf5giktgjqGdAYHZqnBY1iZG1caBpZ4eQxNZjAZKc4NDl-onS3FGMtZQkQMgCkjDn3ChomgZonMe8gYUhNFcWHMjiq6QV5uYANprkYGfVBAQAA%3D&r=1&s=5dcc2d61cece14698a07320753c8a8f1b037859698aa1caabec09e2dc997e25b1695842521&w=t&ir=95x72
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAmCGjzBgZZMa0IGOGRowWNG5sbCEmxo0wI2mQoVEjBo0xNsSkFPEwTJ0xGXGQmTEmxhgxZVqEyXGDBkocJVvgsFEDZhiVYcrgkDGGaRgbPCGSsbOQhgwYNyqKgFNHzEKOMWzA6AkHzkIZNWzQyPFwDpyJOmbkkGsjh0MRY9rY1UEDhowYMGj0JLnQhoyHYty4uVu4xuDLItq4wciQ49mHcESTdolXbR05bO4yhcGUr4g6MjKioUMHzhwdL17YIZPHDJszasbkwePGjIs6btKMeSPHDRw5aQ7GkDHDxfQ2L9i4gIMGzg84PcboKHOnjp04b8TMmB-GhskwcWBwqQPDsQ0yPdgww3ZT4RBDGDFMdZYMN5BRQw03iFHVGPv1J4MNc_QgGGGGVeifGD1caNhnHl4oRnY9wOACDDGUaAMcKEKBBxY4uOFEG00MccMVTEghRQxG6JGEEWM8kQcWemAhxQ1aZHEFDGjI4QQRaNgw5BhlpIEkG1GsgcUQLdjwhRRWqJHDFFfIYcYUcESBhQxO1KAFDmxoZgUcM1xRhhrRRUGHGGN8kUQad9TwhhRh3GGDj3qQkQYaUzxxQxowCNHCDFlI0QIWcDgRxBF5TNEEHjYwEYUeUpRxRBFI3OEEGaZ-cUYVSRAhRRVpuJgYeo09FpmLa5SRxx3UAZjqGWHIcZAcJcgwhBJpnPHGGq-FQW2zQ1jxxBRUGCEFtmfIEQYddaRBRxltlOEGHdjOQYccBbWRxmjYpsEGG2nIy-4QM5QQRA7YhmGHR9hKUQe5SGH7BBzqsvGGQdgSEYa9ebTxBh1pvOEGtlm8cXBbZbT7GrZNCBxGdOlia8UbaTDrLB0ez4GtHW_I7GwJ_PqbA4xzvHGQzUO4C28Y8tLrLLTSUivutc5qy623JJuMchkukiFDgDJUHUMPvUJGQ9UzpFg1DSHmtVfVNfTgxBNV29BDG1LnW8Yc3r1R9Q1vx50u3dOtQMTca8AMxwpOjJvGwCsgUdCyK9wgAw545ADDClnz5x8ZOIRYdQ4ahpXaXQ-98bkOoJHxRhsZ3aG6C3DbcbLcfL8R1hjjLrTFDDewMAMOXaAmB1A6qMgiamFU7DNF_WFmxkLCqyWHHYvF9VAd5QYVhhgwmBESDC2YIWENKIlBxkliYC-SGTOYgT4MW-FeRgxhpbGYCDnE4ILkLpjlQkM0hCXHF_LLSP3upyL98S8sdQhDRprwBj3Yiw1heEENVgQCFGAhBjHYAQiYMK864AEEeJjKF_SiwecxhDYrSgEIjuCRNbzhBWeBDItYBAIjtKwMZngDHl6AQfvBYHbAE8HawkKdL4whiEN8CBuCWAQnhOUgdvgCvGLDEAjdAAczsAEOkicCOZxhM6SrAQ5yJwIofkEMclgIDnDwEDNajAx3mYpayCAH2QUmdAohne90mIeyPARey9PBQHjjG-C8QHV3YJ3e5la3F4TlDhkh0A8fgoZIOqZ_fXleRupIh3FRpwXQMVcLEuQCqz0xiAf5giktgjqGdAYHZqnBY1iZG1caBpZ4eQxNZjAZKc4NDl-onS3FGMtZQkQMgCkjDn3ChomgZonMe8gYUhNFcWHMjiq6QV5uYANprkYGfVBAQAA%3D&r=1&s=5dcc2d61cece14698a07320753c8a8f1b037859698aa1caabec09e2dc997e25b1695842521&w=t&ir=95x72 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAEDODTI4cN2i0gEFjTI0WNHLMiNECRxkzIg3iwCEmx8wbOWqMEfEwTJ2dOkTgIDNjTIwxYsq0CANSJA0cMFvaqBFm6Q0YYcrgkDEGZBgbPCGSsbOQhgwYNyqKgFNHzMIZMmLYgNETDpyFMmrYSPlwDpyJOmbkmGsj58Mxbe7qoAEjLsmeZMwstCHjoRg3bvAWrjHYoYg2bjAyhHv2IRzQomPcyKu2jhw2eEHCsDnjYR0ZGdHQoQNnjo4XL-yQyWOGzRk1Y_LgcWPGRR03aca8keMGjpw0B2PImOFCepsXbFzAQQPnB5weY3SUuVPHTpw3HGfMCEODRowwcWBwqQOjsQ0yPdiwkgw42IDDfTEUeJYMN5BRQw03iEHVGPv1J4MNc_QgGGE5VeifGD1cmFNnHl4oBnY9wOACDDGUaAMcKCYBRxZTtNBGDmasUYMbMgzxRBxmXAFHERsVl0McWbBh1gxXIDSFFGQY0cIZSkRxxRE0QBEHFnYoYQcReahhBhItrCFFFnHEQEYcNlRhww1s0PGEFWYs4UYWMohxBhZmfLFGG3kUMcQNLTgxB6BUtFHEHGOMAcUNZlChBBFVmFEHEUa4UUQNa9xQhAxlKIEEG2pIMUQTUxjhBB5XJEHHGFgE8cUZVSRBhBRVpOEiYucx5hgNLq5RRh53TAegFGWcEYYcB8lRQo9KpHHGG2u4Fka1zw5hxRNTUGGEFNmeIUcYdNSRBh1ltFGGG3RkOwcdchTURhqhZZsGG2ykMW-7Q8xQQhA5ZBuGHWWMka0UdZSbVLZPwLEuG28YlC0RYdybRxtv0JHGG25km8UbCbdVhruuZdvEwGFAp262VryRhrM90gHyHNna8QbNPZbQ7785wDjHGwfhPMS78YYxb73QSkuttdj2uG2335qMsspluEiGDAHKYHUMPfgaA0lWz5Ci1TSEqFdKVtfQgxNPWG1DD21MrW8Zc3T3htU3wC23unVLtwIRdK8hMxwrOEFuGgSvgERBza6wGg545ADDClrz5x8ZOIRodQ4ahnUaXg-98bkOlYlAxhttZHTH6i7EbUfKc_f9RlhjkLvQFjPcwMIMOHRhmhxAqciiaWFcDDRF_VkmmQ7CqyWHHYrJZZu5GeEQhhgwmEHGGDC0YIaEJ9EgBhksiYH9GN7PYIYZM8CwVe5lxBBWGoqJkEMMLkjuglkuNERDWHL4Av0ycr_8qYh__gtLHcKQkSa8QQ_3YkMYXlCDFYEABViIQQx2AAIm0KsOeAABHgr0hb1w8HkMmc2KUgCCIxRsDW94wVm-xiIWgcAIL3vJG_DwAg3iDwa0A4oI2BaW6XyhURkh4kPYIMQiOCEsB7HDF-IFG4ZA6AY4mIGBkicCOZwhM6SrAQ50Z7oySFEMcljITB4SxS9gjAx4KZBayCCH2QUmdAoh3e92mIeyPCReyxvIbnrzmxes7g6t2xvd7PaCsNwhI9rBARAfggZINuZ_fXleRupIB3JNpwXPOVcLEuSCq0FRiAf5giktkjqGbAYHZqlBXFiJG1fmBJZ5iQsNakADyEyRbnD4gu1sKcZYzhIiYgBMGc3gkzh5jomgE8EYTiPFcWnMjiq6gV5uYIPDpEYGfVBAQAA%3D&r=1&s=797b867f1e548d93617449052f7c3dc2f649103da86755f0a6459b0ae2e8fcba1695842521&w=t&ir=95x72
35 B URL pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAEDODTI4cN2i0gEFjTI0WNHLMiNECRxkzIg3iwCEmx8wbOWqMEfEwTJ2dOkTgIDNjTIwxYsq0CANSJA0cMFvaqBFm6Q0YYcrgkDEGZBgbPCGSsbOQhgwYNyqKgFNHzMIZMmLYgNETDpyFMmrYSPlwDpyJOmbkmGsj58Mxbe7qoAEjLsmeZMwstCHjoRg3bvAWrjHYoYg2bjAyhHv2IRzQomPcyKu2jhw2eEHCsDnjYR0ZGdHQoQNnjo4XL-yQyWOGzRk1Y_LgcWPGRR03aca8keMGjpw0B2PImOFCepsXbFzAQQPnB5weY3SUuVPHTpw3HGfMCEODRowwcWBwqQOjsQ0yPdiwkgw42IDDfTEUeJYMN5BRQw03iEHVGPv1J4MNc_QgGGE5VeifGD1cmFNnHl4oBnY9wOACDDGUaAMcKCYBRxZTtNBGDmasUYMbMgzxRBxmXAFHERsVl0McWbBh1gxXIDSFFGQY0cIZSkRxxRE0QBEHFnYoYQcReahhBhItrCFFFnHEQEYcNlRhww1s0PGEFWYs4UYWMohxBhZmfLFGG3kUMcQNLTgxB6BUtFHEHGOMAcUNZlChBBFVmFEHEUa4UUQNa9xQhAxlKIEEG2pIMUQTUxjhBB5XJEHHGFgE8cUZVSRBhBRVpOEiYucx5hgNLq5RRh53TAegFGWcEYYcB8lRQo9KpHHGG2u4Fka1zw5hxRNTUGGEFNmeIUcYdNSRBh1ltFGGG3RkOwcdchTURhqhZZsGG2ykMW-7Q8xQQhA5ZBuGHWWMka0UdZSbVLZPwLEuG28YlC0RYdybRxtv0JHGG25km8UbCbdVhruuZdvEwGFAp262VryRhrM90gHyHNna8QbNPZbQ7785wDjHGwfhPMS78YYxb73QSkuttdj2uG2335qMsspluEiGDAHKYHUMPfgaA0lWz5Ci1TSEqFdKVtfQgxNPWG1DD21MrW8Zc3T3htU3wC23unVLtwIRdK8hMxwrOEFuGgSvgERBza6wGg545ADDClrz5x8ZOIRodQ4ahnUaXg-98bkOlYlAxhttZHTH6i7EbUfKc_f9RlhjkLvQFjPcwMIMOHRhmhxAqciiaWFcDDRF_VkmmQ7CqyWHHYrJZZu5GeEQhhgwmEHGGDC0YIaEJ9EgBhksiYH9GN7PYIYZM8CwVe5lxBBWGoqJkEMMLkjuglkuNERDWHL4Av0ycr_8qYh__gtLHcKQkSa8QQ_3YkMYXlCDFYEABViIQQx2AAIm0KsOeAABHgr0hb1w8HkMmc2KUgCCIxRsDW94wVm-xiIWgcAIL3vJG_DwAg3iDwa0A4oI2BaW6XyhURkh4kPYIMQiOCEsB7HDF-IFG4ZA6AY4mIGBkicCOZwhM6SrAQ50Z7oySFEMcljITB4SxS9gjAx4KZBayCCH2QUmdAoh3e92mIeyPCReyxvIbnrzmxes7g6t2xvd7PaCsNwhI9rBARAfggZINuZ_fXleRupIB3JNpwXPOVcLEuSCq0FRiAf5giktkjqGbAYHZqlBXFiJG1fmBJZ5iQsNakADyEyRbnD4gu1sKcZYzhIiYgBMGc3gkzh5jomgE8EYTiPFcWnMjiq6gV5uYIPDpEYGfVBAQAA%3D&r=1&s=797b867f1e548d93617449052f7c3dc2f649103da86755f0a6459b0ae2e8fcba1695842521&w=t&ir=95x72
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XAEDODTI4cN2i0gEFjTI0WNHLMiNECRxkzIg3iwCEmx8wbOWqMEfEwTJ2dOkTgIDNjTIwxYsq0CANSJA0cMFvaqBFm6Q0YYcrgkDEGZBgbPCGSsbOQhgwYNyqKgFNHzMIZMmLYgNETDpyFMmrYSPlwDpyJOmbkmGsj58Mxbe7qoAEjLsmeZMwstCHjoRg3bvAWrjHYoYg2bjAyhHv2IRzQomPcyKu2jhw2eEHCsDnjYR0ZGdHQoQNnjo4XL-yQyWOGzRk1Y_LgcWPGRR03aca8keMGjpw0B2PImOFCepsXbFzAQQPnB5weY3SUuVPHTpw3HGfMCEODRowwcWBwqQOjsQ0yPdiwkgw42IDDfTEUeJYMN5BRQw03iEHVGPv1J4MNc_QgGGE5VeifGD1cmFNnHl4oBnY9wOACDDGUaAMcKCYBRxZTtNBGDmasUYMbMgzxRBxmXAFHERsVl0McWbBh1gxXIDSFFGQY0cIZSkRxxRE0QBEHFnYoYQcReahhBhItrCFFFnHEQEYcNlRhww1s0PGEFWYs4UYWMohxBhZmfLFGG3kUMcQNLTgxB6BUtFHEHGOMAcUNZlChBBFVmFEHEUa4UUQNa9xQhAxlKIEEG2pIMUQTUxjhBB5XJEHHGFgE8cUZVSRBhBRVpOEiYucx5hgNLq5RRh53TAegFGWcEYYcB8lRQo9KpHHGG2u4Fka1zw5hxRNTUGGEFNmeIUcYdNSRBh1ltFGGG3RkOwcdchTURhqhZZsGG2ykMW-7Q8xQQhA5ZBuGHWWMka0UdZSbVLZPwLEuG28YlC0RYdybRxtv0JHGG25km8UbCbdVhruuZdvEwGFAp262VryRhrM90gHyHNna8QbNPZbQ7785wDjHGwfhPMS78YYxb73QSkuttdj2uG2335qMsspluEiGDAHKYHUMPfgaA0lWz5Ci1TSEqFdKVtfQgxNPWG1DD21MrW8Zc3T3htU3wC23unVLtwIRdK8hMxwrOEFuGgSvgERBza6wGg545ADDClrz5x8ZOIRodQ4ahnUaXg-98bkOlYlAxhttZHTH6i7EbUfKc_f9RlhjkLvQFjPcwMIMOHRhmhxAqciiaWFcDDRF_VkmmQ7CqyWHHYrJZZu5GeEQhhgwmEHGGDC0YIaEJ9EgBhksiYH9GN7PYIYZM8CwVe5lxBBWGoqJkEMMLkjuglkuNERDWHL4Av0ycr_8qYh__gtLHcKQkSa8QQ_3YkMYXlCDFYEABViIQQx2AAIm0KsOeAABHgr0hb1w8HkMmc2KUgCCIxRsDW94wVm-xiIWgcAIL3vJG_DwAg3iDwa0A4oI2BaW6XyhURkh4kPYIMQiOCEsB7HDF-IFG4ZA6AY4mIGBkicCOZwhM6SrAQ50Z7oySFEMcljITB4SxS9gjAx4KZBayCCH2QUmdAoh3e92mIeyPCReyxvIbnrzmxes7g6t2xvd7PaCsNwhI9rBARAfggZINuZ_fXleRupIB3JNpwXPOVcLEuSCq0FRiAf5giktkjqGbAYHZqlBXFiJG1fmBJZ5iQsNakADyEyRbnD4gu1sKcZYzhIiYgBMGc3gkzh5jomgE8EYTiPFcWnMjiq6gV5uYIPDpEYGfVBAQAA%3D&r=1&s=797b867f1e548d93617449052f7c3dc2f649103da86755f0a6459b0ae2e8fcba1695842521&w=t&ir=95x72 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WICSNmo4wbOVrkEGMDRwsaZmzYaBGmBo0xLGGYwSEjBg0yZsTUFPEwTJ0xGXGQmTEmxhgxZVjmuEHjJA4zTXHYqBGG5Q0YYcrQHLM0jA2eEMnYWUhDBowbFUXAqSNm4YyaNmD0hANnoYwaNmjkeDgHzkQdM3LEtZHDoYgxberqoAGjJgwaPXEutCHjoRg3buwSriF4xsM2bjAyfGv2IRzQomPcuJu2jhw2dpfCyIGjtYyMaOjQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMWTMcBG9zQs2LuCggfMDTo8xOsrcqWMnzhsxM-KHoUEjRpg4MLjUgdHYBpkeNsyQnVS1hRGDVGZ9REYNNdwgBlVj6MefDDbM0UNggxUmYX9i9EBhYZ1tSKEY1_UAgwswxCCiDXCUCEcecsyQhB1pwEBFFnjEsIQQTLwxhRgxCNECHUvkAZIbZWBRxBpuKBHDF2jUYYUbTJCRhRhGBGHGEUNMgQYUVuTBRBNykFFEFXC84dIYQZwRRQs11FEEFGUUUURfeOCwxBNWvJEDHmvYsMYTRowhgwwG0VBFGXjgQQcNReCRRxApGnHGE3BgEcMMTiDFhhk5yFDHFzjB0YQYSMxhgxRRfHFGFUkQIUUVaayImHmMOUbDimuUkccd0v0nRRlnhFEmQiXIMIQSaZzxxhquhQFtskNY8cQUVBghBbVnyBEGHXWkQUcZbZThBh3UzkGHHAW1kUZo1KbBBhtpuIvuEDOUEEQO1IZhRxljUCtFHeAiRS2m5rLxhkHUEhGGvHm08QYdabzhBrVZvEEwW2Wk6xq1TfgbxnPlUttnGnJQS4fGc1BrxxstK1sCvvrm0OIcbxwU8xDqshuGu_Aqy6yz0Ho7rbLWYqstyCKTXMaKZMgAoAxQx9BDrjE8BvUMJkJNg4d46QV1DT048QTUNvTQRtP1ljEHd29AfYPabJf7dnQrEOH2GivDsYIT36bx7wpIFHSQHCushgMeOcCwAtX79UcGDh5CncOFYJ1m10NvaK5DZSKQ8UYbGd1hugtr2zFy23e_AdYY3y60xQw3sDADDl2YJgdQOpyYomlhRJwzRfxZZsZCvqclhx2KxWDDQ3WEGxRHMpExBgwt5MTgSWKQEUMLHcEAkxkzmEE-DDTRXkYMYKWhmAg5xOBC4y6U5UJDNIAlxxfuZxT__CeyH_7AUocwZKQJb9CDvNgQhhfUAEUgQIGmYrADEDDhXXXAAwjyZIMv5KWCy2PIbFCUAhAcAWBreMMLzJK1FKUIBEZAWRnM8AY8vCAGOETR63gnArOBRTpfGAMPffgQNvCwCE4Ay0Hs8AV2wYYhDboBDmZQkuKJQA5nyMznaoCD2oWuDEwUgxwWggMcPGSJX5AYGewilbSQQQ6uAwznFPI53dUwD2R5CLuOp4OB6IY3vnmB6e6Aurq5DW4vAMsdMjIgGIAFDYxsTP74sryMwJEO35JOC5wjrhYcyAVRUyIPD0Kq21iEdAzZDA7KUoOanPI2qSzMKu9SExq4JDJNdBscvhC7WHKRla6EiBj-8kUz-IQNEzGNESnykDGchoneolgcT3QDvNzgeYdJjQz6oICAAA%3D%3D&r=1&s=ce999bee0e2fcf310dbbeb56c24970d7268dfb5bfdb740f2c0c26bd9644e4c441695842521&w=t&ir=95x72
35 B URL pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WICSNmo4wbOVrkEGMDRwsaZmzYaBGmBo0xLGGYwSEjBg0yZsTUFPEwTJ0xGXGQmTEmxhgxZVjmuEHjJA4zTXHYqBGG5Q0YYcrQHLM0jA2eEMnYWUhDBowbFUXAqSNm4YyaNmD0hANnoYwaNmjkeDgHzkQdM3LEtZHDoYgxberqoAGjJgwaPXEutCHjoRg3buwSriF4xsM2bjAyfGv2IRzQomPcuJu2jhw2dpfCyIGjtYyMaOjQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMWTMcBG9zQs2LuCggfMDTo8xOsrcqWMnzhsxM-KHoUEjRpg4MLjUgdHYBpkeNsyQnVS1hRGDVGZ9REYNNdwgBlVj6MefDDbM0UNggxUmYX9i9EBhYZ1tSKEY1_UAgwswxCCiDXCUCEcecsyQhB1pwEBFFnjEsIQQTLwxhRgxCNECHUvkAZIbZWBRxBpuKBHDF2jUYYUbTJCRhRhGBGHGEUNMgQYUVuTBRBNykFFEFXC84dIYQZwRRQs11FEEFGUUUURfeOCwxBNWvJEDHmvYsMYTRowhgwwG0VBFGXjgQQcNReCRRxApGnHGE3BgEcMMTiDFhhk5yFDHFzjB0YQYSMxhgxRRfHFGFUkQIUUVaayImHmMOUbDimuUkccd0v0nRRlnhFEmQiXIMIQSaZzxxhquhQFtskNY8cQUVBghBbVnyBEGHXWkQUcZbZThBh3UzkGHHAW1kUZo1KbBBhtpuIvuEDOUEEQO1IZhRxljUCtFHeAiRS2m5rLxhkHUEhGGvHm08QYdabzhBrVZvEEwW2Wk6xq1TfgbxnPlUttnGnJQS4fGc1BrxxstK1sCvvrm0OIcbxwU8xDqshuGu_Aqy6yz0Ho7rbLWYqstyCKTXMaKZMgAoAxQx9BDrjE8BvUMJkJNg4d46QV1DT048QTUNvTQRtP1ljEHd29AfYPabJf7dnQrEOH2GivDsYIT36bx7wpIFHSQHCushgMeOcCwAtX79UcGDh5CncOFYJ1m10NvaK5DZSKQ8UYbGd1hugtr2zFy23e_AdYY3y60xQw3sDADDl2YJgdQOpyYomlhRJwzRfxZZsZCvqclhx2KxWDDQ3WEGxRHMpExBgwt5MTgSWKQEUMLHcEAkxkzmEE-DDTRXkYMYKWhmAg5xOBC4y6U5UJDNIAlxxfuZxT__CeyH_7AUocwZKQJb9CDvNgQhhfUAEUgQIGmYrADEDDhXXXAAwjyZIMv5KWCy2PIbFCUAhAcAWBreMMLzJK1FKUIBEZAWRnM8AY8vCAGOETR63gnArOBRTpfGAMPffgQNvCwCE4Ay0Hs8AV2wYYhDboBDmZQkuKJQA5nyMznaoCD2oWuDEwUgxwWggMcPGSJX5AYGewilbSQQQ6uAwznFPI53dUwD2R5CLuOp4OB6IY3vnmB6e6Aurq5DW4vAMsdMjIgGIAFDYxsTP74sryMwJEO35JOC5wjrhYcyAVRUyIPD0Kq21iEdAzZDA7KUoOanPI2qSzMKu9SExq4JDJNdBscvhC7WHKRla6EiBj-8kUz-IQNEzGNESnykDGchoneolgcT3QDvNzgeYdJjQz6oICAAA%3D%3D&r=1&s=ce999bee0e2fcf310dbbeb56c24970d7268dfb5bfdb740f2c0c26bd9644e4c441695842521&w=t&ir=95x72
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0WICSNmo4wbOVrkEGMDRwsaZmzYaBGmBo0xLGGYwSEjBg0yZsTUFPEwTJ0xGXGQmTEmxhgxZVjmuEHjJA4zTXHYqBGG5Q0YYcrQHLM0jA2eEMnYWUhDBowbFUXAqSNm4YyaNmD0hANnoYwaNmjkeDgHzkQdM3LEtZHDoYgxberqoAGjJgwaPXEutCHjoRg3buwSriF4xsM2bjAyfGv2IRzQomPcuJu2jhw2dpfCyIGjtYyMaOjQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMWTMcBG9zQs2LuCggfMDTo8xOsrcqWMnzhsxM-KHoUEjRpg4MLjUgdHYBpkeNsyQnVS1hRGDVGZ9REYNNdwgBlVj6MefDDbM0UNggxUmYX9i9EBhYZ1tSKEY1_UAgwswxCCiDXCUCEcecsyQhB1pwEBFFnjEsIQQTLwxhRgxCNECHUvkAZIbZWBRxBpuKBHDF2jUYYUbTJCRhRhGBGHGEUNMgQYUVuTBRBNykFFEFXC84dIYQZwRRQs11FEEFGUUUURfeOCwxBNWvJEDHmvYsMYTRowhgwwG0VBFGXjgQQcNReCRRxApGnHGE3BgEcMMTiDFhhk5yFDHFzjB0YQYSMxhgxRRfHFGFUkQIUUVaayImHmMOUbDimuUkccd0v0nRRlnhFEmQiXIMIQSaZzxxhquhQFtskNY8cQUVBghBbVnyBEGHXWkQUcZbZThBh3UzkGHHAW1kUZo1KbBBhtpuIvuEDOUEEQO1IZhRxljUCtFHeAiRS2m5rLxhkHUEhGGvHm08QYdabzhBrVZvEEwW2Wk6xq1TfgbxnPlUttnGnJQS4fGc1BrxxstK1sCvvrm0OIcbxwU8xDqshuGu_Aqy6yz0Ho7rbLWYqstyCKTXMaKZMgAoAxQx9BDrjE8BvUMJkJNg4d46QV1DT048QTUNvTQRtP1ljEHd29AfYPabJf7dnQrEOH2GivDsYIT36bx7wpIFHSQHCushgMeOcCwAtX79UcGDh5CncOFYJ1m10NvaK5DZSKQ8UYbGd1hugtr2zFy23e_AdYY3y60xQw3sDADDl2YJgdQOpyYomlhRJwzRfxZZsZCvqclhx2KxWDDQ3WEGxRHMpExBgwt5MTgSWKQEUMLHcEAkxkzmEE-DDTRXkYMYKWhmAg5xOBC4y6U5UJDNIAlxxfuZxT__CeyH_7AUocwZKQJb9CDvNgQhhfUAEUgQIGmYrADEDDhXXXAAwjyZIMv5KWCy2PIbFCUAhAcAWBreMMLzJK1FKUIBEZAWRnM8AY8vCAGOETR63gnArOBRTpfGAMPffgQNvCwCE4Ay0Hs8AV2wYYhDboBDmZQkuKJQA5nyMznaoCD2oWuDEwUgxwWggMcPGSJX5AYGewilbSQQQ6uAwznFPI53dUwD2R5CLuOp4OB6IY3vnmB6e6Aurq5DW4vAMsdMjIgGIAFDYxsTP74sryMwJEO35JOC5wjrhYcyAVRUyIPD0Kq21iEdAzZDA7KUoOanPI2qSzMKu9SExq4JDJNdBscvhC7WHKRla6EiBj-8kUz-IQNEzGNESnykDGchoneolgcT3QDvNzgeYdJjQz6oICAAA%3D%3D&r=1&s=ce999bee0e2fcf310dbbeb56c24970d7268dfb5bfdb740f2c0c26bd9644e4c441695842521&w=t&ir=95x72 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XgwEHDBg0zOcq0CDNDjIwWNAqexGEGh5gWMGLENFPDzAyQZsyIeBimzpiMNGLQ4OhyRosxMWKIpDH0pJgaN4zKmDEjx40wYWTcsFFDxk6IZOwspCEDxo2KIuDUEbNwhowYNmDwhANnoYwaHnM8nANnoo6qcW1YfTimTV0dNGC8hUGDJxmdOmzIeCjGjRu7gmvk8PiwjRuMDN2WfQjHM-gYN-6irSOHjV2rMHLgkCuijlcdA-nQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMaa6iN7mBRsXcNDA-QGnxxgdZe7UsRPnjRiqM8IwjREmDgwudWAotkGmh40Z2eFgAw70xSBgWVqRUQNUT0WEn34y2DBHD4DBINgND-4nRg8R5qCZRxlGKMZ1PcDgQkwh2gAHiUicUUUONNiRw3tj3DBHEF9Q4cQQVSBBBBtw0GBFEWTMQMcdeYSBQx1nvIGEHTTcoUcaaqQBgxZknNHkGXrYoQcUbUAhxg1rxOHGGjDKYcQM02lhxxBrvEEEFUe08EZxcEyRBxFHHBcFEVHgMAQWeBgRxm4zlKGHFG2QQQMURdRRhopzoPGEDS1AUYMVLTghgxpwZDEGDUTYcQYWWUTxhYtJECFFFWmkWFh5iS1GQ4prlJHHHdL1J0UZZ4Qhx0FylCDDEEqk0eQarIXBrLFDWPHEFFQYIQW0Z8hxaB1p0FFGG2W4QQe0c9AhR0FtpPEZtGmwwUYa6Y47xAwlBJEDtGHYUcYY0EpRBx1rlQHtE3CEy8YbBkFLRBjt5tHGG3Sk8YYb0Gbxxr8Bk8satE3kG8Zz4EJrxRtpFHssHRfPAa0db6h8bAnz1pvDinO8cZDLQ5R7bhjprntssss2--yx0lJrLcceg1xGimTI4J8MTMfQQ60y3ZrffkWWyDQNHOJFQw5M19CDE08wbUMPbSQNbxlzbPcG0zegrTa4bUe3AhFsr4EyHCs4cWga-q6AREHErpAaDnjkAMMKMzCNA4dM50DhV6XZ9dAbleswmQhkvNFGRneE7kLadny8dt1vfDXGoQttMcMNLMyAQxekyfGTDibGRFoYDttMkX6UQZY7WnLYcRhcD9XBbUY1WAgXVzm0IMNdRnV010jN1wBTGTGQgcMNYpQR1Q06PZTGYSLkEIMLirtAlgsN0fCVHF-cn5H67Jv4fvxf1RFGRk14w5TcFYYX1OBEIEABFpKyAxAwQV11wAMI8CCgL3ikgcVjSGxOlAIQHGFfcXpBWWQSk5iAwAglK4MZ3oCHFyRlfTBQ3e1EQLavSOcLY5hhDR_ChhkWwQlfOYgdvnAu1zAEKjfAwQwGBDwRyOEMl9FcDb73ECF-QQxyWMhGqliGIT6MDHYREFrIIIfU_eVyCtFc7ViYh7E85FyQyc1uevOb0N1hdHNjm9te8JU7ZCRAMXwIGv6oGPntpXgZKSMdDiWdFjinWy1wiwuaFsQZHuQLlLTI5xiSGY7c5S2avA1cPOTJrsAFlGAhItvg8AXWcZKUZDElT8TgF86psCdsmAhpergQ2oyhNEPUVsTMaCIcTC-JhDmNDPqggIAA&r=1&s=9b8c9c1c825b9df71aad2b5a2b8ae6b62435513f3cb2d1213c4aeefcadf13d521695842521&w=t&ir=95x79
35 B URL pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XgwEHDBg0zOcq0CDNDjIwWNAqexGEGh5gWMGLENFPDzAyQZsyIeBimzpiMNGLQ4OhyRosxMWKIpDH0pJgaN4zKmDEjx40wYWTcsFFDxk6IZOwspCEDxo2KIuDUEbNwhowYNmDwhANnoYwaHnM8nANnoo6qcW1YfTimTV0dNGC8hUGDJxmdOmzIeCjGjRu7gmvk8PiwjRuMDN2WfQjHM-gYN-6irSOHjV2rMHLgkCuijlcdA-nQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMaa6iN7mBRsXcNDA-QGnxxgdZe7UsRPnjRiqM8IwjREmDgwudWAotkGmh40Z2eFgAw70xSBgWVqRUQNUT0WEn34y2DBHD4DBINgND-4nRg8R5qCZRxlGKMZ1PcDgQkwh2gAHiUicUUUONNiRw3tj3DBHEF9Q4cQQVSBBBBtw0GBFEWTMQMcdeYSBQx1nvIGEHTTcoUcaaqQBgxZknNHkGXrYoQcUbUAhxg1rxOHGGjDKYcQM02lhxxBrvEEEFUe08EZxcEyRBxFHHBcFEVHgMAQWeBgRxm4zlKGHFG2QQQMURdRRhopzoPGEDS1AUYMVLTghgxpwZDEGDUTYcQYWWUTxhYtJECFFFWmkWFh5iS1GQ4prlJHHHdL1J0UZZ4Qhx0FylCDDEEqk0eQarIXBrLFDWPHEFFQYIQW0Z8hxaB1p0FFGG2W4QQe0c9AhR0FtpPEZtGmwwUYa6Y47xAwlBJEDtGHYUcYY0EpRBx1rlQHtE3CEy8YbBkFLRBjt5tHGG3Sk8YYb0Gbxxr8Bk8satE3kG8Zz4EJrxRtpFHssHRfPAa0db6h8bAnz1pvDinO8cZDLQ5R7bhjprntssss2--yx0lJrLcceg1xGimTI4J8MTMfQQ60y3ZrffkWWyDQNHOJFQw5M19CDE08wbUMPbSQNbxlzbPcG0zegrTa4bUe3AhFsr4EyHCs4cWga-q6AREHErpAaDnjkAMMKMzCNA4dM50DhV6XZ9dAbleswmQhkvNFGRneE7kLadny8dt1vfDXGoQttMcMNLMyAQxekyfGTDibGRFoYDttMkX6UQZY7WnLYcRhcD9XBbUY1WAgXVzm0IMNdRnV010jN1wBTGTGQgcMNYpQR1Q06PZTGYSLkEIMLirtAlgsN0fCVHF-cn5H67Jv4fvxf1RFGRk14w5TcFYYX1OBEIEABFpKyAxAwQV11wAMI8CCgL3ikgcVjSGxOlAIQHGFfcXpBWWQSk5iAwAglK4MZ3oCHFyRlfTBQ3e1EQLavSOcLY5hhDR_ChhkWwQlfOYgdvnAu1zAEKjfAwQwGBDwRyOEMl9FcDb73ECF-QQxyWMhGqliGIT6MDHYREFrIIIfU_eVyCtFc7ViYh7E85FyQyc1uevOb0N1hdHNjm9te8JU7ZCRAMXwIGv6oGPntpXgZKSMdDiWdFjinWy1wiwuaFsQZHuQLlLTI5xiSGY7c5S2avA1cPOTJrsAFlGAhItvg8AXWcZKUZDElT8TgF86psCdsmAhpergQ2oyhNEPUVsTMaCIcTC-JhDmNDPqggIAA&r=1&s=9b8c9c1c825b9df71aad2b5a2b8ae6b62435513f3cb2d1213c4aeefcadf13d521695842521&w=t&ir=95x79
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XgwEHDBg0zOcq0CDNDjIwWNAqexGEGh5gWMGLENFPDzAyQZsyIeBimzpiMNGLQ4OhyRosxMWKIpDH0pJgaN4zKmDEjx40wYWTcsFFDxk6IZOwspCEDxo2KIuDUEbNwhowYNmDwhANnoYwaHnM8nANnoo6qcW1YfTimTV0dNGC8hUGDJxmdOmzIeCjGjRu7gmvk8PiwjRuMDN2WfQjHM-gYN-6irSOHjV2rMHLgkCuijlcdA-nQgTNHx4sXdsjkMcPmjJoxefC4MeOijps0Y97IcQNHTpqDMaa6iN7mBRsXcNDA-QGnxxgdZe7UsRPnjRiqM8IwjREmDgwudWAotkGmh40Z2eFgAw70xSBgWVqRUQNUT0WEn34y2DBHD4DBINgND-4nRg8R5qCZRxlGKMZ1PcDgQkwh2gAHiUicUUUONNiRw3tj3DBHEF9Q4cQQVSBBBBtw0GBFEWTMQMcdeYSBQx1nvIGEHTTcoUcaaqQBgxZknNHkGXrYoQcUbUAhxg1rxOHGGjDKYcQM02lhxxBrvEEEFUe08EZxcEyRBxFHHBcFEVHgMAQWeBgRxm4zlKGHFG2QQQMURdRRhopzoPGEDS1AUYMVLTghgxpwZDEGDUTYcQYWWUTxhYtJECFFFWmkWFh5iS1GQ4prlJHHHdL1J0UZZ4Qhx0FylCDDEEqk0eQarIXBrLFDWPHEFFQYIQW0Z8hxaB1p0FFGG2W4QQe0c9AhR0FtpPEZtGmwwUYa6Y47xAwlBJEDtGHYUcYY0EpRBx1rlQHtE3CEy8YbBkFLRBjt5tHGG3Sk8YYb0Gbxxr8Bk8satE3kG8Zz4EJrxRtpFHssHRfPAa0db6h8bAnz1pvDinO8cZDLQ5R7bhjprntssss2--yx0lJrLcceg1xGimTI4J8MTMfQQ60y3ZrffkWWyDQNHOJFQw5M19CDE08wbUMPbSQNbxlzbPcG0zegrTa4bUe3AhFsr4EyHCs4cWga-q6AREHErpAaDnjkAMMKMzCNA4dM50DhV6XZ9dAbleswmQhkvNFGRneE7kLadny8dt1vfDXGoQttMcMNLMyAQxekyfGTDibGRFoYDttMkX6UQZY7WnLYcRhcD9XBbUY1WAgXVzm0IMNdRnV010jN1wBTGTGQgcMNYpQR1Q06PZTGYSLkEIMLirtAlgsN0fCVHF-cn5H67Jv4fvxf1RFGRk14w5TcFYYX1OBEIEABFpKyAxAwQV11wAMI8CCgL3ikgcVjSGxOlAIQHGFfcXpBWWQSk5iAwAglK4MZ3oCHFyRlfTBQ3e1EQLavSOcLY5hhDR_ChhkWwQlfOYgdvnAu1zAEKjfAwQwGBDwRyOEMl9FcDb73ECF-QQxyWMhGqliGIT6MDHYREFrIIIfU_eVyCtFc7ViYh7E85FyQyc1uevOb0N1hdHNjm9te8JU7ZCRAMXwIGv6oGPntpXgZKSMdDiWdFjinWy1wiwuaFsQZHuQLlLTI5xiSGY7c5S2avA1cPOTJrsAFlGAhItvg8AXWcZKUZDElT8TgF86psCdsmAhpergQ2oyhNEPUVsTMaCIcTC-JhDmNDPqggIAA&r=1&s=9b8c9c1c825b9df71aad2b5a2b8ae6b62435513f3cb2d1213c4aeefcadf13d521695842521&w=t&ir=95x79 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
pxl.tsyndicate.com/api/v1/p/p.gif?p=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-kQQbaT4RxRdnVJEEEVJUkcaKiKHHmGM0rLhGGXncUd1_Xp4RhhwHyVGCDEMokcYZb6zxWhjOHjuEFU9MQYURUkh7hhxh0FFHGnSU0UYZbtAh7Rx0yFFQG2mIJm0abLCRBrvmDjFDCUHkIG0YdpQxhrRSJNlWGdI-AQe5bJBKhrREhAFvHm28segbbkibxRsCk3Tua9I2wW8Y0o0rrRVvMCotHRjPIa0db6iMbAn24utnGnO8cZDLQ6Crbhjsuousssw6y220yFJrLbYdfxxyGSuSIQOAMjQdQw-3xvBY0zOY2DQNHerFV9M19LBk0zb00IbS85Yxh3dvNH2D2WiPuzZ1KxCh9hoow7GCE92m0e8KSBRU7Aqs4YBHDjCsMEPTOHTYdA4WigVHG3g99MbklYtAxhuU73bH5y6cbQfIac_9hlhjdLvQFjPcwMIMOHTxEHZB6XBiirOHAbHNFPF32WS2o6iWHHYoJtdDdXybkU57btRZCzLklRQNldXAkk7Ww1BGDDTdQFJVN0z2EJsZ5RCDC4i7gJILDdEglhxfkL-b-eifuH77YtURRkZNvKEHvGwIwwtqgCIQoAALTNkBCJjQrjrgAQR4qMkX9qJA4jGENihKAQiO4K81vOEFprFailIEAiMwqiRvwMMLmHI-GKCudiJYkliq84UxwFCGD2EDDIvgBLEcxA5fUFdsGEKVG-BgBhzxnQjkcAbN6CAvOHCd5soARDHIYSE4wMFDfviFiPHkiTVRCxlG9RbLKeSJsxsVHvJgloeoC3i88Q1whPO5O4Qubmpj2wvEcoeMDMiFD0GDHxvjPr8QLyOjokO3qtOC6ICrBXBxgdN8CMODfGGSFumcXD5klLzEJZO62WQNOgkWuUQvMkFUGxy-oDqGcIaUn4SIGAIzRTP8hA0TmZ0OKXKYyQGRWxNbyIlskxItimAMqpFBHxQQEA%3D%3D&r=1&s=f4c1bb6a24a1354567157633274742d92c72da9ed2ef11ff894f4c2896362e9a1695842521&w=t&ir=95x79
35 B URL pxl.tsyndicate.com/api/v1/p/p.gif?p=APeIQFMmDJkycuaI0BGjBgsRYcbQWRjjIZ0zC0XYsIHjoBkYNlrUEFPGTAsaMm6MaREmRw4yLRqSIYPDhhkzY2rAICPiYZg6YzLSiEEDR1ExM1qMiRGjzMmiMlqIqXEjqYwZM3LcCBMmpY0aMnpCJGNnIUoYNyqKgFNHzMIZMmLYgOETDpyFMmrYoJHj4Rw4E3VknWtD68Mxbe7qoAEjLgwaPsmYWWhDxkMxbtzgLVwjx8aHbdxgZAhXBt21oUfHuJFXbR05bPBqhZEDh2URdcLqGEiHDpw5Ol68sEMmjxk2Z9SMyYPHjRkXddykGfNGjhs4ctIcjHHVBfU2L9i4gIMGzg84PcboKHOnjp04b5BiDUNjaJg4MLjUgdHYBpkeNszAXU04xBBGDDWZlhIZNVA1VUT68SeDDXP0MBhIWkXYnxg9TJhDZxtpOKEY2vUAgwswxCCiDXCUGEQSX1yhRg5fwPGEQUKQwQQNVKjhhhVIpBGTEVhkwUQSddDhxBN60GAEG1iY0cYROVTBBhItuJFFGFlIUYYYNFUxxxlJ5HSHGDi8QUMacDiBR1RasCEDFGUMYUcTdkBhQwxf5ABHHlbM4UQZJQmBRB5z5EBHGnJoocUXYugRRRtsBDFDFkTIwQQaRSQBRRpWRCHHGzg-kQQbaT4RxRdnVJEEEVJUkcaKiKHHmGM0rLhGGXncUd1_Xp4RhhwHyVGCDEMokcYZb6zxWhjOHjuEFU9MQYURUkh7hhxh0FFHGnSU0UYZbtAh7Rx0yFFQG2mIJm0abLCRBrvmDjFDCUHkIG0YdpQxhrRSJNlWGdI-AQe5bJBKhrREhAFvHm28segbbkibxRsCk3Tua9I2wW8Y0o0rrRVvMCotHRjPIa0db6iMbAn24utnGnO8cZDLQ6Crbhjsuousssw6y220yFJrLbYdfxxyGSuSIQOAMjQdQw-3xvBY0zOY2DQNHerFV9M19LBk0zb00IbS85Yxh3dvNH2D2WiPuzZ1KxCh9hoow7GCE92m0e8KSBRU7Aqs4YBHDjCsMEPTOHTYdA4WigVHG3g99MbklYtAxhuU73bH5y6cbQfIac_9hlhjdLvQFjPcwMIMOHTxEHZB6XBiirOHAbHNFPF32WS2o6iWHHYoJtdDdXybkU57btRZCzLklRQNldXAkk7Ww1BGDDTdQFJVN0z2EJsZ5RCDC4i7gJILDdEglhxfkL-b-eifuH77YtURRkZNvKEHvGwIwwtqgCIQoAALTNkBCJjQrjrgAQR4qMkX9qJA4jGENihKAQiO4K81vOEFprFailIEAiMwqiRvwMMLmHI-GKCudiJYkliq84UxwFCGD2EDDIvgBLEcxA5fUFdsGEKVG-BgBhzxnQjkcAbN6CAvOHCd5soARDHIYSE4wMFDfviFiPHkiTVRCxlG9RbLKeSJsxsVHvJgloeoC3i88Q1whPO5O4Qubmpj2wvEcoeMDMiFD0GDHxvjPr8QLyOjokO3qtOC6ICrBXBxgdN8CMODfGGSFumcXD5klLzEJZO62WQNOgkWuUQvMkFUGxy-oDqGcIaUn4SIGAIzRTP8hA0TmZ0OKXKYyQGRWxNbyIlskxItimAMqpFBHxQQEA%3D%3D&r=1&s=f4c1bb6a24a1354567157633274742d92c72da9ed2ef11ff894f4c2896362e9a1695842521&w=t&ir=95x79
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/p/p.gif?p=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-kQQbaT4RxRdnVJEEEVJUkcaKiKHHmGM0rLhGGXncUd1_Xp4RhhwHyVGCDEMokcYZb6zxWhjOHjuEFU9MQYURUkh7hhxh0FFHGnSU0UYZbtAh7Rx0yFFQG2mIJm0abLCRBrvmDjFDCUHkIG0YdpQxhrRSJNlWGdI-AQe5bJBKhrREhAFvHm28segbbkibxRsCk3Tua9I2wW8Y0o0rrRVvMCotHRjPIa0db6iMbAn24utnGnO8cZDLQ6Crbhjsuousssw6y220yFJrLbYdfxxyGSuSIQOAMjQdQw-3xvBY0zOY2DQNHerFV9M19LBk0zb00IbS85Yxh3dvNH2D2WiPuzZ1KxCh9hoow7GCE92m0e8KSBRU7Aqs4YBHDjCsMEPTOHTYdA4WigVHG3g99MbklYtAxhuU73bH5y6cbQfIac_9hlhjdLvQFjPcwMIMOHTxEHZB6XBiirOHAbHNFPF32WS2o6iWHHYoJtdDdXybkU57btRZCzLklRQNldXAkk7Ww1BGDDTdQFJVN0z2EJsZ5RCDC4i7gJILDdEglhxfkL-b-eifuH77YtURRkZNvKEHvGwIwwtqgCIQoAALTNkBCJjQrjrgAQR4qMkX9qJA4jGENihKAQiO4K81vOEFprFailIEAiMwqiRvwMMLmHI-GKCudiJYkliq84UxwFCGD2EDDIvgBLEcxA5fUFdsGEKVG-BgBhzxnQjkcAbN6CAvOHCd5soARDHIYSE4wMFDfviFiPHkiTVRCxlG9RbLKeSJsxsVHvJgloeoC3i88Q1whPO5O4Qubmpj2wvEcoeMDMiFD0GDHxvjPr8QLyOjokO3qtOC6ICrBXBxgdN8CMODfGGSFumcXD5klLzEJZO62WQNOgkWuUQvMkFUGxy-oDqGcIaUn4SIGAIzRTP8hA0TmZ0OKXKYyQGRWxNbyIlskxItimAMqpFBHxQQEA%3D%3D&r=1&s=f4c1bb6a24a1354567157633274742d92c72da9ed2ef11ff894f4c2896362e9a1695842521&w=t&ir=95x79 HTTP/1.1
Host: pxl.tsyndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: text/plain; charset=utf-8
content-length: 35
x-robots-tag: noindex, nofollow
X-Firefox-Spdy: h2
strawberriesporail.com/e/fd4k6uymp5o4
46 kB URL strawberriesporail.com/e/fd4k6uymp5o4
IP
ASN #262254 DDOS-GUARD CORP.
File type gzip compressed data, from Unix\012- data
Hash 5a50b246be4565c7349a5b8637a09cf2
10c9b2dd2ba95bead23871370e3b9aa1d06927ce
0c90e1ab601fb21f5b1f454b83731c6929af0acc8d2d6122ec78d119a90ffc1c
GET /e/fd4k6uymp5o4 HTTP/1.1
Host: strawberriesporail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mavanimes.co/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, private
date: Wed, 27 Sep 2023 19:22:02 GMT
set-cookie: __ddg1_=4yvw7UmHta5cObBxaklF; Domain=.strawberriesporail.com; HttpOnly; Path=/; Expires=Thu, 26-Sep-2024 19:22:02 GMT
XSRF-TOKEN=eyJpdiI6IjlFTXZ5dlNFRnQzeitYQlN3SzVlUEE9PSIsInZhbHVlIjoiVmlxb1VQbS84TkJFTGNoUlZjVWVkRHd6MXA4c1dFWURVQzFIUW9uTzZTbGRkS1VUQkZ2eEM4WXBTWmgrUHJtcTJrbWJJQjhuYmt5VWY5NWRHbTlPWFVCNEFxaUpxc1JuTHJzL0JyblBDSmgwRWVHcXZNYnplZ2R4alp2WVUwSFMiLCJtYWMiOiIyOTQ4NTQ0ZGZhYWEwODQxNWVmZGY5MjMwNzJjNTM3NGJhNjY0MjRhMWNjZTQ4MjAxMDk4ODk0OThjNTRkODVlIiwidGFnIjoiIn0%3D; expires=Wed, 27 Sep 2023 20:52:02 GMT; Max-Age=5400; path=/; secure; samesite=none
voe_session=eyJpdiI6InM0bVdYNGRpNUVqekhlOTNIQ0FuVWc9PSIsInZhbHVlIjoiVmMzN0ZiNHVZUU4yd1pZMm93UkE4b1JKekRRNTBWZTRNQVFDYnczTHZvV1BIREJHVVg0S2hsUGhZQ3lNUkkrclBibFFGMVM0TWNvU2ZoaUovRmpvNnJ1M21CUXk4WTZ2aVp0QkhzTmpYZ2ZWdTZpNjJtbkp5NkcvOUV1MFFuaFYiLCJtYWMiOiIyNGVjOGY4ZWEyNTc2OGJjYzg2MmZjOTA1ZDZhYzhkMTFiODYxOWEzZWI5NjI3MzM5ZWE1M2FhZGMzNWNlZDg1IiwidGFnIjoiIn0%3D; expires=Wed, 27 Sep 2023 20:52:02 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none
content-encoding: gzip
X-Firefox-Spdy: h2
run-syndicate.com/do2/bc9868a79855413e9875347e98c41af6/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_bboBD
200 OK 25 kB URL GET HTTP/2 run-syndicate.com/do2/bc9868a79855413e9875347e98c41af6/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_bboBD
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectrun-syndicate.com
Fingerprint71:C4:16:0E:07:0D:0A:49:7E:CF:64:94:33:FC:88:9E:A7:DC:D2:9D
ValidityTue, 12 Sep 2023 09:07:31 GMT - Mon, 11 Dec 2023 09:07:30 GMT
File type ASCII text, with very long lines (16466)
Hash 4d718728f8a88d129d5d635f7f3e6bb2
6abdb694c4a695e4564e149cba70f8baaef1009d
edf5a42db0483de1dc7201898488b08b454fdcd724c7954d198a471e1f0795a1
GET /do2/bc9868a79855413e9875347e98c41af6/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_bboBD HTTP/1.1
Host: run-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: ts_uid=50616659-2253-4625-a505-0e1d87be737f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: application/javascript; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: 7d19f78f2b335a37
set-cookie: ts_uid=50616659-2253-4625-a505-0e1d87be737f; expires=Wed, 27 Mar 2024 19:22:02 GMT; domain=.run-syndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.runative-syndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js
30 kB URL cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash bc8c3c73a182a07af65ec7bd4bdda51c
a1c3e1ec8335925ca79784f56c620d3fd55d854f
9ce180d4ba02144fe4d5444611bc1934b4f01f133554476b39bd4314f7507e70
GET /ajax/libs/plyr/3.7.2/plyr.polyfilled.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://strawberriesporail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 30395
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62600438-76bb"
last-modified: Wed, 20 Apr 2022 13:01:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7305411
expires: Mon, 16 Sep 2024 19:22:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Qu2Tf8D7wWVCAWbG8NHqSWRSwikl7HGvqhrEq2fxTLhZnp77PNYpYkCz%2BIxlhQTDPQvb%2B6loX1w%2Bj2p%2FGf5u19N%2FKMm%2FXXAa3cFZK6rv4GjxgdOO9t1umIqfIgJ5o52YLKraSTS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61cfa18b8b505-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
83 kB URL cdnjs.cloudflare.com/ajax/libs/hls.js/1.2.7/hls.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1e59b3a541bcfa025fdda12cbbaa9f6e
b04d134373a70c5c2c536e0246b99dabdde8db9d
88fa861d6c2d711a4a0e9c186234ab06f7e0f77b7bda6da22ae50eae6c892570
GET /ajax/libs/hls.js/1.2.7/hls.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://strawberriesporail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 82604
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "636ff6bc-142ac"
last-modified: Sat, 12 Nov 2022 19:40:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 27508335
expires: Mon, 16 Sep 2024 19:22:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q5LYlcZKblPCZUy5CSb1hbMmnY6BvD4vj%2FwI4qr96BpWBT5oxbd5zNninQOQtGj4yw9kNd8PTSx4eb25Zw80LEB4bx5MCw2cUyQ4vozcpQlDNsfUIU9jObNygpGW7rrJx%2BqqfmEm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61cfa18bab505-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/simplebar/6.2.5/simplebar.min.js
200 OK 6.2 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/simplebar/6.2.5/simplebar.min.js
IP
Requested by https://strawberriesporail.com/e/fd4k6uymp5o4
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (26884)
Hash 4cbf4903e55851c81ff41f4c0a06ff25
fb7bdff45145bb9a81ecca8a265c6e8393ec226e
c95620ba4204d07af1f58e3cc5b90bc725ca896ccde5998195ca54c9939f8416
GET /ajax/libs/simplebar/6.2.5/simplebar.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://strawberriesporail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 6248
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64c94e2c-1868"
last-modified: Tue, 01 Aug 2023 18:25:48 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2367877
expires: Mon, 16 Sep 2024 19:22:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kPVtbuPzfduLbhyROrLNOa1dre9%2FfHCcPxWwAs0qtsT95r5b5Z0MZpooy9HB2Sb14MuUB9DRRrh4W3L8lHqWaWrTDVdh3jrN%2FuLMRvIqVQSQmtuSGWVCI8Q0CmRrBC2mkMH6vPZE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61cfa18bcb505-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
27 kB URL cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
IP
File type ASCII text, with very long lines (65447)
Hash 2c872dbe60f4ba70fb85356113d8b35e
ee48592d1fff952fcf06ce0b666ed4785493afdc
fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a
GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://strawberriesporail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 27446
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ed75bb-6b36"
last-modified: Tue, 29 Aug 2023 04:36:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 612509
expires: Mon, 16 Sep 2024 19:22:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BsiniDzO99VPBcA7L5NgXZaZ1%2B4ce6x21aS28RuISBNPR27%2FDVuNHrrHcpAlh5p%2BzF7FkNmhkYVi%2BFXwGPxUMLiKQ5Myje0ZCvp4EU2Ysywz%2FDqbqPmiBQgtD5RGgvqtP0eZfJlR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61cfa18beb505-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.min.css
4.6 kB URL cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (33771), with no line terminators
Hash 2ee7ea572ecfd8002dfe30c5a2052046
5c2e33a6a010db2bba237fe57eca8f949451a6eb
ace74639cb1b632546df84411a1417157b07ab2e2bf999da9c4c8cfac236cf44
GET /ajax/libs/plyr/3.7.2/plyr.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://strawberriesporail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: text/css; charset=utf-8
content-length: 4586
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942d7d-11ea"
last-modified: Thu, 22 Jun 2023 11:16:13 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2354764
expires: Mon, 16 Sep 2024 19:22:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ye9piN9%2BigHtlnDKfofJiDg2UjGQEjHC32Z6pf18lYslpLYCU050pIb46gtzRX3eH%2BycvnNqr0SUzJ039Cvb7ioEzqxw2T6azdqQMxAV173kHt48vgY3dJhsVfF6%2BsGrec5Pwvhq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61cfa5913b505-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.min.js
29 kB URL cdnjs.cloudflare.com/ajax/libs/plyr/3.7.2/plyr.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 25126b2c2f593f30f507bc4e9c2d233d
8298aa83d9b48f52954503e12fdc83ff8f92aa73
7c52a13dfc5530303daba3ec1cf306ebb96505e81fba44293f4d1632e32f0ec0
GET /ajax/libs/plyr/3.7.2/plyr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://strawberriesporail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 28745
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "62600438-7049"
last-modified: Wed, 20 Apr 2022 13:01:44 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1217547
expires: Mon, 16 Sep 2024 19:22:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ISN4z%2BMtGeoEGhBhS5C38r%2BvC%2FIUwm3E%2FoYbPVOobNrXnFia%2BUDKqLXrKFzU4ejBqEsjeQ%2F5BzD4i7q9EvQQBrLUl09rqMqdedFrD66w5epBboSFn%2Bb%2BCXoLMjKPKng27yryw1A2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61cfa5911b505-OSL
alt-svc: h3=":443"; ma=86400
strawberriesporail.com/s/css/site.min.css?fafb53e0462d00eec7ff40f80d0df8c5
36 kB URL strawberriesporail.com/s/css/site.min.css?fafb53e0462d00eec7ff40f80d0df8c5
IP
ASN #262254 DDOS-GUARD CORP.
File type Unicode text, UTF-8 (with BOM) text, with very long lines (65268)
Hash 6f13352bb7b91f7e573ac01911905ce3
1e82bb82120cf4b20010b47ac4488f363df2dcb8
8657d45a86fadbc46a66bac9764412cda645996ff534e2b3600ae64ed902b2c9
GET /s/css/site.min.css?fafb53e0462d00eec7ff40f80d0df8c5 HTTP/1.1
Host: strawberriesporail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://strawberriesporail.com/e/fd4k6uymp5o4
Cookie: XSRF-TOKEN=eyJpdiI6IjlFTXZ5dlNFRnQzeitYQlN3SzVlUEE9PSIsInZhbHVlIjoiVmlxb1VQbS84TkJFTGNoUlZjVWVkRHd6MXA4c1dFWURVQzFIUW9uTzZTbGRkS1VUQkZ2eEM4WXBTWmgrUHJtcTJrbWJJQjhuYmt5VWY5NWRHbTlPWFVCNEFxaUpxc1JuTHJzL0JyblBDSmgwRWVHcXZNYnplZ2R4alp2WVUwSFMiLCJtYWMiOiIyOTQ4NTQ0ZGZhYWEwODQxNWVmZGY5MjMwNzJjNTM3NGJhNjY0MjRhMWNjZTQ4MjAxMDk4ODk0OThjNTRkODVlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InM0bVdYNGRpNUVqekhlOTNIQ0FuVWc9PSIsInZhbHVlIjoiVmMzN0ZiNHVZUU4yd1pZMm93UkE4b1JKekRRNTBWZTRNQVFDYnczTHZvV1BIREJHVVg0S2hsUGhZQ3lNUkkrclBibFFGMVM0TWNvU2ZoaUovRmpvNnJ1M21CUXk4WTZ2aVp0QkhzTmpYZ2ZWdTZpNjJtbkp5NkcvOUV1MFFuaFYiLCJtYWMiOiIyNGVjOGY4ZWEyNTc2OGJjYzg2MmZjOTA1ZDZhYzhkMTFiODYxOWEzZWI5NjI3MzM5ZWE1M2FhZGMzNWNlZDg1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=2shj7dWSVIgTpDvLXLDe; Domain=.strawberriesporail.com; HttpOnly; Path=/; Expires=Thu, 26-Sep-2024 19:22:03 GMT
date: Tue, 26 Sep 2023 15:41:30 GMT
content-type: text/css
last-modified: Mon, 18 Sep 2023 23:23:21 GMT
vary: Accept-Encoding
etag: W/"6508dbe9-42b3d"
expires: Thu, 26 Oct 2023 15:41:30 GMT
cache-control: max-age=2592000
content-encoding: br
age: 99633
content-length: 36454
ddg-cache-status: HIT
X-Firefox-Spdy: h2
strawberriesporail.com/s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5
23 kB URL strawberriesporail.com/s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5
IP
ASN #262254 DDOS-GUARD CORP.
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 57d25796443dc28be0f5d51a63e1d343
14b4a02dd5094a0e4dc0c89b297a6cc2d78f60a9
abd04059670970a996fe18184e02712bd1120a66e1ae186ee4a330f677594855
GET /s/js/site.min.js?fafb53e0462d00eec7ff40f80d0df8c5 HTTP/1.1
Host: strawberriesporail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://strawberriesporail.com/e/fd4k6uymp5o4
Cookie: XSRF-TOKEN=eyJpdiI6IjlFTXZ5dlNFRnQzeitYQlN3SzVlUEE9PSIsInZhbHVlIjoiVmlxb1VQbS84TkJFTGNoUlZjVWVkRHd6MXA4c1dFWURVQzFIUW9uTzZTbGRkS1VUQkZ2eEM4WXBTWmgrUHJtcTJrbWJJQjhuYmt5VWY5NWRHbTlPWFVCNEFxaUpxc1JuTHJzL0JyblBDSmgwRWVHcXZNYnplZ2R4alp2WVUwSFMiLCJtYWMiOiIyOTQ4NTQ0ZGZhYWEwODQxNWVmZGY5MjMwNzJjNTM3NGJhNjY0MjRhMWNjZTQ4MjAxMDk4ODk0OThjNTRkODVlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6InM0bVdYNGRpNUVqekhlOTNIQ0FuVWc9PSIsInZhbHVlIjoiVmMzN0ZiNHVZUU4yd1pZMm93UkE4b1JKekRRNTBWZTRNQVFDYnczTHZvV1BIREJHVVg0S2hsUGhZQ3lNUkkrclBibFFGMVM0TWNvU2ZoaUovRmpvNnJ1M21CUXk4WTZ2aVp0QkhzTmpYZ2ZWdTZpNjJtbkp5NkcvOUV1MFFuaFYiLCJtYWMiOiIyNGVjOGY4ZWEyNTc2OGJjYzg2MmZjOTA1ZDZhYzhkMTFiODYxOWEzZWI5NjI3MzM5ZWE1M2FhZGMzNWNlZDg1IiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ddos-guard
strict-transport-security: max-age=2628000
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=DcKplOMlKZKh7bnAm69N; Domain=.strawberriesporail.com; HttpOnly; Path=/; Expires=Thu, 26-Sep-2024 19:22:03 GMT
date: Tue, 26 Sep 2023 15:41:30 GMT
content-type: application/javascript
last-modified: Mon, 18 Sep 2023 23:23:21 GMT
etag: W/"6508dbe9-181d2"
expires: Thu, 26 Oct 2023 15:41:30 GMT
cache-control: max-age=2592000
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
age: 99633
content-length: 22706
ddg-cache-status: HIT
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js
200 OK 21 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js
IP
Requested by https://strawberriesporail.com/e/fd4k6uymp5o4
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65299)
Hash 6baf57f25796c332144ed58a2a0cd9ee
f7fd0f3dc84b2cf93bf81e832505a673f354e0a3
82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd
GET /ajax/libs/bootstrap/5.3.2/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://strawberriesporail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 21203
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6503298b-52d3"
last-modified: Thu, 14 Sep 2023 15:40:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1125965
expires: Mon, 16 Sep 2024 19:22:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5C1WLhV20SDeuP9jyuzr7lnmL%2B1ee21pjwbpV7Fj28NHRgp86IqjRx3wAau5UL2WpE7424WfWAU4X1tjG7kNti2CKzNGq7kgatqBAbW0X12%2FGdm4afVC7IhJ9cmXdfJ2poR6hAHU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 80d61cfac9a7b505-OSL
alt-svc: h3=":443"; ma=86400
heremployeesihi.info/Q3FTdDUiEzAZCiJMMVJAMR1uUQcFVGEyUXEeOxleOhZmAwcgQGtaVi8eJhBTMR49ABstFCdRBwUkHg5kciQ/OmQUQCBEVwYVNyFiegAQE3QGEGE1YxsaCk1lFjwZEVwKHAojAAYzAUFfJ0EwDnsUMAAlZiRCFxNkFyE5PlEWBjtEey9ACzdyDUAGGHcbE2EXYxI0Bk16AkQRI08aQwUiBCE/KRdjEicBAmUvCRwscXdUYTJgKzQbMnIaFRE2dyQoKwB4ATYdRnQLKAItcg0XCyJGLTorLXIBIiMGdxQCFy5bGjA3HHckKGMydgY2Fid0JCAeEnIOEBYlGCcYHTJvGyk5RQcCKRo8bC44FzZ0ERgKHGwEMwclAxInFSBlEAIENlsNGwoTfCIzCyVYBxYGUl8wHj0ECAwBJiZvMiYeJHYxEDUn
1.2 kB URL heremployeesihi.info/Q3FTdDUiEzAZCiJMMVJAMR1uUQcFVGEyUXEeOxleOhZmAwcgQGtaVi8eJhBTMR49ABstFCdRBwUkHg5kciQ/OmQUQCBEVwYVNyFiegAQE3QGEGE1YxsaCk1lFjwZEVwKHAojAAYzAUFfJ0EwDnsUMAAlZiRCFxNkFyE5PlEWBjtEey9ACzdyDUAGGHcbE2EXYxI0Bk16AkQRI08aQwUiBCE/KRdjEicBAmUvCRwscXdUYTJgKzQbMnIaFRE2dyQoKwB4ATYdRnQLKAItcg0XCyJGLTorLXIBIiMGdxQCFy5bGjA3HHckKGMydgY2Fid0JCAeEnIOEBYlGCcYHTJvGyk5RQcCKRo8bC44FzZ0ERgKHGwEMwclAxInFSBlEAIENlsNGwoTfCIzCyVYBxYGUl8wHj0ECAwBJiZvMiYeJHYxEDUn
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3024), with no line terminators
Hash b3adfbe0f73f760d0e380c2a96437535
d7ffc112a746faa3c56b8460fb8c2aa7dd3f3fe1
85182de9abb7d5caf3117f12ddf333dc07e6f190308117b923bcb1c5da6af7ff
GET /Q3FTdDUiEzAZCiJMMVJAMR1uUQcFVGEyUXEeOxleOhZmAwcgQGtaVi8eJhBTMR49ABstFCdRBwUkHg5kciQ/OmQUQCBEVwYVNyFiegAQE3QGEGE1YxsaCk1lFjwZEVwKHAojAAYzAUFfJ0EwDnsUMAAlZiRCFxNkFyE5PlEWBjtEey9ACzdyDUAGGHcbE2EXYxI0Bk16AkQRI08aQwUiBCE/KRdjEicBAmUvCRwscXdUYTJgKzQbMnIaFRE2dyQoKwB4ATYdRnQLKAItcg0XCyJGLTorLXIBIiMGdxQCFy5bGjA3HHckKGMydgY2Fid0JCAeEnIOEBYlGCcYHTJvGyk5RQcCKRo8bC44FzZ0ERgKHGwEMwclAxInFSBlEAIENlsNGwoTfCIzCyVYBxYGUl8wHj0ECAwBJiZvMiYeJHYxEDUn HTTP/1.1
Host: heremployeesihi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1177
date: Wed, 27 Sep 2023 19:22:03 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60d22b5ab79521d827fcdd546c7710d4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: _MMl1hvYHoC3LY8zm0RFHIXss1SCxwrlgwPhqBwlIxnWDAyH4n_tpw==
X-Firefox-Spdy: h2
heremployeesihi.info/V1pNc0M2OC4efDZnL1U2JTZwVnERf381J2U1JR4oLj14BHE0a3VdIDs1OBclJTUjB205PzlWcRE7A0MgLxcmBxYcHHQmJxIXOCUSbiMJHRoVGH4YERsPBxcJAj57ISgkCBUxCToDBQsUDg8bOg8gKn41cmMrGiACGhwORhkdGzo3IQEDJyY0bn9/NQYDFA8rEBYRBzUrBRYbRzIFMQwYEjocCCZwDTsGNjc1EHwALhEbDD0COjEPNXA8Ei9DKBM/JTlzNCIpRgEuLhQrB2IKFBQOFBc6Sjs1PR9WcREfIyE5EWkmOw0CORUWCw1oDCI3Oxh/RxYWEjkiCjt3BykJFRB8FzQVbQ8dIBUbfgAEDj0AMA8BbnwlBQYxGUEKEz4FHAQzMnUwIQIQezICcTA+HC0nZzoKGTwPGiF0Ng
200 OK 1.2 kB URL GET HTTP/2 heremployeesihi.info/V1pNc0M2OC4efDZnL1U2JTZwVnERf381J2U1JR4oLj14BHE0a3VdIDs1OBclJTUjB205PzlWcRE7A0MgLxcmBxYcHHQmJxIXOCUSbiMJHRoVGH4YERsPBxcJAj57ISgkCBUxCToDBQsUDg8bOg8gKn41cmMrGiACGhwORhkdGzo3IQEDJyY0bn9/NQYDFA8rEBYRBzUrBRYbRzIFMQwYEjocCCZwDTsGNjc1EHwALhEbDD0COjEPNXA8Ei9DKBM/JTlzNCIpRgEuLhQrB2IKFBQOFBc6Sjs1PR9WcREfIyE5EWkmOw0CORUWCw1oDCI3Oxh/RxYWEjkiCjt3BykJFRB8FzQVbQ8dIBUbfgAEDj0AMA8BbnwlBQYxGUEKEz4FHAQzMnUwIQIQezICcTA+HC0nZzoKGTwPGiF0Ng
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerAmazon
Subjectheremployeesihi.info
FingerprintC0:D3:6E:22:D1:18:4F:19:D0:F2:B9:E5:F3:33:A5:24:B4:16:B1:14
ValidityThu, 21 Sep 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3014), with no line terminators
Hash af213b732452a6045d908be2ca6defe6
318f5feb34111a51c16ea82abd1a4b7a5ac63362
d079792cb2710e7d3970b2b947825a3a7dea058ff3c1b5c4f15d06a832a31e8e
GET /V1pNc0M2OC4efDZnL1U2JTZwVnERf381J2U1JR4oLj14BHE0a3VdIDs1OBclJTUjB205PzlWcRE7A0MgLxcmBxYcHHQmJxIXOCUSbiMJHRoVGH4YERsPBxcJAj57ISgkCBUxCToDBQsUDg8bOg8gKn41cmMrGiACGhwORhkdGzo3IQEDJyY0bn9/NQYDFA8rEBYRBzUrBRYbRzIFMQwYEjocCCZwDTsGNjc1EHwALhEbDD0COjEPNXA8Ei9DKBM/JTlzNCIpRgEuLhQrB2IKFBQOFBc6Sjs1PR9WcREfIyE5EWkmOw0CORUWCw1oDCI3Oxh/RxYWEjkiCjt3BykJFRB8FzQVbQ8dIBUbfgAEDj0AMA8BbnwlBQYxGUEKEz4FHAQzMnUwIQIQezICcTA+HC0nZzoKGTwPGiF0Ng HTTP/1.1
Host: heremployeesihi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1168
date: Wed, 27 Sep 2023 19:22:03 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60d22b5ab79521d827fcdd546c7710d4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: ZUw6rI5QpoQNNt6eyX3xHaceTy2L1lDFb9z__TwSnVM5t41LBklNmQ==
X-Firefox-Spdy: h2
streamtape.com/js/jquery.min.js
49 kB URL streamtape.com/js/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /js/jquery.min.js HTTP/1.1
Host: streamtape.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/e/8BMaxrqyOjiozBw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 13 Dec 2020 16:27:48 GMT
etag: W/"5fd64104-15851"
cache-control: max-age=345600
cf-cache-status: HIT
age: 6298
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8yy5eq9dmzl1MJSN5JZjEgemgllLYydZ%2Fc6xsAcFOzIwCDIT01uvI1XSkUv7ksjAEuetXGt%2FQLzkX36x0SAD6zONiRBtENi4k8WuS8EkwT3DfoU7Lk6tHW2SvLiikAYd4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61cf17e8ab4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
seewhatmyou.com/YUVObTFOei0eDAAdBChQNDUcPF8rJi1cRS0hf1QUUwcWOGsYEBYaFxUsKlAIWHF/VAJHNScJDFJ3aB5FADE7HgxTdX5aFwgrKAIMU2M4UAFPfGBfH1RjO1AARzE+DFZcdGgdRRUpc1wHWHB2WQNUd31cAVQ
204 No Content 0 B URL GET HTTP/2 seewhatmyou.com/YUVObTFOei0eDAAdBChQNDUcPF8rJi1cRS0hf1QUUwcWOGsYEBYaFxUsKlAIWHF/VAJHNScJDFJ3aB5FADE7HgxTdX5aFwgrKAIMU2M4UAFPfGBfH1RjO1AARzE+DFZcdGgdRRUpc1wHWHB2WQNUd31cAVQ
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerGoogle Trust Services LLC
Subjectseewhatmyou.com
Fingerprint7D:32:9A:F8:88:33:1D:A5:A6:D1:10:8A:DA:6E:6D:82:79:94:DC:57
ValidityWed, 13 Sep 2023 06:24:21 GMT - Tue, 12 Dec 2023 06:24:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /YUVObTFOei0eDAAdBChQNDUcPF8rJi1cRS0hf1QUUwcWOGsYEBYaFxUsKlAIWHF/VAJHNScJDFJ3aB5FADE7HgxTdX5aFwgrKAIMU2M4UAFPfGBfH1RjO1AARzE+DFZcdGgdRRUpc1wHWHB2WQNUd31cAVQ HTTP/1.1
Host: seewhatmyou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m4ZPR1zp9m%2B%2F16t8YtWWWZ5y9BCiiPtoejYF4Q%2B7t%2FiQCRuS0tScy%2B5yo1PyF8VYaD%2B806XtxiCUr0wQlO4m9%2F%2BGjep5KubXoYmv9Fen8pNS%2B0UFnbaVOnxdXKqF5x5Hal4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61cfb7f6556cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs
584 B URL www.google.com/recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash 00b510e7ef6a9abd7c1a29021916d47c
183c66b870051683c5857fc09e045efd3228ac7d
aa22cdf4ddd10df10c7b1a8d646e5d149a2eac56bb97584ca2ae92d4aa3d579a
GET /recaptcha/api.js?render=6LfDWNsUAAAAAGaxIiiQpfv-5_b8zWR4mgv7RKvs HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Wed, 27 Sep 2023 19:22:02 GMT
date: Wed, 27 Sep 2023 19:22:02 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
seewhatmyou.com/Y2hTZkVMVzAVeDpaPFUhCC4APiI5KTcgIQUqFjw/NS44JRENC3USLAdValB3U1FjQDUKDG5XYxAcMhIwEFViQCwNDjxbYxVVYkh2V0ZgUmtTTiZbdEUcIwciXll1FjEXBG5Xc1pda1J3VlpgV3dX
0 B URL seewhatmyou.com/Y2hTZkVMVzAVeDpaPFUhCC4APiI5KTcgIQUqFjw/NS44JRENC3USLAdValB3U1FjQDUKDG5XYxAcMhIwEFViQCwNDjxbYxVVYkh2V0ZgUmtTTiZbdEUcIwciXll1FjEXBG5Xc1pda1J3VlpgV3dX
IP
Certificate IssuerGoogle Trust Services LLC
Subjectseewhatmyou.com
Fingerprint7D:32:9A:F8:88:33:1D:A5:A6:D1:10:8A:DA:6E:6D:82:79:94:DC:57
ValidityWed, 13 Sep 2023 06:24:21 GMT - Tue, 12 Dec 2023 06:24:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Y2hTZkVMVzAVeDpaPFUhCC4APiI5KTcgIQUqFjw/NS44JRENC3USLAdValB3U1FjQDUKDG5XYxAcMhIwEFViQCwNDjxbYxVVYkh2V0ZgUmtTTiZbdEUcIwciXll1FjEXBG5Xc1pda1J3VlpgV3dX HTTP/1.1
Host: seewhatmyou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qESPu6C4%2B5biapxDFy7j0kP%2F0F2jZ7lReO0fPrwpKK%2F62D5TBqh6BEuGQrHUPOrGpO1TwQEVFyr4q3jPFyhfIcOI7t9v5qQTi4ahCWgOlWatBoF5ATuxjeSWqC8uTAx06%2F4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61cfb9f8e56cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
seewhatmyou.com/d0llRmpYdgY1VyMkCXY+IwtWEz8TfCYeWy0YPSEuEiUnAwwAKkMyAxN0XH9bR3xXYBoeLVh3TAQ9BDIfBHRUYAMZLwp7TAF0VGhZQ2dWckRHbxB7W1E9FScNSnhDNh4DJVh3XE58XXJYQntWd1xD
0 B URL seewhatmyou.com/d0llRmpYdgY1VyMkCXY+IwtWEz8TfCYeWy0YPSEuEiUnAwwAKkMyAxN0XH9bR3xXYBoeLVh3TAQ9BDIfBHRUYAMZLwp7TAF0VGhZQ2dWckRHbxB7W1E9FScNSnhDNh4DJVh3XE58XXJYQntWd1xD
IP
Certificate IssuerGoogle Trust Services LLC
Subjectseewhatmyou.com
Fingerprint7D:32:9A:F8:88:33:1D:A5:A6:D1:10:8A:DA:6E:6D:82:79:94:DC:57
ValidityWed, 13 Sep 2023 06:24:21 GMT - Tue, 12 Dec 2023 06:24:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d0llRmpYdgY1VyMkCXY+IwtWEz8TfCYeWy0YPSEuEiUnAwwAKkMyAxN0XH9bR3xXYBoeLVh3TAQ9BDIfBHRUYAMZLwp7TAF0VGhZQ2dWckRHbxB7W1E9FScNSnhDNh4DJVh3XE58XXJYQntWd1xD HTTP/1.1
Host: seewhatmyou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:03 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QnJ1E%2BRSqVt%2FuU2o8rGvMtJkDgYFzZDJqQpPyfLf%2FVvJP0NjKsB8U0dzAx9624vAnBDFK3Rja16aAcW7qH2hXWuTUbcJSXIIZFnr31sj%2BlcR%2FwvQTl11iy7uNnRz0iT2Xdo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61cfb9f9656cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
31 kB URL friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 2d0450888479d4ddda305bd96206b240
5b4595aab1cd3f854718e05db9be0c65a12ab2f6
44de073e74ff24c6b1c0fe1f3ac5b33d793560e85ef24fb6ce89e76c2cf90af6
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 52deb3054bf59411c8969e01e1280c73
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 27 Sep 2023 19:22:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sfXPrU16PR8RFw67iKMc0rejxOpjd6y1nQf5v3V6GYqAMCXjKGDIxVIke6FE9L6kvJtF2CraMwVrXS83UfWp1bdAXxAMpAO2rKlFXLRni0d%2F4yYvhxUU3ixAzZXNz2g%2BckSjgT8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61cf0f8417193-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
st.chatango.com/h5/gz/r0925230558/id.html
224 kB URL st.chatango.com/h5/gz/r0925230558/id.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (54430), with CRLF, LF line terminators
Size 224 kB (224195 bytes)
Hash 0a71e50fd4bb2c4b9bb43f2c0cc4645c
b24dcf8f8fa8a49c89332918024e36cbe23df6f9
06ffbd69d3f9f08dfb4040174e5addaa1a9c4b9a26ffd0e6308d763f7c14c0d6
GET /h5/gz/r0925230558/id.html HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Sep 2023 19:22:03 GMT
Content-Type: text/html
Content-Length: 224195
Last-Modified: Mon, 25 Sep 2023 13:02:22 GMT
Connection: keep-alive
Expires: Thu, 26 Sep 2024 19:22:03 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
P3P: CP="Chatango does not have a P3P policy. Please see our privacy policy: http://chatango.com/page?full_privacy"
Accept-Ranges: bytes
st.chatango.com/cfg/nc/r.json?8f31680020000184155816001
200 OK 20 B URL GET HTTP/1.1 st.chatango.com/cfg/nc/r.json?8f31680020000184155816001
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 779cc59be8faa109ef9886b2913cee3a
8f4eb98975d87b07ea199cd34f7519537d78dca3
4fb3560401e43be312d784a722dd988a0278cff49c8ae188965651efd5566a6b
GET /cfg/nc/r.json?8f31680020000184155816001 HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mavanimes.co
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Sep 2023 19:22:04 GMT
Content-Type: application/octet-stream
Content-Length: 20
Last-Modified: Mon, 25 Sep 2023 13:02:22 GMT
Connection: keep-alive
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
www.mavanimes.co/wp-content/plugins/wp-postratings/images/stars/rating_over.gif
523 B URL www.mavanimes.co/wp-content/plugins/wp-postratings/images/stars/rating_over.gif
IP
File type GIF image data, version 89a, 12 x 12\012- data
Hash 00988ec60c7a0ed0e036851c9ec00dd6
8ffff7b5e7a8fa4827cab5f846d71fa1f62ea65b
71348f4f38512af6e6ba8062fe5545a783f91d1a07bcb300c246f1bad9b0d4b6
GET /wp-content/plugins/wp-postratings/images/stars/rating_over.gif HTTP/1.1
Host: www.mavanimes.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ppu_main_bd33eec695a36a5eee547fef54685028=1; sb_main_86f32c7f018e7bea0d999d8785cfb4fa=1; sb_count_86f32c7f018e7bea0d999d8785cfb4fa=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=nullsglitter.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:04 GMT
content-type: image/gif
content-length: 523
last-modified: Mon, 01 Apr 2019 18:27:56 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 6363
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9LHsVIRCWKHSFNPTok3l5yQ82AXpJZoV%2FanHqImy5vs9Qw0HRDPglxxhqss6cFtLLrv4soVtksSEDh91craDHrp3975etnhPczV4LatEEE7K1mL2JUY6ir%2B5QhXhQAFHkS9a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61d00cbec56c6-OSL
alt-svc: h3=":443"; ma=86400
foldingclassified.com/0e/d5/91/0ed591400877d316744c6353cd338f08.js
11 kB URL foldingclassified.com/0e/d5/91/0ed591400877d316744c6353cd338f08.js
IP
File type ASCII text, with very long lines (32118), with no line terminators
Hash c42b69c05efc3278a42e7ffe69fbd02b
13428d0cce2202a00c92d6f0ac7a95753c0cfede
4c9e143818898a3815f24c8b7ef1b2ddad325d82a2408814089d24599aadf77e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /0e/d5/91/0ed591400877d316744c6353cd338f08.js HTTP/1.1
Host: foldingclassified.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://strawberriesporail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 27 Sep 2023 19:22:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 67c3d4b69d069f2de0fafb8f53c3af25
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL GET HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
Requested by https://strawberriesporail.com/e/fd4k6uymp5o4
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type ASCII text, with very long lines (2448)
Size 126 kB (125625 bytes)
Hash f624031ec844cba0fb5d4a6c16bd79c6
79eae66ad7aa1a2ba478394af9c4dff5550d61ae
b6e09c2e10f4bbf1d8b2b606c22d94ea98596109ac77261b7a45987197fb5318
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://strawberriesporail.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 125625
date: Wed, 27 Sep 2023 19:22:04 GMT
expires: Wed, 27 Sep 2023 19:22:04 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Inter:wght@400;500;700&display=swap
200 OK 660 B URL GET HTTP/3 fonts.googleapis.com/css2?family=Inter:wght@400;500;700&display=swap
IP
Requested by https://strawberriesporail.com/e/fd4k6uymp5o4
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
Hash 4220f52df6276e31499e09704bb71505
1eea18124584f90736b3bb4d777623fdd7515ee3
0bc1f159c17f08cb6b3c78049738a9617e0f1741f386ff85eb559741be7ad55d
GET /css2?family=Inter:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://strawberriesporail.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 27 Sep 2023 19:22:03 GMT
date: Wed, 27 Sep 2023 19:22:03 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nullsglitter.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSwWskRRTGq3dXEPfksigehAEvijLp7unJzLiH1XWNBONm3SgKHqS6qnpSprqqreqenuQUXJE9zv4HnW%2BSDbph0T9Akc7eAosZT2ExgiB4X9ibIDMJRh8073W9r%2BD3vVffbBXHxEdBjxY%2BMBtSKTrXbvqNVz8NgiuNJamLYWPYnf98PrrSsIM3A7%2FX9F9rvCfYmpkL%2FcD3Az9oLEgrEjOcC4Kg6UNme72g2fObUdgM2hGG9v%2F%2FrvDgqAc%2BOCaXIPnkub0HESSrodPvrwu3lpvsjXfTQtHcWAz47sd6TZtSIz0rE%2Bsh0bunahh3uPATjN6ZAcMM%2FhXGckK8P%2F9ArHdPKREPdk5AYwWhEfOLKAc1hKohaQ1mbkPyQwIwjhvL0Om9G8aWdP2kS6fdCbnw9AlkOSEXfrsMnT64puSwsWJUkUujHYZJBTmsIfs1smIf%2BcY5yHIfLP8Kkj8ic0%2BXoNPtZacMJK9m5qWsIZMaSoxAnYdi%2BkkPReKhyDyk%2FKjRYVG3y7ttTgVjYZwE3SRKoh5lfsL8Vi9EwaZ4I%2BTZCEyNwOwmMruJNXn3sH0JtvgZbrWC4x5cPiHeh5sY8AqlICgdQUkJSklQ5gTloNrhyoWuuseVK%2BLgNIenuVWNTd7fojsm7wtNtrJj8vxsNH%2B1XseaOGp055NWyDqJH3RFJxbU571ej3c73TZL4iihcLKCdOdmbjeme9p5EZmcEPL4PmK6D6f2weQLoMXLoOW4E%2Fqgq%2BOo62ND76V0QLVMhWsyA24qZPkF5OveljomL8043qqfhWAHV38hswCzFTJb4Qv5kKCv7oxvmZJs3zKlIz8sZ7lM5Qadrm8lp7k4%2F937Yr00li9ed6Nv32bTxrTc%2B0i4fIlqLnXfkfvXJOfCLhjLBPlx0X0i4puFW71WWF1kSzffWVhMMyuck0bXoFNr9ZdgckIu%2Fv1o9jRfsRrS1rBFhbQ4IKcBafbBsk247IzfGQKrzjRx5qEsqrEN47NDJSckfLICJQ6uPsy%2Fnv%2Fsmd9B4wpO%2FOfiWb3l7qBvPdD8NnRaYWArDFQFqkZwxflxntmDq7%2B2ZoFYeeNYWW87VlbdPRmwk0cN0RHzvV7kRx3u%2B3HEwzBoC0ZbEe3RMEw6yN1EXN58%2FA8AAAD%2F%2FwEAAP%2F%2FbSE7AGsEAAA%3D
7 B URL nullsglitter.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSwWskRRTGq3dXEPfksigehAEvijLp7unJzLiH1XWNBONm3SgKHqS6qnpSprqqreqenuQUXJE9zv4HnW%2BSDbph0T9Akc7eAosZT2ExgiB4X9ibIDMJRh8073W9r%2BD3vVffbBXHxEdBjxY%2BMBtSKTrXbvqNVz8NgiuNJamLYWPYnf98PrrSsIM3A7%2FX9F9rvCfYmpkL%2FcD3Az9oLEgrEjOcC4Kg6UNme72g2fObUdgM2hGG9v%2F%2FrvDgqAc%2BOCaXIPnkub0HESSrodPvrwu3lpvsjXfTQtHcWAz47sd6TZtSIz0rE%2Bsh0bunahh3uPATjN6ZAcMM%2FhXGckK8P%2F9ArHdPKREPdk5AYwWhEfOLKAc1hKohaQ1mbkPyQwIwjhvL0Om9G8aWdP2kS6fdCbnw9AlkOSEXfrsMnT64puSwsWJUkUujHYZJBTmsIfs1smIf%2BcY5yHIfLP8Kkj8ic0%2BXoNPtZacMJK9m5qWsIZMaSoxAnYdi%2BkkPReKhyDyk%2FKjRYVG3y7ttTgVjYZwE3SRKoh5lfsL8Vi9EwaZ4I%2BTZCEyNwOwmMruJNXn3sH0JtvgZbrWC4x5cPiHeh5sY8AqlICgdQUkJSklQ5gTloNrhyoWuuseVK%2BLgNIenuVWNTd7fojsm7wtNtrJj8vxsNH%2B1XseaOGp055NWyDqJH3RFJxbU571ej3c73TZL4iihcLKCdOdmbjeme9p5EZmcEPL4PmK6D6f2weQLoMXLoOW4E%2Fqgq%2BOo62ND76V0QLVMhWsyA24qZPkF5OveljomL8043qqfhWAHV38hswCzFTJb4Qv5kKCv7oxvmZJs3zKlIz8sZ7lM5Qadrm8lp7k4%2F937Yr00li9ed6Nv32bTxrTc%2B0i4fIlqLnXfkfvXJOfCLhjLBPlx0X0i4puFW71WWF1kSzffWVhMMyuck0bXoFNr9ZdgckIu%2Fv1o9jRfsRrS1rBFhbQ4IKcBafbBsk247IzfGQKrzjRx5qEsqrEN47NDJSckfLICJQ6uPsy%2Fnv%2Fsmd9B4wpO%2FOfiWb3l7qBvPdD8NnRaYWArDFQFqkZwxflxntmDq7%2B2ZoFYeeNYWW87VlbdPRmwk0cN0RHzvV7kRx3u%2B3HEwzBoC0ZbEe3RMEw6yN1EXN58%2FA8AAAD%2F%2FwEAAP%2F%2FbSE7AGsEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSwWskRRTGq3dXEPfksigehAEvijLp7unJzLiH1XWNBONm3SgKHqS6qnpSprqqreqenuQUXJE9zv4HnW%2BSDbph0T9Akc7eAosZT2ExgiB4X9ibIDMJRh8073W9r%2BD3vVffbBXHxEdBjxY%2BMBtSKTrXbvqNVz8NgiuNJamLYWPYnf98PrrSsIM3A7%2FX9F9rvCfYmpkL%2FcD3Az9oLEgrEjOcC4Kg6UNme72g2fObUdgM2hGG9v%2F%2FrvDgqAc%2BOCaXIPnkub0HESSrodPvrwu3lpvsjXfTQtHcWAz47sd6TZtSIz0rE%2Bsh0bunahh3uPATjN6ZAcMM%2FhXGckK8P%2F9ArHdPKREPdk5AYwWhEfOLKAc1hKohaQ1mbkPyQwIwjhvL0Om9G8aWdP2kS6fdCbnw9AlkOSEXfrsMnT64puSwsWJUkUujHYZJBTmsIfs1smIf%2BcY5yHIfLP8Kkj8ic0%2BXoNPtZacMJK9m5qWsIZMaSoxAnYdi%2BkkPReKhyDyk%2FKjRYVG3y7ttTgVjYZwE3SRKoh5lfsL8Vi9EwaZ4I%2BTZCEyNwOwmMruJNXn3sH0JtvgZbrWC4x5cPiHeh5sY8AqlICgdQUkJSklQ5gTloNrhyoWuuseVK%2BLgNIenuVWNTd7fojsm7wtNtrJj8vxsNH%2B1XseaOGp055NWyDqJH3RFJxbU571ej3c73TZL4iihcLKCdOdmbjeme9p5EZmcEPL4PmK6D6f2weQLoMXLoOW4E%2Fqgq%2BOo62ND76V0QLVMhWsyA24qZPkF5OveljomL8043qqfhWAHV38hswCzFTJb4Qv5kKCv7oxvmZJs3zKlIz8sZ7lM5Qadrm8lp7k4%2F937Yr00li9ed6Nv32bTxrTc%2B0i4fIlqLnXfkfvXJOfCLhjLBPlx0X0i4puFW71WWF1kSzffWVhMMyuck0bXoFNr9ZdgckIu%2Fv1o9jRfsRrS1rBFhbQ4IKcBafbBsk247IzfGQKrzjRx5qEsqrEN47NDJSckfLICJQ6uPsy%2Fnv%2Fsmd9B4wpO%2FOfiWb3l7qBvPdD8NnRaYWArDFQFqkZwxflxntmDq7%2B2ZoFYeeNYWW87VlbdPRmwk0cN0RHzvV7kRx3u%2B3HEwzBoC0ZbEe3RMEw6yN1EXN58%2FA8AAAD%2F%2FwEAAP%2F%2FbSE7AGsEAAA%3D HTTP/1.1
Host: nullsglitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: u_pl=15217451; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec86f32c7f018e7bea0d999d8785cfb4fa=[4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 27 Sep 2023 19:22:04 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 52388aff85b03da8d47a6cd0f89ca314
Strict-Transport-Security: max-age=0; includeSubdomains
www.dailymotion.com/player/metadata/video/x6my46z?embedder=https%3A%2F%2Fwww.mavanimes.co%2F&locale=en-US&dmV1st=DD5CB8C6C851359352CC5A56B66390AF&dmTs=428744&is_native_app=0
4.6 kB URL www.dailymotion.com/player/metadata/video/x6my46z?embedder=https%3A%2F%2Fwww.mavanimes.co%2F&locale=en-US&dmV1st=DD5CB8C6C851359352CC5A56B66390AF&dmTs=428744&is_native_app=0
IP
ASN #41690 Dailymotion S.A.
File type JSON data\012- , ASCII text, with very long lines (7623), with no line terminators
Hash e74f9d1e32077751979c2e0ba2fb6ed5
0720427c0144223ff58745195dbdc10ba9b05f8f
13e1f650e19a76cef82e20f654ae780fe06acc6549b1b447804a9d78f96d5904
GET /player/metadata/video/x6my46z?embedder=https%3A%2F%2Fwww.mavanimes.co%2F&locale=en-US&dmV1st=DD5CB8C6C851359352CC5A56B66390AF&dmTs=428744&is_native_app=0 HTTP/1.1
Host: www.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
DNT: 1
Connection: keep-alive
Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; dmvk=651480db194da; ts=428744
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Security-Policy-Report-Only: default-src https: blob: wss: data: android-webview-video-poster: android-webview: chrome-extension: safari-extension: 'unsafe-eval' 'unsafe-inline'; report-uri https://www.dailymotion.com/content_security_policy_report_uri
Server: DMS/1.0.42
Vary: X-DM-SSL,Accept-Encoding
Cache-Control: no-cache
Content-Type: application/json; charset=utf-8
Content-Encoding: gzip
Content-Security-Policy: upgrade-insecure-requests
Strict-Transport-Security: max-age=31708800; includeSubDomains; preload
Date: Wed, 27 Sep 2023 19:22:04 GMT
Server-Timing: total;dur=99, dc;desc="dc3"
Keep-Alive: timeout=60, max=4997
Timing-Allow-Origin: *
Connection: Keep-Alive
Expect-Ct: max-age=0, report-uri="https://www.dailymotion.com/content_security_policy_report_uri"
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 4606
static1.dmcdn.net/playerv5/dmp.infopack.77a905c1538c3d13529b.js
14 kB URL static1.dmcdn.net/playerv5/dmp.infopack.77a905c1538c3d13529b.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (55990), with no line terminators
Hash 1e5e8a0a9650d1c17f89a3bb0be8c439
52ded80575ab09b280cc774dd66fda83877d7161
83b3a212bf8edcdbe4d55b58b7a49cfb0e8f3b483af4695d4e858b52ea8431ed
GET /playerv5/dmp.infopack.77a905c1538c3d13529b.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="ix7"
timing-allow-origin: *
accept-ranges: bytes
etag: "64fb1bd8-dab6"
last-modified: Fri, 08 Sep 2023 13:04:24 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Tue, 10 Oct 2023 18:55:49 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
content-length: 14333
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.advertising.8359e18e6deb53746ee7.js
3.3 kB URL static1.dmcdn.net/playerv5/dmp.advertising.8359e18e6deb53746ee7.js
IP
ASN #20940 Akamai International B.V.
File type C source, ASCII text, with very long lines (7758), with no line terminators
Hash 08ddf7770e7f6d61948693d7509d63cd
46d15d956501a5874c21975971c9b07d3f2804d3
89a061a23ef01c5c9050035722015462cd3dbc0b6273290f92f8267eb94aab5f
GET /playerv5/dmp.advertising.8359e18e6deb53746ee7.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "6509909e-1e4e"
last-modified: Tue, 19 Sep 2023 12:14:22 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Thu, 19 Oct 2023 12:16:09 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
content-length: 3347
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.photon_player.3c51bf1877d167503827.js
21 kB URL static1.dmcdn.net/playerv5/dmp.photon_player.3c51bf1877d167503827.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 21c318d44b852a7f557ab45e5f9242a0
b8291eb7d17061dad43cfb934fbf99f88e60a082
a60f10f9b79a1083695ea5e7530a6d5c4f69c92305b2f013b92bd9d02fb8a10c
GET /playerv5/dmp.photon_player.3c51bf1877d167503827.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=0, dc;desc="ix7"
timing-allow-origin: *
accept-ranges: bytes
etag: "650d4b3d-1137e"
last-modified: Fri, 22 Sep 2023 08:07:25 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Sun, 22 Oct 2023 08:09:43 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
content-length: 20636
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.jq_flight.1d9782312a093aadb89f.js
15 kB URL static1.dmcdn.net/playerv5/dmp.jq_flight.1d9782312a093aadb89f.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (42466), with no line terminators
Hash 914cc654d308db80e21b999548547adf
b0f0a6fa59afab44d3b7b82aea692ee6f59e01fb
5e24b61f7ae7a4e552208ab7eb54601da5fd5af5a24a5cf542839398a33a9630
GET /playerv5/dmp.jq_flight.1d9782312a093aadb89f.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=2, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "64d5f4bb-a5e2"
last-modified: Fri, 11 Aug 2023 08:43:39 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Fri, 06 Oct 2023 17:44:53 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
content-length: 14936
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.locale-en-US.392361d874e0355190a5.json
618 B URL static1.dmcdn.net/playerv5/dmp.locale-en-US.392361d874e0355190a5.json
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text
Hash 9b96a86740ed5f210900db74aff0404e
33692464934d38cc1abf3a2d1ee799a0a36818c9
c8d7ace64894d227e9a65ae13f7fffa8feac2de602f7271e2b6b5c0c0f1e4823
GET /playerv5/dmp.locale-en-US.392361d874e0355190a5.json HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/json
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "650321ce-822"
last-modified: Thu, 14 Sep 2023 15:07:58 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Sun, 15 Oct 2023 05:05:07 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
content-length: 618
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.photon_manifest.251ab511451e7cd91d1f.js
2.5 kB URL static1.dmcdn.net/playerv5/dmp.photon_manifest.251ab511451e7cd91d1f.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (4604), with no line terminators
Hash 2c9d1d0e3763773df4ee36c9502a57e7
95905b048af1796d8f27f38c459a6479d2d29508
8cadc51242c4597e45322af22ac015e1ce07803ca56a125b6e7a698de79df00a
GET /playerv5/dmp.photon_manifest.251ab511451e7cd91d1f.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=2, dc;desc="ix7"
timing-allow-origin: *
accept-ranges: bytes
etag: "65142409-11fc"
last-modified: Wed, 27 Sep 2023 12:46:01 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Fri, 27 Oct 2023 12:48:46 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
content-length: 2467
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.photon_boot.c671ccea80960ae5fd7e.js
35 kB URL static1.dmcdn.net/playerv5/dmp.photon_boot.c671ccea80960ae5fd7e.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 20ed95248b755fbfb7838b6fd2b54776
d1b48402b52d346a274939ce43ec772206615f94
76a94a00f0f36779f2ba0b9c2105410e010da03ae478e0291d9140c6ca69708d
GET /playerv5/dmp.photon_boot.c671ccea80960ae5fd7e.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "65127f96-1ba31"
last-modified: Tue, 26 Sep 2023 06:52:06 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Thu, 26 Oct 2023 06:54:01 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
content-length: 35099
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
zimpolo.com/sub/fJKjbg7Qps
878 B URL zimpolo.com/sub/fJKjbg7Qps
IP
File type HTML document, ASCII text
Hash 9cbda1d9c45f849b2e330cde5ff3edbf
db68f0afdd1feb90819fb25f55f55dca7571bc1f
82d7820d757464633f0cfef9e92bf9bafd9eedd4197fe0d2070c752fc8436be5
GET /sub/fJKjbg7Qps HTTP/1.1
Host: zimpolo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:03 GMT
content-type: text/html; charset=utf-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WNLr46I7PheNkOdZsLJAUQmaH8JNCnktPh3J%2Bpcer%2BuHrVVvkezm3aEPQhIVJrwHZopQxwBN12g2Ap%2BlFzcvxWLNW138J3BbCtE00yE76C5umUaLknU6yL%2BYYCSblA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61cfb7bf2b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
727 B URL zerossl.ocsp.sectigo.com/
IP
Hash 01f0a8593fc7b0ea0fd9a594d99fe101
6e23a909acdef29596a1429d2148ee412b4a95aa
d4f156aa3e34c6277c072dcb2759199f2e36360ec4178c66e63d4d6f53e651f8
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 15:11:08 GMT
Expires: Tue, 03 Oct 2023 15:11:07 GMT
Etag: "6e23a909acdef29596a1429d2148ee412b4a95aa"
Cache-Control: max-age=503429,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61d051cd056a5-OSL
zerossl.ocsp.sectigo.com/
727 B URL zerossl.ocsp.sectigo.com/
IP
Hash 01f0a8593fc7b0ea0fd9a594d99fe101
6e23a909acdef29596a1429d2148ee412b4a95aa
d4f156aa3e34c6277c072dcb2759199f2e36360ec4178c66e63d4d6f53e651f8
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 15:11:08 GMT
Expires: Tue, 03 Oct 2023 15:11:07 GMT
Etag: "6e23a909acdef29596a1429d2148ee412b4a95aa"
Cache-Control: max-age=503248,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61d0518fd56a2-OSL
pebed.dm-event.net/
200 OK 15 B IP
ASN #41690 Dailymotion S.A.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerZeroSSL
Subject*.dm-event.net
Fingerprint62:94:09:AB:C7:F7:23:EF:5E:8A:C8:DB:5B:C3:56:06:6A:6D:44:19
ValidityThu, 17 Aug 2023 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: pebed.dm-event.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
content-type: text/plain; charset=UTF-8
Content-Length: 991
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Encoding, X-Dm-EventBus-Compression-Duration, X-Dm-EventBus-Worker-Duration
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 604800
Content-Type: application/json
Server: edward-ed/2.2.2
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Length: 15
pebed.dm-event.net/
200 OK 15 B IP
ASN #41690 Dailymotion S.A.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerZeroSSL
Subject*.dm-event.net
Fingerprint62:94:09:AB:C7:F7:23:EF:5E:8A:C8:DB:5B:C3:56:06:6A:6D:44:19
ValidityThu, 17 Aug 2023 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: pebed.dm-event.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
Content-Type: text/plain; charset=UTF-8
Content-Length: 1268
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Encoding, X-Dm-EventBus-Compression-Duration, X-Dm-EventBus-Worker-Duration
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 604800
Content-Type: application/json
Server: edward-ed/2.2.1
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Length: 15
pebed.dm-event.net/
200 OK 15 B IP
ASN #41690 Dailymotion S.A.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerZeroSSL
Subject*.dm-event.net
Fingerprint62:94:09:AB:C7:F7:23:EF:5E:8A:C8:DB:5B:C3:56:06:6A:6D:44:19
ValidityThu, 17 Aug 2023 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: pebed.dm-event.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
content-type: text/plain; charset=UTF-8
Content-Length: 1022
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Encoding, X-Dm-EventBus-Compression-Duration, X-Dm-EventBus-Worker-Duration
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 604800
Content-Type: application/json
Server: edward-ed/2.2.1
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Length: 15
static1.dmcdn.net/playerv5/dmp.photon_app.c4aece00f70aac1efde7.js
120 kB URL static1.dmcdn.net/playerv5/dmp.photon_app.c4aece00f70aac1efde7.js
IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Size 120 kB (119757 bytes)
Hash d63d8554e5492e2a401f36bff77caa42
967983b82e80cb3ec693f9bae1fc32ae11214329
d5c3c5d89749f66e37841f0da637383b49f0bbee3626f7d41c58a6e00f6708df
GET /playerv5/dmp.photon_app.c4aece00f70aac1efde7.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "65142409-5adfd"
last-modified: Wed, 27 Sep 2023 12:46:01 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Fri, 27 Oct 2023 12:48:26 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
zimpolo.com/load
1.3 kB IP
Hash 9fad5590825582950506dee70f7f66ee
97e699c5d3cc1a2b0d4cc24df0739d2705605605
2dd14788c335bbbd4202233f509cd867c8026229a9e8bc0318ec17b9f8c2a817
POST /load HTTP/1.1
Host: zimpolo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 98
Origin: https://zimpolo.com
DNT: 1
Connection: keep-alive
Referer: https://zimpolo.com/sub/fJKjbg7Qps
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: text/html; charset=utf-8
location: https://xml.popmonetizer.net/redirect?feed=493479&auth=ZR4GkP&pubid=155183
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jqQSxBkRdMM%2F%2BGb1noKGfVi4kGu0yowjImlTiojXroQV1XGAbCW3YidqMGPuFqlIfn2h0mS1nHroKwVZLpn%2B2UTMxILHcioxCkEXDCDJMkvjfNM0Rha%2B8j7uy3ZrNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d058d7db521-OSL
alt-svc: h3=":443"; ma=86400
pebed.dm-event.net/
200 OK 15 B IP
ASN #41690 Dailymotion S.A.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerZeroSSL
Subject*.dm-event.net
Fingerprint62:94:09:AB:C7:F7:23:EF:5E:8A:C8:DB:5B:C3:56:06:6A:6D:44:19
ValidityThu, 17 Aug 2023 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: pebed.dm-event.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
content-type: text/plain; charset=UTF-8
Content-Length: 1295
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Encoding, X-Dm-EventBus-Compression-Duration, X-Dm-EventBus-Worker-Duration
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 604800
Content-Type: application/json
Server: edward-ed/2.2.2
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Length: 15
imasdk.googleapis.com/js/sdkloader/ima3.js
200 OK 126 kB URL GET HTTP/2 imasdk.googleapis.com/js/sdkloader/ima3.js
IP
Requested by https://strawberriesporail.com/e/fd4k6uymp5o4
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type ASCII text, with very long lines (2448)
Size 126 kB (125625 bytes)
Hash f624031ec844cba0fb5d4a6c16bd79c6
79eae66ad7aa1a2ba478394af9c4dff5550d61ae
b6e09c2e10f4bbf1d8b2b606c22d94ea98596109ac77261b7a45987197fb5318
GET /js/sdkloader/ima3.js HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 125625
date: Wed, 27 Sep 2023 19:22:05 GMT
expires: Wed, 27 Sep 2023 19:22:05 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
d2ohmkyg5w2c18.cloudfront.net/UMzQ1UlNQW1s0bEddUW9qCgAEa2AVXkY9PUMJeiImYW5EBR5jd0czNWASQSg3DgQTPjJdUwh0Nl1XCGN1UlBXb2cVQEU9OA5BWzY2VV1bNzcVQVRvPlxOXD4/UhEHFGYdBBBgYxtMBGN2AHYQYGNfXVsnKxYGBSprBWsDZnYAdhBgY0FCEGESAgQMfGMaEQ-diNFZXXj12AXIHYmIDBARiYhYGBTQ6QVFTPSsWBnNjYgIaBXQmDgU
348 B URL d2ohmkyg5w2c18.cloudfront.net/UMzQ1UlNQW1s0bEddUW9qCgAEa2AVXkY9PUMJeiImYW5EBR5jd0czNWASQSg3DgQTPjJdUwh0Nl1XCGN1UlBXb2cVQEU9OA5BWzY2VV1bNzcVQVRvPlxOXD4/UhEHFGYdBBBgYxtMBGN2AHYQYGNfXVsnKxYGBSprBWsDZnYAdhBgY0FCEGESAgQMfGMaEQ-diNFZXXj12AXIHYmIDBARiYhYGBTQ6QVFTPSsWBnNjYgIaBXQmDgU
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (438), with no line terminators
Hash f843ba849c849bc02578f4c17ed90deb
9c1839492e5b7f17d7555ae85bdde778282f6221
40a5fdf13817116c66df96dcb44675d7d02412dfd3c49d855a1687355e755fcf
GET /UMzQ1UlNQW1s0bEddUW9qCgAEa2AVXkY9PUMJeiImYW5EBR5jd0czNWASQSg3DgQTPjJdUwh0Nl1XCGN1UlBXb2cVQEU9OA5BWzY2VV1bNzcVQVRvPlxOXD4/UhEHFGYdBBBgYxtMBGN2AHYQYGNfXVsnKxYGBSprBWsDZnYAdhBgY0FCEGESAgQMfGMaEQ-diNFZXXj12AXIHYmIDBARiYhYGBTQ6QVFTPSsWBnNjYgIaBXQmDgU HTTP/1.1
Host: d2ohmkyg5w2c18.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heremployeesihi.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 348
date: Wed, 27 Sep 2023 19:22:05 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -VGA7QudxNKRWeu3guT7d5HO-vXEBWGE8GEwj2R7DVxEcM3BY-7ymg==
X-Firefox-Spdy: h2
d2ohmkyg5w2c18.cloudfront.net/aN0cxMktUKF9UdEMuVQ9yDnYBB3kRLUJdJUd6RksRXBJmYHxWYUVILwp3F14qWSAMFC5ZJAwDbVYjUw9/ETNBXSAKJFhRLV4qRkAkQmFEU3ZaKEtbJ1smFAANAmkBF3kHb0kDehJ0cxd5BytYXD5PYgMCMw9xbgR/EnRzF3kHNUcXeHZ2AQtlB24UAHtQIl-JZJBJ1dwB7BncBA3sGYgMCLV41VFQkT2IDdHoGdh8CbUJ6AA
532 B URL d2ohmkyg5w2c18.cloudfront.net/aN0cxMktUKF9UdEMuVQ9yDnYBB3kRLUJdJUd6RksRXBJmYHxWYUVILwp3F14qWSAMFC5ZJAwDbVYjUw9/ETNBXSAKJFhRLV4qRkAkQmFEU3ZaKEtbJ1smFAANAmkBF3kHb0kDehJ0cxd5BytYXD5PYgMCMw9xbgR/EnRzF3kHNUcXeHZ2AQtlB24UAHtQIl-JZJBJ1dwB7BncBA3sGYgMCLV41VFQkT2IDdHoGdh8CbUJ6AA
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (729), with no line terminators
Hash 48c5780f36a28b488b74471fe5f097ce
070b89f4dc82ecd80f0e0547db49d597e2c20562
6210c32c5929702454530c8019eacad1429eae086ce330b69f952ad986e301ff
GET /aN0cxMktUKF9UdEMuVQ9yDnYBB3kRLUJdJUd6RksRXBJmYHxWYUVILwp3F14qWSAMFC5ZJAwDbVYjUw9/ETNBXSAKJFhRLV4qRkAkQmFEU3ZaKEtbJ1smFAANAmkBF3kHb0kDehJ0cxd5BytYXD5PYgMCMw9xbgR/EnRzF3kHNUcXeHZ2AQtlB24UAHtQIl-JZJBJ1dwB7BncBA3sGYgMCLV41VFQkT2IDdHoGdh8CbUJ6AA HTTP/1.1
Host: d2ohmkyg5w2c18.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heremployeesihi.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 532
date: Wed, 27 Sep 2023 19:22:05 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: XTHu1iU2oHzHjwZrBFC9XN-aFeOsLxdadIJMqIkdOEP_zU2mLSCYMQ==
X-Firefox-Spdy: h2
d2ohmkyg5w2c18.cloudfront.net/bNHBveHVXHwEeSkAZC0VMAkJfQUUSGhwXG0RNFRtFWD4nLi1XPww6NAQyJV4BThRSSFNYEQEfSBIVARtIBVYOHBcJREkMBVsbUhscVxYGFQJGHxpeAFVNAhcPXRwDGVAGNlpWRRFCX1ANBUFKSzcRQl8UHFoFF11HBAhXTioCREpLNxFCXwoDEUMuSUUNXl-9RUAZACB0WXx9KSjMGQF5IRQVAXl1HBBYGChBSHxddR3JBXklbBFYaRUQ
499 B URL d2ohmkyg5w2c18.cloudfront.net/bNHBveHVXHwEeSkAZC0VMAkJfQUUSGhwXG0RNFRtFWD4nLi1XPww6NAQyJV4BThRSSFNYEQEfSBIVARtIBVYOHBcJREkMBVsbUhscVxYGFQJGHxpeAFVNAhcPXRwDGVAGNlpWRRFCX1ANBUFKSzcRQl8UHFoFF11HBAhXTioCREpLNxFCXwoDEUMuSUUNXl-9RUAZACB0WXx9KSjMGQF5IRQVAXl1HBBYGChBSHxddR3JBXklbBFYaRUQ
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (680), with no line terminators
Hash 8faee93239c5c388816eb78b5d7b46c8
103145b415ca299ae123d3d4a1c1ebc38e9d1be5
46df63124ef996771a3860094b74491b273c9de7d7f4d78ae962d22d04edb955
GET /bNHBveHVXHwEeSkAZC0VMAkJfQUUSGhwXG0RNFRtFWD4nLi1XPww6NAQyJV4BThRSSFNYEQEfSBIVARtIBVYOHBcJREkMBVsbUhscVxYGFQJGHxpeAFVNAhcPXRwDGVAGNlpWRRFCX1ANBUFKSzcRQl8UHFoFF11HBAhXTioCREpLNxFCXwoDEUMuSUUNXl-9RUAZACB0WXx9KSjMGQF5IRQVAXl1HBBYGChBSHxddR3JBXklbBFYaRUQ HTTP/1.1
Host: d2ohmkyg5w2c18.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://heremployeesihi.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 499
date: Wed, 27 Sep 2023 19:22:05 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2JNgtcPVzl8YgrlVA2MqIaBYP_PejJAJWlCLEC3oDG11pfgym6mjtQ==
X-Firefox-Spdy: h2
vendorlist.dmcdn.net/v2/archives/vendor-list-v204.json
56 kB URL vendorlist.dmcdn.net/v2/archives/vendor-list-v204.json
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 037d31538a79f2570ba74318ce6479f9
c84cba47b44f8e3fb186a7a744a101730168a168
b0978fb0412437ad74f3482f09b3c0084254e06ca8a3956467c7a388746ab840
GET /v2/archives/vendor-list-v204.json HTTP/1.1
Host: vendorlist.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-amz-server-side-encryption: AES256
x-amz-version-id: GSRcJmcaUJWitICBWr9S2xwSG6ODE9pk
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 f2d6260772a832e76c8c1c6e49903138.cloudfront.net (CloudFront)
x-amz-cf-pop: CDG52-P1
x-amz-cf-id: -sTaUZc4yVFny9VFDUhCKnTu_VnSp101B9282IYKhTUNBPpuJh9K0Q==
x-llid: 1a774f5e4e2ac47cdf9bcbfc0d02d524
age: 369449
date: Wed, 27 Sep 2023 19:22:05 GMT
last-modified: Thu, 29 Jun 2023 16:05:24 GMT
expires: Sat, 30 Sep 2023 12:44:36 GMT
content-length: 56027
x-ip-address: 178.79.213.114
cache-control: max-age=604800
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
200 OK 186 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 186 kB (185934 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamtape.com
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 27 Sep 2023 17:09:12 GMT
expires: Thu, 26 Sep 2024 17:09:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 7973
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash d2e9bda1c2fae24304bc95d126028720
427e4f1a0da1a0bcfea7bdefb883f53cdcbbf24c
dd601dec71bc3d96036d2b9d415e78638ff37af5d7664f45b31575cc477e1818
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
st.chatango.com/js/gz/r0925230558/CollapsedViewModule.js
3.5 kB URL st.chatango.com/js/gz/r0925230558/CollapsedViewModule.js
IP
File type ASCII text, with very long lines (800)
Hash 9e425175d5432db9dfa7fc9199d8ef90
10401aee54ac954f4f2444f9b3e2aa0f50570ad4
8282aa064878fe6e7cae98d3b44680b9eacfc223dd9be8f028113ce162564d6b
GET /js/gz/r0925230558/CollapsedViewModule.js HTTP/1.1
Host: st.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/h5/gz/r0925230558/id.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Type: application/x-javascript
Content-Length: 3507
Last-Modified: Mon, 25 Sep 2023 13:02:22 GMT
Connection: keep-alive
Expires: Thu, 26 Sep 2024 19:22:05 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
471 B IP
Hash d2e9bda1c2fae24304bc95d126028720
427e4f1a0da1a0bcfea7bdefb883f53cdcbbf24c
dd601dec71bc3d96036d2b9d415e78638ff37af5d7664f45b31575cc477e1818
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
heremployeesihi.info/utx?cb=poAIicD6QS7k&top=streamtape.com&tid=994193
0 B URL heremployeesihi.info/utx?cb=poAIicD6QS7k&top=streamtape.com&tid=994193
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=poAIicD6QS7k&top=streamtape.com&tid=994193 HTTP/1.1
Host: heremployeesihi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamtape.com
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:05 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://streamtape.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 27 Sep 2023 19:23:05 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60d22b5ab79521d827fcdd546c7710d4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: RDTTMdJTJhYkAwWeW8Ey3y6TJUKdypwZ-lY0TJv1JoQkj4l_tsUh3Q==
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash a3614093cd4f9af51ce12c12fa08fa63
d7d4acc46aa50feec4085775154d3fa6cf81a50e
e9227f5424bff94106a4ec3cc905497ebdf207b8dacf1ff6f366f819212af660
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 27 Sep 2023 02:53:01 GMT
Expires: Wed, 04 Oct 2023 02:53:00 GMT
Etag: "d7d4acc46aa50feec4085775154d3fa6cf81a50e"
Cache-Control: max-age=545372,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61d083e2056c4-OSL
heremployeesihi.info/utx?cb=PSSPPd5mKOz7&top=streamtape.com&tid=962090
0 B URL heremployeesihi.info/utx?cb=PSSPPd5mKOz7&top=streamtape.com&tid=962090
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=PSSPPd5mKOz7&top=streamtape.com&tid=962090 HTTP/1.1
Host: heremployeesihi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamtape.com
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:05 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://streamtape.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 27 Sep 2023 19:23:05 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60d22b5ab79521d827fcdd546c7710d4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: VBZbVVk0-iH_Ka1YRvvT-ZIMc1Ujr37Ntzk-pe1DQODeqAPJLSMztw==
X-Firefox-Spdy: h2
heremployeesihi.info/utx?cb=ThgpufxJYZVW&top=streamtape.com&tid=991052
0 B URL heremployeesihi.info/utx?cb=ThgpufxJYZVW&top=streamtape.com&tid=991052
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=ThgpufxJYZVW&top=streamtape.com&tid=991052 HTTP/1.1
Host: heremployeesihi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://streamtape.com
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:05 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://streamtape.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 27 Sep 2023 19:23:05 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60d22b5ab79521d827fcdd546c7710d4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: T4uV7SU28o1DwYGhlxlXYRt2Y-3QVNnTGf3d9rryI0_NF-Mtcl-snw==
X-Firefox-Spdy: h2
vendorlist.dmcdn.net/v3/archives/vendor-list-v7.json
38 kB URL vendorlist.dmcdn.net/v3/archives/vendor-list-v7.json
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e84e102d28d3c8007d1cb0b666c07d3e
43da460814868d1492a8e83de216079a4c2717db
1925bd4ecd39314b244cb752044bd5808b2e6ffa12d5d93bbd9dece0c96f44e7
GET /v3/archives/vendor-list-v7.json HTTP/1.1
Host: vendorlist.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=utf-8
x-amz-server-side-encryption: AES256
x-amz-version-id: rwQg2h8cpFQjCI3_GbzoSA5.ksNgtKb1
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 5c0d26cafc949da4f2fa947ea21b4f74.cloudfront.net (CloudFront)
x-amz-cf-pop: CDG52-P1
x-amz-cf-id: kGRrAOZJWEnWhnB26QUiOGH8GbTE2XIMnHdBEETm97UXIryYc9RDKw==
x-llid: 30043f8e2c40ec886e45f8fa4432577f
age: 450080
date: Wed, 27 Sep 2023 19:22:05 GMT
last-modified: Thu, 29 Jun 2023 16:07:27 GMT
expires: Fri, 29 Sep 2023 14:20:45 GMT
content-length: 37847
x-ip-address: 178.79.213.114
cache-control: max-age=604800
access-control-allow-origin: *
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
0 B URL accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:d3quK6PKMA-g1f_UqM89PzPt3H7RMw:uhi8TDhHlCtk2v8y; Expires=Fri, 26-Sep-2025 19:22:05 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 19:22:05 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdD6e-4Dy6uhHEsHwRR1b2vOqWFoZ0mXHbtQh_1Sv1gs6OntwDD_GeEFX1FbPJ8f5L234l-XA
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-JTxjibiOvWFaqfmUGHdv9Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
0 B URL accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:rc3qgfby8xEt6kaL7OPfSmNWC0oGEg:G3CYWpkKLMP0Aeo5; Expires=Fri, 26-Sep-2025 19:22:05 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 19:22:05 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhfHXR5F-JaMSfbRTZ-zW_jLpvwol_J12es9nOwBHfGjKINod96QN3d2t7H1Md7h1WOma1eA2A
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-IQL3Mb2I-55XPlrNWqnBUg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=1157
200 OK 0 B URL GET HTTP/1.1 nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=1157
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectnullsglitter.com
FingerprintD0:9E:53:33:23:F8:3F:A4:F3:66:68:50:0A:38:5A:12:9A:1D:DB:77
ValidityMon, 25 Sep 2023 09:03:18 GMT - Sun, 24 Dec 2023 09:03:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2F24%2F54%2F4e%2F24544ed07f7394384bbb75023b9b0b3a%2F1591713925.html&l=1274&fd=1157 HTTP/1.1
Host: nullsglitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: u_pl=15217451; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec86f32c7f018e7bea0d999d8785cfb4fa=[4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
xml.popmonetizer.net/redirect?feed=493479&auth=ZR4GkP&pubid=155183
0 B URL GET xml.popmonetizer.net/redirect?feed=493479&auth=ZR4GkP&pubid=155183
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=493479&auth=ZR4GkP&pubid=155183 HTTP/1.1
Host: xml.popmonetizer.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zimpolo.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 27 Sep 2023 19:22:05 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://www.toromclick.com/feed/click/?t1=128&tid=768&uid=90&subid=563046&id=6177beb3c4a563ca0f287f54f9586bf3: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
Pragma: no-cache
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
4.0 kB URL cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/img/close.png
IP
File type PNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced\012- data
Hash 23e9690b0e7ac26868363a6248f44467
d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f
f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395
GET /sb/notifications/dating/default/us/desk-all/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: image/png
content-length: 4022
last-modified: Tue, 14 Apr 2020 14:09:22 GMT
etag: "5e95c412-fb6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 25624773
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1P8ObErVT5vF6qmssJU6jWduIt2Y8qy6lJz56Ex%2F96fuU7taN%2FC5warwOrnfosOQ6%2FtdQzuTEWTcXpW9p7yDUMHioCmnhub1gCWquPchVGO7IYo%2BJjQh%2FA7XIYsKkLEREDIt9NyIys06"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61d0b1e5c24ea-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
1.2 kB URL fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
File type gzip compressed data, max compression\012- data
Hash 2c0e38792cfa074a07cd4e48101c72a6
184bf0145c671c46044f05d6e5091fc6dbc2c7af
e349f01ea379ff6953025c1489efe2e244a9377242d85e234cf113a145438f6d
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 27 Sep 2023 19:22:05 GMT
date: Wed, 27 Sep 2023 19:22:05 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
200 OK 5.3 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/css/animate.css
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint48:B7:50:3B:95:5B:52:CB:74:D5:D6:39:E2:DD:12:9D:05:51:D6:87
ValidityWed, 23 Aug 2023 16:10:20 GMT - Tue, 21 Nov 2023 16:10:19 GMT
Hash 80047eaa13ebd50c50e8a9753621e430
9c503e07d130572a0eaf51f7c02cbd4cf6213fe3
3f831a59615f8d5d40b4340b2836f91438c876f8dbce75f78e38360d6fe0f429
GET /sb/notifications/dating/default/us/desk-all/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mavanimes.co
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: text/css
last-modified: Tue, 14 Apr 2020 14:09:21 GMT
etag: W/"5e95c411-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 30624
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FyRCvCwYgfqNhzF9uEXEOD40wz2CbNZpc0MP%2BTl2k9hpm7vqiCaDA3IHrmcj44zF1rD5O8AkPbqM6S1Xqg8nmGsKSCriVNTAEaE4TmE0Ah%2B%2BUa20%2BRE6MO9yasbkQsMDNoO%2BEHQiSXVs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61d09ad777735-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
152 kB IP
Size 152 kB (152352 bytes)
Hash 1ed419144e793d23114ade46de245a70
f112886d6160b57e19a83f7be4edd056f3e17dec
4d8122631fcd057180249e0e52f9ff44a6bf6eaa5c599f1c3f423c0feffe08a0
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamtape.com/
Origin: https://streamtape.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://streamtape.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 777
last-modified: Wed, 27 Sep 2023 19:09:08 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0qzudHeB3EMEUfGRf07SAnX64IwEFPa%2BD5zPl1VR%2Bv3%2FXtV1MjzCO%2F0Oxkj0AeCD4NqvIGxhasZfEMR3tfgkA6oOkNGxW%2B3PMY4lmEw6ydeRlWhrNZn7QvsSkPzO2%2BSJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61d091c458867-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.omweb.482b0d3c4a252a265442.js
14 kB URL static1.dmcdn.net/playerv5/dmp.omweb.482b0d3c4a252a265442.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (41196), with no line terminators
Hash 3873b4cd6483294098462afacb0e36a7
a93217a10f7e99a18b46a6f5bcf2fee540ee3142
f61f00323bf51f559e473999cd21dd87aaa46f1d8774b9e86720f3675db3faef
GET /playerv5/dmp.omweb.482b0d3c4a252a265442.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "64ef4149-a0ec"
last-modified: Wed, 30 Aug 2023 13:16:57 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Tue, 03 Oct 2023 12:07:39 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
content-length: 13759
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.omid_session_client.a520cc69722b65ee2f6d.js
13 kB URL static1.dmcdn.net/playerv5/dmp.omid_session_client.a520cc69722b65ee2f6d.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6b1c024fba6bcbda3609f36b69af8650
e803ffbbd1f9de211d474a4c0f64befcd330f49a
0dd4a741cf498d43051577fe9de0460caa07c18c42b7ced849830883cff22da0
GET /playerv5/dmp.omid_session_client.a520cc69722b65ee2f6d.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=3, dc;desc="ix7"
timing-allow-origin: *
accept-ranges: bytes
etag: "64d5f4b1-10757"
last-modified: Fri, 11 Aug 2023 08:43:29 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Sun, 08 Oct 2023 23:55:58 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
content-length: 13138
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
pogothere.xyz/
3.4 kB IP
File type ASCII text, with no line terminators
Hash 6695f056d11361d0663e485320ba9d41
2579c6e9de192331bb06f10d59e345be5c21d7c0
f7c399bb6291cf5969c095ea228fb66df43c402bd07e2ca77664fb55fabca36a
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamtape.com/
Origin: https://streamtape.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: text/plain
set-cookie: csu=1061363771651928@1@1695842525; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://streamtape.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8ii8w1Gqqc5%2B%2BaSKRI%2BjlJCnPdoqgdQuFiPZCeCAx3JiLrku1gWV0ccpzL7zyA3w%2FdLm7sS1aGmEyZyP178s7eoIPn4sActuhYpIylj7DJWI9K7qchEneTq83AoK2PK2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d093cb78867-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.photon_player.3c51bf1877d167503827.js
21 kB URL static1.dmcdn.net/playerv5/dmp.photon_player.3c51bf1877d167503827.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash 21c318d44b852a7f557ab45e5f9242a0
b8291eb7d17061dad43cfb934fbf99f88e60a082
a60f10f9b79a1083695ea5e7530a6d5c4f69c92305b2f013b92bd9d02fb8a10c
GET /playerv5/dmp.photon_player.3c51bf1877d167503827.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=0, dc;desc="ix7"
timing-allow-origin: *
accept-ranges: bytes
etag: "650d4b3d-1137e"
last-modified: Fri, 22 Sep 2023 08:07:25 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Sun, 22 Oct 2023 08:09:43 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
content-length: 20636
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
pebed.dm-event.net/
200 OK 15 B IP
ASN #41690 Dailymotion S.A.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerZeroSSL
Subject*.dm-event.net
Fingerprint62:94:09:AB:C7:F7:23:EF:5E:8A:C8:DB:5B:C3:56:06:6A:6D:44:19
ValidityThu, 17 Aug 2023 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: pebed.dm-event.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
Content-Type: text/plain; charset=UTF-8
Content-Length: 3251
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Encoding, X-Dm-EventBus-Compression-Duration, X-Dm-EventBus-Worker-Duration
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 604800
Content-Type: application/json
Server: edward-ed/2.2.1
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Length: 15
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdD6e-4Dy6uhHEsHwRR1b2vOqWFoZ0mXHbtQh_1Sv1gs6OntwDD_GeEFX1FbPJ8f5L234l-XA
402 B URL accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdD6e-4Dy6uhHEsHwRR1b2vOqWFoZ0mXHbtQh_1Sv1gs6OntwDD_GeEFX1FbPJ8f5L234l-XA
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (394)
Hash d68d339f0f26497185e0d7fbca4cd7aa
d6523eb66fba9e49b992891c330ccea23c98c0a9
28042b1e204d1a91ca3f0d7d5200197a02b7f2598d5388009208bae0517e5aeb
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdD6e-4Dy6uhHEsHwRR1b2vOqWFoZ0mXHbtQh_1Sv1gs6OntwDD_GeEFX1FbPJ8f5L234l-XA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamtape.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:JRRZcvIBX25av8t88yyYx35M3XaYyg:N0YPrHawxQHdHFop;Path=/;Expires=Fri, 26-Sep-2025 19:22:06 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcTTqXPcj5Guf8DMYKs6OHD4z225G8HfLYU9MjEeO4Y12eqMBKfEgw5Eo_v9a5g7Ym5dqAK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1945393804%3A1695842526195785&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-pDRpLRxR7gn2qHhOMjwdsw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 402
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
200 OK 39 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint62:DE:BA:BA:30:E9:EE:15:E9:24:B9:C5:BF:E1:7E:39:8B:20:E5:42
ValiditySun, 24 Sep 2023 23:04:02 GMT - Sat, 23 Dec 2023 23:04:01 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 6451b63b68b5068db02571051f6f6a30
32badef5d69090b4d2ea7b300bb5264938e198ef
b1b0a314a2d4924b2849fec48b7863ccc68413e58330d99f6ad901bfa6282819
GET /si/05/c8/20/05c820d9ce67af6dea2e5441dbe3e8f9/1683231080.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:06 GMT
content-type: image/png
content-length: 39220
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:11:29 GMT
etag: "64541171-9934"
expires: Fri, 29 Sep 2023 19:22:06 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
65 kB URL cdn.cloudimagesb.com/si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint62:DE:BA:BA:30:E9:EE:15:E9:24:B9:C5:BF:E1:7E:39:8B:20:E5:42
ValiditySun, 24 Sep 2023 23:04:02 GMT - Sat, 23 Dec 2023 23:04:01 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 887812a53b8ea2dbad33f6ae105b8c2d
f83d97ef46827200fa62093ed09b4b6fa25b26d8
9443edf293511b0732211234002c799508a2bfc63a3e28a57d7b12ee30f277e9
GET /si/b3/dd/fd/b3ddfd7cf6f212b3bce3129fb7a007fc/1683231156.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:06 GMT
content-type: image/png
content-length: 64601
server: nginx/1.21.6
last-modified: Thu, 04 May 2023 20:12:45 GMT
etag: "645411bd-fc59"
expires: Fri, 29 Sep 2023 19:22:06 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhfHXR5F-JaMSfbRTZ-zW_jLpvwol_J12es9nOwBHfGjKINod96QN3d2t7H1Md7h1WOma1eA2A
405 B URL accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhfHXR5F-JaMSfbRTZ-zW_jLpvwol_J12es9nOwBHfGjKINod96QN3d2t7H1Md7h1WOma1eA2A
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (398)
Hash 7ac00110a57c73502cbc5b08e5530b26
429f0364ab4c8540bb3e2b466025ce69c7dfe366
5b16f36516d83bd6f645af1b94a5d4d9f482afd2880f656d43efe3e2abbed572
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhfHXR5F-JaMSfbRTZ-zW_jLpvwol_J12es9nOwBHfGjKINod96QN3d2t7H1Md7h1WOma1eA2A HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamtape.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:avF1SSlhxoL-uu_msWwwEXo_jqeIqw:7nQ0IKehCFZJhuu-;Path=/;Expires=Fri, 26-Sep-2025 19:22:06 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhfWlehlBxLfEQ3uhABoRuC0Y5Bku0wzl7qEon2LnCrhZ2VEPYuzD_cbio2vD16kAyBSdExF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1727045289%3A1695842526222832&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-wg8qXhkLYfYMou-W3c9hZw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=269
0 B URL nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=269
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fjs%2Fscript.js&l=386&fd=269 HTTP/1.1
Host: nullsglitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: u_pl=15217451; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec86f32c7f018e7bea0d999d8785cfb4fa=[4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
s64.chatango.com:8081/
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: s64.chatango.com:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://st.chatango.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: En4m6xRBLhVB1qLLq+qCuQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: qSoiqH6HfQPUmmCV2cKxtoC2fgs=
nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5788&fd=361
0 B URL nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5788&fd=361
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fstyle.css&l=5788&fd=361 HTTP/1.1
Host: nullsglitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: u_pl=15217451; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec86f32c7f018e7bea0d999d8785cfb4fa=[4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ust.chatango.com/groupinfo/m/a/mavanimesco/gprofile.xml
200 OK 200 B URL GET HTTP/1.1 ust.chatango.com/groupinfo/m/a/mavanimesco/gprofile.xml
IP
Requested by https://st.chatango.com/h5/gz/r0925230558/id.html
Certificate IssuerSectigo Limited
Subject*.chatango.com
Fingerprint51:E2:E1:03:43:73:D8:C8:D4:4D:E0:E4:4A:BF:4F:DB:B5:CB:6E:A0
ValiditySat, 03 Jun 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type XML 1.0 document text\012- XML document text\012- HTML document, ASCII text, with no line terminators
Hash b0c70768986acf8d4737939e37c5fc15
e684447fb1c0c3f12c2c2f2903973f287f5b198f
72e12c963a19a9d5dfa226291f1d0dd40a66041933d14d2a69d90f65f8fa56c4
GET /groupinfo/m/a/mavanimesco/gprofile.xml HTTP/1.1
Host: ust.chatango.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://st.chatango.com
DNT: 1
Connection: keep-alive
Referer: https://st.chatango.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Type: text/xml
Content-Length: 200
Last-Modified: Mon, 06 May 2019 19:20:32 GMT
Connection: keep-alive
Expires: Wed, 27 Sep 2023 19:22:06 GMT
Cache-Control: max-age=0
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=79245&fd=348
200 OK 0 B URL GET HTTP/1.1 nullsglitter.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=79245&fd=348
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectnullsglitter.com
FingerprintD0:9E:53:33:23:F8:3F:A4:F3:66:68:50:0A:38:5A:12:9A:1D:DB:77
ValidityMon, 25 Sep 2023 09:03:18 GMT - Sun, 24 Dec 2023 09:03:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fdating%2Fdefault%2Fus%2Fdesk-all%2Fcss%2Fanimate.css&l=79245&fd=348 HTTP/1.1
Host: nullsglitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: u_pl=15217451; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec86f32c7f018e7bea0d999d8785cfb4fa=[4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
xml.acertb.com/redirect?feed=571726&auth=zXdo8a&pubid=158935
0 B URL xml.acertb.com/redirect?feed=571726&auth=zXdo8a&pubid=158935
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=571726&auth=zXdo8a&pubid=158935 HTTP/1.1
Host: xml.acertb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.adforcast.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://track.trackingtraffo.com/pop/imp?auth=mz3u78&c=ey8EcMJc0wRDSKvrlXi11v78aQ80xZujyd5U5RLwNXlixlgDPigeORrloevq7lgkEaur2QRFu6qQ0Dy9vl0wI39UOIoj8fqmSE9fYyl8rP-J2KFhmXtWm21eVt9J6gNs44rAZ-RCHriaKHe2TnUF-DSDw02O8qlp0soofqo_29Pf0A1vM9ET8zQXxnzMW8HgWMj6NLokY7PR_L0P24zDpKCc0MXyXfjyMLhsJa-xZJr4qDX-jSs5-yXayVHVyid_mVundkQH9CBT_wGPZlKzvkHptLSTVGD5Y06RtK3EejR2KT2IYF1y8pLIPPIPUcVELIJXJRrp3dJIy_wNDgHa7pe-vi-WII2ZHjm74EvW-cdns74GPcQIRbW3vEHZEJf30_2H9945NAhacbcT-yk2Kt00gpNSkj0pr0Be38Ijcg7Ura1CU9_Rhs8aZ0bSYk_TCsXbtDUfw6oMTXGsG66q_H0Q8U8gZPWprLvI1HLwEr-yuUiT_sWc2rmtLu4oelMkOBvPALt-eY7BIBsI04BurCdIDm8JeKF6VfuxFVA616FfjSCZw5h5m6C59Pp5h6HG9FRiGqdRDdTrS5qR6E-lSPnPr3C-u34WLqSVgd6C-EGfFImmvoCpdByKBlL_xCALKfCKktexP_vv_wt4tH2x51sX7Vsug7lB-GjEuQ1eSCk2lWb_fC8JUu8UP4g
Pragma: no-cache
zerossl.ocsp.sectigo.com/
315 B URL zerossl.ocsp.sectigo.com/
IP
Hash 5d0758fc193db59007bbab0c31badf90
31604aaaeb8f973c91b0f59884518fe8e3bdcb75
b3539e753986ff6215bc142bebfb65ec8d034988a05664a4d51f187b6effd16f
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Mon, 25 Sep 2023 16:46:39 GMT
Expires: Mon, 02 Oct 2023 16:46:38 GMT
Etag: "31604aaaeb8f973c91b0f59884518fe8e3bdcb75"
Cache-Control: max-age=423334,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61d1028b11c0e-OSL
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mavanimes.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:05:24 GMT
expires: Sat, 21 Sep 2024 10:05:24 GMT
cache-control: public, max-age=31536000
age: 465402
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mavanimes.co
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:50:55 GMT
expires: Fri, 20 Sep 2024 04:50:55 GMT
cache-control: public, max-age=31536000
age: 570671
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
speedtest.dailymotion.com/latencies.js
200 OK 2.0 kB URL GET HTTP/1.1 speedtest.dailymotion.com/latencies.js
IP
ASN #41690 Dailymotion S.A.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerZeroSSL
Subjectspeedtest.dailymotion.com
Fingerprint26:A6:B5:18:7E:2C:83:8A:4B:A9:C7:51:BE:5D:9D:74:57:1D:FC:7B
ValiditySat, 12 Aug 2023 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (608)
Hash 98b984f234d1b6319baf2bd907994d81
ba955a60fb26a59c82be10617e08f6312bbb0175
72b2181e58d5c45800d66d36702794ca5ae5bf1fbc20f106442b7eac3191a623
GET /latencies.js HTTP/1.1
Host: speedtest.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; dmvk=651480db194da; ts=428744; usprivacy=1---
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=21600, public
Content-Encoding: gzip
Content-Length: 2041
Content-Type: application/javascript
Expires: Thu, 28 Sep 2023 01:22:06 GMT
Last-Modified: Thu, 17 Sep 2020 07:44:45 GMT
Date: Wed, 27 Sep 2023 19:22:06 GMT
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcTTqXPcj5Guf8DMYKs6OHD4z225G8HfLYU9MjEeO4Y12eqMBKfEgw5Eo_v9a5g7Ym5dqAK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1945393804%3A1695842526195785&theme=glif
403 Forbidden 127 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcTTqXPcj5Guf8DMYKs6OHD4z225G8HfLYU9MjEeO4Y12eqMBKfEgw5Eo_v9a5g7Ym5dqAK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1945393804%3A1695842526195785&theme=glif
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (3338)
Size 127 kB (127235 bytes)
Hash 403fd0cdd5d479e8c6e9dc499c724eb9
d02b21b397eca04ba3f72a79a8c54926bd3682a6
0425511cc18e5ba4917eb4efad52951f8bf05f5a9a0061f015bc9684cdddbacc
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcTTqXPcj5Guf8DMYKs6OHD4z225G8HfLYU9MjEeO4Y12eqMBKfEgw5Eo_v9a5g7Ym5dqAK&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1945393804%3A1695842526195785&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamtape.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-5vjICifDa619PoD4rOL7_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nullsglitter.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq3dXEPfksigehAEvijLpnp897iEa10gwbtaNouBBqquqJ2Wqq9qq7ulJTsEV2ePsf9D5TrJBNyz6ByjS2VtgMeMpLEYQBO8LexNkJsHog%2Ba9rvct%2BHzfq2%2B28xPiI6fHix%2BYTakUnWvX%2FdqrnwbBtdqy1PmwNgw7n3da12p28Gbg9%2Br%2Ba7X3BFs3cw0%2F8P3AD2qL0orYDOeCIKj7kOl%2BL6j3%2FHqrUQ%2FaLQzt%2F%2F9d7sFRD3xwQq5A8slz%2Bw9akKyCTr6%2FLtx6ZtI33k1yRTNjMeB7H%2Bt1bQqN5LyMrYdY752pYdzR4k8wencGDDP4VxjJCfH%2B%2FAOR3jujRDTYPQWNFIRGxC%2BjGFQQqoKkFZi5DcmPCMA4bqxAJ%2FduGFvQjdMunXYn5NLTJ5DFhFz67Sp08mBByWFt1ag8k0Y7DOMSclhB9iuk%2BQGyzQuQxQFY9hUkf0Tmni5DJzsrThlIXs7MS1lBxhWUGIE6D%2Fn0kx7y2EOeekj4ca3LWmHIwzangrFGFAdh3IpbPcr8mPnNXgM5m%2BKNkKUjMDUCs1tI7RbW5d2j9hXY%2FGe4tRKOe3DZhHgfbmHASxSCoHAEBSUoJEGRERSDcpcr13DlPa5cHgVnuXGWm%2BXYZP1tumuyvtBkOz0hz89G81fzdayL41rYiZsN1o39IBTdSFCf93o9HnbDNoujVkzhZAnpLszcbk73tPsiUjkh5PF9RPQATh2AyRdA85dBi3G34YOujVuhj029n9AB1TIRrs4MuCmRZpeQbXjb6oS8NON4q3oWgh3O%2F0JmAWZLpLbEF%2FIhQV%2FdGd8yBdm5ZQpHflhJM5nITTpd32pGM3Hxu%2FfFRmEsX7ruRt%2B%2BzaaNabn%2FkXDZMtVc6r4j9xck58IuGssE%2BXHJfSKim7lbW8itztPlm%2B8sLiWpFc5JoyvQqbXqSzA5IZf%2FfjR7mq9YDWkr2LxEkh%2BSs4A0B2DpFlx6zu8MgVXnmij1UOTl2Dai80MlJ6TxZBVKHM4%2FzL7ufPbM76BRCSf%2Bc%2FG83nZ30LceaHYbOikxsCUGqgRVI7j84jhL7eH8r81ZIFLeOFLW24mUVXdPB%2BzkcY0xX9Ag6gZCcNFuMtbqsDDqxM1WV4Rt3kbmJuLq1uN%2FAAAA%2F%2F8BAAD%2F%2F5IGkxBrBAAA
200 OK 7 B URL GET HTTP/1.1 nullsglitter.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq3dXEPfksigehAEvijLpnp897iEa10gwbtaNouBBqquqJ2Wqq9qq7ulJTsEV2ePsf9D5TrJBNyz6ByjS2VtgMeMpLEYQBO8LexNkJsHog%2Ba9rvct%2BHzfq2%2B28xPiI6fHix%2BYTakUnWvX%2FdqrnwbBtdqy1PmwNgw7n3da12p28Gbg9%2Br%2Ba7X3BFs3cw0%2F8P3AD2qL0orYDOeCIKj7kOl%2BL6j3%2FHqrUQ%2FaLQzt%2F%2F9d7sFRD3xwQq5A8slz%2Bw9akKyCTr6%2FLtx6ZtI33k1yRTNjMeB7H%2Bt1bQqN5LyMrYdY752pYdzR4k8wencGDDP4VxjJCfH%2B%2FAOR3jujRDTYPQWNFIRGxC%2BjGFQQqoKkFZi5DcmPCMA4bqxAJ%2FduGFvQjdMunXYn5NLTJ5DFhFz67Sp08mBByWFt1ag8k0Y7DOMSclhB9iuk%2BQGyzQuQxQFY9hUkf0Tmni5DJzsrThlIXs7MS1lBxhWUGIE6D%2Fn0kx7y2EOeekj4ca3LWmHIwzangrFGFAdh3IpbPcr8mPnNXgM5m%2BKNkKUjMDUCs1tI7RbW5d2j9hXY%2FGe4tRKOe3DZhHgfbmHASxSCoHAEBSUoJEGRERSDcpcr13DlPa5cHgVnuXGWm%2BXYZP1tumuyvtBkOz0hz89G81fzdayL41rYiZsN1o39IBTdSFCf93o9HnbDNoujVkzhZAnpLszcbk73tPsiUjkh5PF9RPQATh2AyRdA85dBi3G34YOujVuhj029n9AB1TIRrs4MuCmRZpeQbXjb6oS8NON4q3oWgh3O%2F0JmAWZLpLbEF%2FIhQV%2FdGd8yBdm5ZQpHflhJM5nITTpd32pGM3Hxu%2FfFRmEsX7ruRt%2B%2BzaaNabn%2FkXDZMtVc6r4j9xck58IuGssE%2BXHJfSKim7lbW8itztPlm%2B8sLiWpFc5JoyvQqbXqSzA5IZf%2FfjR7mq9YDWkr2LxEkh%2BSs4A0B2DpFlx6zu8MgVXnmij1UOTl2Dai80MlJ6TxZBVKHM4%2FzL7ufPbM76BRCSf%2Bc%2FG83nZ30LceaHYbOikxsCUGqgRVI7j84jhL7eH8r81ZIFLeOFLW24mUVXdPB%2BzkcY0xX9Ag6gZCcNFuMtbqsDDqxM1WV4Rt3kbmJuLq1uN%2FAAAA%2F%2F8BAAD%2F%2F5IGkxBrBAAA
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectnullsglitter.com
FingerprintD0:9E:53:33:23:F8:3F:A4:F3:66:68:50:0A:38:5A:12:9A:1D:DB:77
ValidityMon, 25 Sep 2023 09:03:18 GMT - Sun, 24 Dec 2023 09:03:17 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSz2skRRTHq3dXEPfksigehAEvijLpnp897iEa10gwbtaNouBBqquqJ2Wqq9qq7ulJTsEV2ePsf9D5TrJBNyz6ByjS2VtgMeMpLEYQBO8LexNkJsHog%2Ba9rvct%2BHzfq2%2B28xPiI6fHix%2BYTakUnWvX%2FdqrnwbBtdqy1PmwNgw7n3da12p28Gbg9%2Br%2Ba7X3BFs3cw0%2F8P3AD2qL0orYDOeCIKj7kOl%2BL6j3%2FHqrUQ%2FaLQzt%2F%2F9d7sFRD3xwQq5A8slz%2Bw9akKyCTr6%2FLtx6ZtI33k1yRTNjMeB7H%2Bt1bQqN5LyMrYdY752pYdzR4k8wencGDDP4VxjJCfH%2B%2FAOR3jujRDTYPQWNFIRGxC%2BjGFQQqoKkFZi5DcmPCMA4bqxAJ%2FduGFvQjdMunXYn5NLTJ5DFhFz67Sp08mBByWFt1ag8k0Y7DOMSclhB9iuk%2BQGyzQuQxQFY9hUkf0Tmni5DJzsrThlIXs7MS1lBxhWUGIE6D%2Fn0kx7y2EOeekj4ca3LWmHIwzangrFGFAdh3IpbPcr8mPnNXgM5m%2BKNkKUjMDUCs1tI7RbW5d2j9hXY%2FGe4tRKOe3DZhHgfbmHASxSCoHAEBSUoJEGRERSDcpcr13DlPa5cHgVnuXGWm%2BXYZP1tumuyvtBkOz0hz89G81fzdayL41rYiZsN1o39IBTdSFCf93o9HnbDNoujVkzhZAnpLszcbk73tPsiUjkh5PF9RPQATh2AyRdA85dBi3G34YOujVuhj029n9AB1TIRrs4MuCmRZpeQbXjb6oS8NON4q3oWgh3O%2F0JmAWZLpLbEF%2FIhQV%2FdGd8yBdm5ZQpHflhJM5nITTpd32pGM3Hxu%2FfFRmEsX7ruRt%2B%2BzaaNabn%2FkXDZMtVc6r4j9xck58IuGssE%2BXHJfSKim7lbW8itztPlm%2B8sLiWpFc5JoyvQqbXqSzA5IZf%2FfjR7mq9YDWkr2LxEkh%2BSs4A0B2DpFlx6zu8MgVXnmij1UOTl2Dai80MlJ6TxZBVKHM4%2FzL7ufPbM76BRCSf%2Bc%2FG83nZ30LceaHYbOikxsCUGqgRVI7j84jhL7eH8r81ZIFLeOFLW24mUVXdPB%2BzkcY0xX9Ag6gZCcNFuMtbqsDDqxM1WV4Rt3kbmJuLq1uN%2FAAAA%2F%2F8BAAD%2F%2F5IGkxBrBAAA HTTP/1.1
Host: nullsglitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: u_pl=15217451; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec86f32c7f018e7bea0d999d8785cfb4fa=[4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 43d3ef1c9016472dee08779895278f40
Strict-Transport-Security: max-age=0; includeSubdomains
nullsglitter.com/pixel/sbs?c=1
0 B URL nullsglitter.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: nullsglitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: u_pl=15217451; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec86f32c7f018e7bea0d999d8785cfb4fa=[4243976]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 27 Sep 2023 19:22:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
seewhatmyou.com/T3FRUUVgTjIieBoaAzARCgUjNwIjRTI8A38TYj1xFR9gICMhBnclLCtMaGh0f0RjdzUmFWxgYzwFMCUwPExiYXV+Vzg/IyBMYWF1flcnbHRhQmV/dntfYXcwckBhZ3R8R2Jmcn5HZGB8fUl3JTUuFmxgYz8FJT14fkdoZH17Q2Rjcn5DZA
0 B URL seewhatmyou.com/T3FRUUVgTjIieBoaAzARCgUjNwIjRTI8A38TYj1xFR9gICMhBnclLCtMaGh0f0RjdzUmFWxgYzwFMCUwPExiYXV+Vzg/IyBMYWF1flcnbHRhQmV/dntfYXcwckBhZ3R8R2Jmcn5HZGB8fUl3JTUuFmxgYz8FJT14fkdoZH17Q2Rjcn5DZA
IP
Certificate IssuerGoogle Trust Services LLC
Subjectseewhatmyou.com
Fingerprint7D:32:9A:F8:88:33:1D:A5:A6:D1:10:8A:DA:6E:6D:82:79:94:DC:57
ValidityWed, 13 Sep 2023 06:24:21 GMT - Tue, 12 Dec 2023 06:24:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /T3FRUUVgTjIieBoaAzARCgUjNwIjRTI8A38TYj1xFR9gICMhBnclLCtMaGh0f0RjdzUmFWxgYzwFMCUwPExiYXV+Vzg/IyBMYWF1flcnbHRhQmV/dntfYXcwckBhZ3R8R2Jmcn5HZGB8fUl3JTUuFmxgYz8FJT14fkdoZH17Q2Rjcn5DZA HTTP/1.1
Host: seewhatmyou.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Wed, 27 Sep 2023 19:22:06 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2BNK2YI29EqGNXZBwIulFg0VofRF3Bc7vR76wkqtK%2F8TGz7kdxB4BoAw0RSsJKWBGF4BbJuKrxip7otbHHI0vLYUor3WS4%2Bkig0B2EkGGPjanIt8FASZNOhiAcrm8qcp4qg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d10c95ab4f9-OSL
alt-svc: h3=":443"; ma=86400
thumb.tapecontent.net/thumb/8BMaxrqyOjiozBw/1x4OrBwQVkHeKAX.jpg
78 kB URL thumb.tapecontent.net/thumb/8BMaxrqyOjiozBw/1x4OrBwQVkHeKAX.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1280x720, components 3\012- data
Hash 262ec90da2c235000cbaab7cb4700915
af88829826043145d86285959140d802caf9bfc8
0673b1c1a31f771bd5230942ea54583df7592e9c203d780c328ce5f5ba57b4c5
GET /thumb/8BMaxrqyOjiozBw/1x4OrBwQVkHeKAX.jpg HTTP/1.1
Host: thumb.tapecontent.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:06 GMT
content-type: image/jpeg
content-length: 78234
last-modified: Sat, 03 Jun 2023 19:43:49 GMT
etag: e2e0b2e77706
access-control-allow-origin: *
allow: OPTIONS, GET, HEAD, POST
access-control-allow-headers: Upgrade-Insecure-Requests,Range,Content-Type,If-Modified-Since
access-control-expose-headers: ETag,Expires,Location,Content-Length,Accept-Ranges,Content-Encoding,Content-Range
content-disposition: inline; filename="1x4OrBwQVkHeKAX.jpg"
cache-control: public, max-age=259200
expires: Sat, 30 Sep 2023 19:21:42 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Ve4j%2B%2FM6Vnov6Vq0gpEK%2FWA8ps50RLjFW0Sf8U%2B2ahVhU%2FVmmSLqOgH%2Buq%2FQX30WBND8ZRELWyy4wi4bQQ%2BVU4N%2BgchE5pmqOu97s5DV8NyJVe%2FoeLJaJvN3KVKUOUfOj07uC%2BK6ww%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61cf3af92867b-MAD
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
471 B IP
Hash 5b0cd6845b870955024a39803111943c
2ad2a8b83538b4a0b3a90af347a89cf578576cb9
e7eebef88a79572fd851005671a3200f01a4aaeb8853c99083ed480b63147955
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:07 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 27 Sep 2023 09:54:11 GMT
Expires: Wed, 04 Oct 2023 09:54:10 GMT
Etag: "2ad2a8b83538b4a0b3a90af347a89cf578576cb9"
Cache-Control: max-age=571849,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61d133c7256c4-OSL
imasdk.googleapis.com/js/core/bridge3.592.0_en.html
237 kB URL imasdk.googleapis.com/js/core/bridge3.592.0_en.html
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (48275)
Size 237 kB (236927 bytes)
Hash b7b0c9d3d24765d132d0618d3b3eb626
898f3f4aa83ad6f57401b072341531a9baa44cc7
5c82d27118183cf0379ad722e087e51be3bb63706d7d2ccf4317790dfe774dc5
GET /js/core/bridge3.592.0_en.html HTTP/1.1
Host: imasdk.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-doubleclick-instream-static"
report-to: {"group":"ads-doubleclick-instream-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-instream-static"}]}
content-length: 236927
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 25 Sep 2023 19:54:30 GMT
expires: Tue, 24 Sep 2024 19:54:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 25 Sep 2023 19:42:01 GMT
content-type: text/html
vary: Accept-Encoding
age: 170857
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
track.trackingtraffo.com/pop/imp?auth=mz3u78&c=ey8EcMJc0wRDSKvrlXi11v78aQ80xZujyd5U5RLwNXlixlgDPigeORrloevq7lgkEaur2QRFu6qQ0Dy9vl0wI39UOIoj8fqmSE9fYyl8rP-J2KFhmXtWm21eVt9J6gNs44rAZ-RCHriaKHe2TnUF-DSDw02O8qlp0soofqo_29Pf0A1vM9ET8zQXxnzMW8HgWMj6NLokY7PR_L0P24zDpKCc0MXyXfjyMLhsJa-xZJr4qDX-jSs5-yXayVHVyid_mVundkQH9CBT_wGPZlKzvkHptLSTVGD5Y06RtK3EejR2KT2IYF1y8pLIPPIPUcVELIJXJRrp3dJIy_wNDgHa7pe-vi-WII2ZHjm74EvW-cdns74GPcQIRbW3vEHZEJf30_2H9945NAhacbcT-yk2Kt00gpNSkj0pr0Be38Ijcg7Ura1CU9_Rhs8aZ0bSYk_TCsXbtDUfw6oMTXGsG66q_H0Q8U8gZPWprLvI1HLwEr-yuUiT_sWc2rmtLu4oelMkOBvPALt-eY7BIBsI04BurCdIDm8JeKF6VfuxFVA616FfjSCZw5h5m6C59Pp5h6HG9FRiGqdRDdTrS5qR6E-lSPnPr3C-u34WLqSVgd6C-EGfFImmvoCpdByKBlL_xCALKfCKktexP_vv_wt4tH2x51sX7Vsug7lB-GjEuQ1eSCk2lWb_fC8JUu8UP4g
302 Found 0 B URL GET HTTP/1.1 track.trackingtraffo.com/pop/imp?auth=mz3u78&c=ey8EcMJc0wRDSKvrlXi11v78aQ80xZujyd5U5RLwNXlixlgDPigeORrloevq7lgkEaur2QRFu6qQ0Dy9vl0wI39UOIoj8fqmSE9fYyl8rP-J2KFhmXtWm21eVt9J6gNs44rAZ-RCHriaKHe2TnUF-DSDw02O8qlp0soofqo_29Pf0A1vM9ET8zQXxnzMW8HgWMj6NLokY7PR_L0P24zDpKCc0MXyXfjyMLhsJa-xZJr4qDX-jSs5-yXayVHVyid_mVundkQH9CBT_wGPZlKzvkHptLSTVGD5Y06RtK3EejR2KT2IYF1y8pLIPPIPUcVELIJXJRrp3dJIy_wNDgHa7pe-vi-WII2ZHjm74EvW-cdns74GPcQIRbW3vEHZEJf30_2H9945NAhacbcT-yk2Kt00gpNSkj0pr0Be38Ijcg7Ura1CU9_Rhs8aZ0bSYk_TCsXbtDUfw6oMTXGsG66q_H0Q8U8gZPWprLvI1HLwEr-yuUiT_sWc2rmtLu4oelMkOBvPALt-eY7BIBsI04BurCdIDm8JeKF6VfuxFVA616FfjSCZw5h5m6C59Pp5h6HG9FRiGqdRDdTrS5qR6E-lSPnPr3C-u34WLqSVgd6C-EGfFImmvoCpdByKBlL_xCALKfCKktexP_vv_wt4tH2x51sX7Vsug7lB-GjEuQ1eSCk2lWb_fC8JUu8UP4g
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerSectigo Limited
Subjecttrackingtraffo.com
Fingerprint33:6D:3E:2D:36:E8:9D:8F:1B:BF:99:AE:D1:E7:F8:91:D0:AF:59:15
ValidityFri, 16 Dec 2022 00:00:00 GMT - Sat, 16 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pop/imp?auth=mz3u78&c=ey8EcMJc0wRDSKvrlXi11v78aQ80xZujyd5U5RLwNXlixlgDPigeORrloevq7lgkEaur2QRFu6qQ0Dy9vl0wI39UOIoj8fqmSE9fYyl8rP-J2KFhmXtWm21eVt9J6gNs44rAZ-RCHriaKHe2TnUF-DSDw02O8qlp0soofqo_29Pf0A1vM9ET8zQXxnzMW8HgWMj6NLokY7PR_L0P24zDpKCc0MXyXfjyMLhsJa-xZJr4qDX-jSs5-yXayVHVyid_mVundkQH9CBT_wGPZlKzvkHptLSTVGD5Y06RtK3EejR2KT2IYF1y8pLIPPIPUcVELIJXJRrp3dJIy_wNDgHa7pe-vi-WII2ZHjm74EvW-cdns74GPcQIRbW3vEHZEJf30_2H9945NAhacbcT-yk2Kt00gpNSkj0pr0Be38Ijcg7Ura1CU9_Rhs8aZ0bSYk_TCsXbtDUfw6oMTXGsG66q_H0Q8U8gZPWprLvI1HLwEr-yuUiT_sWc2rmtLu4oelMkOBvPALt-eY7BIBsI04BurCdIDm8JeKF6VfuxFVA616FfjSCZw5h5m6C59Pp5h6HG9FRiGqdRDdTrS5qR6E-lSPnPr3C-u34WLqSVgd6C-EGfFImmvoCpdByKBlL_xCALKfCKktexP_vv_wt4tH2x51sX7Vsug7lB-GjEuQ1eSCk2lWb_fC8JUu8UP4g HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.adforcast.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 27 Sep 2023 19:22:07 GMT
Content-Length: 0
Connection: keep-alive
Location: https://plinksplanet.com/click.php?key=nn0fjfb0hkfh4g1gfh1g&clickid=046315a1-348f-440d-8dd7-a67ab5fda248&cost=0.0031&PUB_ID=118&SUB_ID=554939&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-09-27&BID_PUB=0.0031&CR_ID=363072&PUB_NAME=Yeesshh-POP 2
static1.dmcdn.net/playerv5/dmp.dynamic_quality_switcher.802a6aece19865c74dde.js
200 OK 8.1 kB URL GET HTTP/2 static1.dmcdn.net/playerv5/dmp.dynamic_quality_switcher.802a6aece19865c74dde.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerLet's Encrypt
Subjectapi.dmcdn.net
FingerprintEB:84:B4:8E:D0:C5:82:03:F0:1B:1E:A2:02:29:41:4A:15:19:F1:99
ValidityThu, 10 Aug 2023 14:40:20 GMT - Wed, 08 Nov 2023 14:40:19 GMT
File type ASCII text, with very long lines (23458), with no line terminators
Hash 08ce2a33ebc53117ceae12f832268dea
6d58ec34d550ddfd83c5d4bd3e49eb4d059858cc
4386b833e182390c2f29daad009fafbedb99c2def0c35d82403592954966bc97
GET /playerv5/dmp.dynamic_quality_switcher.802a6aece19865c74dde.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=3, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "650c4f9e-5ba2"
last-modified: Thu, 21 Sep 2023 14:13:50 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Sat, 21 Oct 2023 14:16:21 GMT
date: Wed, 27 Sep 2023 19:22:07 GMT
content-length: 8078
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
static1.dmcdn.net/ABCFavorit-Medium.woff2
200 OK 53 kB URL GET HTTP/2 static1.dmcdn.net/ABCFavorit-Medium.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerLet's Encrypt
Subjectapi.dmcdn.net
FingerprintEB:84:B4:8E:D0:C5:82:03:F0:1B:1E:A2:02:29:41:4A:15:19:F1:99
ValidityThu, 10 Aug 2023 14:40:20 GMT - Wed, 08 Nov 2023 14:40:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 52804, version 2.6553\012- data
Hash ddf0167ee6b9eccb9a60e11236320d74
1be9050575156d5d19de339f8f6f2b746a330de6
2d7e04f93797dca868560733bfe7342aabd013ae8bba52073a35bc5fd99e830b
GET /ABCFavorit-Medium.woff2 HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.dailymotion.com/
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/octet-stream
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=0, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "64b92a7b-ce44"
last-modified: Thu, 20 Jul 2023 12:37:15 GMT
content-length: 52804
expires: Tue, 03 Oct 2023 09:42:27 GMT
date: Wed, 27 Sep 2023 19:22:07 GMT
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
streamtape.com/e/8BMaxrqyOjiozBw
200 OK 100 kB URL GET HTTP/2 streamtape.com/e/8BMaxrqyOjiozBw
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerGoogle Trust Services LLC
Subjectstreamtape.com
Fingerprint3F:22:3F:1F:2F:0F:D7:77:64:84:0E:C5:7F:1D:99:6C:B7:DE:BC:9F
ValidityMon, 21 Aug 2023 21:30:52 GMT - Sun, 19 Nov 2023 21:30:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, Unicode text, UTF-8 text, with very long lines (60681)
Size 100 kB (100166 bytes)
Hash a2c32a3e362834cbf3d76554f5e7be84
3a527eea3abe1083928e2b03ac993c62dc4f4d9e
6868a02344b01792265f7dff0efb1bc6a119b1d794810217fb1c686c04a769dc
GET /e/8BMaxrqyOjiozBw HTTP/1.1
Host: streamtape.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:01 GMT
content-type: text/html; charset=UTF-8
cache-control: private
set-cookie: _b=kube18; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yOeXtpCak2UsSgek1I%2B9n5ejN3yJN4M7964MyLybJJh2preFb5%2BvEZcHyd3xE47NEfhngsB00C9gu0692zWScJ0oFdrLqn99b6HksemvOiXbAmK0nuveOB1bnn0i7qcFtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61cef2920b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
727 B URL zerossl.ocsp.sectigo.com/
IP
Hash 708c397e664ede12255fa39d98c70346
a140727401ec011d9de73625ec5c3e7d56d56b08
f94e51fa120d0950b1afc4645171b2a1ce6e6c09c365218983ab5cfc2403a520
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:07 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Tue, 26 Sep 2023 09:05:46 GMT
Expires: Tue, 03 Oct 2023 09:05:45 GMT
Etag: "a140727401ec011d9de73625ec5c3e7d56d56b08"
Cache-Control: max-age=482278,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61d15fe3f56a5-OSL
voe.sx/e/fd4k6uymp5o4
47 kB IP
ASN #262254 DDOS-GUARD CORP.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2cac826d5ad73ee9afbf4fcaf955f340
9cc93272e4517826bc21d2c4e25968853df2441d
db5172a72f857e880820c524f920537a9e58ffc87d0e2150a5e21f193cbf3f71
GET /e/fd4k6uymp5o4 HTTP/1.1
Host: voe.sx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: ddos-guard
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests;
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
date: Wed, 27 Sep 2023 19:22:01 GMT
location: https://strawberriesporail.com/e/fd4k6uymp5o4
set-cookie: __ddg1_=anuyxWWEN8nm3IluGDy1; Domain=.voe.sx; HttpOnly; Path=/; Expires=Thu, 26-Sep-2024 19:22:01 GMT
XSRF-TOKEN=eyJpdiI6Ik1KVGVIbGpZLytJaGlDRWpzSUpsUWc9PSIsInZhbHVlIjoidDhPcHVVckQ5ZS9US050V091TWNGbGswNWhJYzQ4a2RPTUVORFhrVDZjclQwVkJEUklmRHNUVG5YdG1MdHMzNkc1bjBlWGYwMmxzbkNPaVhhV3MwRGFFc240cndGeUx2eGpWeWVzc2ZjWmp5ZjUyZjNOMWpYT25wanpvaVRTV3YiLCJtYWMiOiJhMDNjNzU1OGU3ZjVlZmMxOTIzMTE2MTAyYzJmZTNjZThjMzE0ZGMyMTFlOTdiNjQ5MDgwNmFlNjFkOGE2Yjg4IiwidGFnIjoiIn0%3D; expires=Wed, 27 Sep 2023 20:52:01 GMT; Max-Age=5400; path=/; secure; samesite=none
voe_session=eyJpdiI6ImVWSm9Ua1YvMWdLTjN3U0FzNGNWRWc9PSIsInZhbHVlIjoidmxwOXRUZDRVeUpCcXBsVWVGWkRpd1Uzc3pEUUZRQzRWVzJuZ3JQeTJPMkM2eHhxeHhNN0dZbllzbExaWlZWb0FYNFpoVTYraFJsOXBYTHJ4c2NsRElXN3NVUEdtejVFYXA3TS9meUxrOGFVdzVaYWpuVU5IWENsRm9udHVYTlgiLCJtYWMiOiI4MDBhNzZlOTM0MzZiYzkyMzc4NzhkNTJjYWY0MmRiMjllNzFlOWY4OTFlNThlYWFhYTQyMjJkOTc0NjgxNzdiIiwidGFnIjoiIn0%3D; expires=Wed, 27 Sep 2023 20:52:01 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2
dmxleo.dailymotion.com/cdn/manifest/video/x6my46z.m3u8?auth=1696015324-2562-miwbq0wp-f29386f261ad2d2b5b11f1ab983550c30uSQHufCepxfD8rOngCVIzfBmD2kFAq2RidsDeC15JnAUbPX8eaS4fPLRndmOz0uUd5xPxzNP82tgKr7B_BK0Hd2jGQv-583xphiY4CBUL8f1tTpOD2Qc3m2v4DSGH3AaMqpyKUybVCKei1-MLcqUrOEY2grF3qun5NWdVj0EpX6AG_hw-FF236DAhYsBQBgSNO78xEXo_YYYqmiAxYwBLIZ2ZA584yiXKn4mNAtezPRrONexXpLcge2TKyv6hdvcEIh_afTf7U4GFRpr6m_6eBFinXvh8tq81-MAGHMHuvDrlGm82jz1s_5iXOcWFW5dxbHWgDQ8iMO8HvUW8o5GFp8qmw2WXZr20ICfYK27BfIR6kZMiS3lrHmJ3Y9D0meMuPaiZ7Dl8_k260d4zehdu4nfeHb0UTMJVHmXADlKHv0obFenKCDi9r-NA4TKL8B6crt80KhyjYsn-7YnILb-325qskKGvga3z1o8sJ-hU-ifzVaY8QplwC_q8bAo55974ffgyKPQXvuEC5EXTHxBbGN5y_8R88kUiGnq3aEXEasvARpeQtS_jtYOgyO4mnJGyOe1xpaS1jOsYBN3NtFemKYZgxJIBFv9Ea5WmM7AbEItQV7sZKgzpT06ciq0PT7LfOmvKp_9qvLMVcCfTnDS530qqG2MG6dszv1xuK6IYoMs_7bcaA1lvOZFqMUcfttDL_avaq8O9olez-UmljdgKw9QAzVnPmYqieEfiPKssMrqlyIS7WAJxArb5cgHWoJ0zaNsXIxt_D28HeUS5L91ARLfQvxfk5OekBUhp5pLaYmJq3TLbfJw3ipSIv-0Q8kHS89hX7r9pWmZdk9hYCAmqVDJ11AjKnYEtyBOIaFIt2UQJnPfquPsjz_BSBu2E_E9LH_imsGS4Dl2UKyB-yZBu0-pu7pMmtpiKJiUYmUdMxZ3t3C-P-3r5OWGhA3Kt6q3TgfyK3UXwYEIDTwtoEv60X9vNJnqN08Dm-9RCOBfFeLujGJDoCQFARFm5gHuVVo34MXhxowKxhL5xX9ADs4-HtbcyuhxuK7AKC54VoDlriR3XohKviMgnswDQLgpRjWMOo0AQwVkAuLOCQEKWZuKPX6An23iwV2Ia4RdTCI6QvnPSGM4Xp349eDkircRFna5Oi28BgXPZ9clHpN3WYQTJXtjyAGdiSExxrKUhLNtsan4w3c1sUQA0bpbm_tRo6yG&bs=1&cookie_sync_ab_gk=1&reader_gdpr_flag=1&reader_gdpr_consent=&gdpr_binary_consent=opt-out&gdpr_comes_from_infopack=0&reader_us_privacy=1---
0 B URL dmxleo.dailymotion.com/cdn/manifest/video/x6my46z.m3u8?auth=1696015324-2562-miwbq0wp-f29386f261ad2d2b5b11f1ab983550c30uSQHufCepxfD8rOngCVIzfBmD2kFAq2RidsDeC15JnAUbPX8eaS4fPLRndmOz0uUd5xPxzNP82tgKr7B_BK0Hd2jGQv-583xphiY4CBUL8f1tTpOD2Qc3m2v4DSGH3AaMqpyKUybVCKei1-MLcqUrOEY2grF3qun5NWdVj0EpX6AG_hw-FF236DAhYsBQBgSNO78xEXo_YYYqmiAxYwBLIZ2ZA584yiXKn4mNAtezPRrONexXpLcge2TKyv6hdvcEIh_afTf7U4GFRpr6m_6eBFinXvh8tq81-MAGHMHuvDrlGm82jz1s_5iXOcWFW5dxbHWgDQ8iMO8HvUW8o5GFp8qmw2WXZr20ICfYK27BfIR6kZMiS3lrHmJ3Y9D0meMuPaiZ7Dl8_k260d4zehdu4nfeHb0UTMJVHmXADlKHv0obFenKCDi9r-NA4TKL8B6crt80KhyjYsn-7YnILb-325qskKGvga3z1o8sJ-hU-ifzVaY8QplwC_q8bAo55974ffgyKPQXvuEC5EXTHxBbGN5y_8R88kUiGnq3aEXEasvARpeQtS_jtYOgyO4mnJGyOe1xpaS1jOsYBN3NtFemKYZgxJIBFv9Ea5WmM7AbEItQV7sZKgzpT06ciq0PT7LfOmvKp_9qvLMVcCfTnDS530qqG2MG6dszv1xuK6IYoMs_7bcaA1lvOZFqMUcfttDL_avaq8O9olez-UmljdgKw9QAzVnPmYqieEfiPKssMrqlyIS7WAJxArb5cgHWoJ0zaNsXIxt_D28HeUS5L91ARLfQvxfk5OekBUhp5pLaYmJq3TLbfJw3ipSIv-0Q8kHS89hX7r9pWmZdk9hYCAmqVDJ11AjKnYEtyBOIaFIt2UQJnPfquPsjz_BSBu2E_E9LH_imsGS4Dl2UKyB-yZBu0-pu7pMmtpiKJiUYmUdMxZ3t3C-P-3r5OWGhA3Kt6q3TgfyK3UXwYEIDTwtoEv60X9vNJnqN08Dm-9RCOBfFeLujGJDoCQFARFm5gHuVVo34MXhxowKxhL5xX9ADs4-HtbcyuhxuK7AKC54VoDlriR3XohKviMgnswDQLgpRjWMOo0AQwVkAuLOCQEKWZuKPX6An23iwV2Ia4RdTCI6QvnPSGM4Xp349eDkircRFna5Oi28BgXPZ9clHpN3WYQTJXtjyAGdiSExxrKUhLNtsan4w3c1sUQA0bpbm_tRo6yG&bs=1&cookie_sync_ab_gk=1&reader_gdpr_flag=1&reader_gdpr_consent=&gdpr_binary_consent=opt-out&gdpr_comes_from_infopack=0&reader_us_privacy=1---
IP
ASN #41690 Dailymotion S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/manifest/video/x6my46z.m3u8?auth=1696015324-2562-miwbq0wp-f29386f261ad2d2b5b11f1ab983550c30uSQHufCepxfD8rOngCVIzfBmD2kFAq2RidsDeC15JnAUbPX8eaS4fPLRndmOz0uUd5xPxzNP82tgKr7B_BK0Hd2jGQv-583xphiY4CBUL8f1tTpOD2Qc3m2v4DSGH3AaMqpyKUybVCKei1-MLcqUrOEY2grF3qun5NWdVj0EpX6AG_hw-FF236DAhYsBQBgSNO78xEXo_YYYqmiAxYwBLIZ2ZA584yiXKn4mNAtezPRrONexXpLcge2TKyv6hdvcEIh_afTf7U4GFRpr6m_6eBFinXvh8tq81-MAGHMHuvDrlGm82jz1s_5iXOcWFW5dxbHWgDQ8iMO8HvUW8o5GFp8qmw2WXZr20ICfYK27BfIR6kZMiS3lrHmJ3Y9D0meMuPaiZ7Dl8_k260d4zehdu4nfeHb0UTMJVHmXADlKHv0obFenKCDi9r-NA4TKL8B6crt80KhyjYsn-7YnILb-325qskKGvga3z1o8sJ-hU-ifzVaY8QplwC_q8bAo55974ffgyKPQXvuEC5EXTHxBbGN5y_8R88kUiGnq3aEXEasvARpeQtS_jtYOgyO4mnJGyOe1xpaS1jOsYBN3NtFemKYZgxJIBFv9Ea5WmM7AbEItQV7sZKgzpT06ciq0PT7LfOmvKp_9qvLMVcCfTnDS530qqG2MG6dszv1xuK6IYoMs_7bcaA1lvOZFqMUcfttDL_avaq8O9olez-UmljdgKw9QAzVnPmYqieEfiPKssMrqlyIS7WAJxArb5cgHWoJ0zaNsXIxt_D28HeUS5L91ARLfQvxfk5OekBUhp5pLaYmJq3TLbfJw3ipSIv-0Q8kHS89hX7r9pWmZdk9hYCAmqVDJ11AjKnYEtyBOIaFIt2UQJnPfquPsjz_BSBu2E_E9LH_imsGS4Dl2UKyB-yZBu0-pu7pMmtpiKJiUYmUdMxZ3t3C-P-3r5OWGhA3Kt6q3TgfyK3UXwYEIDTwtoEv60X9vNJnqN08Dm-9RCOBfFeLujGJDoCQFARFm5gHuVVo34MXhxowKxhL5xX9ADs4-HtbcyuhxuK7AKC54VoDlriR3XohKviMgnswDQLgpRjWMOo0AQwVkAuLOCQEKWZuKPX6An23iwV2Ia4RdTCI6QvnPSGM4Xp349eDkircRFna5Oi28BgXPZ9clHpN3WYQTJXtjyAGdiSExxrKUhLNtsan4w3c1sUQA0bpbm_tRo6yG&bs=1&cookie_sync_ab_gk=1&reader_gdpr_flag=1&reader_gdpr_consent=&gdpr_binary_consent=opt-out&gdpr_comes_from_infopack=0&reader_us_privacy=1--- HTTP/1.1
Host: dmxleo.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; dmvk=651480db194da; ts=428744; usprivacy=1---
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:07 GMT
access-control-allow-credentials: true
access-control-allow-headers: Authorization, Content-Type
access-control-allow-methods: GET
access-control-allow-origin: https://www.dailymotion.com/
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-dm-lb-name: ingress-nginx-nginx-in-cluster-dxw2j
X-Firefox-Spdy: h2
plinksplanet.com/click.php?key=nn0fjfb0hkfh4g1gfh1g&clickid=046315a1-348f-440d-8dd7-a67ab5fda248&cost=0.0031&PUB_ID=118&SUB_ID=554939&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-09-27&BID_PUB=0.0031&CR_ID=363072&PUB_NAME=Yeesshh-POP%202
0 B URL plinksplanet.com/click.php?key=nn0fjfb0hkfh4g1gfh1g&clickid=046315a1-348f-440d-8dd7-a67ab5fda248&cost=0.0031&PUB_ID=118&SUB_ID=554939&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-09-27&BID_PUB=0.0031&CR_ID=363072&PUB_NAME=Yeesshh-POP%202
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click.php?key=nn0fjfb0hkfh4g1gfh1g&clickid=046315a1-348f-440d-8dd7-a67ab5fda248&cost=0.0031&PUB_ID=118&SUB_ID=554939&KEYWORD=&SUBSCRIBER_AGE=0&SUBSCRIBER_DATE=2023-09-27&BID_PUB=0.0031&CR_ID=363072&PUB_NAME=Yeesshh-POP%202 HTTP/1.1
Host: plinksplanet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.adforcast.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.18.0
date: Wed, 27 Sep 2023 19:22:07 GMT
content-type: text/html; charset=UTF-8
location: https://media.hellpartners.com/redirect.aspx?pid=19267&bid=1478&lpid=381&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
set-cookie: uclick=bza1xrkt8r; expires=Thu, 28-Sep-2023 19:22:07 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=bza1xrkt8r-bza1xrkt8r-q5k2bl-2tq5-ush90-irdu6o-irdudz-6b4b5b; expires=Thu, 28-Sep-2023 19:22:07 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
471 B URL ocsp.r2m01.amazontrust.com/
IP
Hash 5f7428b9e3210448b8da5d5909f5c1c5
22533a46cdad7d94c84e9462566a0d0a8eab96b0
5e5a1d9383283d807eb258ac9014f79059c36f72236e26f4d0f405d965f0f53d
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 27 Sep 2023 19:22:08 GMT
Last-Modified: Wed, 27 Sep 2023 17:39:13 GMT
Server: ECAcc (ska/F78B)
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SdiEXE7Stw9yYcPZS0SJjiPJufXiHqI4ZQ5i0D-8Np_Z355Xn6qhog==
Age: 6175
ivimedia.world/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
302 Found 309 B URL GET HTTP/2 ivimedia.world/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerAmazon
Subjectivimedia.world
FingerprintED:A1:14:8B:C1:BC:F3:11:4D:23:6B:1D:D0:2F:FB:3A:11:85:00:D6
ValidityMon, 03 Jul 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (307)
Hash f1ea6271b1264ccd51e1f756e2c7a02e
01d9c026f5cc39d790442c64f3a64b7483fa2d71
805a6e3988980d4de0aab70789526e209951d50922293261a2733499197e1850
GET /no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7 HTTP/1.1
Host: ivimedia.world
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.adforcast.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 27 Sep 2023 19:22:08 GMT
content-type: text/html; charset=utf-8
content-length: 309
location: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
server: nginx/1.20.2
X-Firefox-Spdy: h2
ivibet.com/custom-assets/fastloader.gif
200 OK 156 kB URL GET HTTP/2 ivibet.com/custom-assets/fastloader.gif
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type GIF image data, version 89a, 300 x 300\012- data
Size 156 kB (155794 bytes)
Hash 57bc57577752eb7618ec3526d1b872e1
7cda5ce5d8871c1a07c5e7245743e1c3a1d42139
8fa826a0e98d488b9dcbd84412edd41f1c5aa52c3f0ae5dedb601399761e4a20
GET /custom-assets/fastloader.gif HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:09 GMT
content-type: image/gif
content-length: 155794
cf-ray: 80d61d1e7f5cb4f1-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 7159
cache-control: public, max-age=14400
last-modified: Wed, 27 Sep 2023 17:22:50 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JFwyLyFLbhIDg0w3D3XPg188QIeZMXbieH60KEc%2B6uRFj%2Bbv7Y4Yatqk01kFyMC81NbVppjim1u9mkrpsuI4AgCVUIs%2BU%2Ffjb1pRwG5qyOKs4QoFd9UIXYH2cP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
casino.cur.a8r.games/public/sg.js
200 OK 29 kB URL GET HTTP/2 casino.cur.a8r.games/public/sg.js
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjecta8r.games
FingerprintA8:A9:FA:ED:57:56:8B:B3:83:68:D1:EB:EB:CD:14:5A:F0:F4:7D:A5
ValidityMon, 19 Jun 2023 00:00:00 GMT - Tue, 18 Jun 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash b7bcd86c18ceaded51226154d9a6981a
6c3a0879c08d2bd024bed764220e3ebe5ce7d858
0d120138f2985f7f8f2037a66e033c1de73d5a4b1ce4a2f1a3517259c1a0b754
GET /public/sg.js HTTP/1.1
Host: casino.cur.a8r.games
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:09 GMT
content-type: text/javascript; charset=utf-8
a8r-request-id: 42d54582-f6a2-4121-971a-48fbe14425b2
strict-transport-security: max-age=15724800; includeSubDomains
last-modified: Wed, 27 Sep 2023 17:57:20 GMT
cf-cache-status: HIT
age: 5074
expires: Wed, 27 Sep 2023 23:22:09 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61d1f0fb8b4ed-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash cbb6b90952f5230c043b0bbe8fb528b1
8e990f9e4448fdfb0b2c4dce68a9f5d6e3a843d9
2aaceb74eb7e1e69517de5bb254cdd373aa0abbd1c51acd3495756fec52ec5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ivibet.com/app/main.010d76f40a291986.css
200 OK 160 kB URL GET HTTP/2 ivibet.com/app/main.010d76f40a291986.css
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 160 kB (159660 bytes)
Hash 413ab6966e737e926fd16b5eb06a20b0
6ba017b8060924c22056c0a3b9f85821b29e0f28
adeac7531f478fef66521a50e8c1e18ed55cde88944c421f7a971c8d755f295e
GET /app/main.010d76f40a291986.css HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:09 GMT
content-type: text/css
cf-ray: 80d61d1e5f21b4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142580-b0468"
last-modified: Wed, 27 Sep 2023 12:52:16 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tAbB%2F6GuEheY%2BwLDSRwOfgItpOc9fpG%2FgcckZs5rKAae6GZnpcDsM2EZ4EOw%2FYNYMedyUNMCqrJCh1rvqYMPUhjcJ%2BNsB2DJTxLhMeZk5lGsLgWdI484mN%2B1Udw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/app/styles.eda4ec0407fac5b8.css
100 kB URL ivibet.com/app/styles.eda4ec0407fac5b8.css
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 100 kB (100272 bytes)
Hash 1a8b7798c920a7c1b4374f9aff336664
7a274f8ec781195791fee6d5aa2a4926e7317a11
7bbe3a8a0b74860a3ed3fe8148b275096b47b698488200820f8e9e72968c0bef
GET /app/styles.eda4ec0407fac5b8.css HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:09 GMT
content-type: text/css
cf-ray: 80d61d1e5f20b4f1-OSL
cf-cache-status: BYPASS
etag: W/"6514257b-23f25"
last-modified: Wed, 27 Sep 2023 12:52:11 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gx%2FKcQuqG3wU4i9dp5MVQrsG1sQk2F5ZiPdtqQHewJmUDvlmXsuKE5xW3M80Q81CrpWje2bjt6HUgwikF5%2BXgWK663mBCFlRlzzi%2B4vsJGUFlySQeTpn48VtG9M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
200 OK 38 kB URL GET HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint68:AF:AC:17:CA:79:7A:8F:ED:F8:D8:57:93:79:CA:FB:69:50:9B:19
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (9163)
Hash 2a3bbde818bef34d53a0df862ead5d5f
e8c24393627f976a0ac940d9c6d487a54cfe0e38
c0d7eace6de7a123701ad163455f50ea9f6f51c5985a49f4d1f6e797009fbdb1
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:09 GMT
content-type: application/javascript
etag: W/"2a3bbde818bef34d53a0df862ead5d5f"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1666
expires: Sat, 30 Sep 2023 19:22:09 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=oqzUTxFd42aSIKY4TjyAJhYvXxbvMhn4MSdy8RuRW3A-1695842529-0-AT+0/rZ/MJzuOqG01TehG8KcP5WVbBhRXs+qaeRO72nYp6ckcse3tjE18i11nc7CHLKkvxplludlvD9pTMGGEF0=; path=/; expires=Wed, 27-Sep-23 19:52:09 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 80d61d1ef90956c7-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.seon.io/js/v4/agent.js
177 kB URL cdn.seon.io/js/v4/agent.js
IP
File type C source, ASCII text, with very long lines (65536), with no line terminators
Size 177 kB (176887 bytes)
Hash 1e2f097ea048a620c923f87177ae7090
c95efcf8aba1bd66af317762997f863f58397dfa
a6081964909ad3912911b74ae2003bc04cee5209f43c9bdefabbd78a28b65819
GET /js/v4/agent.js HTTP/1.1
Host: cdn.seon.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
server: AmazonS3
content-encoding: gzip
date: Wed, 27 Sep 2023 18:44:12 GMT
cache-control: max-age=3600
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FNoW6jjoAb6AXJ02SFsjE-iTmntDCVG7QeOkrLaEGof-uI0fPJDjvQ==
age: 2278
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 4ee7d428e49497fff831481db3746dd8
7185f93df26c0737f4953ac8b0799a3fe3a7c45f
f9e4c9a81904083be67d904a75c03e6d1c54757d399dc77d1224b42a25c088fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 27 Sep 2023 19:22:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-FRE8FH5FQZ&l=dataLayer&cx=c
89 kB URL www.googletagmanager.com/gtag/js?id=G-FRE8FH5FQZ&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (5788)
Hash e268a6477f022070e9a2853dd87014b5
b03f48ffd4b8fc44f18da022d03d1cfa3acacbc9
71fbc35ac014b83fe34d806c87372aa916a37bb2005c53f1142e2b68c8010fb4
GET /gtag/js?id=G-FRE8FH5FQZ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 19:22:09 GMT
expires: Wed, 27 Sep 2023 19:22:09 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89044
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.magsrv.com/tag.php?goal=a7a45017ed24ebe292bd140a16fbed1f
20 B URL s.magsrv.com/tag.php?goal=a7a45017ed24ebe292bd140a16fbed1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=a7a45017ed24ebe292bd140a16fbed1f HTTP/1.1
Host: s.magsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Sep 2023 19:22:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A103346%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-09-27%22%3B%7D%7D; expires=Thu, 26 Sep 2024 19:22:09 GMT; path=/; domain=.magsrv.com; Secure; SameSite=none
Accept-CH:
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
pogothere.xyz/
48 B IP
File type ASCII text, with no line terminators
Hash dee7001dd98130a6cac89caebf58aaea
56dde4946fb1bcc008b7872434cbd7f6bd9e7fed
e8b5956b45dc4839af7f0c189ca1e59fdc69a5b4de1c765deced9e9cb3486d78
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamtape.com/
Origin: https://streamtape.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: text/plain
set-cookie: csu=262579259663489@1@1695842525; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://streamtape.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d2%2Fk74L8eVPKxWPQwk1lTsAdx9rKFMmw0SNNtbDb%2BnfKm2qPi4vR%2FvADduiSMUruciQUH4otng3sghMgBaF9HixhDqwxQ6KVM7cac8zZ7bzOQfafaGjB%2Fsf0moBe3hL0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d090c288867-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAAR2
35 kB URL tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAAR2
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (62152)
Hash d471eb25b2a0296609495a21c0c9eaba
32e616ba4ba753c15e546d94e0bf6946b18b9bc8
d0d9949012799e40b1dff21a7731c5dabdb11ce53a84a13ed74486b7d5d393ff
GET /dist/tag-manager.js?id=STM-AAAAR2 HTTP/1.1
Host: tm.ads.sportradar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
apigw-requestid: L7eLrj1GDoEEMZA=
vary: Accept-Encoding
content-encoding: gzip
content-length: 34803
date: Wed, 27 Sep 2023 19:22:10 GMT
cache-control: max-age=900, public
x-n: S
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist/tracker.js
6.4 kB URL tracker.ads.sportradar.com/dist/tracker.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (25690)
Hash 235331a0761142ae4fd345cdf7c7f9ed
f71a2cb5824a7049b2c86f5658f48e17ff7f588c
063237f5f52863c3f711ef56625653397a5650eca2da3fa375dc181985a1badb
GET /dist/tracker.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 12 Sep 2023 08:33:19 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
etag: "235331a0761142ae4fd345cdf7c7f9ed"
x-amz-cf-pop: AMS58-P6
x-amz-cf-id: wcXDNqHJBsf_LG-HO-RJV9pvuyVpV1Xi2v2XMzTlDRJulYUA4ounOA==
vary: Accept-Encoding
content-encoding: gzip
content-length: 6405
date: Wed, 27 Sep 2023 19:22:10 GMT
cache-control: max-age=900, public
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist//sp-3.8.0.js
24 kB URL tracker.ads.sportradar.com/dist//sp-3.8.0.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65378)
Hash 143272dddc33395008a84a86ac9c2e96
8a90a07a66c30b4fa28300001cf97db7baba420e
6361e3a49a38d1fdc74ec96bd29ee1ecd7c30045ccb0e5f361413d65cbf5ef87
GET /dist//sp-3.8.0.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 12 Sep 2023 08:33:18 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
etag: "143272dddc33395008a84a86ac9c2e96"
x-amz-cf-pop: AMS58-P6
x-amz-cf-id: 3puhgXRx3rOmvkgfg0BCaidf2iSe_xsDcryeDouWzqqnksy5TMGyXw==
vary: Accept-Encoding
content-encoding: gzip
date: Wed, 27 Sep 2023 19:22:10 GMT
content-length: 24162
cache-control: max-age=900, public
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=201b8980398bf76b53acd06352b72bd68f2ae949c5e52acd6a21cf99dc01d510
697 B URL my.rtmark.net/p.js?f=sync&lr=1&partner=201b8980398bf76b53acd06352b72bd68f2ae949c5e52acd6a21cf99dc01d510
IP
Hash b38652f6b8f9f7f6157adff6b970cfd2
69478969f6f293a382a6b3faee1144a71afa5601
9b6a53e67b4d396d4861b4757f241a884eafc9fd8d1b88d19dcca06b72dc6964
GET /p.js?f=sync&lr=1&partner=201b8980398bf76b53acd06352b72bd68f2ae949c5e52acd6a21cf99dc01d510 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:10 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fivibet.com%2Fno%2Fpromotions%2Ffirst-deposit-sport%3Fbtag%3D654481_12F884A16E284878B2145D3A2BE2A37E%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-Ivibet-NO-NotReg-pop-WelPromoSport%26utm_term%3DUbidex-Ivibet-NO-NotReg-pop-WelPromoSport%26subid%3Df0dd7bza1xrkt8r3e7&channel_type=code&jsonp=__gx1pu3gm309
846 B URL api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fivibet.com%2Fno%2Fpromotions%2Ffirst-deposit-sport%3Fbtag%3D654481_12F884A16E284878B2145D3A2BE2A37E%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-Ivibet-NO-NotReg-pop-WelPromoSport%26utm_term%3DUbidex-Ivibet-NO-NotReg-pop-WelPromoSport%26subid%3Df0dd7bza1xrkt8r3e7&channel_type=code&jsonp=__gx1pu3gm309
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (846), with no line terminators
Hash 55bb52dd0ee7ab60fc5d66603d60bd4d
d8c9bd7bcb7dce7e26223c6189c4de0be36e1d73
3ebbef25f04eb869097b28740ffcd1900c1824f758eefd737be2410bdfc9cea8
GET /v3.6/customer/action/get_dynamic_configuration?license_id=9054575&client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5&url=https%3A%2F%2Fivibet.com%2Fno%2Fpromotions%2Ffirst-deposit-sport%3Fbtag%3D654481_12F884A16E284878B2145D3A2BE2A37E%26utm_source%3Dretarget%26utm_medium%3DUbidex%26utm_campaign%3DUbidex-Ivibet-NO-NotReg-pop-WelPromoSport%26utm_term%3DUbidex-Ivibet-NO-NotReg-pop-WelPromoSport%26subid%3Df0dd7bza1xrkt8r3e7&channel_type=code&jsonp=__gx1pu3gm309 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-security-policy: frame-ancestors https://ivibet.com/;
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
x-frame-options: allow-from https://ivibet.com/
content-length: 846
date: Wed, 27 Sep 2023 19:22:10 GMT
X-Firefox-Spdy: h2
ocsp.entrust.net/
1.6 kB IP
Hash 58554bd50f995daa0e0a0a5c7f2fc690
21a566652a965d3d4f4e92047fc9e531db0cb612
dc7f4558527187a1fee43f1998fc6d2a0d52127dc60a2cac1996e9514a97067e
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "DC7F4558527187A1FEE43F1998FC6D2A0D52127DC60A2CAC1996E9514A97067E"
Last-Modified: Wed, 27 Sep 2023 07:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=1033
Expires: Wed, 27 Sep 2023 19:39:23 GMT
Date: Wed, 27 Sep 2023 19:22:10 GMT
Connection: keep-alive
track.trackingtraffo.com/pixel/js?auth=q1wu35&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur=undefined&amount=undefined
490 B URL track.trackingtraffo.com/pixel/js?auth=q1wu35&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur=undefined&amount=undefined
IP
Certificate IssuerSectigo Limited
Subjecttrackingtraffo.com
Fingerprint33:6D:3E:2D:36:E8:9D:8F:1B:BF:99:AE:D1:E7:F8:91:D0:AF:59:15
ValidityFri, 16 Dec 2022 00:00:00 GMT - Sat, 16 Dec 2023 23:59:59 GMT
Hash 845d00a0df30fd6cb17206bce12cfd60
9c482a3e95260447c9c79d9d45bd193f1ae9c2b1
f2812b04ce8c5e38bdba6e497a18c333ea558312c12f76d54613f541ac96e575
GET /pixel/js?auth=q1wu35&event=visit&uid=undefined&tid={TRANSACTION_ID}&cur=undefined&amount=undefined HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 27 Sep 2023 19:22:10 GMT
Content-Type: text/javascript
Content-Length: 490
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
api.livechatinc.com/v3.4/customer/action/get_configuration?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=300117.12.12.45673.7798.2708.1580.16.3.3.3.244.4784&group_id=51&jsonp=__lc_static_config
1.4 kB URL api.livechatinc.com/v3.4/customer/action/get_configuration?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=300117.12.12.45673.7798.2708.1580.16.3.3.3.244.4784&group_id=51&jsonp=__lc_static_config
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (4185), with no line terminators
Hash 9662d91fac9c28bbbc38bba34d4c10d2
768bf5786ee39b1f48f9b374ce904bfd840df8cc
8518c2fdd4788ae9669103ffc14a09f4b6208c72d5c80891debf5a3b1f98356f
GET /v3.4/customer/action/get_configuration?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=300117.12.12.45673.7798.2708.1580.16.3.3.3.244.4784&group_id=51&jsonp=__lc_static_config HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2024-05-31
vary: Accept-Encoding
content-length: 1424
cache-control: public, max-age=565
expires: Wed, 27 Sep 2023 19:31:35 GMT
date: Wed, 27 Sep 2023 19:22:10 GMT
X-Firefox-Spdy: h2
a.sportradarserving.com/pixel?type=js&aid=1525&id=6064
302 Moved Temporarily 0 B URL GET HTTP/1.1 a.sportradarserving.com/pixel?type=js&aid=1525&id=6064
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerEntrust, Inc.
Subject*.sportradarserving.com
FingerprintD0:C1:99:26:D2:AD:C7:6B:F2:AD:C4:44:44:70:7C:4F:D2:49:9B:C4
ValidityWed, 20 Sep 2023 07:44:29 GMT - Mon, 14 Oct 2024 07:44:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?type=js&aid=1525&id=6064 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Wed, 27 Sep 2023 19:22:10 GMT
Location: https://a.sportradarserving.com/ul_cb/pixel?type=js&aid=1525&id=6064
Set-Cookie: zuuid=8bba19f7-62a4-4bb7-9a91-ba6b77a85fdd; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
c=1695842530; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1695842530; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_59c9b41021d83a96efde8d09c5d8202a&language=en&group_id=51&jsonp=__lc_localization
3.8 kB URL api.livechatinc.com/v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_59c9b41021d83a96efde8d09c5d8202a&language=en&group_id=51&jsonp=__lc_localization
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (11083), with no line terminators
Hash d645e22966277e943fafc39f2a77e31e
0d8f0990178d1957c6f9e96ba5bfa0cc96638c4f
769970d87b77b5e01423abf518f1a7b01bad4827163fecd92835b330309eec2c
GET /v3.4/customer/action/get_localization?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26&version=075b79d72a19c7c515c01775c17428ae_59c9b41021d83a96efde8d09c5d8202a&language=en&group_id=51&jsonp=__lc_localization HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2024-05-31
vary: Accept-Encoding
cache-control: public, max-age=359
expires: Wed, 27 Sep 2023 19:28:09 GMT
date: Wed, 27 Sep 2023 19:22:10 GMT
content-length: 3842
X-Firefox-Spdy: h2
ivibet.com/app/main.e16253d8c2a346c8.js
456 kB URL ivibet.com/app/main.e16253d8c2a346c8.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 456 kB (455518 bytes)
Hash 20c9e4246a38902bcc81ca900bf93fe5
4a4ef02e3e6872df5ed7153bda154502c5e45443
aedad6cf4f47234969162d5d3ff9c9648d767acd58fdb7dd9501f9665bc06190
GET /app/main.e16253d8c2a346c8.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:10 GMT
content-type: application/javascript
cf-ray: 80d61d268979b4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142587-1b45df"
last-modified: Wed, 27 Sep 2023 12:52:23 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rFhgpCafXPVFUkpi3QKOxsPOUQaVMJI5vfzAuItJlDQx2N0pGBvVyNopf9PNXx1RuEaDBKAGaymLcHD%2BdFUAUAna4fWubqIJusaAheQeM7ShJNwnr7EPcD0grZs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
static1.dmcdn.net/playerv5/dmp.photon_vendor.4d691f5427958445345e.js
200 OK 98 kB URL GET HTTP/2 static1.dmcdn.net/playerv5/dmp.photon_vendor.4d691f5427958445345e.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerLet's Encrypt
Subjectapi.dmcdn.net
FingerprintEB:84:B4:8E:D0:C5:82:03:F0:1B:1E:A2:02:29:41:4A:15:19:F1:99
ValidityThu, 10 Aug 2023 14:40:20 GMT - Wed, 08 Nov 2023 14:40:19 GMT
File type gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)\012- data
Hash 83bb160a06ba02f6be6970c8bce97fc4
d2a6b3a000a7010fbeab3226b670dbc4adc48b83
b5ca62d565dfdef2b523bac383688e9f13e6db21cfcc9e11a5e40e88cde27dc8
GET /playerv5/dmp.photon_vendor.4d691f5427958445345e.js HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/x-javascript
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "650af6f2-503ed"
last-modified: Wed, 20 Sep 2023 13:43:14 GMT
vary: Accept-Encoding
content-encoding: gzip
expires: Fri, 20 Oct 2023 13:46:06 GMT
date: Wed, 27 Sep 2023 19:22:04 GMT
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
track.trackingtraffo.com/pixel?auth=q1wu35&event=visit&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=undefined&amount=undefined&site=ivibet.com&ln=en-US
0 B URL track.trackingtraffo.com/pixel?auth=q1wu35&event=visit&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=undefined&amount=undefined&site=ivibet.com&ln=en-US
IP
Certificate IssuerSectigo Limited
Subjecttrackingtraffo.com
Fingerprint33:6D:3E:2D:36:E8:9D:8F:1B:BF:99:AE:D1:E7:F8:91:D0:AF:59:15
ValidityFri, 16 Dec 2022 00:00:00 GMT - Sat, 16 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?auth=q1wu35&event=visit&uid=undefined&tid=%7BTRANSACTION_ID%7D&cur=undefined&amount=undefined&site=ivibet.com&ln=en-US HTTP/1.1
Host: track.trackingtraffo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 27 Sep 2023 19:22:10 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=51&embedded=1&widget_version=3&unique_groups=1
2.6 kB URL secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=51&embedded=1&widget_version=3&unique_groups=1
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8824), with no line terminators
Hash 1e4adee43483196cbe4201374bd5c3e8
839aaa6794452753b14328eb8105d101b143a446
d4a55abc50cb0f2b6544e60fa0e4e30ad8fb238ca7c3b86a4aaef95d8f62ffbc
GET /customer/action/open_chat?license_id=9054575&group=51&embedded=1&widget_version=3&unique_groups=1 HTTP/1.1
Host: secure.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: text/html; charset=utf-8
vary: Accept-Encoding
date: Wed, 27 Sep 2023 19:22:10 GMT
content-length: 2558
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/iframe.1181ffeb.chunk.js
217 kB URL cdn.livechatinc.com/widget/static/js/iframe.1181ffeb.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65457)
Size 217 kB (217340 bytes)
Hash c5925204886c68f6da6f955e0a8f3593
03f0d334ffc58e82480008cdce61a239502814f0
6e15c267c8930cf05c35d4d51b51567807a860f5ac8f030258789468d8fa7dde
GET /widget/static/js/iframe.1181ffeb.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 21 Sep 2023 15:45:20 GMT
etag: W/"c5925204886c68f6da6f955e0a8f3593"
x-amz-server-side-encryption: AES256
x-amz-version-id: oF106P33qQGJ70GhfRkp8QeFkLiNQZfM
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: Dkp6eC07SV7DQhsA9DPN9WIMGbNB9iPdrIoaIHscgR5Ds6ca7dTvZw==
content-length: 217340
cache-control: max-age=31536000
expires: Thu, 26 Sep 2024 19:22:10 GMT
date: Wed, 27 Sep 2023 19:22:10 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/1.831e45da.chunk.js
66 kB URL cdn.livechatinc.com/widget/static/js/1.831e45da.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65462)
Hash a1234fec0eee18107f886b6578c79c04
e3b05004d5b1323e1f356250f28e1a92170a0e35
402aa1364e677ff1d38b6492bc4e29e87b086b8fba255b3f30df11695db8ea9f
GET /widget/static/js/1.831e45da.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2023 11:15:27 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: qwwr_C9QwP2S3OYtIwOCYLAQ4TApIL5S
server: AmazonS3
content-encoding: br
etag: W/"a1234fec0eee18107f886b6578c79c04"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: -Ry7BKzHm_909af8rkPUauIfz_tBRzrL-4nBIi-sfcGp-R8gk0nGjw==
content-length: 66448
cache-control: max-age=31536000
expires: Thu, 26 Sep 2024 19:22:10 GMT
date: Wed, 27 Sep 2023 19:22:10 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2
13 kB URL cdn.livechatinc.com/widget/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 12688, version 1.0\012- data
Hash d9f5998f47f6f22cb66e7dbf428c76ab
86b993baf91f867a03ea62e0d0adc9488530efaa
e94ba9c6df7a149b4b3c590bcc484ce24ce7c0f15c6f7f43479035a6311211d6
GET /widget/o-0NIpQlx3QUlC5A4PNjXhFVZNyBx2pqPA.woff2 HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 12688
last-modified: Tue, 18 Oct 2022 07:22:38 GMT
etag: "d9f5998f47f6f22cb66e7dbf428c76ab"
x-amz-version-id: msVoGOeEvv4rBAjmPT.bOOY9QhLnYq.K
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: HAM50-P2
x-amz-cf-id: X3prfpUvaSuujXUioKllfbrWJRSujJaRcEeTIItJqtcJgekTOM8gKw==
cache-control: max-age=31536000
expires: Thu, 26 Sep 2024 19:22:10 GMT
date: Wed, 27 Sep 2023 19:22:10 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
pebed.dm-event.net/
200 OK 15 B IP
ASN #41690 Dailymotion S.A.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerZeroSSL
Subject*.dm-event.net
Fingerprint62:94:09:AB:C7:F7:23:EF:5E:8A:C8:DB:5B:C3:56:06:6A:6D:44:19
ValidityThu, 17 Aug 2023 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0f0479874bf6f4a7281099b15df27c27
55a490e280d48996e564d00492437eb17faadd28
a29ee2b15c494311c52521766e44af56a3ad2248e7a8ab465e5206463c13d288
POST / HTTP/1.1
Host: pebed.dm-event.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.dailymotion.com/
Content-Type: text/plain; charset=UTF-8
Content-Length: 9327
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Encoding, X-Dm-EventBus-Compression-Duration, X-Dm-EventBus-Worker-Duration
Access-Control-Allow-Methods: POST
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 604800
Content-Type: application/json
Server: edward-ed/2.2.2
Date: Wed, 27 Sep 2023 19:22:10 GMT
Content-Length: 15
cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2
13 kB URL cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 12852, version 1.0\012- data
Hash 3b5df7e947d77201eaf22f3dbdac08cc
21989ca07e4afe32d48982b816b8fac85ce3e668
4a46d61a9aed90cea010dbabcdb510b9ceff1b729a06b169cdbe142f66cbc86f
GET /widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2 HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 12852
last-modified: Tue, 18 Oct 2022 07:22:37 GMT
etag: "3b5df7e947d77201eaf22f3dbdac08cc"
x-amz-version-id: 4jMtpmrTh3NU2il.eSSLRODO9UYgvJk9
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: HAM50-C2
x-amz-cf-id: KM8abeyaVeSEIxlLTJcUkoNH7_q4l1PlUQolOkL0_K8Ml-Hn8lULcg==
cache-control: max-age=31536000
expires: Thu, 26 Sep 2024 19:22:10 GMT
date: Wed, 27 Sep 2023 19:22:10 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/0.20694fc3.chunk.js
16 kB URL cdn.livechatinc.com/widget/static/js/0.20694fc3.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (47599), with no line terminators
Hash 26d133d79fba9ec3cbe8f70169026101
15b92b79765ba129db2f952c60c2cfa1382d917a
a74e0fc0d1c3f5b292767f40bdcfa6739258528d6e4e3ea6622a671eeb9a39b7
GET /widget/static/js/0.20694fc3.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 07 Jul 2023 08:25:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Q.Qu7p2R8XiYG33yo2kVRZATAaGZbIsd
server: AmazonS3
content-encoding: gzip
etag: W/"26d133d79fba9ec3cbe8f70169026101"
vary: Accept-Encoding
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: -iLguH-J23A8hpOzlELpCokPuOCP4sh3fr370F6DboLZ5EMLjExysA==
content-length: 15929
cache-control: max-age=31536000
expires: Thu, 26 Sep 2024 19:22:10 GMT
date: Wed, 27 Sep 2023 19:22:10 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
ivibet.com/app/2856.bd8e9994f2619271.js
419 B URL ivibet.com/app/2856.bd8e9994f2619271.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (757), with no line terminators
Hash 1623c945829aafed78436ccfff164e46
061ec3812fe7063d755cae88dfc5cf7b8871fa4b
bd531b707be93cee987664c448f9d0da710d122c8e86c760b83ae514d2adb4d6
GET /app/2856.bd8e9994f2619271.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/javascript
cf-ray: 80d61d2cf8f8b4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142572-2f5"
last-modified: Wed, 27 Sep 2023 12:52:02 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GreL%2BbqZZUZbWUIGMjx6%2BhMBZTYG%2Firit8vujL9VwyG1UzdaijEB%2FFAxlGlvMZgaMgINTsI5almcsRpC%2BCl%2FloQvhVdUKhRST0QnTfdQXrRsB%2FNbGMPrBDP%2FNas%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.ivibet.com/api/market-descriptions/get-all-outcomes/no
0 B URL platform.ivibet.com/api/market-descriptions/get-all-outcomes/no
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/market-descriptions/get-all-outcomes/no HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oThbH65vRVCvaYq000o5uxRFFf9CSk7zxeS7UPwwUoyUYfxSvK2K9J%2F9B8pJXFb31nlotS3vBqZarrOjK1ob0Ri4YR%2FkaN8BxMKa5TscUhAF8kKnUE5s0yyrHUfUfS311GO1J1g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2dfe71b50c-OSL
X-Firefox-Spdy: h2
ivibet.com/app/1502.db640b81b6ff6dff.js
434 B URL ivibet.com/app/1502.db640b81b6ff6dff.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (769), with no line terminators
Hash c07726f9002f23665b57ea9ba6dfc1fc
b55fe6e04c8b538aa77e6c9138bd63719c118db6
43ae2e555c02e30a9e75ec0b4ec786576b9579629c65a1f4c1ff79676b12dc3e
GET /app/1502.db640b81b6ff6dff.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/javascript
cf-ray: 80d61d2cf8f1b4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142579-301"
last-modified: Wed, 27 Sep 2023 12:52:09 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BIA0fIQOcHBoVDFce8ekc%2BBGkGxoDHvb8Zj14uXmxiq5qFMox220E9js9sMAONc2EVAFro%2FzOMGjURsoPRBH3HTtTEBAVglGMLGg8eayPhypYxrcA4vNOjMqhPI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.ivibet.com/api/match-statuses/get-all/no
200 OK 0 B URL GET HTTP/2 platform.ivibet.com/api/match-statuses/get-all/no
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/match-statuses/get-all/no HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gjbrWjqe1igZ7Gm%2FNRzFMhsS6PoGp04uLWC3dtVJ387RP1blXL019yYNgSSmqJdNpbmzMEcs9QK1SS0cRwfLBs5V5FK6ljMZBfXMRDh70NeaIWxdHZiJ4O1PYAWNOt26dZiMzKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2e0e9cb50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/status
200 OK 0 B URL GET HTTP/2 platform.ivibet.com/api/status
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/status HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OpBGlgKVk%2FbaWFfHguY8TF6IiCojVGKqQAKH0EBXTyFhB%2BwZT5H5LAX2Cj%2F%2FB%2F7r8GxvI7GTZdI8ASBcDN%2BUM7AqunqRBiXTXfy17mwkT1hNbZHEoZ9Eq5%2FUIMiAJi%2Bl6ZTwE%2BY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2e0ea3b50c-OSL
X-Firefox-Spdy: h2
ivibet.com/app/runtime.790d52287d30ecef.js
6.1 kB URL ivibet.com/app/runtime.790d52287d30ecef.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (11339), with no line terminators
Hash cce00ec3677d9982cf4b1c0ebd1cb629
c21168a1432a314825f3d98133aed8ecf87a4e56
ecbadab82414376574b830aca069d6a83a4fd0d3ad778d1b09c370a93fbf7952
GET /app/runtime.790d52287d30ecef.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:10 GMT
content-type: application/javascript
cf-ray: 80d61d26897eb4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142587-2c4b"
last-modified: Wed, 27 Sep 2023 12:52:23 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B74S7AzsPdEQCjPfjIA9t%2FQRch5noyJeKvdEY5Z99t%2BAH5m6f4ZjIQePur3H9ui%2FZqVUkMXSo3E9vLZThBImVjvpylyzbbFOw8LGXZcODb9v33VkCWd7GXhf%2Brc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.ivibet.com/api/market-group-sorting/get-all
204 No Content 0 B URL OPTIONS HTTP/2 platform.ivibet.com/api/market-group-sorting/get-all
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/market-group-sorting/get-all HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yh1tyaf1g%2FdR9gaEQ1aKMOEyDKAwIxdVQnSlnXG7cK%2BwQt5aszZ%2FpvXUfVP8uMOJorZfAraRTnOqrsnkd0JehGkBfkzL%2BDvum3LETLIKTzK630CsUh7ifu%2FY%2BTq7DwQss3Bg2Hg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2e5fa8b50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/v2/ip-data
0 B URL platform.ivibet.com/api/v2/ip-data
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/ip-data HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2dULLw0oTduHg3YVoSpEAKAm6zZgozHZpz%2B5E5ldVQcjjo3zQTS7iGUXVdtBCAZc4E%2BuZ1ha%2B1%2BmzkuZQoMjiHmMfBR0GlCG7tM%2FGBPI2dyWPR%2F7WtrwQatZPwk%2FZ53mxI8FIvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2e6fbab50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/data/get-countries
204 No Content 0 B URL OPTIONS HTTP/2 platform.ivibet.com/api/data/get-countries
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/get-countries HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EWiPRm29TtvZC%2F6rPlwUPcxOQFRttNS5c2qHM59vQtJrymWEg8IRb2D131zDHgFOSOXljq2v%2BD3lJpOIMnLWJHZHQrvcQYzT4%2FiXNHBSwcaRohNOKA6ba60njeZ8HgdU9hBQR0o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2e7fc5b50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/data/get-countries-list
0 B URL platform.ivibet.com/api/data/get-countries-list
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/get-countries-list HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gQIk92uFSZdiY7DRHs8mAdbdnduRfFBddqDFYbgCmvl%2FS1IY1z9wk8qwR8eprFbUdrQDkj4mzKgNwuE44kN3POT6ueinDfesLJBysxKHSAt8wsU0CNNY5g5TQrTULimepb7DMfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2e7fccb50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/data/provinces
0 B URL platform.ivibet.com/api/data/provinces
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/provinces HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I%2FtA8bXPUnVDtJ68XguqIYDdbNslCr7UYq9ZSKxZFN4w0hnV6zrHcJFaapXTC%2BWNHj2yoa1KiQlsrcaMpACpruKk4MNWbjjSZKp02fiNiNw69BM5wuvI7%2FGRwi%2BivcwulhBgwAc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ea80bb50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/v2/data/rates
0 B URL platform.ivibet.com/api/v2/data/rates
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/data/rates HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5eKVIxHqkyVu12gG1iAHcmOGhMJ5NGhXmT0J0XaNVrpBp9%2BSGhZurTAnx271uXRD62UiuXCtT8lbsu%2BC4mc1AWUGVd6UkSl6sye3A4jZlkiBx516ENKZlotHGco6AQk0kL9Rg9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ec846b50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
0 B URL platform.ivibet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UVsbB%2B85HJ7RdG0VLw8%2BG096Wy1Bp2W98iNNcXOrsIDMmiLMoQ4ptJFAMb9sYg4Q1rN7nim5m9RbtQxp1%2BNrvWFUvHP%2FW9janAqDygRcMFffmOiFTmvgkBKA0AVULFHzyobzV2s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ec841b50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/data/get-currencies
200 OK 0 B URL GET HTTP/2 platform.ivibet.com/api/data/get-currencies
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/get-currencies HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0u7iLCGfZyYPaYSadWXPJermscip8iTuDnRho5rd82vTD%2FvPOX%2BMYESp2B48FNrkpVJaAJks4gwMoiSviCdAzspxGYJOKzmnHiSB62RRakOzxOQxKfxMdXhJJYBJjcNU8Iw%2F%2BDc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2eb82bb50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/v2/registration-configurations?desktop=1
0 B URL platform.ivibet.com/api/v2/registration-configurations?desktop=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/registration-configurations?desktop=1 HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ey65KiTCZQSX63NfUAKIOVFFgaf2RAo%2FzGYCeROcLm05icHB9%2BEy7JF2J1jpn8WUoBR%2FnSE6rNSS1JCYKbGu26OIcbYwx7YH3aZUK7EVQYHvFv1qWM5V0LGfzosncHaHxHP2hRU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ed86eb50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/boosted-odds
0 B URL platform.ivibet.com/api/boosted-odds
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/boosted-odds HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=19xaGMLudrz%2BEmjiWZi7iWFcy4t%2F%2FBqhGs91O4WRKYDPlAMrDIU6hcRPRGlP7kaU8ehXYDdptKHDGdWVW3M5XrYc%2Fv9OTVMKtdSj0xMQP9Q8ydL%2BRKX2Hic9DUR8hHTRBrrRJY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ed86db50c-OSL
X-Firefox-Spdy: h2
platform.ivibet.com/api/v1/sport/config
0 B URL platform.ivibet.com/api/v1/sport/config
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/sport/config HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://ivibet.com/
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 27 Sep 2023 19:22:11 GMT
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=INECXkRYxa%2B2Hkm4Cy%2BE%2FZgVWd4ZV%2B3LWSycegBQN%2BHH6a%2BwyEnT9VoC3r5TRcn9S3DYgDbU4ygGSeWBXJgjlR4Lfgd9lsRbhLmk4ohdZZ8sZG3yNyP2kyucNx3d4ivszDHOSeQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ed859b50c-OSL
X-Firefox-Spdy: h2
accounts.livechatinc.com/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/51/token
195 B URL accounts.livechatinc.com/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/51/token
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text
Hash 40e937008e711b468af006f65349c853
bacfd24f0973c2d06686951f8adad40d0ab50445
78811ba909b78171d47c5a76b70d1633101e2090dacc44a3d2d606d9e1e3497a
POST /v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/51/token HTTP/1.1
Host: accounts.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 225
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 195
date: Wed, 27 Sep 2023 19:22:11 GMT
set-cookie: __lc_cid=fcac424a-dc14-4467-995f-3793a60bd4a0; Path=/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/51/token; Domain=accounts.livechatinc.com; Expires=Sat, 27 Sep 2025 19:22:11 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=cf09ee969ef7d165b8cab81fc55b903df3ac74040f431535df1a59f6e1cf4baa82087dfaefdad62b9e31dd00779fe09f0e0f2bf07fb3b3c879dbb9f2f51a; Path=/v2/customer/0423be4a-3d48-484e-a65a-2228122b8c26/51/token; Domain=accounts.livechatinc.com; Expires=Sat, 27 Sep 2025 19:22:11 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cid=fcac424a-dc14-4467-995f-3793a60bd4a0; Path=/licence/g9054575_51/; Domain=accounts.livechatinc.com; Expires=Sat, 27 Sep 2025 19:22:11 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=cf09ee969ef7d165b8cab81fc55b903df3ac74040f431535df1a59f6e1cf4baa82087dfaefdad62b9e31dd00779fe09f0e0f2bf07fb3b3c879dbb9f2f51a; Path=/licence/g9054575_51/; Domain=accounts.livechatinc.com; Expires=Sat, 27 Sep 2025 19:22:11 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__oauth_redirect_detector=counter=1&t=1695842561&tag=b73c806943387a189b5e9ed63ebf0d96e82e1932; Path=/; Expires=Wed, 27 Sep 2023 19:22:41 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
platform.ivibet.com/api/data/get-currencies
200 OK 14 kB URL GET HTTP/2 platform.ivibet.com/api/data/get-currencies
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (10508), with no line terminators
Hash 05c7f14b6301f263bb3055542b7183c3
43ae336fa6b962a3c49d8aa523b76b04641ae041
d1e042858997c20c674c0271ddd43d29a429bc90a34cadcff11ca40ea5c07fc2
GET /api/data/get-currencies HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6vhOIeP6nTZRAciTd%2F5CiH%2BLRoBwxT6hFvWNaS6%2F6y9EDfLf3fcIJg3kIDssYxthy0ikq91H3mGiZHZouQC58QU6DQaZ34nJfcRKe4SJXFXaEYkLYo6lRVISpzTisWwKOMKGBEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2f1bbab4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/custom-assets/logo.webp
1.5 kB URL ivibet.com/custom-assets/logo.webp
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 961b90f18771aaf2553578fca665ac5e
22b475f4168a15502f00d65cffe3d3af823638b1
d37d147a8ce508bb159748cddc5029b1a52717fe9878237967b7d69d9e4b1740
GET /custom-assets/logo.webp HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: image/webp
content-length: 1490
cf-ray: 80d61d322fd6b4f1-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 5472
cache-control: public, max-age=14400
last-modified: Wed, 27 Sep 2023 17:51:00 GMT
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oWQkDX%2BVaDoW9%2ByTZ5sW1NQcYTHsR6GevQg6WqpwrTcJ5m1UDDVratEU9V2Q60iYebnHvF0Moj%2BmIxHrZYm8rfK3MWJeL6W6gjAtnpMerRI%2FOTJx6r6uGjJg8bI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
platform.ivibet.com/api/data/get-countries
204 No Content 5.7 kB URL OPTIONS HTTP/2 platform.ivibet.com/api/data/get-countries
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash ac088148404597f1e6b00779a2779e7c
8669353a22001cc4b45c0f46117a03495ab82394
9ad616515e393b93df43f7adc1274c77e7431950a280b32b5f6e703d91d9a320
GET /api/data/get-countries HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wC3yHRYSCgT4KZzAex%2BTVsAeJuKfLDnRkeE1FINn9vjRB%2B447z1GbXNsa0xYUF1DGyh%2FCV98%2BiN%2FmuXyu6GO7uX7KRaNu5T4XzaTvaUrkG2sPZOvFRRd1v4MV9Ue9gPdm0bEw90%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ecb4eb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
platform.ivibet.com/api/v2/data/rates
1.6 kB URL platform.ivibet.com/api/v2/data/rates
IP
File type JSON data\012- , ASCII text, with very long lines (8460), with no line terminators
Hash c1b462f7c5d08790e2e374322770453a
1f1c5d7ed430d479683307583bfa220dc639fc2a
e27638c17cff7615b8d68be7be125579c1f6883d5ecb43f0efc224f79fecc602
GET /api/v2/data/rates HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BuBDUb3eoh5HOE3lY9Fh0bnnfFjTPUxxMgRxRUDPHkZtJoE%2BWcptw83qfa79NE4AvzXKarnBo02lp5gcrsP6eSBlnVNm5kbhZSqUv3cJYuNJaTGjNnND0Gw8z9JnN%2BdJc1mL1rQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2f1bb5b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
platform.ivibet.com/api/v2/ip-data
1.4 kB URL platform.ivibet.com/api/v2/ip-data
IP
File type JSON data\012- , ASCII text, with very long lines (760), with no line terminators
Hash bc541c33663f16ca3f5731575bb012a3
72d61b3699f5d548fc2ff6b631e887a8ceeb1280
d32a70e59c45b59465451cafb8dcce3ee477aa2dec54ccb455c1ec8ce3068efd
GET /api/v2/ip-data HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WiTR9%2B0nxzvsOSzL%2FAxKeXrESl9uY7cMEAUX0Pjro%2Fc0D2aXnPulSyP04piK3zVBcQ2a7xbu2Y39EGnPG0QNO31hpisf9AnHlw%2FMssxv%2Bi6yW%2FA50Bib7Cp7BcsLz%2FtFq57ht8U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ebb33b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/app/2929.3a08a4b5a6057a02.js
37 kB URL ivibet.com/app/2929.3a08a4b5a6057a02.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (3695), with no line terminators
Hash 878b9cfa2fb81a6ebe856b806afcf882
891056b9bb5161c546dbe091a62b844af8f31b78
40209cf2d76a0e9785fedb755e27320f6d11048458af9c5f659a39baba56a438
GET /app/2929.3a08a4b5a6057a02.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/javascript
cf-ray: 80d61d33398cb4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142572-e6f"
last-modified: Wed, 27 Sep 2023 12:52:02 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k8B4XiHzyOeSqj4fKpqYqB8OsPX%2BHDFYeTtuvr%2F7RDWb0UmGkjM6AjRr%2F1sYn%2Fm4b9dix4pcj7Bn772d1UrfTUCSSCmXEH66HH3Oxn5mR9t1VoQDqlITOoJBjE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.ivibet.com/api/data/get-countries-list
52 kB URL platform.ivibet.com/api/data/get-countries-list
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 90f1a59cbf76ee0e446f95a7375b4ecc
de7bec5196ce445d3c32f2a25a1a70155724cc89
539b7b859fd850ceba7fd41fd434780248335e9d30e41fddb8207eeae845c91f
GET /api/data/get-countries-list HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3JIFMiNK5I1Yuz%2B604qr56j8dky2bOJZM4k%2BQEQbIqIW%2FcUa7mfpBybevRyzGkpjhJbbOXI6f80h6HB%2BsDtKWIixguXfduGRvh2GiZx99nMQAuTaCHdIzteAWtm%2BF69UpuDr7Uk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2ecb51b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X
40 kB URL www.google.com/recaptcha/api.js?render=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X
IP
File type gzip compressed data\012- data
Hash eb324fd5d20dcf62d1827fde1684daea
e68053d1a8a8afec1949ec4746aae589b2c958f3
f504ddc943860f974d12080e3b9efc3e790fe2b10c1fb10c8d57bdca0bdee6f2
GET /recaptcha/api.js?render=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Wed, 27 Sep 2023 19:22:11 GMT
date: Wed, 27 Sep 2023 19:22:11 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
200 OK 2 B URL POST HTTP/2 api.livechatinc.com/v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26
IP
ASN #20940 Akamai International B.V.
Requested by https://secure.livechatinc.com/customer/action/open_chat?license_id=9054575&group=51&embedded=1&widget_version=3&unique_groups=1
Certificate IssuerDigiCert Inc
Subjectlivechat.com
Fingerprint76:42:79:92:87:C7:74:BC:5B:DC:11:4E:54:69:70:2A:5F:78:41:8F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Thu, 15 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /v3.5/customer/action/check_goals?organization_id=0423be4a-3d48-484e-a65a-2228122b8c26 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer dal:wlX3-sl7TJ2fFBv5lrKXPw
Content-Length: 315
Origin: https://secure.livechatinc.com
DNT: 1
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
content-type: application/json
vary: Accept-Encoding
content-length: 2
date: Wed, 27 Sep 2023 19:22:12 GMT
X-Firefox-Spdy: h2
ivibet.com/app/1638.4c13909afc5cea8c.js
188 kB URL ivibet.com/app/1638.4c13909afc5cea8c.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (457), with no line terminators
Size 188 kB (187909 bytes)
Hash dbe08bcab74d2fef337a24344dead988
50cae61c921cdc8a2299a6f10dd48c53be3438b0
253fa89188f3fcbb16c54a5bab64bab21a40a20fd470a03f892475fbd1073c81
GET /app/1638.4c13909afc5cea8c.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/javascript
cf-ray: 80d61d325818b4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142572-1c9"
last-modified: Wed, 27 Sep 2023 12:52:02 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3u9JAlE3GS2O8Oof22SkgcrdX9udlQPyrwC8kxkSdoqy5VR868OmSq%2Bd%2BDn2K3gaVcTTHnvL4auVrmUhgKEVYb6heooJVYrhKk0%2Bx%2FPAE0GdxD%2BIihRLNYq7vuc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/app/4749.ad69efd487ae7186.js
6.6 kB URL ivibet.com/app/4749.ad69efd487ae7186.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (2443), with no line terminators
Hash 74dfc742e882ed338f120050ece36bbf
282878448d6396c761e35c2e61f452b6a585222e
618fddbb5a5172801938675f6b2e70446a23e4517e2dadc00fc5901483c1a339
GET /app/4749.ad69efd487ae7186.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/javascript
cf-ray: 80d61d33397bb4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142579-98b"
last-modified: Wed, 27 Sep 2023 12:52:09 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8s1a%2BK%2FUJR4j35DKwDtRohyK7qqFiNLtLaBmnOYUEiSfT7hfG%2FH8AGeeiPxM0Z6VB5bgPThz2jBq9mY6CGeMf8qM4o1eqmy7TWcCkYw1gACtmWgVMiVYu6nTaqw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/app/1742.a91d32032fb38c4c.js
1.8 MB URL ivibet.com/app/1742.a91d32032fb38c4c.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (1849), with no line terminators
Size 1.8 MB (1764460 bytes)
Hash 4fa4a39a181fb776bfcd7e4ac5cfd1bb
9d325a0ea6c292436ffbdbadbec9185cef7509e2
26ee4c99d1ffd2288777243dfc82b1678405cd83dec9276ead12b9bafa855ee9
GET /app/1742.a91d32032fb38c4c.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/javascript
cf-ray: 80d61d333985b4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142587-739"
last-modified: Wed, 27 Sep 2023 12:52:23 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xLk%2BFYxbcqe8s1SukE8brknZnEm4b1ognyigGBKCj3BjxAeu6N2TFSzdAmsACdEppCF79Wfc6aO3B69oEIUA5wvLfr%2F4o7YpzYgQAoBb8qZsUmdQbVcny3ApnLY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/app/4031.b7da24ff9686b832.js
8.9 kB URL ivibet.com/app/4031.b7da24ff9686b832.js
IP
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (1237), with no line terminators
Hash 5b8e4b00b64c3ce2012bd4889ecd011b
28142183ccf83013eba36d042f82c78fd06fa560
a9f45a1377a9f7012ac144c6cff8b70289df3a35be80ffa7775ac64d14f98aae
GET /app/4031.b7da24ff9686b832.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/javascript
cf-ray: 80d61d33499ab4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142572-4d5"
last-modified: Wed, 27 Sep 2023 12:52:02 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rXr8imTQcNjl9mGNLjfYBMLyUugrG7%2F33GdTDmSPO4qYjhlxvnSfCEe65swWc1uo0W7y83vUz4oI58Cb9VyUqMmVejuGtmj77vFn2DRFiPOoUqWne4ckiW5cLI0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-mifinity-mifinity.svg
59 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-mifinity-mifinity.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text
Hash 859108d10545d6fd1e01e257611bcaaf
b1cdd894ddba546d6bdaa85e95b780f4104c3658
2de0f1212b60bf03b3160d732f8e1d553958049cb50f0ada1c3df1fd47a196a0
GET /img/payment-iq-mifinity-mifinity.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 59172
vary: Accept-Encoding
date: Wed, 27 Sep 2023 19:22:14 GMT
last-modified: Fri, 29 Apr 2022 08:57:13 GMT
etag: "859108d10545d6fd1e01e257611bcaaf"
x-amz-meta-s3cmd-attrs: atime:1651222628/ctime:1651222628/gid:1000/gname:yevgen/md5:859108d10545d6fd1e01e257611bcaaf/mode:33204/mtime:1651222394/uid:1000/uname:yevgen
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KGT63LHv8nQHpIJ5BA6O985AIb6pkvsHNjOB_MvD1EzNEpa9y0nceg==
X-Firefox-Spdy: h2
platform.ivibet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
4.2 kB URL platform.ivibet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
IP
File type JSON data\012- , ASCII text, with very long lines (912), with no line terminators
Hash 864dd500339aa32de51d5c2f344651b5
0b3e2390170ae4a94af04e6ac7c2d54cc05730f8
d5efdfe92e1a5ec59ac525f54b3e2871968c6c91ee52d971a77071b88d329e1f
GET /api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVfFrIFvfc0H%2FA7Uga1KSiBvh4mGDX0d58CL5XH4fSsWtgPG2V8ZQf6KMjrfnIY7wy3ldwkq4aTvv78SuLfaNgia%2ByiApkIBqioQvJp08c%2Br6AUpcGANE76s6mC0VV4bPDTxP9M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2f1bb6b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/app/8522.464563b6a9014fcb.js
200 OK 11 kB URL GET HTTP/2 ivibet.com/app/8522.464563b6a9014fcb.js
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (2374), with no line terminators
Hash 5528bbbfe39832980157da9588f4c209
b8145237360fb36607a19c1c8c451e6d61e7790e
2d8cbc124cfaabc7d9d55301e9715b946630b2ee35e3c3f0216eafbfa66477bb
GET /app/8522.464563b6a9014fcb.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/javascript
cf-ray: 80d61d33396fb4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142579-946"
last-modified: Wed, 27 Sep 2023 12:52:09 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tbHdSOKESMVFOodJU9Owki6ncxBqPP5vMxjVUERbdyvt1CiY%2FYryAZEjL8C%2BtWVXzEzplVk4R9HrITKrKDgegZHGJjQvhqpeTDgmCig0l3aXF6L3p8ZW4b6ZIE0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.ivibet.com/api/v2/registration-configurations?desktop=1
5.6 kB URL platform.ivibet.com/api/v2/registration-configurations?desktop=1
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 546d7d9e16f4a456faf76b3d6e295f7c
d95ac557cebd2e5aceb5950528d9e834aa40bd58
e965f7c6d05285af03a9fee7efb6d66a346edffd065a99e3466d637a0570ac8d
GET /api/v2/registration-configurations?desktop=1 HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dyp0BghcfgDvWDtW4JM%2F2h4SlRzljJ9unKqij%2B2Hn%2FSIyGlS%2FrrTOutmCN%2FUVAFLq8eJ%2Byfx4GEeQHdW2QazQHvYHcMOYioEVnGztUVeVeyRafjZopJsUlTeTTteZy0nbTiM1JE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2f2bd6b4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-creditcard.svg
5.1 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-creditcard-creditcard.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (2787), with CRLF line terminators
Hash 0b172ad6b5fbf48a1e5b3835b3303fc3
54eb2ee4c1af305590d3740f47900c6215c23f06
9c653b4d844d79f42ea7a7270126b5e424bef07d0b852105ff718eb53b88bf49
GET /img/payment-iq-creditcard-creditcard.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 5076
vary: Accept-Encoding
date: Wed, 27 Sep 2023 19:22:14 GMT
last-modified: Wed, 22 Sep 2021 12:02:04 GMT
etag: "0b172ad6b5fbf48a1e5b3835b3303fc3"
x-amz-meta-s3cmd-attrs: md5:0b172ad6b5fbf48a1e5b3835b3303fc3
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OMdDydcoX7L0WlGBy7WCD-zjVakhtWUnHQDwTRA_2Fv8wGvjNxi1OA==
X-Firefox-Spdy: h2
dueh421xfqdi.cloudfront.net/img/payment-iq-ezeewallet-ezeewallet.svg
51 kB URL dueh421xfqdi.cloudfront.net/img/payment-iq-ezeewallet-ezeewallet.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text
Hash 48df337acc9cf111aeeb8b2b8203b2bc
eac3403b7174ab6aabdfc3f946c039e22bee2925
741bf98b852e9c6aa7784e3159b7467541a392a0362a68e5302ce709456e20dc
GET /img/payment-iq-ezeewallet-ezeewallet.svg HTTP/1.1
Host: dueh421xfqdi.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 51265
vary: Accept-Encoding
date: Wed, 27 Sep 2023 19:22:14 GMT
last-modified: Thu, 17 Feb 2022 14:12:33 GMT
etag: "48df337acc9cf111aeeb8b2b8203b2bc"
x-amz-meta-s3cmd-attrs: atime:1645107103/ctime:1645107147/gid:1000/gname:yevgen/md5:48df337acc9cf111aeeb8b2b8203b2bc/mode:33204/mtime:1645107101/uid:1000/uname:yevgen
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EwYuWcqnEx4IsPmAtoyT-M94SX59SaPPBpYS_7VDLBdnSL31KOEaDQ==
X-Firefox-Spdy: h2
speedtest.dailymotion.com/speedtest
0 B URL speedtest.dailymotion.com/speedtest
IP
ASN #41690 Dailymotion S.A.
Certificate IssuerZeroSSL
Subjectspeedtest.dailymotion.com
Fingerprint26:A6:B5:18:7E:2C:83:8A:4B:A9:C7:51:BE:5D:9D:74:57:1D:FC:7B
ValiditySat, 12 Aug 2023 00:00:00 GMT - Fri, 10 Nov 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /speedtest HTTP/1.1
Host: speedtest.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.dailymotion.com
Sec-WebSocket-Protocol: speedtest
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XxR69+MVoSDLNpH8/RwrzA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; dmvk=651480db194da; ts=428744; usprivacy=1---
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: RityD2zLTGv/1vBoW8ECNdyDTKI=
Sec-Websocket-Protocol: speedtest
Upgrade: websocket
Date: Wed, 27 Sep 2023 19:22:13 GMT
www.google.com/recaptcha/api2/anchor?ar=1&k=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X&co=aHR0cHM6Ly9pdmliZXQuY29tOjQ0Mw..&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=fh1s9svs56ma
53 kB URL www.google.com/recaptcha/api2/anchor?ar=1&k=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X&co=aHR0cHM6Ly9pdmliZXQuY29tOjQ0Mw..&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=fh1s9svs56ma
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (43800)
Hash 3d1e01dd460dd619b542f5a6d0af6330
6d547120ce5c243acf337a1e8f2c9d59b3fa9c3a
a9d7016be21cc25007a51a26ff7c8db29bf401bdbd02c22112aaa4851fd29032
GET /recaptcha/api2/anchor?ar=1&k=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X&co=aHR0cHM6Ly9pdmliZXQuY29tOjQ0Mw..&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=fh1s9svs56ma HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 19:22:13 GMT
content-security-policy: script-src 'nonce-WUGokgggnErXCrWeBditZg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
200 OK 186 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 186 kB (185934 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 27 Sep 2023 17:09:12 GMT
expires: Thu, 26 Sep 2024 17:09:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 7981
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X&co=aHR0cHM6Ly9pdmliZXQuY29tOjQ0Mw..&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=fh1s9svs56ma
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:24:26 GMT
expires: Fri, 20 Sep 2024 15:24:26 GMT
cache-control: public, max-age=31536000
age: 532667
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 26 Sep 2023 05:45:56 GMT
expires: Wed, 25 Sep 2024 05:45:56 GMT
cache-control: public, max-age=31536000
age: 135377
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/recaptcha/api2/logo_48.png
2.2 kB URL www.gstatic.com/recaptcha/api2/logo_48.png
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 14:42:45 GMT
expires: Fri, 29 Sep 2023 14:42:45 GMT
cache-control: public, max-age=604800
age: 448768
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
zerossl.ocsp.sectigo.com/
315 B URL zerossl.ocsp.sectigo.com/
IP
Hash 12c84977e28ed1f508b1972e277ad854
e1d7e98fad59c9fe172670a70aa16ede972e94ef
a9dc2304b3e1697a868ec74251ff9237d91124d4512e62dacb60dfa727d9a52d
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 27 Sep 2023 19:22:13 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Wed, 27 Sep 2023 03:52:01 GMT
Expires: Wed, 04 Oct 2023 03:52:00 GMT
Etag: "e1d7e98fad59c9fe172670a70aa16ede972e94ef"
Cache-Control: max-age=550097,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80d61d3b8db556a2-OSL
www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
200 OK 186 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type ASCII text, with very long lines (549)
Size 186 kB (185934 bytes)
Hash b9fa78b438652d549f20ad262bffa843
ac85e9636a3cf1c7a935ad2b1a7eeefcf2799feb
97ac5eba21b58460149454c9115b09ed01937650647fdcfe405d5d61d85b72e5
GET /recaptcha/releases/Ai7lOI0zKMDPHxlv62g7oMoJ/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 27 Sep 2023 17:09:12 GMT
expires: Thu, 26 Sep 2024 17:09:12 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 04:01:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 7981
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
200 OK 427 B URL GET HTTP/3 www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ
IP
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X&co=aHR0cHM6Ly9pdmliZXQuY29tOjQ0Mw..&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=fh1s9svs56ma
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type gzip compressed data\012- data
Hash 1a5bc18c7789b1d136dae79993f5e5ce
9b8d3641daa0976965a7aa6f7a15eec799782a90
3ae8b97aed92b9a189f3538521273590f58e28928affb9e8484ad97d8b39b516
GET /recaptcha/api2/webworker.js?hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Leb6XkeAAAAAPO-jxw_Z4IlAKUCKuBr23d3TW_X&co=aHR0cHM6Ly9pdmliZXQuY29tOjQ0Mw..&hl=en&v=Ai7lOI0zKMDPHxlv62g7oMoJ&size=invisible&cb=fh1s9svs56ma
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
expires: Wed, 27 Sep 2023 19:22:13 GMT
date: Wed, 27 Sep 2023 19:22:13 GMT
cache-control: private, max-age=300
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
st.nyc.dailymotion.com/speedtest
0 B URL st.nyc.dailymotion.com/speedtest
IP
ASN #41690 Dailymotion S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /speedtest HTTP/1.1
Host: st.nyc.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.dailymotion.com
Sec-WebSocket-Protocol: speedtest
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Y3Agy3C5MVz9oCCamwLvXA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; dmvk=651480db194da; ts=428744; usprivacy=1---
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: nwxY30QexwyfWpuTZ0WmLushz3Q=
Sec-Websocket-Protocol: speedtest
Upgrade: websocket
Date: Wed, 27 Sep 2023 19:22:13 GMT
st.sv4.dailymotion.com/speedtest
0 B URL st.sv4.dailymotion.com/speedtest
IP
ASN #41690 Dailymotion S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /speedtest HTTP/1.1
Host: st.sv4.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.dailymotion.com
Sec-WebSocket-Protocol: speedtest
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +cE8uuXh6XWFbLNDjSUDbA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; dmvk=651480db194da; ts=428744; usprivacy=1---
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: DKOBARC/MgcxNYjhbIaRL6U6ZLA=
Sec-Websocket-Protocol: speedtest
Upgrade: websocket
Date: Wed, 27 Sep 2023 19:22:14 GMT
st.sg1.dailymotion.com/speedtest
0 B URL st.sg1.dailymotion.com/speedtest
IP
ASN #41690 Dailymotion S.A.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /speedtest HTTP/1.1
Host: st.sg1.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.dailymotion.com
Sec-WebSocket-Protocol: speedtest
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RKSzcuvP+8jgUdSN0bZkrA==
DNT: 1
Connection: keep-alive, Upgrade
Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; dmvk=651480db194da; ts=428744; usprivacy=1---
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Sec-Websocket-Accept: KaBAQj8IN5GEejoWO7hlWtZyLjU=
Sec-Websocket-Protocol: speedtest
Upgrade: websocket
Date: Wed, 27 Sep 2023 19:22:14 GMT
streamtape.com/js/player.ec3b7e.js
200 OK 148 kB URL GET HTTP/3 streamtape.com/js/player.ec3b7e.js
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerGoogle Trust Services LLC
Subjectstreamtape.com
Fingerprint3F:22:3F:1F:2F:0F:D7:77:64:84:0E:C5:7F:1D:99:6C:B7:DE:BC:9F
ValidityMon, 21 Aug 2023 21:30:52 GMT - Sun, 19 Nov 2023 21:30:51 GMT
File type ASCII text, with very long lines (549), ASCII text, with very long lines (57504)
Size 148 kB (148031 bytes)
Hash 1781a0087c11152a2361ca6c84b13fab
87360f858b201c3e28f4af24b2fc7c2d8a8d0232
00c57c8b0121e3c2154bc0c181a5c01ad10550648cc4835a62dc887d5427c656
GET /js/player.ec3b7e.js HTTP/1.1
Host: streamtape.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/e/8BMaxrqyOjiozBw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 04 Feb 2021 09:32:45 GMT
etag: W/"601bbf3d-2423f"
cache-control: max-age=345600
cf-cache-status: HIT
age: 5417
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V6lJSUFPYu1j%2FDmuRalzHwctg3y%2FuDXBfabnPqZOYy5iIWjCVvWrE0v5FsfXCxkWWGixTG6HYgUrfonb5S0YZTW6dMB3c2D3uUWuubNwYYYc81EgmGmnCm8htk7w%2BkxKhg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61cf39967b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
200 OK 386 B URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/dating/default/us/desk-all/js/script.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint48:B7:50:3B:95:5B:52:CB:74:D5:D6:39:E2:DD:12:9D:05:51:D6:87
ValidityWed, 23 Aug 2023 16:10:20 GMT - Tue, 21 Nov 2023 16:10:19 GMT
File type ASCII text, with very long lines (399), with no line terminators
Hash 022602a468da44628060800173771da2
9be813fbfebbcb2aa46d8c6b8abec68b3d16c89c
6742c376e658c34d09b2dc5772bd798e3cd52bb265758bac5bce184f8ee7b5cc
GET /sb/notifications/dating/default/us/desk-all/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mavanimes.co
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: application/javascript
last-modified: Tue, 14 Apr 2020 14:09:27 GMT
etag: W/"5e95c417-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 30624
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eVEWi6ucdX4Qv91MpN%2FvZ5xB8lCwVIcPsA0szdDWZ12uFc3ojnxR7nNaU3ocqZxTePtCM3d5xw%2FBgVL237o8KfR318yL%2F2DnYUPNYdCDNMTT7F%2BhaCvLhal0qbB1TwD4pCigTvdOG1h3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61d097d2d7735-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ivibet.com/api/footer/get-content?lang=nor_NO
200 OK 7.6 kB URL GET HTTP/2 ivibet.com/api/footer/get-content?lang=nor_NO
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (8581), with no line terminators
Hash b5edb536e132c5e0d5ca6e6b586a8d8b
bf59adaf81de552cf0a8d325d2d0bd75a0c31a00
8e2574f2b48e176de7e75d14a959a5825b15dd5a8c3e7d6f1be1f96654db06ff
GET /api/footer/get-content?lang=nor_NO HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/json
cf-ray: 80d61d3369c4b4f1-OSL
cf-cache-status: DYNAMIC
cache-control: no-cache, private
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mXpO7HDCPX0pzZdOhJMYK49GFZPIJJUHLWFE5C4ADWdyz8w6ZxK%2BlskF3zuYvDWZrCcag4mK8Y%2FLT9ezEbctKFP4qlhlDxiVoc3dhLlLaD3Z98jT1NDrYk8W9Zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhfWlehlBxLfEQ3uhABoRuC0Y5Bku0wzl7qEon2LnCrhZ2VEPYuzD_cbio2vD16kAyBSdExF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1727045289%3A1695842526222832&theme=glif
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhfWlehlBxLfEQ3uhABoRuC0Y5Bku0wzl7qEon2LnCrhZ2VEPYuzD_cbio2vD16kAyBSdExF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1727045289%3A1695842526222832&theme=glif
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhfWlehlBxLfEQ3uhABoRuC0Y5Bku0wzl7qEon2LnCrhZ2VEPYuzD_cbio2vD16kAyBSdExF&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1727045289%3A1695842526222832&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://streamtape.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-mxSWiiXu-vJX0nijx3IyVQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
aswpsdkus.com/notify/v1/ua-sdk.min.js
200 OK 216 kB URL GET HTTP/2 aswpsdkus.com/notify/v1/ua-sdk.min.js
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerDigiCert Inc
Subjectaswpsdkus.com
Fingerprint0D:78:50:CB:D1:13:B4:BA:BC:67:06:29:8A:F9:E9:AC:29:C8:8B:41
ValidityMon, 06 Feb 2023 00:00:00 GMT - Thu, 08 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 216 kB (215889 bytes)
Hash 0410596507c01a628431d4e05f0b9ee4
cae6135b13ae51821e453e66354035d49d81ac5a
687c587332e319146dd4374b8a7e9415ec0b0a318020241283427b95085a11ca
GET /notify/v1/ua-sdk.min.js HTTP/1.1
Host: aswpsdkus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ADPycds0bgks9hiUPWz0cq941ur9_6R4AI7VtJiVwotO_vOEIl61Hpvs7lY0PHvizV9Czsa5F47PvURvZ2qFC7sa1xiZ
x-goog-generation: 1692696629504327
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 39227
content-encoding: gzip
x-goog-hash: crc32c=RyUZUg==, md5=YXj8vV0/90H8iKu5c4ACIw==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 39227
server: UploadServer
date: Wed, 27 Sep 2023 19:17:45 GMT
expires: Wed, 27 Sep 2023 19:22:45 GMT
cache-control: public,max-age=300,no-transform
age: 264
last-modified: Tue, 22 Aug 2023 09:30:29 GMT
etag: "6178fcbd5d3ff741fc88abb973800223"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
platform.ivibet.com/api/sport/list/-1/0/no
200 OK 23 kB URL GET HTTP/2 platform.ivibet.com/api/sport/list/-1/0/no
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (22858), with no line terminators
Hash 3be6d74d0d01bd78f22009761d8b2ac1
76be1baa8230c2b6f1e866f4bef32900d273dcd8
4f1f7579762601f270d266d364d939039d62cb677a63d6ea06eccdcdbc9b43e6
GET /api/sport/list/-1/0/no HTTP/1.1
Host: platform.ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://ivibet.com
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Cookie: _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://ivibet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jFfwZJKR%2FPZB4nWw4OkyDG58bzikSdUeHZEwjEOF3XQCLAVYeTFl3MYbm0oWbTn%2B6Igs08J1WJJxdZ6IjFb4%2FJf6FgJjJaaEgpqCceqJ2UCaHod5xESQXHQy%2BuTHTvVxuYBvqb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61d2e7adfb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic
200 OK 11 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
Hash 26748da50b2e99876bd774065cf8b8a8
82b3a6e1eb483c9ca4be044a3c7b25e3bfb9ddf4
d5b43c13f29156b87b601565e8abe066f9dc7ef32d856deeee11f099f1807748
GET /css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 27 Sep 2023 19:22:09 GMT
date: Wed, 27 Sep 2023 19:22:09 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ivibet.com/app/common.d8607dbf0fdcf272.css
200 OK 9.1 kB URL GET HTTP/2 ivibet.com/app/common.d8607dbf0fdcf272.css
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (9140), with no line terminators
Hash f213f9bc7908eb8f26dd45d0f5c94d28
c52ea312149bf607ccd9fd9d51d8a515102a551c
9696c4cd6f068154b2d57541b18528962ff35f2ce59f5aea1102cbe611cafc24
GET /app/common.d8607dbf0fdcf272.css HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: text/css
cf-ray: 80d61d2ce8deb4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142580-23aa"
last-modified: Wed, 27 Sep 2023 12:52:16 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PfdPErYn2eXywhm14ve6Ahz05TtJyDHFEs7dK%2BkvCeXcG1%2FkRVlF5BjCBKOx6J%2B%2FGZfBFeNtm3c4dlS7w6c72y%2Fd6xjvyrRDirFFAGWURWFmDK%2BlWbyO5wUnjaU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
static1.dmcdn.net/ABCFavorit-Regular.woff2
200 OK 50 kB URL GET HTTP/2 static1.dmcdn.net/ABCFavorit-Regular.woff2
IP
ASN #20940 Akamai International B.V.
Requested by https://www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
Certificate IssuerLet's Encrypt
Subjectapi.dmcdn.net
FingerprintEB:84:B4:8E:D0:C5:82:03:F0:1B:1E:A2:02:29:41:4A:15:19:F1:99
ValidityThu, 10 Aug 2023 14:40:20 GMT - Wed, 08 Nov 2023 14:40:19 GMT
File type Web Open Font Format (Version 2), TrueType, length 49952, version 2.6553\012- data
Hash 56f1938d6521db67fad83c055c4173ed
ebfb81e42d4bf2c1c5825e9e711facc3b81728a7
cae765e89c38588186de4b36811acb8e873a674a2ca9223dca8fb391a012082b
GET /ABCFavorit-Regular.woff2 HTTP/1.1
Host: static1.dmcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://www.dailymotion.com/
Origin: https://www.dailymotion.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: DMS/1.0.42
content-type: application/octet-stream
strict-transport-security: max-age=31708800; includeSubDomains; preload
server-timing: total;dur=1, dc;desc="dc3"
timing-allow-origin: *
accept-ranges: bytes
etag: "64b92a8b-c320"
last-modified: Thu, 20 Jul 2023 12:37:31 GMT
content-length: 49952
expires: Thu, 12 Oct 2023 13:11:06 GMT
date: Wed, 27 Sep 2023 19:22:06 GMT
x-status: Hit from child
access-control-allow-origin: *
cache-control: max-age=2592000
X-Firefox-Spdy: h2
www.mavanimes.co/wp-content/cache/minify/3119b.js
200 OK 40 kB URL GET HTTP/3 www.mavanimes.co/wp-content/cache/minify/3119b.js
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectmavanimes.co
FingerprintBC:78:43:91:37:39:A2:49:DA:78:24:55:1F:B6:04:C5:A8:6E:0A:F0
ValidityFri, 01 Sep 2023 10:15:44 GMT - Thu, 30 Nov 2023 10:15:43 GMT
File type ASCII text, with very long lines (32013)
Hash 014bd540cdc4ef41a60cf2e3a34a33a6
d658b5496d06999aab514e8eb10cceaa41e8ec74
950722c61a792c55f561429642d16445f26be4ec90c77face35fd08be9f29256
GET /wp-content/cache/minify/3119b.js HTTP/1.1
Host: www.mavanimes.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/jigokuraku-09-vostfr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:00 GMT
content-type: application/x-javascript
cf-bgj: minify
cf-polished: origSize=40399
last-modified: Tue, 26 Sep 2023 18:05:30 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6360
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A%2BvR9ptGObs76pcYZaAXt1zc0rXlAbGBLAs0r9PCRe2cZP8hceExDIsS17SciZexMVgvFXrZun66Mi93balL0%2BGc5HFz4ddD2iaHgjUwA%2F5M2hNTX1nc6TIL6Gru4diKj6pb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61ce6c93156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
run-syndicate.com/do2/59897b6b6b9d44ec8bb607f25bd13167/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_caSZ5
200 OK 16 kB URL GET HTTP/2 run-syndicate.com/do2/59897b6b6b9d44ec8bb607f25bd13167/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_caSZ5
IP
ASN #24940 Hetzner Online GmbH
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectrun-syndicate.com
Fingerprint71:C4:16:0E:07:0D:0A:49:7E:CF:64:94:33:FC:88:9E:A7:DC:D2:9D
ValidityTue, 12 Sep 2023 09:07:31 GMT - Mon, 11 Dec 2023 09:07:30 GMT
File type ASCII text, with very long lines (16139), with no line terminators
Hash 0400d28b0ad1e81d4b3666e3a5fa636d
88d1d348f72aefedbdec1b46a9c8712374522af5
58ca3944e268e3c7e9210eb968642702b93291d0092f59890597d24220b150f3
GET /do2/59897b6b6b9d44ec8bb607f25bd13167/dynamic?format=jsonp&count=3&w=1280&h=1024&keywords=Regarder,Jigokuraku,VOSTFR,gratuitement,streaming,illimit%C3%A9,avec,Rutube,Openload,Dailymotion,Youtube,sur,Mavanime,Voir,tous,vos,%C3%A9pisodes,streaming,Jigokuraku,VOSTFR,Mavanime&adtype=img-left&callback=callback_caSZ5 HTTP/1.1
Host: run-syndicate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Cookie: ts_uid=50616659-2253-4625-a505-0e1d87be737f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Sep 2023 19:22:02 GMT
content-type: application/javascript; charset=utf-8
pragma: no-cache
expires: 0
vary: Accept-Encoding, *
x-api-version: 2
x-request-id: d09eb34dd474f1d8
set-cookie: ts_uid=50616659-2253-4625-a505-0e1d87be737f; expires=Wed, 27 Mar 2024 19:22:02 GMT; domain=.run-syndicate.com; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.runative-syndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
content-encoding: gzip
X-Firefox-Spdy: h2
www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
200 OK 56 kB URL GET HTTP/1.1 www.dailymotion.com/embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0
IP
ASN #41690 Dailymotion S.A.
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerZeroSSL
Subject*.dailymotion.com
FingerprintF3:DD:2D:AA:27:4B:71:7D:2C:91:42:D8:7F:C3:14:84:D9:7D:FE:E7
ValiditySun, 24 Sep 2023 00:00:00 GMT - Sat, 23 Dec 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15806)
Hash b655629e599644dcc11e0c0d6b647338
ecea48485116425ee85543796178d851318c296b
aed4c11650b2cb247722bc22df9cee8c93fe2632ac8b1286d6c0d47a95040143
GET /embed/video/x6my46z?ui-logo=0&autoplay=1&mute=1&quality=240&controls=1&endscreen-enable=0&sharing-enable=0 HTTP/1.1
Host: www.dailymotion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Security-Policy-Report-Only: default-src https: blob: wss: data: android-webview-video-poster: android-webview: chrome-extension: safari-extension: 'unsafe-eval' 'unsafe-inline'; report-uri https://www.dailymotion.com/content_security_policy_report_uri
Server: DMS/1.0.42
Vary: X-DM-SSL,Accept-Encoding
Cache-Control: no-cache, no-store
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Content-Security-Policy: upgrade-insecure-requests
Strict-Transport-Security: max-age=31708800; includeSubDomains; preload
Date: Wed, 27 Sep 2023 19:22:03 GMT
Server-Timing: total;dur=20, dc;desc="dc3"
Link: <https://static1.dmcdn.net>; rel=preconnect
Keep-Alive: timeout=60, max=5000
Timing-Allow-Origin: *
Connection: Keep-Alive
Set-Cookie: v1st=DD5CB8C6C851359352CC5A56B66390AF; expires=Sun, 27-Oct-2024 20:22:03 GMT; Max-Age=34218000; path=/; domain=.dailymotion.com; Secure; SameSite=none;
dmvk=651480db194da; path=/; domain=.dailymotion.com; Secure; SameSite=none;
ts=428744; expires=Sun, 27-Oct-2024 20:22:03 GMT; Max-Age=34218000; path=/; domain=.dailymotion.com; Secure; SameSite=none;
Expect-Ct: max-age=0, report-uri="https://www.dailymotion.com/content_security_policy_report_uri"
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 17529
ivibet.com/assets/fonts/gilroy/Gilroy-ExtraBold.woff
200 OK 35 kB URL GET HTTP/2 ivibet.com/assets/fonts/gilroy/Gilroy-ExtraBold.woff
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 35332, version 0.0\012- data
Hash 2037b7c09569dd6f0ca302d92ec0c23e
fa50cb1c6e90f5608cb8f347b124847a0b5de9fe
ceef83c155b8c977b7c98f4dc5e6068071847a95fe327a466033b783cfae1903
GET /assets/fonts/gilroy/Gilroy-ExtraBold.woff HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/app/styles.eda4ec0407fac5b8.css
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: font/woff
content-length: 35332
cf-ray: 80d61d347b21b4f1-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "651425a0-8a04"
last-modified: Wed, 27 Sep 2023 12:52:48 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Es1RB77W6EWNOQIumnWe%2F3Os3s%2B2DjsfzpGGfYYnH%2Bp38GjofSz%2B0SabgJc%2ByhcvPt2hrB8Xiz4aQ%2FlVhBopUQ8ESeROVpGHWPQ3%2F7BIXl%2B54yvwgNIvlGYZnb8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
www.mavanimes.co/wp-content/uploads/2018/03/cropped-mav-192x192.jpg
200 OK 8.2 kB URL GET HTTP/3 www.mavanimes.co/wp-content/uploads/2018/03/cropped-mav-192x192.jpg
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectmavanimes.co
FingerprintBC:78:43:91:37:39:A2:49:DA:78:24:55:1F:B6:04:C5:A8:6E:0A:F0
ValidityFri, 01 Sep 2023 10:15:44 GMT - Thu, 30 Nov 2023 10:15:43 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3\012- data
Hash d321f93884b28d022986cca07de393c0
72dd6af0031a42dd2b3b962888c1340a0da08e6c
4f1ac0d987e6db03d6d00ac5faf9c0b2523bab74715460c865cf430f68a45c51
GET /wp-content/uploads/2018/03/cropped-mav-192x192.jpg HTTP/1.1
Host: www.mavanimes.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ppu_main_bd33eec695a36a5eee547fef54685028=1; sb_main_86f32c7f018e7bea0d999d8785cfb4fa=1; sb_count_86f32c7f018e7bea0d999d8785cfb4fa=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=nullsglitter.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:05 GMT
content-type: image/jpeg
content-length: 8169
last-modified: Thu, 22 Mar 2018 17:31:32 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1384
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KwQWfWK3dT9GwSZYE1UcnEBLtjLIflh1bZQNA%2FtvZ0Zhuv8Js0kxHhNAKfap9lz27EIfmCuiQmfhcghibgCDEmCyzHcGIi53QPOKY2zzPmyZszyH5OJDf7foWYZ%2BJ8X3iuZ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80d61d05ee2056c6-OSL
alt-svc: h3=":443"; ma=86400
a.sportradarserving.com/ul_cb/pixel?type=js&aid=1525&id=6064
200 OK 1.5 kB URL GET HTTP/1.1 a.sportradarserving.com/ul_cb/pixel?type=js&aid=1525&id=6064
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerEntrust, Inc.
Subject*.sportradarserving.com
FingerprintD0:C1:99:26:D2:AD:C7:6B:F2:AD:C4:44:44:70:7C:4F:D2:49:9B:C4
ValidityWed, 20 Sep 2023 07:44:29 GMT - Mon, 14 Oct 2024 07:44:28 GMT
File type ASCII text, with very long lines (1527), with no line terminators
Hash b7ecb05fb9242a5f1117c601e267f6ca
6a26884fc67588b3c0c840de988f6d681d925d4f
e8d15e43ae36f9c1323d6c732f222e88e11b5fe4a4aab311ad9d25cf593e6d38
GET /ul_cb/pixel?type=js&aid=1525&id=6064 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ivibet.com/
DNT: 1
Connection: keep-alive
Cookie: zuuid=8bba19f7-62a4-4bb7-9a91-ba6b77a85fdd; c=1695842530; zuuid_lu=1695842530
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Wed, 27 Sep 2023 19:22:10 GMT
Set-Cookie: zuuid=8bba19f7-62a4-4bb7-9a91-ba6b77a85fdd; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1695842530; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1695842530; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
cm2=!bidswitch,465171730; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
bss=!bidswitch,465099730; path=/; expires=Thu, 26-Sep-2024 19:22:10 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 1527
Connection: keep-alive
www.mavanimes.co/jigokuraku-09-vostfr/
200 OK 39 kB URL User Request GET HTTP/2 www.mavanimes.co/jigokuraku-09-vostfr/
IP
Certificate IssuerLet's Encrypt
Subjectmavanimes.co
FingerprintBC:78:43:91:37:39:A2:49:DA:78:24:55:1F:B6:04:C5:A8:6E:0A:F0
ValidityFri, 01 Sep 2023 10:15:44 GMT - Thu, 30 Nov 2023 10:15:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jigokuraku-09-vostfr/ HTTP/1.1
Host: www.mavanimes.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:21:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 27 Sep 2023 19:21:59 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ayui%2FyyRIgIiL10h%2FZIhjrPsmIed6yJwldFaasf%2FjVPA2Ikp%2Fs%2BgPe5RpS6IXidFljzKVwkpJsnJcEYQEEd98I59zGQoBTdnilXznwaevN3ymqSQ6IN0kPhCueR2R8hw4VDn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61ce23e27b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ivibet.com/app/9320.de67722692873dac.js
200 OK 4.2 kB URL GET HTTP/2 ivibet.com/app/9320.de67722692873dac.js
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4248), with no line terminators
Hash 55f22291d5f1901452738b39894846ed
466b974d539ee22f053287c35bd1467e53d7f502
bfbf730eec95238cb30a1d3b684bc30fe1aa78229fac9eda177632df800d8399
GET /app/9320.de67722692873dac.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:12 GMT
content-type: application/javascript
cf-ray: 80d61d333984b4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142587-1070"
last-modified: Wed, 27 Sep 2023 12:52:23 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ap3K5mrItb2lEGJ%2BuG5%2F7I9Ai%2FCaiaapXWoBTnzIzrHiqY4aUVWOklvwKCS187Ywalg%2BBKOW%2BUkNBzYHfiHzlrTQmH6Xe8ztcjUE0q8W4ikpYxe4pip60wqdLJQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
www.mavanimes.co/wp-content/cache/minify/da861.css
200 OK 28 kB URL GET HTTP/3 www.mavanimes.co/wp-content/cache/minify/da861.css
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerLet's Encrypt
Subjectmavanimes.co
FingerprintBC:78:43:91:37:39:A2:49:DA:78:24:55:1F:B6:04:C5:A8:6E:0A:F0
ValidityFri, 01 Sep 2023 10:15:44 GMT - Thu, 30 Nov 2023 10:15:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/cache/minify/da861.css HTTP/1.1
Host: www.mavanimes.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/jigokuraku-09-vostfr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 27 Sep 2023 19:22:00 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=28352
last-modified: Wed, 27 Sep 2023 18:10:30 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 1399
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JrtFPXAWt3issq26206AzGyTbYovAUn9QoRn%2BcJbJJLCinkLaS%2B1EpDLwZM1kP1LD%2BIBLxjO2ZVsSzi5cPS5BCw%2F83yYAtVP0NVN7NBHoWoHPeEqoWjXDXWDm%2B5yl0ctfJjV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80d61ce5ffbc56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css?ver=5.1.16
200 OK 121 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css?ver=5.1.16
IP
Requested by https://www.mavanimes.co/jigokuraku-09-vostfr/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (65371)
Size 121 kB (121200 bytes)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css?ver=5.1.16 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.mavanimes.co/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:00 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 01/05/2023 13:19:14
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1082
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: e6801da76f57e2550ceec8f99a2da16b
cdn-cache: HIT
cf-cache-status: HIT
age: 1087508
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 80d61ce6bce4b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-TGC2PJQ
200 OK 201 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TGC2PJQ
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (16073)
Size 201 kB (200790 bytes)
Hash 63cf6d9c0416aaa590a417ce7d6ad2ab
20a218167da57bce102b3b4db5df19e1b3bf2105
f9570809baff451adfca554e61bb75c7984ea2c27a255a9a2ad63088167e597e
GET /gtm.js?id=GTM-TGC2PJQ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Sep 2023 19:22:09 GMT
expires: Wed, 27 Sep 2023 19:22:09 GMT
cache-control: private, max-age=900
last-modified: Wed, 27 Sep 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68917
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
heremployeesihi.info/OUM5ZWdYIVoIWFh+W0MSSy8EQFV/ZgsjAwssUQgMQCQMElVacgFLBFUsTAEBSyxXEUlXJk1AVX8hdy0lTyZxMz9xNHwANFICYyZXbw54Di1fEmwwNH4rTj0gCRF3IzVNBW4hU1cPUFQ/aTROUyl4EkAvMQ0BbQ01ahB/Kz58EnwDNHsKbyQ1TQp7Mz52C3sGLWsGUiglbzBbMA9KIG8dPn4FaC8gcTtJACZ/FXckD1oTYTcQfQRvJCB3L0kyNWsFej1WeA17MCFyEEMGNWgvATAvfyx/I1YIC3skD2EXUAokawZJKSlBBXo9EFYHfDAqTBBsMClhLxRcNWwCYyQke3NuPR8ACGoPKn4Sf1AuaxJvJD9VcnEnJWAEeg0lagtBAQNrcHMnP1IvWychYCJrMDYfKUoKCUl+QwZXVQ1xMz9aDFonJgkBcw
200 OK 3.0 kB URL GET HTTP/2 heremployeesihi.info/OUM5ZWdYIVoIWFh+W0MSSy8EQFV/ZgsjAwssUQgMQCQMElVacgFLBFUsTAEBSyxXEUlXJk1AVX8hdy0lTyZxMz9xNHwANFICYyZXbw54Di1fEmwwNH4rTj0gCRF3IzVNBW4hU1cPUFQ/aTROUyl4EkAvMQ0BbQ01ahB/Kz58EnwDNHsKbyQ1TQp7Mz52C3sGLWsGUiglbzBbMA9KIG8dPn4FaC8gcTtJACZ/FXckD1oTYTcQfQRvJCB3L0kyNWsFej1WeA17MCFyEEMGNWgvATAvfyx/I1YIC3skD2EXUAokawZJKSlBBXo9EFYHfDAqTBBsMClhLxRcNWwCYyQke3NuPR8ACGoPKn4Sf1AuaxJvJD9VcnEnJWAEeg0lagtBAQNrcHMnP1IvWychYCJrMDYfKUoKCUl+QwZXVQ1xMz9aDFonJgkBcw
IP
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerAmazon
Subjectheremployeesihi.info
FingerprintC0:D3:6E:22:D1:18:4F:19:D0:F2:B9:E5:F3:33:A5:24:B4:16:B1:14
ValidityThu, 21 Sep 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3056), with no line terminators
Hash 7aea13afdf3d401d1cffca5956406469
632ab1896c285a1c5d85702c6f3d67157b63104d
ff4da6b2ba2f8ff01e6cb7198ba40700a197d4157a6ed41424a34da414dd93b4
GET /OUM5ZWdYIVoIWFh+W0MSSy8EQFV/ZgsjAwssUQgMQCQMElVacgFLBFUsTAEBSyxXEUlXJk1AVX8hdy0lTyZxMz9xNHwANFICYyZXbw54Di1fEmwwNH4rTj0gCRF3IzVNBW4hU1cPUFQ/aTROUyl4EkAvMQ0BbQ01ahB/Kz58EnwDNHsKbyQ1TQp7Mz52C3sGLWsGUiglbzBbMA9KIG8dPn4FaC8gcTtJACZ/FXckD1oTYTcQfQRvJCB3L0kyNWsFej1WeA17MCFyEEMGNWgvATAvfyx/I1YIC3skD2EXUAokawZJKSlBBXo9EFYHfDAqTBBsMClhLxRcNWwCYyQke3NuPR8ACGoPKn4Sf1AuaxJvJD9VcnEnJWAEeg0lagtBAQNrcHMnP1IvWychYCJrMDYfKUoKCUl+QwZXVQ1xMz9aDFonJgkBcw HTTP/1.1
Host: heremployeesihi.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://streamtape.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1183
date: Wed, 27 Sep 2023 19:22:03 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 60d22b5ab79521d827fcdd546c7710d4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
x-amz-cf-id: JXORku_ezLCV2sJHjZNlbcRvOeA9Dugtu1jVD3o6ISr23t4fwurzbA==
X-Firefox-Spdy: h2
media.hellpartners.com/redirect.aspx?pid=19267&bid=1478&lpid=381&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
307 Temporary Redirect 42 kB URL GET HTTP/2 media.hellpartners.com/redirect.aspx?pid=19267&bid=1478&lpid=381&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://streamtape.com/e/8BMaxrqyOjiozBw
Certificate IssuerSectigo Limited
Subjecthellpartners.com
Fingerprint8D:A2:35:62:2C:B2:02:B4:F6:2D:CA:FD:9A:59:7E:2F:3D:8A:DB:86
ValidityTue, 01 Aug 2023 00:00:00 GMT - Wed, 31 Jul 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?pid=19267&bid=1478&lpid=381&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7 HTTP/1.1
Host: media.hellpartners.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a.adforcast.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
cache-control: private,no-cache, no-store
pragma: no-cache
content-type: text/html
location: https://ivimedia.world/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a19267%2c%22BID%22%3a1478%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1695842528245)%5c%2f%22%2c%22CookieTag%22%3a%22147819267451240919C20239271922%22%7d%5d; SameSite=None;; domain=.hellpartners.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%22453989663%7c1%22%7d%5d; domain=.hellpartners.com; expires=Fri, 27-Sep-3022 19:22:08 GMT; path=/; secure; SameSite=Strict
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
x-powered-by: ASP.NET
x-azure-ref: 04IAUZQAAAACaxyCIZMRRQ5UoyUhKlFe4U1ZHMjBFREdFMDUxMQA4M2FkYmU2OS1mMzY0LTQ4MzgtYjNmZC0zNDU0OTA3MzQ4OWE=
x-cache: CONFIG_NOCACHE
date: Wed, 27 Sep 2023 19:22:07 GMT
content-length: 0
X-Firefox-Spdy: h2
ivibet.com/app/common.540fbcc24c4af4fc.js
200 OK 8.1 kB URL GET HTTP/2 ivibet.com/app/common.540fbcc24c4af4fc.js
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (8349), with no line terminators
Hash 6e18c92c70eb23629d0b84a548fcc1e3
6b02b697bd7ab08ac1c04deccffdf6a2f8f8fc97
03a9e0a8068f429339d3145408e8aa7ef712a6f673c7eed1450690b6a70e5e84
GET /app/common.540fbcc24c4af4fc.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:11 GMT
content-type: application/javascript
cf-ray: 80d61d2cf8efb4f1-OSL
cf-cache-status: BYPASS
etag: W/"65142580-1fbf"
last-modified: Wed, 27 Sep 2023 12:52:16 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uuj%2BHMdz%2FxvlKwdo12EXdNSFd1SsfCi%2FGo73kUgPEudCf7yHzzChR%2FIKPKmlFOIZYdAfBswLErSZBqIQ7knwkXJ44n3rnPk%2FaDJzJ%2FnCY4De%2FlTpg7DyF3J6lOs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ivibet.com/assets/fonts/gilroy/Gilroy-Regular.woff
200 OK 35 kB URL GET HTTP/2 ivibet.com/assets/fonts/gilroy/Gilroy-Regular.woff
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 35308, version 0.0\012- data
Hash 8e8705d069fbb9099b3a1e1d779fa5c5
ff762363b88add1df9a3c36ff1247796376b61e6
9f2ef335c07566f0d4f273a4b72bcb3ad2b02f0c6232da6129952ee60bd07ba8
GET /assets/fonts/gilroy/Gilroy-Regular.woff HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/app/styles.eda4ec0407fac5b8.css
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:09 GMT
content-type: font/woff
content-length: 35308
cf-ray: 80d61d223c4db4f1-OSL
cf-cache-status: BYPASS
accept-ranges: bytes
etag: "651425b4-89ec"
last-modified: Wed, 27 Sep 2023 12:53:08 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3GoQu6bBOXbQojfDrElVOy9mdxllsYd40zv5YaR6nIAzs8OsRUpRO%2FFpUM2S%2B7KmtBGTQdTK%2BGmbwQGDIrUqoMUlzcrA0zRq0ow2AxEyTx%2Bid3VuDPS1xyu0cQY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
ivibet.com/app/styles.553b956225db3ee7.js
200 OK 224 B URL GET HTTP/2 ivibet.com/app/styles.553b956225db3ee7.js
IP
Requested by https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Certificate IssuerCloudflare, Inc.
Subjectivibet.com
FingerprintFC:06:2F:AA:8E:33:D3:02:BC:01:38:52:0C:D1:6B:3A:E3:EF:C3:D2
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 3c0239e223b77c6a091736b814fc2edb
7c59496128071450ee03caca608d1f1f16b1b27d
056c139da37b244bc9b46a1e238364232fa5277824a99db5ac95633d6e53b11f
GET /app/styles.553b956225db3ee7.js HTTP/1.1
Host: ivibet.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ivibet.com/no/promotions/first-deposit-sport?btag=654481_12F884A16E284878B2145D3A2BE2A37E&utm_source=retarget&utm_medium=Ubidex&utm_campaign=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&utm_term=Ubidex-Ivibet-NO-NotReg-pop-WelPromoSport&subid=f0dd7bza1xrkt8r3e7
Cookie: btag=654481_12F884A16E284878B2145D3A2BE2A37E; subid=f0dd7bza1xrkt8r3e7; _sp_srt_ses.6485=*; _sp_srt_id.6485=b0bdc413-1d19-433e-b5f8-a8b6ea8c52ca.1695842531.1.1695842531..399aa194-836e-440d-8be1-7ceb08ffd983....0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Sep 2023 19:22:10 GMT
content-type: application/javascript
cf-ray: 80d61d268978b4f1-OSL
cf-cache-status: BYPASS
etag: W/"6514257b-e0"
last-modified: Wed, 27 Sep 2023 12:52:11 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MIZQVRJa4vEU2huxEnMg9hk8P%2BUYDl1TDz8wdqLmQT3gvqJtO8ey6Ng6kxXzcIalDSIoV1vrU%2BHRVtqVTM%2BgRIbDKS1rD0vhzArcRLPkEgQhrymz4OdRajEbhvk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
104.21.71.202
136.243.43.25
208.93.230.28
88.214.205.55
23.36.79.43
188.65.124.91
186.2.163.111
103.195.32.91
0.0.0.0