french-manga.net/index.php?newsid=1497869
200 OK 16 kB URL HTTP/1.1 french-manga.net/index.php?newsid=1497869
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Hash cdcc5152e55678df36bb92b9247c16b4
c89b66e549272c64396a1d14fcf0a79c0b39840e
964f110a8e7a1c8406f1627d9340cd63bba4c1646692f1d810f437a44bf2184e
GET /index.php?newsid=1497869 HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Sun, 30 Oct 2022 16:48:17 +0100 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8jCADzkG4L3PxTULaz5TcL0cXypTcQ3CXgZISVEbzlTaFEOOCKijPr65YyqrdN56ZclLe6wSb2%2BcnWhUG7yUPc2ijS9Wpn24jp77dLspvSBKUlYXdYJeDiwn9zmbd3wpnEf0"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7658d846cdba1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8286265a56e3e10efd41b41618a54071
5f10ac9a050e15f5598674dc7ee3865b325d01a8
2da2fa0b2b86ccc4029d0baa4e9c5b21a6433228b84b451b72b1d318561d4ef2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2DA2FA0B2B86CCC4029D0BAA4E9C5B21A6433228B84B451B72B1D318561D4EF2"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17540
Expires: Sun, 06 Nov 2022 02:49:43 GMT
Date: Sat, 05 Nov 2022 21:57:23 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 72c64df35304c35cd95e4ed6e101e795
a39287987854d644a8da295da536fb31de8b44c1
a9bf0da57e0f108b376781ede4b9762ae1b0d088910d26fb7be98c2d03e69092
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1994
Cache-Control: max-age=130015
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:23 GMT
Etag: "63662d58-1d7"
Expires: Mon, 07 Nov 2022 10:04:18 GMT
Last-Modified: Sat, 05 Nov 2022 09:31:04 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 078950c3ba9ad01927f3da494b1d1de4
443c8a8247e4e3e04c14d21e0227fc4e8f396142
dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3041
Expires: Sat, 05 Nov 2022 22:48:05 GMT
Date: Sat, 05 Nov 2022 21:57:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xr73SnowWyx1PU7s6yUZQc8lP5DffMuIIbe+HcYnabfRBVioSutYHCm8fFeujX68IOPbKmGehCg=
x-amz-request-id: QKGCHXNR7PK4K2RB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 05 Nov 2022 21:47:22 GMT
age: 602
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 21:57:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
french-manga.net/engine/editor/css/default.css
200 OK 0 B URL HTTP/1.1 french-manga.net/engine/editor/css/default.css
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /engine/editor/css/default.css HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/css
Content-Length: 0
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=1
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 01:15:58 GMT
last-modified: Fri, 26 Aug 2022 22:16:06 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2367
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U8QcdwxnA0qXyE4OiVltptR2srKuN25wlfMhUR8t3k37wOLzDXzB8WH3OLs%2BkKmzlz4u%2B2GT2qRDwZsTRcWExL%2BQ%2Bj3%2BPYSV%2FlVnhGwOtbEHxp%2BIuiHPgBQHyquPgfJpI01T"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849be0c0b3d-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/style/seen.css
200 OK 179 B URL HTTP/1.1 french-manga.net/templates/FRVDEV25/style/seen.css
IP
File type ASCII text, with no line terminators
Hash 1d23838c2862f6bc3f6f6c5b14255a67
4b3f6dfe97afd2ec85c8d4163afb3b5772e84094
91199cd7446f098021f46b004dd9931a3d83bb87cdb3b271ef0803c0b50fc40e
GET /templates/FRVDEV25/style/seen.css HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=331
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 05:36:10 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 266806
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PSZspIIFKE%2FjBGCj4XDnm5NKrS%2FkKUOWHq9qrKTGe4DFl48ZsJr%2FdhfZ1JONozv%2BEuKsy9MP2W26CpJOE2dMrikikhsdu8kihhTbG9QzIINprOPSG38GD2rPPdI2Z6XhMF%2Bp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849b9c8b4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/js/libs3.js
200 OK 15 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/js/libs3.js
IP
File type Unicode text, UTF-8 text, with very long lines (54379), with no line terminators
Hash de1d2c47d47cac8e44624fbf2e3f1f71
86967eb16a7b7af6237078abe6d99b2282c600b6
8210732684d3adb600ebd6bdf5601c98e5107e918f439c6e41017a48ff1d45dd
GET /templates/FRVDEV25/js/libs3.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=56551
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 01:13:06 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2367
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KnHbUFlPbr%2B1bEljbMJh0r9jxBsR8PabCQiYED3aB3eEz%2FYLc6vawRxZKU73IWtSXR6QsMIxe6xdOfz6hlK1OxCedaYVri1lw%2BnoRksq6Y%2BIJSnQhXFrqZFWdkGRQnws1srE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849ce1b0b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/style/styles.css
200 OK 8.2 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/style/styles.css
IP
File type ASCII text, with very long lines (35761), with no line terminators
Hash 96e88824b277a96f96aa80db67ed55b5
8b331e71542d5bdab69d7ebac21fca3e8339b6d7
80249c87f4366b18d0a5611529f5194844be0ffe4e739098c798cde2b742e3e5
GET /templates/FRVDEV25/style/styles.css HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=42086
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 05:36:10 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 266806
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NH0Qefp8k%2F%2BJ6DXZv3wnMrvbU5FFKqqJ69OebjZRP3i1Unx6HqiQU6rY8FHlFlrSnKy8Bs7eIIJxJ1YGsvfvCREEdqkDsHUJdOaZIXsLhEnj5w3x85jzUAiX4ojJ4ukWqm%2Bc"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849bcc2b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/style/engine.css
200 OK 28 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/style/engine.css
IP
File type ASCII text, with very long lines (58132)
Hash 85dea024d4420983de3152eee81fb9a6
a152fb1811963f619760db17bae11b75af9f443d
ec6a85ad2941c546c91a1a9ac3ec9f53ce3bf386f57cb720229ca94c2241c0ca
GET /templates/FRVDEV25/style/engine.css HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=89317
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 07:18:04 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 122879
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r8rOEPQAkN%2Fhr5wYYPi%2BI4xq7fyY50aTPEuaNTTChEUUat6MDonrgqk8wfRW5B7bKTttM7ZGbSHBoBxHHJMODjgkBg3ESvBhRgkLaIab65Kk7t3qKdtHNsw9kalh74XOvjcI"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849bd86b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/style/filter-xf.css
200 OK 2.4 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/style/filter-xf.css
IP
File type ASCII text, with very long lines (10729), with no line terminators
Hash d9cc2ce18322d5c64c6f67f3745b19db
5320e127b298ed8d738168a09f65fa5780051cee
a1d8d8772fbaac6c36a3fd82eec9dff616730c5759dd2f0f5a82c7b8653bccbb
GET /templates/FRVDEV25/style/filter-xf.css HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=12130
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:13:03 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 266492
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RmPoC1oyqn6J9Hn%2FRT70UeRIGdB42%2FIpdckBjBN6OH5bRc6e415M0VQQ0weuazBDHi%2B2KazIf7uy4f3KEJlT3xiQSTOWjStu0vzlr94thxY6XMLJ6ocC54R5TExVDlO4CKvj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849d9ecb4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/includes/jquery-migrate-1.2.1.js
200 OK 3.5 kB URL HTTP/1.1 french-manga.net/includes/jquery-migrate-1.2.1.js
IP
File type ASCII text, with very long lines (1111)
Hash 848ab0516d6de00bdbc1a02e14eeeee8
b29697df2061c7c111693f44ba2c741343b1ba23
714588764a13121b6f9adbc0b68d3dde72e666f1caa16244a923ecf02ae48d85
GET /includes/jquery-migrate-1.2.1.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=10432
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 14:27:02 GMT
last-modified: Fri, 26 Aug 2022 07:33:13 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 266492
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KswoSN5tI8fUp095JswbfTtp4vjCOjLS1SxmeId35HdUuGSmNC%2FCbTFhJhJGtLrCMKmkEAz40N3YjpFAUyH1Varo%2BpOYgEsHkMLAcPEAxMhz7bvZG%2F8Ham39Zu2lajC7FSps"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849eceeb512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/includes/fullstream-min.js
200 OK 12 kB URL HTTP/1.1 french-manga.net/includes/fullstream-min.js
IP
File type ASCII text, with very long lines (12507), with CRLF line terminators
Hash 95230dd531b3e6815c07b7b96d89bb3f
444f16b170df09d3393128a998006555639449ea
a7fdca630b4457a0912636cf767a0c5213c668a9fe39097a9291fa2581b87f1f
GET /includes/fullstream-min.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:13:04 GMT
last-modified: Fri, 26 Aug 2022 07:33:13 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 423192
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nXvt6ncgMFTovshprwAWfRtbL4aDDcviHC8JNPGesMcBeDX%2B34WsmXF7qk8fcs%2FXIHsq3CBqUsB4aktIGh0sR1Jd0Wd2cVXFV2l2JqrpKRyx%2FO8b4N%2FmvC4jGKwYLKnArqyV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849edc0b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/includes/fullstream-custom.js
200 OK 849 B URL HTTP/1.1 french-manga.net/includes/fullstream-custom.js
IP
File type ASCII text, with very long lines (1093)
Hash d79938a922ace0a54d547ada77ae2ef7
5a67e8e25986c51b81c412e23ac0b9b61a820521
52ed9b13b70efe4a77fd53e2883ef509661ac812d6e2b9efd8bad3d20813d93c
GET /includes/fullstream-custom.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=2622
cache-control: public, max-age=31536000
expires: Sat, 05 Nov 2022 14:07:00 GMT
last-modified: Fri, 26 Aug 2022 07:33:13 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 423192
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e%2FjVhTpsSLrcnALHFzfeXBdGQp7%2FC660khgupBuElAu%2FxiJ7AiTJl4cWiY1qRxOJlzywWuRowyQEOHB0%2FyljHY7U2MyGn%2F2NitxrGqvadFEptYIV5Q3HjwzF4KmSL0G6HCRG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849ea03b4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/js/filter-xf.js
200 OK 43 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/js/filter-xf.js
IP
File type ASCII text, with very long lines (29242)
Hash e2c25ec392c7b5ec321751296516cbd2
eb14abe938bb75772bebdb0fb9ef9dd5f86c489d
6511e2574748e9c7fcde0981796d0875d5e4400e5dfac079a3cf3c0998784cc9
GET /templates/FRVDEV25/js/filter-xf.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=157405
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 14:25:47 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 103912
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m3a2V8vVmfvT2C6BJTUg%2FmCdahJorRwICZRavZNjY0NuQTRjHnn6AL9VGYus1IBfx0zSCo5hx63%2FzUC%2B5JmOwp0DKeUffjlDukXqLDbWXz%2FvXTZYko%2BH8mOfWEqG2ozdbYJF"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849ee2c0b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/includes/jquery-scrolltofixed-min.js
200 OK 1.2 kB URL HTTP/1.1 french-manga.net/includes/jquery-scrolltofixed-min.js
IP
File type ASCII text, with very long lines (3941), with no line terminators
Hash f2fc9f008962d44595ef7fc20a369254
498fdf22540f0eb097950e94ea4a5f02b3e8b4f6
5593a316069b62eed1b74c3b6aa1b579cc2d532dc465231163dd8824501a0837
GET /includes/jquery-scrolltofixed-min.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:13:04 GMT
last-modified: Fri, 26 Aug 2022 07:33:13 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 372571
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fYiW8FSMPeGCtgi1w9OEmYm3Z22OEqTYmVIGgkVedLQev2X5pX1ccXK8EAc%2FsurLssROrGpZ0hTRpdOGgRDumZ%2BG4wWTOAKp3M42HQ4HZ5NAN0%2Bp2jPmZrcSqKi7YQZLIhpH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849fcf8b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/style/fullstream-custom.css
200 OK 10 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/style/fullstream-custom.css
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (58389), with no line terminators
Hash 519c1d1421462d82d15ee898e06fb18b
80cc73c8e91ac5742b7eba27d03fefabc9a23546
dedc4fe2a87bda6583058acd426c3b490289c3614be9c110e6fd9e09ce0046b9
GET /templates/FRVDEV25/style/fullstream-custom.css HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=73033
cache-control: public, max-age=31536000
expires: Sat, 05 Nov 2022 14:07:00 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 103912
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2B%2Bjk5awuFfHDmUXtm3CeHV3HNWBr%2F0%2FFp7UfJTK6T6LnNNQ02ywFQHo3d2YkWt%2Bzx4DG2ZFvhivpk09HHDTp6wwygctyi34CnNk6zeVOqyd8DzhA%2BT%2Bx0xOUtxujP4Zj3WL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849fdcfb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
yastatic.net/es5-shims/0.0.2/es5-shims.min.js
200 OK 1.1 kB URL HTTP/1.1 yastatic.net/es5-shims/0.0.2/es5-shims.min.js
IP
File type ASCII text, with very long lines (2703), with no line terminators
Hash 65e4aaf1b9260978cc53a3274c14372d
1fd79c59587fecfeade23d58bac297249c9161e2
577aebfb0c09b2f076da8005cedaaeabecd31e6c9ab510b58eac639c9981bf83
GET /es5-shims/0.0.2/es5-shims.min.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=216013
Content-Encoding: gzip
Etag: W/"32e3b4f3a8f6048da9934fec1ca08cea"
Expires: Tue, 08 Nov 2022 09:57:18 GMT
Last-Modified: Thu, 25 Oct 2018 11:27:00 GMT
NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
Strict-Transport-Security: max-age=43200000; includeSubDomains;
Timing-Allow-Origin: *
Vary: Accept-Encoding
X-Nginx-Request-Id: 297d93ff9e22d844
yastatic.net/share2/share.js
200 OK 37 kB URL HTTP/1.1 yastatic.net/share2/share.js
IP
File type Unicode text, UTF-8 text, with very long lines (64803), with no line terminators
Hash fda747e04f148d69049d925cf6992877
aa4e6b9f716986c10e5afa30fd8db68f1b6befc3
3653deb77e4d8cd476abeb7b9d5901a89434ab9ae94a590194ceda498d1b5767
GET /share2/share.js HTTP/1.1
Host: yastatic.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=5
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=216009
Content-Encoding: gzip
Etag: W/"d62795f125042b279514d9fb23f826fc"
Expires: Tue, 08 Nov 2022 09:56:54 GMT
Last-Modified: Tue, 21 Jun 2022 14:09:09 GMT
NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
Strict-Transport-Security: max-age=43200000; includeSubDomains;
Timing-Allow-Origin: *
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Robots-Tag: noindex, noarchive, nofollow
X-XSS-Protection: 1; mode=block
french-manga.net/engine/classes/min/index.php?charset=utf-8&f=engine/classes/js/bbcodes.js,engine/classes/masha/masha.js&21
200 OK 10 kB URL HTTP/1.1 french-manga.net/engine/classes/min/index.php?charset=utf-8&f=engine/classes/js/bbcodes.js,engine/classes/masha/masha.js&21
IP
File type Unicode text, UTF-8 text, with very long lines (17569)
Hash d052697939c7684ddf5ec0e0299cd651
537262bb8766908571152ece024a6dd33e957d3b
cce651973c64415018a827f3e00789dc873d4384000b5888d09ba5e50e787b05
GET /engine/classes/min/index.php?charset=utf-8&f=engine/classes/js/bbcodes.js,engine/classes/masha/masha.js&21 HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/x-javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
expires: Sun, 05 Nov 2023 18:48:29 GMT
vary: Accept-Encoding
last-modified: Fri, 26 Aug 2022 07:32:27 GMT
etag: W/"pub1661499147"
cache-control: max-age=31536000
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ulY4Aj0AmgcEppJb32V77dwBNVEXwDB3DtNvn4E%2BMUOAyU8N0fFjPiZ%2B%2BWDqKQOFPKicqAf9byZnrE1PInGDWj9BxasSZZZ1rfQyCBsgczKZ18xRzBDGXoPA5fFVjJ2216nx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7658d849b809b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/js/share.js
200 OK 28 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/js/share.js
IP
File type Unicode text, UTF-8 text, with very long lines (49755)
Hash e52d1f64017d950c6af547fc2d29c05e
e720ba3422e56a98b0aae5cfeb0d6f34b8784796
4e778ae0bd925c10d69fb89c7366b9cd24890d1e0786114826c325e8e50d69ab
GET /templates/FRVDEV25/js/share.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=89407
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:33:23 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 423191
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U6PWU7426CWrHawHm2EXi8DGZJkyOH5cKqV89V5PxmlevrPyfG2FihDeL9%2Bu3y1UBLZrQWJCb8yBgeapaF2OZ1TWoGCoVzPSw2yos%2FnLsRYs5YETI1DvR4fCauwhl%2F3Jn0qw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84a1e550b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/quatre.gif
200 OK 1.3 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/quatre.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 480d96194d9fc391217ec14a6f904acd
0fb10c940cc360f11132afb494662876fe5b36dc
af1a05536d19e34e04370a8afa0eb130bea8a026922366105c1c99221e875c32
GET /engine/data/emoticons/quatre.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1303
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Fri, 11 Nov 2022 00:04:50 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 122868
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=65uP5RZIxK7u4VgYHhtwJtuY0vCpU6igEhCc8fgTHZpXGQPVYpx8pcTH7ZJ7R1kdnDMHOgdk0kCV3YEvCM%2FDnBCm%2BebhIgneFnbWmqJDhqhnIUlGdzSdtpdfgggxoeU50nyq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b0e16b512-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/cinq.gif
200 OK 1.3 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/cinq.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 0053f14daeb7106ae0418c10a8debedc
aa3ec5952f5af2135d40e0f9b40e690e2ce0237e
b6f10130bc6656ba66007849df705f2d062935e19b9e47f99f800ed811334be0
GET /engine/data/emoticons/cinq.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1298
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:28 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jwneVT6MCQ9wA1N24HE5kFsBGh5KaTa6sJRMAEZffqzsLlCP%2BHgMB5Ft7KouqCWO3EYOkbz%2Bvk6d4shfX69FZT1FZwHF5yptnG3%2FWhz1X6apSfEtm9Y8zEh%2BkL6tguQbbHuZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b0a1b1bfe-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/six.gif
200 OK 1.3 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/six.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash bce497393a107d592a5477890e301ab9
de5ead481e93925424dd4de3205c97bc3f5658f7
befed09eb59b5d5d3cb9289ce3d333480f17e52e8339de886331f615da7cf04c
GET /engine/data/emoticons/six.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1307
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Sat, 12 Nov 2022 04:56:46 GMT
last-modified: Fri, 26 Aug 2022 07:32:30 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4rXGGf%2BWrZRbm55YacI%2FZsOFRNvvNj1quQ2I%2Fo7wMkkVb%2F%2FB2MMNYVivtu3BLv5TjFmseFFXL4T6LIKN%2BXwFA0ZgIHBSLz24C5q%2FUoixVn1dCnu89UjG4Xl1iKqwt8iwgrK7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b096ab51b-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/huit.gif
200 OK 551 B URL HTTP/1.1 french-manga.net/engine/data/emoticons/huit.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash a3787d1bda9ceb6974489a0aca3c6017
71817bbd6ca8056e8f2e0c5fee789e1418065157
efd89fdfefb2325097203727025257ec593d2a728860ab2d9358c59ef6051716
GET /engine/data/emoticons/huit.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 551
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 122868
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c6THwuCgoqpJuOOaEETZn0BvNG3VRPkfTAKVDy%2FRUFo7jtIn9aXct8TCi%2B7QAHnPjExVvFtrQJfyJIWNbk84yE%2BnJCSYKG0qHF8wgbAM%2BNSdTa7Xk0ilIXaRGB8qbvqGflvy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b0bb7b4f1-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/sept.gif
200 OK 1.3 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/sept.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 2263658bc7dd0bb5460fa426f19bf866
3f6ffb611a10babf25cf930d78078ba8f8fc046c
410cc0c286763c764c34e7b19a9793bccb941c3c94c3993a312f09585c62cc4a
GET /engine/data/emoticons/sept.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1302
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:30 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2EgBT46yScls7wCc15rQ%2BSmf%2Bw20mas%2BnDgeWf831F4Ce%2F4uTrOlaDbjAkfyRpWZQey3XmJB0MD9bs6Gb6irSzxgUe9KGTzkPbRRQUh84YcdK1%2F%2FGt9gUNJeWtWsW7wMLkBN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b0f210b3d-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/trois.gif
200 OK 569 B URL HTTP/1.1 french-manga.net/engine/data/emoticons/trois.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 073b91ddec90de29f47c857f97596b70
2af0018b539d9486095d835d8cba3b9829cb061d
9a0fbe0c912308a1af595e3d0b97eca4110d3454260f144a99d1d4a23cf6e644
GET /engine/data/emoticons/trois.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 569
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Wed, 09 Nov 2022 01:17:32 GMT
last-modified: Fri, 26 Aug 2022 07:32:30 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3leHUdNI58t9wwSuD4KIpTKlcrUrWO0lepOCLOxqoLkUnKgKaS7ycxCxD8V3FcR88YMNJYyxVe5Lx4Blt2rltMys978xe%2FNgCQsrgNh8oaB78Cr7bXuO23z1pbT%2FyjA7ydG5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b0f00b529-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/dix.gif
200 OK 579 B URL HTTP/1.1 french-manga.net/engine/data/emoticons/dix.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 8f7a4c566dda231e3f6a343eca1467ca
9d4036f5c480ed48449f59dd4b1ccce55dcf878d
a3df1cc68135c594cd24bba38e40502c18f48f8b00e49c377e0ff38b4abcc6ef
GET /engine/data/emoticons/dix.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 579
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vDnTrAkgX5Ral%2FiYvrpOPNlertDO9nb1hw%2FLmUof7oDg7lRk%2F1XKLzUijdzqUU9r3AsmfO4q3DRZmcYYWu3BmoozuCVsujT1S340DiR%2FML7CM%2FpSNg6zow%2BqbqrBEn%2F2F4ZT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b1a2a1bfe-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/dleimages/noavatar.png
200 OK 1.9 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/dleimages/noavatar.png
IP
File type PNG image data, 120 x 120, 8-bit colormap, non-interlaced\012- data
Hash 443a1b345c7332eb38899b7ddf7ee924
6328cd8c13cdd6bbca8c391631bd2e5292837607
0c160f5d636de30efed6ec9ddc023f9366ac03bc6ddc98dad3e1f5d1493a806d
GET /templates/FRVDEV25/dleimages/noavatar.png HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/png
Content-Length: 1894
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Thu, 10 Nov 2022 06:13:05 GMT
last-modified: Fri, 26 Aug 2022 07:33:20 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tn58bbVbyViVnfV9azsVe4%2FDYMDZnnuz66lTWHGWQtOEqPwA46qolbiG%2FL1tB7muHLCmdBdlsVhoba0G0rmiND6OGj6KZ1o%2BZttYXBj%2FPi8%2FAuO1yb%2B6kI2eFszgwQQb0k7f"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b197ab51b-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/neuf.gif
200 OK 1.3 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/neuf.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 138369a0c1914ec9ed1972be2e3e6d9b
90933cc66ff8c7ad932adbfda8598f7f736be36f
79d15353e5815ad463974f26a6c67fdbc24ae5bc6271b7e7af7a68222a4d1c66
GET /engine/data/emoticons/neuf.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1302
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Thu, 10 Nov 2022 07:43:24 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1MI5AehodHamCWPSzKpcN0hOukTaIvHa2Dp6RtgJV7iI5Ycjd7wY9S65xk90WsiUpaIfnUAXOTXfmUHWN92mTZEZF%2F2D17Eo4SIhSkEvQ63MUDxjLcmmHRvMYGPhDjxukUBZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b1e2db512-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/merci.gif
200 OK 1.4 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/merci.gif
IP
File type GIF image data, version 89a, 59 x 46\012- data
Hash 1ee139446de7abfb332df347b3ce484d
d410e8a04ccf1b904e9c441fb54a8aa967c367d9
8e60efc3bb1694bf0c48c614e3826d7fc716bbda90bdc9f73e344d00e7e641f1
GET /engine/data/emoticons/merci.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1419
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CmEsi1NT%2BKvi8rljfyjiMf4zWqqBV2wgS8fEWh%2FrIDvJycfAazosSeikWB5HjAlkWznALbAjjpcSchnCe5w7rrdSWbM4OPhxgtJ%2BBtkgPNKZ1yS9r80145CD%2FO2EZn990ifU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b1bc7b4f1-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/lienmort.gif
200 OK 1.1 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/lienmort.gif
IP
File type GIF image data, version 89a, 64 x 46\012- data
Hash e69538a856e55ce1b4ff540bd79c75dc
96f480e61f47015ba2f8b6e7d68d59f72c244218
24bbba2d22982f07482340c930fe061d36aa73a3caf3d50d54f7af5de86f6cae
GET /engine/data/emoticons/lienmort.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1090
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MJiMmpY51i000yNxtQ8tvtTVS%2BCO9OBie5rBvwYZhq4cBSX4RbyxDnBD%2BP7%2FCG0bZy9yQVwoUw8fh5SflE6vbd36bfFHHruMuZ8KC9x%2FCGc%2FiaJ0PTipm6QYD2E8jBbCd7M%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b1f2c0b3d-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/thankyou.gif
200 OK 22 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/thankyou.gif
IP
File type GIF image data, version 89a, 71 x 53\012- data
Hash 81e9840fb5186b7a673c2efe30635932
f949f247ded3c15e1515496e318146a24d8d15ba
c4f8700f5d44e243f003696d45362fb1a0ff32d4de70fc5742e6e5d01f96849a
GET /engine/data/emoticons/thankyou.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 21460
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:30 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 266804
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XdJs9enH8B8JOt0WQd%2BBIyGN2FYpcK3C7nqX6hjhpBvMtHLDb9HysdHytwksWMDYEn867DXs1RAdK0BoHInj02ji%2Fyt%2F1GYqN%2BHerb9MevpP77GKUmqDfiDSkWoDKFKYbQkE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b2f3bb529-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/Un.gif
200 OK 1.3 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/Un.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 71383fb46a55309f5a7077718a994229
da3f0edde23de0e4a54dc56009c6da32d3f00b32
9f5cccf1ea417c4b9d24a9c524acee96ae4b59fee84751fe01993745d1484b57
GET /engine/data/emoticons/Un.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1300
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 10:56:04 GMT
last-modified: Fri, 26 Aug 2022 07:32:30 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LrkAIA01dF6SXZh%2BNblY3I2Chll%2F2de1ct7rAiF7VK6EKdbhEGmjsJ5evuiMwAPYhPi8r%2FKVBnyQJtgJHCKyqf%2FE4w3OEYc3LK9VFLe5e0aJ69c64sY2YFYh9fZRNrLW10RL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b298cb51b-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/plusun.gif
200 OK 1.6 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/plusun.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash b3b15d4ab75548e5f6b66e685116f5d8
649c3ce36c036a9f4bc050f03e73615aa5ea8a3f
2a8baf19433a60a31f048eef66792b7669422fda5e5141aab027c1286faea2cd
GET /engine/data/emoticons/plusun.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1551
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:07:23 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MNDM30aOEqtIxHjtEUTZwTBb97yV4OHf8GP7aHcwaEgr4x8oP6gk900ipWSXD6V05CIbKGPf%2BeCt83rU7dd78GakglE54g4pq0a7Z%2FyQCdstcu6zds%2F6kI2I4MNtjSC6wzOA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b2a3b1bfe-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/engine/data/emoticons/Deux.gif
200 OK 1.3 kB URL HTTP/1.1 french-manga.net/engine/data/emoticons/Deux.gif
IP
File type GIF image data, version 89a, 41 x 46\012- data
Hash 0493b6cccfeb25fb43aaf44735e70fb4
2ba0e6ad37653f47c34e40ea90a63da2aeab0c6e
ba24640a48f91808d638315e72b0c380e8eee7da46c90ff2ce5385cfba8af6b5
GET /engine/data/emoticons/Deux.gif HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/gif
Content-Length: 1302
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Sat, 12 Nov 2022 02:59:34 GMT
last-modified: Fri, 26 Aug 2022 07:32:29 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 2366
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y74OzDMpqHHjUIrTTfaHJf7pOPwuDd%2FAFjC%2BHNeaKABxrTKwKU2qgv2EqsKeQBk%2BD3s%2FqSFdHaKGYZh3A08iyS2ciWJtKAEgvj1CevQ94HLWOjj48CizB%2FP27TJ5V7%2Bpktjr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84b2e3db512-OSL
alt-svc: h2=":443"; ma=60
i.imgur.com/Vjv2csm.jpg
200 OK 288 kB IP
File type JPEG image data, progressive, precision 8, 1080x1502, components 3\012- data
Size 288 kB (288465 bytes)
Hash 7cb17311a3423c2a8f2bce39097cca2f
7c1f37e3dc975ef04487897a950dbb76cbc5f824
b47c9e689b5c2f930843204b325287e9445567c3b11605eb2ad5a82d1a38603d
GET /Vjv2csm.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 28 Oct 2022 12:11:13 GMT
etag: "7cb17311a3423c2a8f2bce39097cca2f"
content-type: image/jpeg
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sat, 05 Nov 2022 21:57:24 GMT
age: 726371
x-served-by: cache-iad-kcgs7200170-IAD, cache-bma1663-BMA
x-cache: HIT, HIT
x-cache-hits: 693, 1
x-timer: S1667685444.381433,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 288465
X-Firefox-Spdy: h2
french-manga.net/templates/FRVDEV25/images/logo.png
200 OK 5.8 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/images/logo.png
IP
File type PNG image data, 230 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash aca27e30acf4a2ec9d285be2332720f5
0d0f275cccc14b17e6b13599b635c9a0dfefb285
ce0e1372cc1d856da2bed3802cfefe6ec1dc3da0d512f90821ab6d1813ea8f43
GET /templates/FRVDEV25/images/logo.png HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/templates/FRVDEV25/style/styles.css
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: image/png
Content-Length: 5786
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:03:10 GMT
last-modified: Fri, 26 Aug 2022 07:33:21 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 348580
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ozj62xCKgPflZW0FvhLtMqnEUTJtwELwMCwMXWBbPCdXAEKieIvE788ne76atZJzJvSVboGZ4xn6ZrMyS%2B8MN6VWaLDUCXYLp%2Fz6Z4OTkPTSfo78Tkrnb0Sl%2BMcSNfWE4pXJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84be8070b3d-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/fonts/LeagueGothicRegular.woff
200 OK 30 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/fonts/LeagueGothicRegular.woff
IP
File type Web Open Font Format, TrueType, length 29856, version 1.0\012- data
Hash d4b0b9d2eedab3be9e5f6123622745d6
60db4c2af5c1e979049dcf820071ab5f0c108345
78d318303fae41b5f82a1b7bcfbc513c17ae566d8cdb00ed4c80f111e65b05bc
GET /templates/FRVDEV25/fonts/LeagueGothicRegular.woff HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://french-manga.net/templates/FRVDEV25/style/styles.css
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: font/woff
Content-Length: 29856
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Mon, 07 Nov 2022 16:19:50 GMT
last-modified: Fri, 26 Aug 2022 07:33:21 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 211300
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f2GkbIp3%2Fpb5GH2CHGxShI9zi424OA1uddRa%2FqKZF%2FfQ0z%2BY%2FA1I9Lj%2BgirKL%2BmcrC4w5O69oQ1ffiS568UGTAfhyyiaLMzJT%2FMBn7eDswQjTdjkX1JdlJt1JfYoNBLVskkR"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84bf8120b3d-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/templates/FRVDEV25/fonts/fontawesome-webfont.woff2?v=4.5.0
200 OK 67 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /templates/FRVDEV25/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://french-manga.net/templates/FRVDEV25/style/engine.css
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: font/woff2
Content-Length: 66624
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Sat, 05 Nov 2022 10:23:43 GMT
last-modified: Fri, 26 Aug 2022 07:33:21 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 211270
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=giyqy8Aqg3FQyNxwYcaRvxM0N6DWTrqK%2B1RUB2%2F2RDduv%2BAnZBhpsvrBvG114DcyufgRb0FmxtP%2FRD6ikOPiD3DGe9tqtIafjiMSQSLHAfjRLrV%2FK3LWBjWtdV935dcKuWyl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84bf852b529-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/zakaz/zakaz.js
404 Not Found 4.8 kB URL HTTP/1.1 french-manga.net/zakaz/zakaz.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Hash 5e4b8e6cd78e2b5251cb21590d765fdd
47009313f6dd4e6bf52c561946611c65f8325ec1
a12700ebb9e41d2a941622f74857505eeac1e249e96a4b3b6e5ecbf1a94903dd
GET /zakaz/zakaz.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 404 Not Found
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YySarPZNRvhq347DCo6LAfJNVjbTCz3Qd7UQpzlagZjZmdSfVejv%2B9as6HzY1KqMZZvMSMwOE3f%2BU4E9RzpHB%2BIAJETXbGAu3Sv7JzTNcQ9baleLz0nnL2JRpnSR8JCDuNNV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84cf95cb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c3279bc1ecada6d2fe6e6c573b2d609
4f1c31014bb6b8106ad44a6c53e42f7edf8f0328
da8c11c5a6367fdb70d34966d0974330f5588b6644ff462af44edd0b2bcee66f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA8C11C5A6367FDB70D34966D0974330F5588B6644FF462AF44EDD0B2BCEE66F"
Last-Modified: Thu, 03 Nov 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3645
Expires: Sat, 05 Nov 2022 22:58:09 GMT
Date: Sat, 05 Nov 2022 21:57:24 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash db63d54b77502dd6c7bdc792d4fd093e
026ad8186833988279468829c004c6e2a2f2626f
eff89ef67baa622e8a196ffcadc44d29aafff009bb531da3e979a1f47c3b1c36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5083
Cache-Control: max-age=128045
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:25 GMT
Etag: "63661997-1d7"
Expires: Mon, 07 Nov 2022 09:31:30 GMT
Last-Modified: Sat, 05 Nov 2022 08:06:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
french-manga.net/templates/FRVDEV25/dleimages/marker.png
200 OK 1.9 kB URL HTTP/1.1 french-manga.net/templates/FRVDEV25/dleimages/marker.png
IP
File type PNG image data, 32 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 004417a6a98320b4f11641d6c2441105
222d969222cb52fa16eb621e5930e8978995b79a
e393ab33da5f5e3cb8a5fd7beece758d61ae71f7646f9dd100dc562aa667b723
GET /templates/FRVDEV25/dleimages/marker.png HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/templates/FRVDEV25/style/engine.css
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: image/png
Content-Length: 1883
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Wed, 09 Nov 2022 11:07:44 GMT
last-modified: Fri, 26 Aug 2022 07:33:20 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 211270
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YuYNdInxHOjrVSkhr8EHHT0dwsnJlEySCMdSIY6hQoMy8rrO2u4oWTU2cK1wRpTHGwYHi7mP6NAFzkHco1WpaoZ2KdMnmyipFQnzE2dE9n3sp4NgUBpC780%2BfuH4OV4teBTD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84f9ca6b529-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/favicon.ico
200 OK 1.9 kB URL HTTP/1.1 french-manga.net/favicon.ico
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f2e21571b80996d338ae3b28cc2757c
74e33d05db6b3e6fe72d4a01dbb2294e2bcf409e
ceeef724aa65428a6aac60ea3b4a56f47f9269f8410935ea0875388faa43d9dc
GET /favicon.ico HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: public, max-age=31536000
expires: Wed, 09 Nov 2022 11:29:11 GMT
last-modified: Fri, 26 Aug 2022 07:32:05 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 122877
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nAE1zEoPnkS%2Fbxr9r3bhgskmZsROxGQa96hTf7iwfLn7PQLBlG0p8NtN7ytIoWHvmbTCFHYYPSWFH8sDosqSVq4ce5S2Zr0W4SFJC3%2BSP7Ab2gTxetRTBC815cakWG2FLkmY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d84fbcf7b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
s10.histats.com/js15_as.js
200 OK 4.5 kB URL HTTP/1.1 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash 2b153cb2287eac49566b32fce9c385f8
206074b038daff8bc66d86bca0c5ff35f9f72655
7398435bd3f0dae8206173dd66954ae029dc8787962d5f089bcb548f53409869
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/
HTTP/1.1 200 OK
date: Sat, 05 Nov 2022 21:48:46 GMT
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 546407100
etag: W/"-375139978"
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4547
x-iplb-request-id: 5B5A2A9A:D978_2E69C9F0:0050_6366DC45_9597B:23572
x-iplb-instance: 42472
french-manga.net/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1667678400
200 OK 18 kB URL HTTP/1.1 french-manga.net/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1667678400
IP
File type ASCII text, with very long lines (36559), with no line terminators
Hash 1c79a5fce3f7f2c84c9b0e4e7ce90249
835a75b41b3b520e0ffa371a5d0d76f33da69aeb
976f22ce804c9788dc093b9620f2347a0895da762baf65824d07a2c0f6276567
GET /cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts=1667678400 HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
vary: accept-encoding
cache-control: max-age=14400, public
x-control-type-options: nosniff
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wS2FGxkkJsxhXGRXpHUztQaw2Sxo4jkDmZUcTzuK%2BhZbECEsrIhO4u6fNonaKT8pWBY99hwwQQkj6LF%2BXsig1gV7yx%2Bd9phFK%2Bk%2Fz3WxKQ7KNqKLiPL3Uf7cMdB2b40tss8e"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7658d8504d150b3d-OSL
alt-svc: h2=":443"; ma=60
french-manga.net/undefined
404 Not Found 4.5 kB URL HTTP/1.1 french-manga.net/undefined
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1447), with CRLF, LF line terminators
Hash 3e098d0ee974698f52fdbb64a1ec9b2e
d2b88d0e928e53eebbdaf7da2ea13e851a24ccca
31e9e1ee63a774f92d7b3a46c2e6f72e970cd84f92affc0fa9afbbe5de1a672f
GET /undefined HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 404 Not Found
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e%2BXYzKBz%2FYfZn9TCAtCugmgdTD0r6LbjHn9VsxjzwZxrUaeRcKcaNpbdemv6XeF%2B2wg%2B0KMmJLbyIUPjVhdCPV1NgG0mX8Cl3excZPeAmub4fYD49Vkw0AZFL%2B0vn%2FjTIlWU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7658d84ffd89b529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
hqq.to/styles/global/embed_player.3.css?130
200 OK 1.6 kB URL HTTP/2 hqq.to/styles/global/embed_player.3.css?130
IP
ASN #262254 DDOS-GUARD CORP.
Hash 8e6c46db0d3b9b09cb250529f4e92245
78ccfc915538c39e35acb536eca217f2f12e7a0e
7a8726525e4b7e4a725b96f82dafba6d1da8b54d71c5d02144aca8b7d306bf65
GET /styles/global/embed_player.3.css?130 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=tOmKhZCFn8jgopZL4mUN; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:25 GMT
date: Mon, 17 Oct 2022 10:45:52 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding
last-modified: Wed, 09 Dec 2020 22:16:37 GMT
etag: W/"5fd14cc5-1701"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1681893
ddg-cache-status: HIT,MISS
content-length: 1623
X-Firefox-Spdy: h2
hqq.to/js/video.jquery_plugs/modernizr.js?12
200 OK 652 B URL HTTP/2 hqq.to/js/video.jquery_plugs/modernizr.js?12
IP
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (1227), with no line terminators
Hash aecce2cd69440bcd1b71a8f0ce204922
7bf5702d34c33349bead0bb2cb7ad2200d699196
b9159c2d62fb50c02489b011962ed2549515067437b550834432787ff25a5dfb
GET /js/video.jquery_plugs/modernizr.js?12 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=ZSqtx7ULlKG1qwCtZ8Va; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:25 GMT
date: Mon, 17 Oct 2022 10:45:52 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 03 Jun 2018 17:19:35 GMT
etag: W/"5b142327-4cb"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1681893
ddg-cache-status: HIT,MISS
content-length: 652
X-Firefox-Spdy: h2
hqq.to/e/ADUDWu6lT5Or
200 OK 37 kB IP
ASN #262254 DDOS-GUARD CORP.
Hash 0c2706b735e13cd58db5c970d0d54d1e
3af0ccafd40f1382d9738eca6796cd4216488c5e
d32a8c05e2d13af791f200faec72358d197a70b848a21e272922dbe500abc868
GET /e/ADUDWu6lT5Or HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=E5vewptetQwYREYqE8mA; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:24 GMT
date: Sat, 05 Nov 2022 21:57:24 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-robots-tag: 'none, noindex, nofollow, noarchive, nosnippet, noodp, notranslate, noimageindex'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block;
p3p: policyref="http://www.example.com/w3c/p3p.xml", CP="CURa ADMa DEVa CONo HISa OUR IND DSP ALL COR"
link: <//hqq.to>; rel=preconnect; crossorigin, <//global.stun.twilio.com>; rel=dns-prefetch; crossorigin, <//counter.yadro.ru>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//stun2.l.google.com>; rel=dns-prefetch; crossorigin, <//unpkg.com>; rel=preconnect; crossorigin, <//mc.yandex.ru>; rel=preconnect; crossorigin, <//cdn.jsdelivr.net>; rel=preconnect; crossorigin, <//signal.netu.tv>; rel=dns-prefetch; crossorigin,<//wss.commentsengine.com>; rel=dns-prefetch; crossorigin, <//www.gstatic.com>; rel=preconnect; crossorigin, <//imasdk.googleapis.com>; rel=preconnect; crossorigin, <//storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin,<//deliver.vkcdnservice.com>; rel=preconnect; crossorigin, <//deliver.vkcdnservice.com>; rel=preconnect; crossorigin,<//vkcdnservice.appspot.com.storage.googleapis.com>; rel=preconnect; crossorigin, <//www.google.com>; rel=preconnect; crossorigin, <//www.recaptcha.net>; rel=preconnect; crossorigin, <//cdnjs.cloudflare.com>; rel=preconnect; crossorigin
x-origin-location: player
cache-control: public, stale-if-error=30, max-age=30
content-encoding: gzip
x-cache-status-inferno: HIT
x-inferno-location: player
x-inferno-limit-req: PASSED
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 011c8468d39c3cafcbf547bfc4da5cae
1f3b73bb7acfe18f379d6ac1ca95f02a984d19ef
835ff7b176a4fd915d765c6d45cb1ba4be0c0793670f70d45f09db4821ae0a0b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4572
Cache-Control: max-age=148425
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:25 GMT
Etag: "63666b32-117"
Expires: Mon, 07 Nov 2022 15:11:10 GMT
Last-Modified: Sat, 05 Nov 2022 13:54:58 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
hqq.to/js/embed.205.js?736
200 OK 40 kB URL HTTP/2 hqq.to/js/embed.205.js?736
IP
ASN #262254 DDOS-GUARD CORP.
File type Unicode text, UTF-8 text, with very long lines (3414)
Hash a90103e09bb84e7a40056290782919c7
6df1efda05907116927ee40e029c3f28cb401340
7dc905c2441e5b327b9509396140a655251f9e94c56c80f54b684db09024efd8
GET /js/embed.205.js?736 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=1pUa9ljbpIewUUQFSNhq; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:25 GMT
date: Mon, 17 Oct 2022 10:45:52 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Thu, 04 Aug 2022 18:07:34 GMT
etag: W/"62ec0ae6-298ce"
access-control-allow-origin: *
access-control-allow-credentials: true
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1681893
ddg-cache-status: HIT,MISS
content-length: 39845
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f777cabe7c1f52b465895e3aff57bf9e
e2449a182851f87bb4ff083472257126a5f721cc
8bc32d2b48fa4e964a023ce1768333e275d1ed276714e889f36ffae9dfda3cdb
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Wed, 09 Nov 2022 18:44:30 GMT
ETag: "e2449a182851f87bb4ff083472257126a5f721cc"
Last-Modified: Sat, 05 Nov 2022 18:44:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2695
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d8513927b51b-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EcWBuH9EnMsHTE+rdEuDJw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: r4AuApii4zYOHFhdagGrY53naVo=
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f777cabe7c1f52b465895e3aff57bf9e
e2449a182851f87bb4ff083472257126a5f721cc
8bc32d2b48fa4e964a023ce1768333e275d1ed276714e889f36ffae9dfda3cdb
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Wed, 09 Nov 2022 18:44:30 GMT
ETag: "e2449a182851f87bb4ff083472257126a5f721cc"
Last-Modified: Sat, 05 Nov 2022 18:44:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2695
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d8516951b51b-OSL
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash c7d2bfd8452923a3e3e2a45be3d34bf1
4ddbf6bace991eeb3176c417bfdc498a27f16322
12417993f7fdea037bbd3972001a8b0accf141d6afe0be15b250bceb2ab6013a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12417993F7FDEA037BBD3972001A8B0ACCF141D6AFE0BE15B250BCEB2AB6013A"
Last-Modified: Thu, 03 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2216
Expires: Sat, 05 Nov 2022 22:34:21 GMT
Date: Sat, 05 Nov 2022 21:57:25 GMT
Connection: keep-alive
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash 7b111c54e4ca74c6afb01dccb16a6011
4348abbb3e927a3d20291a71a5e019bbd93923a3
3ad93d272b1bd1296c76105a47276b028046efb94daf54f6b9bef537626a381c
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57770
date: Sat, 05 Nov 2022 21:57:25 GMT
access-control-allow-origin: *
etag: "63575841-e1aa"
expires: Sat, 05 Nov 2022 22:57:25 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0db5dd9ee03d28e62450e75568f995f2
b6b6f40400122044d2871a93f891846c8291a334
9246386600be839fabd5443d0c5c70232efd5ab3542827a5fe495245adad8769
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9246386600BE839FABD5443D0C5C70232EFD5AB3542827A5FE495245ADAD8769"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sun, 06 Nov 2022 03:17:09 GMT
Date: Sat, 05 Nov 2022 21:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0db5dd9ee03d28e62450e75568f995f2
b6b6f40400122044d2871a93f891846c8291a334
9246386600be839fabd5443d0c5c70232efd5ab3542827a5fe495245adad8769
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9246386600BE839FABD5443D0C5C70232EFD5AB3542827A5FE495245ADAD8769"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sun, 06 Nov 2022 03:17:09 GMT
Date: Sat, 05 Nov 2022 21:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0db5dd9ee03d28e62450e75568f995f2
b6b6f40400122044d2871a93f891846c8291a334
9246386600be839fabd5443d0c5c70232efd5ab3542827a5fe495245adad8769
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9246386600BE839FABD5443D0C5C70232EFD5AB3542827A5FE495245ADAD8769"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sun, 06 Nov 2022 03:17:09 GMT
Date: Sat, 05 Nov 2022 21:57:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0db5dd9ee03d28e62450e75568f995f2
b6b6f40400122044d2871a93f891846c8291a334
9246386600be839fabd5443d0c5c70232efd5ab3542827a5fe495245adad8769
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9246386600BE839FABD5443D0C5C70232EFD5AB3542827A5FE495245ADAD8769"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sun, 06 Nov 2022 03:17:09 GMT
Date: Sat, 05 Nov 2022 21:57:25 GMT
Connection: keep-alive
hqq.to/js/script-2.12.5.js
200 OK 4.4 kB URL HTTP/2 hqq.to/js/script-2.12.5.js
IP
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (1242)
Hash f2d89553185a342a98893760b5a27460
449a755c7c3e03946b5fab3ea9195b06c43b9ac1
28a5e10daa981bd5e7c28feb373ad68518723bd9eb5a1aabd9124a8d17fa5d2c
GET /js/script-2.12.5.js HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Cookie: uid=w*ZFNm*z-z4yIHC9PpvtN9O4M-bwU-1l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=xyGEeHk87RK8PdAkjNo3; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:25 GMT
date: Mon, 17 Oct 2022 10:54:51 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Tue, 01 Dec 2020 19:28:37 GMT
etag: W/"5fc69965-4cb8"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1681354
ddg-cache-status: HIT,MISS
content-length: 4429
X-Firefox-Spdy: h2
s4.histats.com/stats/0.php?4491411&@f16&@g0&@h2&@i1&@j1667685443539&@k5&@l2&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-45736762&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?4491411&@f16&@g0&@h2&@i1&@j1667685443539&@k5&@l2&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-45736762&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
IP
File type ASCII text, with no line terminators
Hash 4cbded6e31cd41936df30c0889057d8a
be5bb57d442427d1e233643d078c85f24ba9d1d0
ac09faf9201e931cfb0b17aacd503b9178017989378c5fe72a6572f89e9fcadb
GET /stats/0.php?4491411&@f16&@g0&@h2&@i1&@j1667685443539&@k5&@l2&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-45736762&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
s4.histats.com/stats/0.php?4491411&@f16&@g1&@h1&@i1&@j1667685443534&@k0&@l1&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:111394629&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?4491411&@f16&@g1&@h1&@i1&@j1667685443534&@k0&@l1&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:111394629&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
IP
File type ASCII text, with no line terminators
Hash 4cbded6e31cd41936df30c0889057d8a
be5bb57d442427d1e233643d078c85f24ba9d1d0
ac09faf9201e931cfb0b17aacd503b9178017989378c5fe72a6572f89e9fcadb
GET /stats/0.php?4491411&@f16&@g1&@h1&@i1&@j1667685443534&@k0&@l1&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:111394629&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
s4.histats.com/stats/0.php?4247372&@f16&@g1&@h1&@i1&@j1667685443534&@k0&@l1&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:68628366&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?4247372&@f16&@g1&@h1&@i1&@j1667685443534&@k0&@l1&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:68628366&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
IP
File type ASCII text, with no line terminators
Hash 7b8a29ea1925b5f9b337cb8241877972
3d304d44231c4be61f04cc12eddb55619a8acdf3
09c0b4492abe19083f98cc13e5630763b6b5cf194361e601d29b847ccbd46154
GET /stats/0.php?4247372&@f16&@g1&@h1&@i1&@j1667685443534&@k0&@l1&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:68628366&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
s4.histats.com/stats/0.php?4247372&@f16&@g0&@h2&@i1&@j1667685443539&@k5&@l2&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:139879041&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?4247372&@f16&@g0&@h2&@i1&@j1667685443539&@k5&@l2&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:139879041&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w
IP
File type ASCII text, with no line terminators
Hash 7b8a29ea1925b5f9b337cb8241877972
3d304d44231c4be61f04cc12eddb55619a8acdf3
09c0b4492abe19083f98cc13e5630763b6b5cf194361e601d29b847ccbd46154
GET /stats/0.php?4247372&@f16&@g0&@h2&@i1&@j1667685443539&@k5&@l2&@mGo-Toubun%20no%20Hanayome%20(The%20Quintessential%20Quintuplets)%20-%20le%20Film%20%C2%BB%20Regarder%20Gratuitement%20et%20Facilement%20Des%20Mangas%20en%20HD%20Streaming%20!&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:139879041&@b3:1667685444&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
ocsp.sectigo.com/
200 OK 281 B IP
Hash 55bfe8d463879bf9b74ab371dabf775d
808e2628b2b2db837a7b60cd47c51f59c46d69b1
07a1a1bc261dddfc826c39f15d0bf3aea57804239006558e8b790dd6ef60a6ab
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 13:05:15 GMT
Expires: Fri, 11 Nov 2022 13:05:14 GMT
Etag: "808e2628b2b2db837a7b60cd47c51f59c46d69b1"
Cache-Control: max-age=485868,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7658d853b9aa0b65-OSL
testingmetriksbre.ru/f.php?sid=212040
200 OK 408 B URL HTTP/2 testingmetriksbre.ru/f.php?sid=212040
IP
Hash fd9255c310c22842e7e46619f15d1fba
06886a8ea5b701a270574d806ed7cc0f291a02db
895faeab90857302cc23a304555e9352abec038b4b3d072fe29e4b40872b4be5
GET /f.php?sid=212040 HTTP/1.1
Host: testingmetriksbre.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:25 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.1.33
cache-control: no-store, no-cache, must-revalidate, max-age=0
x-robots-tag: noindex
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kk2fzR342kUUYP3amJEzTynCgfmiglK7wtfa0%2BvDczfPuVQxXWN5al%2BuQ4EU4W261LlXihGYgM%2Bm%2FcLWcBsjTNB0xuZzMsKvEmuJW59GvY3BHua%2BPoOxdvdlVLtICUOH%2FmDPyHyH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d8529b1e1c12-OSL
content-encoding: br
X-Firefox-Spdy: h2
h4ahsm.cfeucdn.com/video_short.mp4
206 Partial Content 3.1 kB URL HTTP/1.1 h4ahsm.cfeucdn.com/video_short.mp4
IP
ASN #28753 Leaseweb Deutschland GmbH
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 639ec085afd48ff720cb1716bb09c075
04789db6677b1e59ae5b2c8c3b565f7ad8bf5c52
7e3c990c8c3e6ad1a07710e7032c1ff22975d6322937e80b0446a07de1b227cb
GET /video_short.mp4 HTTP/1.1
Host: h4ahsm.cfeucdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Origin: https://hqq.to
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 206 Partial Content
Date: Sat, 05 Nov 2022 21:57:25 GMT
Content-Type: video/mp4
Content-Length: 3078
Last-Modified: Sat, 03 Apr 2021 21:17:34 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6068db6e-c06"
server: YouTube Frontend Proxy
Expires: Mon, 05 Dec 2022 21:57:25 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Origin,Range
Access-Control-Expose-Headers: Content-Range,Content-Length,ETag
Content-Range: bytes 0-3077/3078
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 05 Nov 2022 21:57:25 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Sat, 05 Nov 2022 22:57:25 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
hqq.to/cdn-cgi/trace
404 Not Found 17 kB IP
ASN #262254 DDOS-GUARD CORP.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 9716fd1baefe7d3a62a041a1084f391e
b609f6dbb70d34132c77d051570e9e6e834b925e
eba52a57b8e4b7b4994aaea918732569e37ca532a77bf08b962033c886f8bc0d
GET /cdn-cgi/trace HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Cookie: uid=w*ZFNm*z-z4yIHC9PpvtN9O4M-bwU-1l
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: ddos-guard
set-cookie: __ddg1_=Hdud3vgc52wVIqQlMZIV; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:25 GMT
date: Sat, 05 Nov 2022 21:57:24 GMT
content-type: text/html; charset=UTF-8
x-origin-location: /
x-cache-status-inferno: MISS
x-inferno-location: /
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2
alleviatepracticableaddicted.com/ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js
403 Forbidden 0 B URL HTTP/1.1 alleviatepracticableaddicted.com/ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /ab/0b/e2/ab0be2a44b7ecf91bdbd5cd360d84937.js HTTP/1.1
Host: alleviatepracticableaddicted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Server: nginx/1.19.5
Date: Sat, 05 Nov 2022 21:57:26 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
mc.yandex.ru/watch/26812653/1?page-url=http%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&charset=utf-8&hittoken=1667685445_025929fbfb90ab1540dba5599238e57711957a3cb3657752fa95f82d317c2a4e&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A785859983095%3Ahid%3A185131953%3Az%3A0%3Ai%3A20221105215724%3Aet%3A1667685445%3Ac%3A1%3Arn%3A359857020%3Arqn%3A2%3Au%3A1667685444972960798%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2646%2C2646%2C11%2C%3Ans%3A1667685441850%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667685445&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/26812653/1?page-url=http%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&charset=utf-8&hittoken=1667685445_025929fbfb90ab1540dba5599238e57711957a3cb3657752fa95f82d317c2a4e&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A785859983095%3Ahid%3A185131953%3Az%3A0%3Ai%3A20221105215724%3Aet%3A1667685445%3Ac%3A1%3Arn%3A359857020%3Arqn%3A2%3Au%3A1667685444972960798%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2646%2C2646%2C11%2C%3Ans%3A1667685441850%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667685445&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/26812653/1?page-url=http%3A%2F%2Ffrench-manga.net%2Findex.php%3Fnewsid%3D1497869&charset=utf-8&hittoken=1667685445_025929fbfb90ab1540dba5599238e57711957a3cb3657752fa95f82d317c2a4e&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A785859983095%3Ahid%3A185131953%3Az%3A0%3Ai%3A20221105215724%3Aet%3A1667685445%3Ac%3A1%3Arn%3A359857020%3Arqn%3A2%3Au%3A1667685444972960798%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2646%2C2646%2C11%2C%3Ans%3A1667685441850%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667685445&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 83
Origin: http://french-manga.net
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 05 Nov 2022 21:57:26 GMT
access-control-allow-origin: http://french-manga.net
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 05-Nov-2022 21:57:26 GMT
last-modified: Sat, 05-Nov-2022 21:57:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cdn-s13.cfeucdn.com/flv/api/files/thumbs_new/2022/10/27/1666835531y0iua/1666835531y0iua-640x480-1.jpg
200 OK 42 kB URL HTTP/2 cdn-s13.cfeucdn.com/flv/api/files/thumbs_new/2022/10/27/1666835531y0iua/1666835531y0iua-640x480-1.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x720, components 3\012- data
Hash a398f6025cca386242b64f1d80341315
cb742317f6b582e9b5eabf6b539c91e2bf2cf1c2
a409a565b549f6e8c096c9f61d29cdcb5f9941a8c653bfd212a2ecf1d00c29c3
GET /flv/api/files/thumbs_new/2022/10/27/1666835531y0iua/1666835531y0iua-640x480-1.jpg HTTP/1.1
Host: cdn-s13.cfeucdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 22:01:13 GMT
content-type: image/jpeg
content-length: 42497
last-modified: Thu, 27 Oct 2022 02:14:21 GMT
etag: "6359e97d-a601"
server: cloudflare
expires: Sun, 12 Oct 2121 22:01:13 GMT
cache-control: max-age=3122064000, public
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18197
Expires: Sun, 06 Nov 2022 03:00:43 GMT
Date: Sat, 05 Nov 2022 21:57:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18197
Expires: Sun, 06 Nov 2022 03:00:43 GMT
Date: Sat, 05 Nov 2022 21:57:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18197
Expires: Sun, 06 Nov 2022 03:00:43 GMT
Date: Sat, 05 Nov 2022 21:57:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18197
Expires: Sun, 06 Nov 2022 03:00:43 GMT
Date: Sat, 05 Nov 2022 21:57:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18197
Expires: Sun, 06 Nov 2022 03:00:43 GMT
Date: Sat, 05 Nov 2022 21:57:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e2df91e-2f0b-4002-ac48-4266b47a731e.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e2df91e-2f0b-4002-ac48-4266b47a731e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a8423ab18c5c01b37008421d5f759d13
b285226d6b0bbd979fa2a9775be7cbb07c008aac
55a8c2181fe43644c158a466596218735693a89170454fc7e918a13fb93816db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7e2df91e-2f0b-4002-ac48-4266b47a731e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5924
x-amzn-requestid: 0d34d489-9d9e-4fcb-835b-6ea0292ec429
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabZFOPoAMFdvw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77b-16a732a9498bfe3078ccf001;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: d4_ZqFNs0orcXlsijqAHrm00n8vIL_yzmLqfL0VlZHdEJLQDj-Pi2g==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 786
etag: "b285226d6b0bbd979fa2a9775be7cbb07c008aac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 39ac4f41f6bbdba85b2afeb7b011db5f
8e7a2be19b5c7682e86aec81907f6026d14d7313
fbd813af4eb335e1aefa6fb78b672bf89f8606ef688c98d3bd38ffdb77abfba3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3420191-fa21-4db2-9043-c0adac7b0820.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8160
x-amzn-requestid: 31cf0571-0ef2-4c99-a6be-afd806b7f449
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJaroFHhoAMF26g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-269b7bcc1bcb8bdc4aa51dc9;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:43 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: K34CTk465OjihLQjLdqM1DqCxBF3lOA1D0DUaHWBj38krob66WwMzA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 786
etag: "8e7a2be19b5c7682e86aec81907f6026d14d7313"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabe183b3-9afb-4ba7-a622-b217c22a39e9.webp
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabe183b3-9afb-4ba7-a622-b217c22a39e9.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a155f83a49996f5c121b1f8cd7f72d4b
a9d2555cce6409e90acaa17cc044bfe89da921da
0e9418897e4f36435abf71df44558ae29cf7995d0aed2d80626000ceb997fcbd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fabe183b3-9afb-4ba7-a622-b217c22a39e9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9807
x-amzn-requestid: 3b69bade-c97d-4317-83a2-d350ccdd5cf6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabgE47oAMFS6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-398c74cf587625ff0ed0616e;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1FrXQ9djFZPkLU4ZzM5ACOiOhHSI0eB-5VudHaf8AaclWwVnFh6hZw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 786
etag: "a9d2555cce6409e90acaa17cc044bfe89da921da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dcc79e66d1e21452efb26d26650f6739
1f727a7ea032082658944cf4041686446fb6b5f2
af1fe8de442a365a108d5c03f0d3ae8b0beb1abb4f267a46979f9c885ee026c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff56714e2-704b-4327-92b2-54e71d0c4d40.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8961
x-amzn-requestid: 3a50374d-d90e-452e-bb89-82ca14c94b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJarpGtqIAMFkPg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d7e3-55c356475fb64e6625a338c7;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OR8zISm84Iz0FL3Km-aQOHSnjROX2-S_lKloAhMAThT17igEWRbxkA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 786
etag: "1f727a7ea032082658944cf4041686446fb6b5f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 83c047f46d089a4bf3f8fc3268bd8d02
0c7e46d28854bc512252ada34ed2e347a18e5479
87578f25647d4b785b935806658aaafbc0df4b11d8720924326c2734581a40c4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F739b1fef-6431-4b6d-bb9d-a3f01980224f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6907
x-amzn-requestid: d9cc225c-f74e-431a-aad8-082b8ed86d46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJabjFazIAMFYUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366d77c-1dd9396566c54c9e19e777e6;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 21:37:00 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lG55AkOPLHq9S9MZyRA2V4DlgTNYl9OzJdfLdWVw9Uu2VZ4OzJLaSg==
via: 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 21:44:20 GMT
age: 786
etag: "0c7e46d28854bc512252ada34ed2e347a18e5479"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 05 Nov 2022 09:11:34 GMT
age: 45952
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 045ea4254229e5f160f5e8e700628095
caaed65ef9a2dc7a35b1ce888dba89ab95d6ebd6
0257f0758de395a8949b44034a453862d154aec5f880bfa0746b9d023325d0f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4411
Cache-Control: max-age=129918
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:26 GMT
Etag: "63662389-116"
Expires: Mon, 07 Nov 2022 10:02:44 GMT
Last-Modified: Sat, 05 Nov 2022 08:49:13 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 945f19c816f66924e8b28d7fc65be0aa
64852f9c31c0163363ded30d629e8b2bc39ac03c
da3271a2355a683fc773789c3d1f13576f96bd28e08f46bf5bee1ed5c200ca4e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6178
Cache-Control: max-age=92802
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:26 GMT
Etag: "63658ba6-116"
Expires: Sun, 06 Nov 2022 23:44:08 GMT
Last-Modified: Fri, 04 Nov 2022 22:01:10 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.sectigo.com/
200 OK 472 B IP
Hash ce5b270abce53af33673b9480ea8d525
33de60052c84c345649c73e5314c6b7c292fba8c
ff09510c41f28d4026ddc184ca1674ed2435d43317f6cebb7d990cbe963f5c48
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:26 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 05 Nov 2022 01:50:06 GMT
Expires: Sat, 12 Nov 2022 01:50:05 GMT
Etag: "33de60052c84c345649c73e5314c6b7c292fba8c"
Cache-Control: max-age=531758,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7658d85aefc00b65-OSL
ocsp.digicert.com/
200 OK 278 B IP
Hash 045ea4254229e5f160f5e8e700628095
caaed65ef9a2dc7a35b1ce888dba89ab95d6ebd6
0257f0758de395a8949b44034a453862d154aec5f880bfa0746b9d023325d0f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4411
Cache-Control: max-age=129918
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:26 GMT
Etag: "63662389-116"
Expires: Mon, 07 Nov 2022 10:02:44 GMT
Last-Modified: Sat, 05 Nov 2022 08:49:13 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 6daa294204646e9dc2a2d43a2ed16bfd
a60436d32e217b15072ccba68c2228b061f6410b
793193b50ba8da7f018a1fba439f55d44fdf9e25f14bf5d522430923cba2267a
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 09 Nov 2022 19:01:52 GMT
ETag: "a60436d32e217b15072ccba68c2228b061f6410b"
Last-Modified: Sat, 05 Nov 2022 19:01:53 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 992
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d85dc8acfac4-OSL
c.zetadeo.com/click?id=cdjdohg56phusmqb20rg&e=8bde31b5-f637-4826-a4ba-495ac4fd81c8&px=34
303 See Other 0 B URL HTTP/2 c.zetadeo.com/click?id=cdjdohg56phusmqb20rg&e=8bde31b5-f637-4826-a4ba-495ac4fd81c8&px=34
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?id=cdjdohg56phusmqb20rg&e=8bde31b5-f637-4826-a4ba-495ac4fd81c8&px=34 HTTP/1.1
Host: c.zetadeo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
date: Sat, 05 Nov 2022 21:57:27 GMT
content-length: 0
location: http://dipaka-ead.com/zcvisitor/d60c9be5-5d54-11ed-ab4e-0a9d1683864d/e3e39f70-3459-11e9-9a51-0a15cb739170?campaignid=b9792a50-4807-11ed-8e2b-128084d1ce51
X-Firefox-Spdy: h2
c.xmlrtb.com/cf?id=17572073124584231829&sid=k2mHN2AHw88&subid=0000&fid=19277&redir=1
302 Found 278 B URL HTTP/2 c.xmlrtb.com/cf?id=17572073124584231829&sid=k2mHN2AHw88&subid=0000&fid=19277&redir=1
IP
Hash 945f19c816f66924e8b28d7fc65be0aa
64852f9c31c0163363ded30d629e8b2bc39ac03c
da3271a2355a683fc773789c3d1f13576f96bd28e08f46bf5bee1ed5c200ca4e
GET /cf?id=17572073124584231829&sid=k2mHN2AHw88&subid=0000&fid=19277&redir=1 HTTP/1.1
Host: c.xmlrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 05 Nov 2022 21:57:27 GMT
location: http://c.zetadeo.com/click?id=cdjdohg56phusmqb20rg&e=8bde31b5-f637-4826-a4ba-495ac4fd81c8&px=34
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jh5rzakNdvtWBhBm1IX3JtDZz4jhZug%2Btp7%2FCEwhOampfyYfoe1Ve4E9cSQEvosz5i2ysaWyS5Lf0vrB7nkoO%2Bmi2pb2n9Nr1cFGprhWrPbeNQrwKI5s0R0WjOuSIG8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d85b2cb7b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb350ba0db9bb5444d06b7c09d9b84f3
4447dc07d3bacfb58a5ed7ffb390eb779e1f83c9
78d8e370908595329dfa4b48eb435187942bb16342c47e5e08728ff7e7cd1456
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156308
Date: Sat, 05 Nov 2022 21:57:27 GMT
Etag: "63668475-1d7"
Expires: Mon, 07 Nov 2022 17:22:35 GMT
Last-Modified: Sat, 05 Nov 2022 15:42:45 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pt0Cz-Kct7-dBK2zYMpl4cfrw-mc-iFdZtptfjrNEnMa7EkjBTykHA==
Age: 5990
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 451de4b86fbf11f96e4975e118b1207a
07bc44c3826a16fdc2aae635b49b9cc6f29f6315
46db5f30ac238f87eb836c2fae1149763e3283e0c804623dd4eb2449168525f8
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:28 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 09 Nov 2022 19:08:30 GMT
ETag: "07bc44c3826a16fdc2aae635b49b9cc6f29f6315"
Last-Modified: Sat, 05 Nov 2022 19:08:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 712
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d862fbb7fac4-OSL
xml.poprtb.com/redirect?feed=457657&auth=p12tC3&pubid=152420
302 Found 0 B URL HTTP/1.1 xml.poprtb.com/redirect?feed=457657&auth=p12tC3&pubid=152420
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?feed=457657&auth=p12tC3&pubid=152420 HTTP/1.1
Host: xml.poprtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 21:57:28 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=dL_119050.242451_422655
Pragma: no-cache
click-v4.junmediadirect1.com/click?i=HPn6qU4bHzQ_0
302 Found 0 B URL HTTP/1.1 click-v4.junmediadirect1.com/click?i=HPn6qU4bHzQ_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=HPn6qU4bHzQ_0 HTTP/1.1
Host: click-v4.junmediadirect1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 05 Nov 2022 21:57:28 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Age: 0
Location: https://abc1.feed-xml.com/tracking/pc?adid=T1667685446U0124CE961F639E8F_474182_715529
Pragma: no-cache
adserving.unibet.com/redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=dL_119050.242451_422655
307 Temporary Redirect 0 B URL HTTP/2 adserving.unibet.com/redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=dL_119050.242451_422655
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=dL_119050.242451_422655 HTTP/1.1
Host: adserving.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
content-type: text/html
content-length: 0
location: https://no.unibet.com/stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Sat, 05 Nov 2022 21:57:28 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sat, 05 Nov 2022 21:57:28 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure
NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228351334099%7c1%22%7d%5d; domain=.unibet.com; expires=Mon, 05-Nov-3021 21:57:28 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=30, origin; dur=38
X-Firefox-Spdy: h2
no.unibet.com/stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950
301 Moved Permanently 0 B URL HTTP/2 no.unibet.com/stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950
IP
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950 HTTP/1.1
Host: no.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 05 Nov 2022 21:57:28 GMT
content-length: 0
location: https://no.unibet.com:443/stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86262149-37950
set-cookie: JSESSIONID=node01tvnwjcw9hlep1ghn8ap72x04c3686353.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict
__ucbt=node01tvnwjcw9hlep1ghn8ap72x04; Path=/; Domain=.unibet.com; Expires=Mon, 04-Nov-2024 21:57:28 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr=ST.0.T; Path=/; Domain=.unibet.com; Expires=Mon, 04-Nov-2024 21:57:28 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr_ref=; Path=/; Domain=.unibet.com; Expires=Mon, 04-Nov-2024 21:57:28 GMT; Max-Age=63072000; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
netwid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
CLAIM_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=2750545; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.com; Expires=Sat, 05-Nov-2022 21:57:43 GMT; Max-Age=15; Secure; SameSite=None
affiliateId=1; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BID=37950; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
PID=86262149; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
CHID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REFERER=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BOCAID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
PRODUCT_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=2750545; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.com; Expires=Sat, 05-Nov-2022 21:57:43 GMT; Max-Age=15; Secure; SameSite=None
campaignId=2750545; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378091; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.com; Expires=Sat, 05-Nov-2022 21:57:43 GMT; Max-Age=15; Secure; SameSite=None
clientId=polopoly_desktop; Domain=no.unibet.com; Path=/; SameSite=None; Secure
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Sat, 05 Nov 2022 21:57:28 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/no.unibet.com/index.html
X-Firefox-Spdy: h2
no.unibet.com/stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86262149-37950
301 Moved Permanently 0 B URL HTTP/2 no.unibet.com/stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86262149-37950
IP
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&sref=TRM&TRM=dL_119050.242451_422655&affiliateId=1&pid=86262149&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86262149-37950 HTTP/1.1
Host: no.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 05 Nov 2022 21:57:28 GMT
content-length: 0
location: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Sat, 05 Nov 2022 21:57:28 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/no.unibet.com/index.html
X-Firefox-Spdy: h2
ocsp.securetrust.com/
200 OK 638 B IP
ASN #20940 Akamai International B.V.
Hash 72c68a266b4e2c784046d6ffd2707735
2f4dcd5b3f8f1095fdac5e1eef703afafba4f71e
f140375fb558964f5be855a100fd8af6b4505e184efdb48cee396b6ca400306e
POST / HTTP/1.1
Host: ocsp.securetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 86
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 638
Date: Sat, 05 Nov 2022 21:57:28 GMT
Connection: keep-alive
q.xmlrtb.com/r?fid=k2mHN2AHw88
302 Found 315 B URL HTTP/2 q.xmlrtb.com/r?fid=k2mHN2AHw88
IP
Hash 51960f98a1b6a2049560e3d5226eb2df
2907476b492881d72bb782b1fc4aa78020ae2fda
ecbad58d69205a33f2632f5b5a761b332264d15d7d4855a1082ac3bf555674a9
GET /r?fid=k2mHN2AHw88 HTTP/1.1
Host: q.xmlrtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 05 Nov 2022 21:57:26 GMT
location: https://c.xmlrtb.com/cf?id=17572073124584231829&sid=k2mHN2AHw88&subid=0000&fid=19277&redir=1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g%2BmCJ%2FQ76644dih1WEkPWx47R2czDxEkI0eMnZtz0oiAOCY7%2Bq6YUZidyzViOs4HJxP5wVyzg7rqIQisEylD1FT%2FJ3yi9cXEgayWDuSWWQogGZbZECsqTQE8f4uoQVs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d859badcb4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
200 OK 956 B URL HTTP/2 a1s-cdn.unibet.com/unibet/bannerflow/scripts/master_tag.js
IP
ASN #47171 Unibet Services Limited
Hash fd48e87ecd4d06d9c5df490b91dc813e
a65a437db44444634e4f41732c590c1d14433b3f
2f786ae3f4577ed970f60aa7a9edf726300a740fdb360a8364db7ff4b7ca8e47
GET /unibet/bannerflow/scripts/master_tag.js HTTP/1.1
Host: a1s-cdn.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: application/javascript
content-length: 956
last-modified: Mon, 25 Apr 2022 12:19:34 GMT
etag: "3bc-5dd7996cc0ce1"
cache-control: max-age=1800, public, must-revalidate
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s-cdn.unibet.com; Path=/; SameSite=None; Secure
accept-ranges: bytes
X-Firefox-Spdy: h2
abc1.feed-xml.com/tracking/pc?adid=T1667685446U0124CE961F639E8F_474182_715529
302 Found 0 B URL HTTP/1.1 abc1.feed-xml.com/tracking/pc?adid=T1667685446U0124CE961F639E8F_474182_715529
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking/pc?adid=T1667685446U0124CE961F639E8F_474182_715529 HTTP/1.1
Host: abc1.feed-xml.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: Adtelligent
Date: Sat, 05 Nov 2022 21:57:28 GMT
Content-Length: 0
Location: http://c.zetadeo.com/click?id=cdjdohj8duebcrl0qiq0&e=eb689809-0c8f-4e40-bb4c-42132f34a348&px=45
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Connection: Keep-Alive
X-Robots-Tag: noindex
Set-Cookie: vmuid=550ed5c551a933e4; expires=Mon, 06 Feb 2023 21:57:28 GMT; domain=.feed-xml.com; path=/; secure; SameSite=None
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ebbd65a2bdd5c6f3dea5a6b99b25f0d
484be27b25b736a7e7e2b1d5ef9760aecdcec01b
5616e6c097b0b7680eeee193b58950faa38c9792e8793c16c315e2554a34cdd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3ebbd65a2bdd5c6f3dea5a6b99b25f0d
484be27b25b736a7e7e2b1d5ef9760aecdcec01b
5616e6c097b0b7680eeee193b58950faa38c9792e8793c16c315e2554a34cdd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=46458
200 OK 31 kB URL HTTP/2 hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=46458
IP
ASN #262254 DDOS-GUARD CORP.
Hash d681663b0ef0b34744f3005b8aab9958
362f8fcac65df758fa5c1808ec7a4184b9f05a28
a7124d0747b0417a1383096ba8ccc57bcdde3e2ef70ce8e7538650e8a2e3e354
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=46458 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Cookie: uid=w*ZFNm*z-z4yIHC9PpvtN9O4M-bwU-1l
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=066J3jfSC7FDZIMpIzuk; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:26 GMT
date: Sat, 05 Nov 2022 21:57:25 GMT
content-type: application/json
access-control-allow-origin: *
x-inferno-location: banner
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/unibet-logo.svg
200 OK 1.6 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/unibet-logo.svg
IP
Hash 8995ba532acecefb51ee17ffc6e227f6
d68f1f011dc8697baae065a24c6828935b522b56
cf569628b3366e82177a3abbf862627679f9e5abde31841f6fcdacd8c3de49f0
GET /no/pop/multisport/unibet-logo.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: cw5jdwcrd9gLyjDZb7Y7Jw==
last-modified: Thu, 13 Oct 2022 10:36:46 GMT
etag: W/"0x8DAAD06D418AA2F"
x-ms-request-id: bc08f274-a01e-0008-1960-f1080d000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
c.zetadeo.com/click?id=cdjdohj8duebcrl0qiq0&e=eb689809-0c8f-4e40-bb4c-42132f34a348&px=45
303 See Other 0 B URL HTTP/2 c.zetadeo.com/click?id=cdjdohj8duebcrl0qiq0&e=eb689809-0c8f-4e40-bb4c-42132f34a348&px=45
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?id=cdjdohj8duebcrl0qiq0&e=eb689809-0c8f-4e40-bb4c-42132f34a348&px=45 HTTP/1.1
Host: c.zetadeo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 303 See Other
date: Sat, 05 Nov 2022 21:57:29 GMT
content-length: 0
location: http://xml.poprtb.pro/click?i=Neu2hZeDuG8_0
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/gambling-commission.png
301 Moved Permanently 178 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/gambling-commission.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /no/pop/multisport/gambling-commission.png HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/html
content-length: 178
location: https://www.unibet.com/
server: NetDNA-cache/2.2
x-cache: MISS
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500
200 OK 806 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500
IP
Hash 2f3ca6692a87b0ae16ab03b6543bfbe2
d559f30e3b2dc91908ec973fba635fb0e67fa1ce
40f8f7f53514cc7a4a895ca96e69b26f153c34fcd87646fac728cd19158c1649
GET /css?family=Roboto:300,400,500 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 05 Nov 2022 21:57:29 GMT
date: Sat, 05 Nov 2022 21:57:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.unibet.com/no/pop/multisport/1-background-black.jpg
200 OK 98 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/1-background-black.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x936, components 3\012- data
Hash 8e6d9af5ef1badfe9295b8fc96793c28
e37cdf4093dc0a47246be7360e7945f91991f073
de89de8196b23a00db8e35bca40fdb4253d970492a31396d5861c2e99d691407
GET /no/pop/multisport/1-background-black.jpg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/1-styles.css
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: image/jpeg
content-length: 98453
cache-control: public, max-age=900, immutable
content-md5: jm2a9e8brf6Slbj8lnk8KA==
last-modified: Thu, 13 Oct 2022 10:36:46 GMT
etag: "0x8DAAD06D3D54265"
x-ms-request-id: 8fbb1440-601e-005a-5461-f174e5000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 62a8ce6a2338913103618edb2f4a9dbe
0e0850b1aef6ed524d119a41145112b84c257687
51d11b07f58551b5864fb55d4560d8a2237c2351036de0af7e25c81816763b31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.unibet.com/no/pop/multisport/icon-expert.svg
200 OK 12 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/icon-expert.svg
IP
Hash 16421fb4f263a1dc0c7d4b3953f93734
c14b73788866533561ca9333955960838263afba
53315a434aaebf5904bedeac63c1781bb4aa5f1793429a98508ee260d92657a1
GET /no/pop/multisport/icon-expert.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: Z4302O+bSqlX5UM92U+35A==
last-modified: Thu, 13 Oct 2022 10:36:49 GMT
etag: W/"0x8DAAD06D5E1678D"
x-ms-request-id: 24e9bc69-b01e-0076-7b60-f1984a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 62a8ce6a2338913103618edb2f4a9dbe
0e0850b1aef6ed524d119a41145112b84c257687
51d11b07f58551b5864fb55d4560d8a2237c2351036de0af7e25c81816763b31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.unibet.com/no/pop/multisport/icon-sports.svg
200 OK 75 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/icon-sports.svg
IP
Hash d47223beb1b1f1f21abc1e39ec0674d4
942d58f8cacf58c975b249b599072387068a73dc
77590cf476cf4aabc8c1e4f14fe7b0c74fdb9b34971428676bdd1b41b55fe6fe
GET /no/pop/multisport/icon-sports.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: Kch+tYuo05USS5JaESq1rA==
last-modified: Thu, 13 Oct 2022 10:36:50 GMT
etag: W/"0x8DAAD06D62BAC2D"
x-ms-request-id: c61863d4-e01e-0026-5d60-f15a1a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 62a8ce6a2338913103618edb2f4a9dbe
0e0850b1aef6ed524d119a41145112b84c257687
51d11b07f58551b5864fb55d4560d8a2237c2351036de0af7e25c81816763b31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
welcome.unibet.com/no/pop/multisport/app-sports-icon.svg
200 OK 26 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/app-sports-icon.svg
IP
Hash e4786ab90f417f3c92b7d4f8a595a25a
2cfb0f72ba5e747b0e988b8510961117b91c7cb6
5aef9b9c63ce0099ad8bb2e60160efb2003ecc582209c3d161c792e1a158c528
GET /no/pop/multisport/app-sports-icon.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: Lm+dv7pV36kTdto2PoEyYQ==
last-modified: Thu, 13 Oct 2022 10:36:51 GMT
etag: W/"0x8DAAD06D6E7DBC3"
x-ms-request-id: 9dd865fc-b01e-0059-7d60-f19581000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
a1s.unibet.com/orval/tracking/lastclick.min.js
200 OK 17 kB URL HTTP/2 a1s.unibet.com/orval/tracking/lastclick.min.js
IP
ASN #47171 Unibet Services Limited
Hash eec4f89a7e8f59d9f82a053ceb92e571
4c68233736165e4bb7b261b5f263b736a4d29b76
1c39eed36bff4debd2edd699dd535fb49c625b1f077ed81c7847e90bfb714ac7
GET /orval/tracking/lastclick.min.js HTTP/1.1
Host: a1s.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 05 Aug 2022 12:55:24 GMT
etag: W/"705-5e57dfac7ede0"
cache-control: max-age=1800, public, must-revalidate
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
set-cookie: clientId=polopoly_desktop; Domain=a1s.unibet.com; Path=/; SameSite=None; Secure
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:34:21 GMT
expires: Thu, 02 Nov 2023 19:34:21 GMT
cache-control: public, max-age=31536000
age: 267788
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/icon-trust.svg
200 OK 81 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/icon-trust.svg
IP
Hash 3a9983d20879657b7990f67be7f4015f
8a1d39295626084c1be5b31341ec94ee02491f90
b95e26a90fdd7dc77897669c16a5a0c72743dd714408c517e756f2c57730fcce
GET /no/pop/multisport/icon-trust.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: 9k4H3E55HXB5I94VinrUOQ==
last-modified: Thu, 13 Oct 2022 10:36:49 GMT
etag: W/"0x8DAAD06D5D1B268"
x-ms-request-id: 0b2ddbdd-001e-0001-1760-f14dde000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 5395384ea4ed68488f07bd3a292c41e1
b7338213e56c1ba0d0cdabaa21f10d97e1eb313a
5f055c124fb6eb88b5d7b1560600f0bbed20a124813d680d72c2c59489eca2be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3993
Cache-Control: max-age=130534
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Etag: "63662796-116"
Expires: Mon, 07 Nov 2022 10:13:03 GMT
Last-Modified: Sat, 05 Nov 2022 09:06:30 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 62a8ce6a2338913103618edb2f4a9dbe
0e0850b1aef6ed524d119a41145112b84c257687
51d11b07f58551b5864fb55d4560d8a2237c2351036de0af7e25c81816763b31
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 5395384ea4ed68488f07bd3a292c41e1
b7338213e56c1ba0d0cdabaa21f10d97e1eb313a
5f055c124fb6eb88b5d7b1560600f0bbed20a124813d680d72c2c59489eca2be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3587
Cache-Control: max-age=130128
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Etag: "63662796-116"
Expires: Mon, 07 Nov 2022 10:06:17 GMT
Last-Modified: Sat, 05 Nov 2022 09:06:30 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e13e65ad7f6f12300b12d6cd6936d621
575faf606b5c5e39e0fbbef59998bcd3625aa141
10787f99c02b63d52b9b74fcec9497108d67c56c4a9436e0e3c9a7129d727dda
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
script.crazyegg.com/pages/scripts/0012/9242.js
200 OK 2.7 kB URL HTTP/2 script.crazyegg.com/pages/scripts/0012/9242.js
IP
Hash 694ac75ef49dd92a487da64cac80530b
7f6961cf55e9d7eac0365d9eff4d556a0e58fa65
aeaf1ba1802c96f196a547b72370c44938fc5a7b681e8df565ecd3d154d7fc13
GET /pages/scripts/0012/9242.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/javascript
access-control-allow-origin: *
access-control-expose-headers: CE-Version
ce-version: 11.4.35
cache-control: public, max-age=300, s-maxage=1209600
cf-bgj: minify
cf-polished: origSize=6088
last-modified: Sat, 05 Nov 2022 15:59:01 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 21508
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86a4fcd0b3d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
script.crazyegg.com/pages/data-scripts/0012/9242/site/welcome.unibet.com.json?t=1
200 OK 1.6 kB URL HTTP/2 script.crazyegg.com/pages/data-scripts/0012/9242/site/welcome.unibet.com.json?t=1
IP
File type JSON data\012- , ASCII text, with very long lines (4048), with no line terminators
Hash d1734ca6c63818d7de0cb847fe6f4751
885590dc94b50bf55460963bdf70789c264a495f
f87cda95fa5e01ea96a65cb2d44771d811a2dc8d1e70539a9765a1995cb86f60
GET /pages/data-scripts/0012/9242/site/welcome.unibet.com.json?t=1 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: application/json
content-length: 1564
access-control-expose-headers: CE-Version
ce-version: 11.4.35
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Sat, 05 Nov 2022 15:59:01 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 21508
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86a98520b3d-OSL
X-Firefox-Spdy: h2
secure.adnxs.com/seg?add=9755599
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=9755599
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 21:57:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
AN-X-Request-Uuid: 90e6fda3-e698-4b11-807a-12ef1b41ea17
Set-Cookie: uuid2=440357379384510219; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 21:57:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 534.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
script.crazyegg.com/pages/versioned/common-scripts/971ec4d62e2a225680add3302d9aacbb.js
200 OK 30 kB URL HTTP/2 script.crazyegg.com/pages/versioned/common-scripts/971ec4d62e2a225680add3302d9aacbb.js
IP
File type C source, ASCII text, with very long lines (32555)
Hash 8a4bc9c8d0d1067e6b6cf53f56718ff9
3b73e0cfe53354dcfa47fc6fe475849244d3aeb1
0490c8a3d110c3401104dee810378d2c135bb93f29dfe8cc728d6c3b6e95e6b1
GET /pages/versioned/common-scripts/971ec4d62e2a225680add3302d9aacbb.js HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/javascript
content-length: 29882
cache-control: public, max-age=31536000, s-maxage=31536000
timing-allow-origin: *
last-modified: Fri, 28 Oct 2022 17:50:42 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 119917
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86af8c60b3d-OSL
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 21:57:29 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 481675a9-681e-42cf-8df9-3913f85b71b9
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C'!o3njj!]tbP6j2F-XstGt!@DXn$h:W'; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 21:57:29 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 534.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
welcome.unibet.com/no/pop/multisport/google-play-ro.svg
200 OK 2.3 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/google-play-ro.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5740), with no line terminators
Hash 2749990b6546d76a6355a0a10ecc44a5
418f11ab67dee9c3c4b20b2c8ba41e7801f11567
5edc83187c05868ce92844c267a7d694b36373fa510526df727dda8e9b067fa8
GET /no/pop/multisport/google-play-ro.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: 2fR27yW0b9kBp/ebW9u59A==
last-modified: Thu, 13 Oct 2022 10:36:51 GMT
etag: W/"0x8DAAD06D6FA9DA7"
x-ms-request-id: 821972d9-701e-000b-1860-f1e969000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 58000ea93a18a5c078e32e7c2a635e77
1e0a8c113edf262990986e002c10f6570bbd72e3
89fe2b3b9f7f2369f9af6741463bde2ce602be42702fbd60c7c9ae3f4a6c3c2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5930
Cache-Control: max-age=144011
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Etag: "636654aa-117"
Expires: Mon, 07 Nov 2022 13:57:40 GMT
Last-Modified: Sat, 05 Nov 2022 12:18:50 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 58000ea93a18a5c078e32e7c2a635e77
1e0a8c113edf262990986e002c10f6570bbd72e3
89fe2b3b9f7f2369f9af6741463bde2ce602be42702fbd60c7c9ae3f4a6c3c2c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5599
Cache-Control: max-age=143680
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Etag: "636654aa-117"
Expires: Mon, 07 Nov 2022 13:52:09 GMT
Last-Modified: Sat, 05 Nov 2022 12:18:50 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
welcome.unibet.com/no/pop/multisport/app-store-ro.svg
200 OK 5.3 kB URL HTTP/2 welcome.unibet.com/no/pop/multisport/app-store-ro.svg
IP
Hash 65a3d9fee6e10ec776d254bed540c7dd
80fab55ee44836d893d551a5d2a450704956e48a
5608733cc20a246d53183ccac5c8c5228ec2b5fbf8d4caa6ba2c9d5ea07cf8a5
GET /no/pop/multisport/app-store-ro.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: epgiRapjJpA7DniTiF5C+w==
last-modified: Thu, 13 Oct 2022 10:36:51 GMT
etag: W/"0x8DAAD06D6F2AF92"
x-ms-request-id: bab87c4d-e01e-0009-7060-f157d1000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg
200 OK 8.2 kB URL HTTP/2 cdn.bannerflow.com/resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e5994383ec600b78b496a5a0f3d19c7f
4081ab924bf326f6c6c38d8b746d56b1d160e8e3
589c9b584d4cd131b42af9b82d293480779a5acf1e91225ac63d48a5ab737efe
GET /resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: eFf1+jVlHZeVusUSI4yq9A==
last-modified: Mon, 07 Dec 2020 10:23:00 GMT
etag: W/"0x8D89A9A12E2A33B"
x-ms-request-id: aecbdf5c-c01e-0126-115e-a51c52000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 546
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86bcfd10af6-OSL
content-encoding: br
X-Firefox-Spdy: h2
no.unibet.com/
200 OK 12 kB IP
ASN #47171 Unibet Services Limited
Hash d44d5414598123c2ff5e28b07dea6d38
c728b03cf636a79b2aaf31229e585a82d8a289b7
c053f261943f7e2dad2b7f60ae22930230f605d616a1095c328d0bf21fcbd5a0
GET / HTTP/1.1
Host: no.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545; clientId=polopoly_desktop
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/html;charset=utf-8
x-ua-compatible: IE=Edge,chrome=1,requiresActiveX=true
cache-control: public, max-age=0, s-maxage=10
expires: Sat, 05 Nov 2022 21:57:28 GMT
vary: accept-encoding
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/no.unibet.com/index.html
X-Firefox-Spdy: h2
assets-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 assets-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: assets-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Mon, 22 Aug 2022 11:33:15 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Odl7Gea34D0TrRmOn0nDalhmnFRTK83Y5ZXoxc2ApeYopNv6dQ2iEA==
age: 6517454
X-Firefox-Spdy: h2
pagestates-tracking.crazyegg.com/healthcheck
200 OK 19 B URL HTTP/2 pagestates-tracking.crazyegg.com/healthcheck
IP
File type JSON data\012- , ASCII text
Hash d06f04fccf68d0b228a5923187ce1afd
5de9df9fdd66a91eed06e31981553d4ab9ccf490
830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
GET /healthcheck HTTP/1.1
Host: pagestates-tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 19
date: Fri, 30 Sep 2022 16:18:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Sd2OUHGdzABCT2fOVKa6cqHKpRil8ADL98NC6JHOEF82DgU2iNMydA==
age: 3130716
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash b9620d36597510281f347609cd606255
9e320b176bb389e981ba22e131c958ac4b900513
c127279da4e3830b29d188a5de1d252c6fc5b8aa04ed09721600d9efd9f4e132
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6386
Cache-Control: max-age=123945
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 21:57:29 GMT
Etag: "63660480-1d7"
Expires: Mon, 07 Nov 2022 08:23:14 GMT
Last-Modified: Sat, 05 Nov 2022 06:36:48 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
bannerflow-feed-builder.azurewebsites.net/api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no
200 OK 3.5 kB URL HTTP/2 bannerflow-feed-builder.azurewebsites.net/api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 17b370e4a3ac6853a0d2b7be3165d701
8c893cdd5738b70c268a61a4eaa673068efda56d
9cde11474f294dccba2184615d911bca713620a8b5b3f135aaa6626288fdac96
GET /api/googlesheet/?user=2&spreadsheetId=1Fgsan389gf5LVYi3gt6FMNEgM3LnRdQN1kZ3lP9JwiQ&sheetname=nb_no HTTP/1.1
Host: bannerflow-feed-builder.azurewebsites.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=utf-8
date: Sat, 05 Nov 2022 21:57:28 GMT
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-expose-headers: Request-Context
cache-control: no-cache
content-encoding: gzip
expires: -1
pragma: no-cache
set-cookie: ARRAffinity=5673035676d86e84e1020885961d5365422988ddd91ba9348b9a26a484558e53;Path=/;HttpOnly;Secure;Domain=bannerflow-feed-builder.azurewebsites.net
ARRAffinitySameSite=5673035676d86e84e1020885961d5365422988ddd91ba9348b9a26a484558e53;Path=/;HttpOnly;SameSite=None;Secure;Domain=bannerflow-feed-builder.azurewebsites.net
vary: Accept-Encoding
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:f631c08e-9610-47b7-82c9-c925628cdde1
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
no.unibet.com/stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&sref=TRM&TRM=d_291587.236963_958893590&affiliateId=1&pid=86610677&bid=37950
301 Moved Permanently 0 B URL HTTP/2 no.unibet.com/stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&sref=TRM&TRM=d_291587.236963_958893590&affiliateId=1&pid=86610677&bid=37950
IP
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/campaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&sref=TRM&TRM=d_291587.236963_958893590&affiliateId=1&pid=86610677&bid=37950 HTTP/1.1
Host: no.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%2c%7b%22PID%22%3a86610677%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685449607)%5c%2f%22%2c%22CookieTag%22%3a%223795086610677451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545; clientId=polopoly_desktop; _ce.s=v~a9dfda4bb217ba33773a5c0e029bd768f92e50bf~vpv~0; cebs=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 05 Nov 2022 21:57:29 GMT
content-length: 0
location: https://no.unibet.com:443/stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&sref=TRM&TRM=d_291587.236963_958893590&affiliateId=1&pid=86610677&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950
set-cookie: JSESSIONID=node01gtmtb9ym5sn7l9rs1cocxksr3684025.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict
__ucbt=node01tvnwjcw9hlep1ghn8ap72x04; Path=/; Domain=.unibet.com; Expires=Mon, 04-Nov-2024 21:57:29 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr=ST.0.T; Path=/; Domain=.unibet.com; Expires=Mon, 04-Nov-2024 21:57:29 GMT; Max-Age=63072000; Secure; SameSite=None
uniattr_ref=; Path=/; Domain=.unibet.com; Expires=Mon, 04-Nov-2024 21:57:29 GMT; Max-Age=63072000; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
affid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
netwid=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
CLAIM_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
campaignId=2750545; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.com; Expires=Sat, 05-Nov-2022 21:57:44 GMT; Max-Age=15; Secure; SameSite=None
affiliateId=1; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
B-TAG=320665405_C4D9D64B427A4B9E965D4908399C9FF4; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
REGISTRATION_CODE=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BID=37950; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
PID=86610677; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
CHID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
REFERER=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
BOCAID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
PRODUCT_ID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFID=; Path=/; Domain=.unibet.com; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None
AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26sref%3DTRM%26TRM%3Dd_291587.236963_958893590%26affiliateId%3D1%26pid%3D86610677%26bid%3D37950; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
AFFILIATE_CAMPAIGN_ID=2750545; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.com; Expires=Sat, 05-Nov-2022 21:57:44 GMT; Max-Age=15; Secure; SameSite=None
campaignId=2750545; Path=/; Domain=.unibet.com; Expires=Sun, 31-Dec-2023 22:58:59 GMT; Max-Age=36378090; Secure; SameSite=None
framework.forceBigLandingArea=; Path=/; Domain=.unibet.com; Expires=Sat, 05-Nov-2022 21:57:44 GMT; Max-Age=15; Secure; SameSite=None
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Sat, 05 Nov 2022 21:57:29 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/no.unibet.com/index.html
X-Firefox-Spdy: h2
no.unibet.com/stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&sref=TRM&TRM=d_291587.236963_958893590&affiliateId=1&pid=86610677&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950
301 Moved Permanently 0 B URL HTTP/2 no.unibet.com/stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&sref=TRM&TRM=d_291587.236963_958893590&affiliateId=1&pid=86610677&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950
IP
ASN #47171 Unibet Services Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /stan/redirecttocampaign.do?cmpId=2750545&affiliateId=1&unibetTarget=/no/pop/multisport/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&sref=TRM&TRM=d_291587.236963_958893590&affiliateId=1&pid=86610677&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950 HTTP/1.1
Host: no.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%2c%7b%22PID%22%3a86610677%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685449607)%5c%2f%22%2c%22CookieTag%22%3a%223795086610677451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_C4D9D64B427A4B9E965D4908399C9FF4; BID=37950; PID=86610677; clientId=polopoly_desktop; _ce.s=v~a9dfda4bb217ba33773a5c0e029bd768f92e50bf~vpv~0; cebs=1; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26sref%3DTRM%26TRM%3Dd_291587.236963_958893590%26affiliateId%3D1%26pid%3D86610677%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sat, 05 Nov 2022 21:57:29 GMT
content-length: 0
location: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86610677-37950&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&bid=37950&campaignId=2750545&pid=86610677
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Sat, 05 Nov 2022 21:57:29 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/no.unibet.com/index.html
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 164223170aeb4c408ddae59c52181c1c
5972d3653e14012605a7d88d0d13fa70883aa1e7
0cf07e352fa48d7548cc9442f88795fa1736a7bc92ed066a7852eb47ebc7394c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150919
Date: Sat, 05 Nov 2022 21:57:29 GMT
Etag: "63666dfc-1d7"
Expires: Mon, 07 Nov 2022 15:52:48 GMT
Last-Modified: Sat, 05 Nov 2022 14:06:52 GMT
Server: ECS (nyb/1D1C)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1fFM-HMly7KXtjtErg6DwDUgt-7MzN0H91G0jM72yCxWx531p7s5Pw==
Age: 6356
tracking.crazyegg.com/clock?t=1667685448000
200 OK 26 B URL HTTP/2 tracking.crazyegg.com/clock?t=1667685448000
IP
File type ASCII text, with no line terminators
Hash 70653641274a5e3884673da2e131c6da
bba20ccdc9d22e4acb949113e93a9d236fc1b15a
5b1213cfd795ebfbf3d77845bb76f3d64f47a93851f3abec7ae7eded70158435
GET /clock?t=1667685448000 HTTP/1.1
Host: tracking.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/plain
content-length: 26
cache-control: no-store
access-control-allow-origin: *
X-Firefox-Spdy: h2
script.crazyegg.com/pages/scripts/0012/9242.js?463245
304 Not Modified 0 B URL HTTP/2 script.crazyegg.com/pages/scripts/0012/9242.js?463245
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pages/scripts/0012/9242.js?463245 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Sat, 05 Nov 2022 15:59:01 GMT
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 05 Nov 2022 21:57:30 GMT
access-control-allow-origin: *
access-control-expose-headers: CE-Version
ce-version: 11.4.35
cache-control: public, max-age=300, s-maxage=1209600
cf-bgj: minify
cf-polished: origSize=6088
last-modified: Sat, 05 Nov 2022 15:59:01 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 21509
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86edd260b3d-OSL
X-Firefox-Spdy: h2
no.unibet.com/
200 OK 37 kB IP
ASN #47171 Unibet Services Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (34542), with CRLF, LF line terminators
Hash fc29ca623c8979a8e390b7057b66c60b
ac39f2cd58f8a9e2cc6286da7e9e7c8a06dad92b
245d71ba4b6f787501b930253edc499eb08313b0080fa83fe9c2696ba52da427
GET / HTTP/1.1
Host: no.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%2c%7b%22PID%22%3a86610677%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685449607)%5c%2f%22%2c%22CookieTag%22%3a%223795086610677451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_C4D9D64B427A4B9E965D4908399C9FF4; BID=37950; PID=86610677; clientId=polopoly_desktop; _ce.s=v~a9dfda4bb217ba33773a5c0e029bd768f92e50bf~vpv~0; cebs=1; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26sref%3DTRM%26TRM%3Dd_291587.236963_958893590%26affiliateId%3D1%26pid%3D86610677%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/html;charset=utf-8
x-ua-compatible: IE=Edge,chrome=1,requiresActiveX=true
cache-control: public, max-age=0, s-maxage=10
expires: Sat, 05 Nov 2022 21:57:39 GMT
vary: accept-encoding
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/no.unibet.com/index.html
X-Firefox-Spdy: h2
secure.adnxs.com/seg?add=9755599
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=9755599
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 21:57:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
AN-X-Request-Uuid: 5a3f311e-4d97-4d42-8835-1db1f2232323
Set-Cookie: uuid2=9027112417034940262; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 21:57:30 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 534.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
script.crazyegg.com/pages/data-scripts/0012/9242/site/welcome.unibet.com.json?t=1
304 Not Modified 0 B URL HTTP/2 script.crazyegg.com/pages/data-scripts/0012/9242/site/welcome.unibet.com.json?t=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pages/data-scripts/0012/9242/site/welcome.unibet.com.json?t=1 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Sat, 05 Nov 2022 15:59:01 GMT
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 05 Nov 2022 21:57:30 GMT
access-control-expose-headers: CE-Version
ce-version: 11.4.35
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Sat, 05 Nov 2022 15:59:01 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 21509
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86f0d4b0b3d-OSL
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
200 OK 43 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D9755599
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 592ebefc7104d681d57852665e9ad514
15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
GET /bounce?%2Fseg%3Fadd%3D9755599 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Sat, 05 Nov 2022 21:57:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: c55417aa-1c72-42fb-b405-9c869ec0c21d
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2C%wo3njj!]tbP6j2F-XstGt!@DY]$h`p+; SameSite=None; Path=/; Max-Age=7776000; Expires=Fri, 03-Feb-2023 21:57:30 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 534.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
script.crazyegg.com/pages/data-scripts/0012/9242/sampling/welcome.unibet.com.json?t=463245
304 Not Modified 0 B URL HTTP/2 script.crazyegg.com/pages/data-scripts/0012/9242/sampling/welcome.unibet.com.json?t=463245
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pages/data-scripts/0012/9242/sampling/welcome.unibet.com.json?t=463245 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Sat, 05 Nov 2022 21:25:14 GMT
TE: trailers
HTTP/2 304 Not Modified
date: Sat, 05 Nov 2022 21:57:30 GMT
access-control-expose-headers: CE-Version
ce-version: 11.4.35
cache-control: public, max-age=300, s-maxage=1209600
timing-allow-origin: *
last-modified: Sat, 05 Nov 2022 21:25:14 GMT
access-control-allow-origin: *
cf-cache-status: HIT
age: 1936
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86f8dd50b3d-OSL
X-Firefox-Spdy: h2
unibetlondonltd.d3.sc.omtrdc.net/b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s51141910344828?AQB=1&ndh=1&pf=1&t=5%2F10%2F2022%2021%3A57%3A28%206%200&mid=60570482187972182374307473419008236758&ce=UTF-8&pageName=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&g=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86610677&cc=GBP&ch=bf_landingpage&c1=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86610677&v1=welcome.unibet.com%3A%3A%3Adesktop%3Ano%3Apop%3Amultisport%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.com&c4=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=9%3A57%20PM%7CSaturday&v6=9%3A57%20PM%7CSaturday&v11=GBP&c14=New&v14=New&c16=1667685448&v19=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86262149-37950%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86262149&v21=Not%20Logged-In&c73=unibet&c74=60570482187972182374307473419008236758&v99=60570482187972182374307473419008236758&v120=popunder&v121=1%3A320665405%3A86610677-37950&v122=NONE&v124=2750545&v125=320665405_C4D9D64B427A4B9E965D4908399C9FF4&v126=86610677&v127=37950&v134=1667685448&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1920&bh=1080&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1
200 OK 43 B URL HTTP/2 unibetlondonltd.d3.sc.omtrdc.net/b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s51141910344828?AQB=1&ndh=1&pf=1&t=5%2F10%2F2022%2021%3A57%3A28%206%200&mid=60570482187972182374307473419008236758&ce=UTF-8&pageName=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&g=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86610677&cc=GBP&ch=bf_landingpage&c1=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86610677&v1=welcome.unibet.com%3A%3A%3Adesktop%3Ano%3Apop%3Amultisport%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.com&c4=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=9%3A57%20PM%7CSaturday&v6=9%3A57%20PM%7CSaturday&v11=GBP&c14=New&v14=New&c16=1667685448&v19=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86262149-37950%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86262149&v21=Not%20Logged-In&c73=unibet&c74=60570482187972182374307473419008236758&v99=60570482187972182374307473419008236758&v120=popunder&v121=1%3A320665405%3A86610677-37950&v122=NONE&v124=2750545&v125=320665405_C4D9D64B427A4B9E965D4908399C9FF4&v126=86610677&v127=37950&v134=1667685448&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1920&bh=1080&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1
IP
File type GIF image data, version 89a, 2 x 2\012- data
Hash ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s51141910344828?AQB=1&ndh=1&pf=1&t=5%2F10%2F2022%2021%3A57%3A28%206%200&mid=60570482187972182374307473419008236758&ce=UTF-8&pageName=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&g=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86610677&cc=GBP&ch=bf_landingpage&c1=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86610677-37950%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86610677&v1=welcome.unibet.com%3A%3A%3Adesktop%3Ano%3Apop%3Amultisport%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.com&c4=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=9%3A57%20PM%7CSaturday&v6=9%3A57%20PM%7CSaturday&v11=GBP&c14=New&v14=New&c16=1667685448&v19=https%3A%2F%2Fwelcome.unibet.com%2Fno%2Fpop%2Fmultisport%2Findex.html%3Fmktid%3D1%3A320665405%3A86262149-37950%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26bid%3D37950%26campaignId%3D2750545%26pid%3D86262149&v21=Not%20Logged-In&c73=unibet&c74=60570482187972182374307473419008236758&v99=60570482187972182374307473419008236758&v120=popunder&v121=1%3A320665405%3A86610677-37950&v122=NONE&v124=2750545&v125=320665405_C4D9D64B427A4B9E965D4908399C9FF4&v126=86610677&v127=37950&v134=1667685448&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1920&bh=1080&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1 HTTP/1.1
Host: unibetlondonltd.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Sat, 05 Nov 2022 21:57:30 GMT
expires: Fri, 04 Nov 2022 21:57:30 GMT
last-modified: Sun, 06 Nov 2022 21:57:30 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3581327234146402304-4619756755457837784
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
hqq.to/js/video.counters.2.js?117
200 OK 441 B URL HTTP/2 hqq.to/js/video.counters.2.js?117
IP
ASN #262254 DDOS-GUARD CORP.
Hash 4c23bd1a73185d17c9629ae0ebf627a7
b0fc57ef86b0a0fb640c1216bb4d84f86b31d877
5f4902e415702f1c6518b03dc5da1a4ff237200de2e7e8cc9799a51b7a672aa7
GET /js/video.counters.2.js?117 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Cookie: uid=w*ZFNm*z-z4yIHC9PpvtN9O4M-bwU-1l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=HGhVLwojetNTXMbPTsdm; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:30 GMT
date: Mon, 17 Oct 2022 10:54:57 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 06 Feb 2022 19:35:56 GMT
etag: W/"6200231c-2b8"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
content-encoding: br
x-cache-status-inferno-s: HIT
x-inferno-location: static
age: 1681353
ddg-cache-status: HIT,MISS
content-length: 441
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash f75ce54d51d7c7558bc6329e5c139bf2
0f85e25f5ea4cdefbc91ae8d1cece961d31048c6
0b2f2701dad5ab99a2d1445f727f5c90a397bf62f3a2789a3d3626cae294b5d4
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 09 Nov 2022 18:31:50 GMT
ETag: "0f85e25f5ea4cdefbc91ae8d1cece961d31048c6"
Last-Modified: Sat, 05 Nov 2022 18:31:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2923
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d8729eb3fac4-OSL
counter.yadro.ru/hit?rhttp%3A//french-manga.net/;s1280*1024*24;uhttps%3A//hqq.to/e/ADUDWu6lT5Or;0.9817943653180871
200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?rhttp%3A//french-manga.net/;s1280*1024*24;uhttps%3A//hqq.to/e/ADUDWu6lT5Or;0.9817943653180871
IP
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?rhttp%3A//french-manga.net/;s1280*1024*24;uhttps%3A//hqq.to/e/ADUDWu6lT5Or;0.9817943653180871 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 05 Nov 2022 21:57:30 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Fri, 05 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
200 OK 0 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
IP
GET /no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149 HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: FqBQjTLYFkhl05Waw3eqnQ==
last-modified: Thu, 13 Oct 2022 10:36:45 GMT
etag: W/"0x8DAAD06D35528A5"
x-ms-request-id: e2649508-a01e-0055-3660-f10289000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
no.unibet.com/
200 OK 0 B IP
ASN #47171 Unibet Services Limited
GET / HTTP/1.1
Host: no.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%2c%7b%22PID%22%3a86610677%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685449607)%5c%2f%22%2c%22CookieTag%22%3a%223795086610677451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_C4D9D64B427A4B9E965D4908399C9FF4; BID=37950; PID=86610677; clientId=polopoly_desktop; _ce.s=v~a9dfda4bb217ba33773a5c0e029bd768f92e50bf~vpv~0~v11.rlc~1667685448272; cebs=1; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26sref%3DTRM%26TRM%3Dd_291587.236963_958893590%26affiliateId%3D1%26pid%3D86610677%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545; cebsp=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:30 GMT
content-type: text/html;charset=utf-8
x-ua-compatible: IE=Edge,chrome=1,requiresActiveX=true
cache-control: public, max-age=0, s-maxage=10
expires: Sat, 05 Nov 2022 21:57:39 GMT
vary: accept-encoding
content-encoding: gzip
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/no.unibet.com/index.html
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 0 B URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://french-manga.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73397
date: Sat, 05 Nov 2022 21:57:25 GMT
access-control-allow-origin: *
etag: "63575841-11eb5"
expires: Sat, 05 Nov 2022 22:57:25 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=26148280
200 OK 0 B URL HTTP/2 hqq.to/ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=26148280
IP
ASN #262254 DDOS-GUARD CORP.
GET /ad/banner/_adsense_/_adserver/_adview_.ad.json?adzone=top&adsize=300x250&advid=26148280 HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Cookie: uid=w*ZFNm*z-z4yIHC9PpvtN9O4M-bwU-1l
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=LxXt1Z8tQdNnV6H8LepJ; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:26 GMT
date: Sat, 05 Nov 2022 21:57:25 GMT
content-type: application/json
access-control-allow-origin: *
x-inferno-location: banner
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.1/css/all.css
200 OK 0 B URL HTTP/2 use.fontawesome.com/releases/v5.7.1/css/all.css
IP
GET /releases/v5.7.1/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/css
x-amz-id-2: kIWUcp4/gRprxrhG4Bo7YL49QfCfoJzgcb+lBni7kDeALpU6YcOHbXZK3Ce3+VKgInDBPr7yuoA=
x-amz-request-id: GQJ6HHGYZ6JW9X6Q
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:37 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 866742
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u1YGlpYLZO2MUKNZAtnXpBELCnS1d1c%2B%2FWvSLdyy1juB%2FU3%2B5feExwA1HGoTZZavF8O6rc0QJjotIBR3W0mthBYEOaUqLZxQoext%2BhIzhBK43aYx8cvI3HY9N9ahX1F22pcOI%2Bk7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d8685c377697-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
zap.buzz/lxAR5ZJ
302 Found 0 B IP
GET /lxAR5ZJ HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 05 Nov 2022 21:57:26 GMT
content-type: text/html; charset=utf-8
location: https://q.cachegorilla.com/r?fid=B79SGewuO6N
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.Y2bcRg.mg_XNFsW4Lk84XeW9kljeEirCbs; Expires=Sat, 05 Nov 2022 22:27:26 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YBuJc7TSEnrg%2Bh49Nhu8Ke3wsBWZgEk5dpEgXX6JXhzHLL6EqxI4BfZ2Wa9him2uufGTJ%2FXaXvWI3o%2FASBdbrL1OJA6%2BCg4M4FuI%2Bh9LsbB4EZ1%2FA54zdWUDvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d8591b7bb511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
q.cachegorilla.com/r?fid=B79SGewuO6N
302 Found 0 B URL HTTP/2 q.cachegorilla.com/r?fid=B79SGewuO6N
IP
GET /r?fid=B79SGewuO6N HTTP/1.1
Host: q.cachegorilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 05 Nov 2022 21:57:27 GMT
location: http://c.cachegorilla.com/cf?id=2439376574989233823&sid=B79SGewuO6N&subid=0000&fid=19298&redir=1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jnfJgWqE9EwWlHc%2FpRG1bvbvsT6b2t%2FWXl8WKjYVXTg6chgduGzS1o7eWW%2Fh0%2BIhwcr9YVEbEZlEHeQPl91UphWPQb04owF20U3EKwd4UYq2iCbuYA3MHgsZ%2BR7ancoRJtGWCdQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d859cdfe0b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
french-manga.net/engine/classes/min/index.php?charset=utf-8&g=general&21
200 OK 0 B URL HTTP/1.1 french-manga.net/engine/classes/min/index.php?charset=utf-8&g=general&21
IP
GET /engine/classes/min/index.php?charset=utf-8&g=general&21 HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: application/x-javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
expires: Sun, 05 Nov 2023 18:48:16 GMT
vary: Accept-Encoding
last-modified: Fri, 26 Aug 2022 07:32:27 GMT
etag: W/"pub1661499147"
cache-control: max-age=31536000
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I8mPjYVnt8geqzshVNKgy7XjksYn6sL4bnMuc%2FBbvqqSEdSRCDDMoUccjQGuo0L58PCZ5Rbr1YFda1P%2BkyY%2FMFnPbuYwBAB5%2B8ct95t7jzVDUtIAfa%2FrX6H%2BoHbTTmkqZgt%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7658d849b8be1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
testingmetriksbre.ru/netu.php
200 OK 0 B URL HTTP/2 testingmetriksbre.ru/netu.php
IP
GET /netu.php HTTP/1.1
Host: testingmetriksbre.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:25 GMT
content-type: application/javascript
x-powered-by: PHP/7.1.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WeIx%2FsXJ4W7LNfUQTnbEggCPHuQK2R7%2BlNuTMivX6BnZN7IsNzA9PX0EP8yImDl9TzJM8T6SKTTiyvzHsxAopi3wTntr7dIWAIXiTTTun01JSYTZ3Wv1kFipqdcTKFtksZdmfrG%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d851ba541c12-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/1-main.js
200 OK 0 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/1-main.js
IP
GET /no/pop/multisport/1-main.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: BPxI3njL/F0VV+nfOZx3Mw==
last-modified: Thu, 13 Oct 2022 10:36:52 GMT
etag: W/"0x8DAAD06D7584053"
x-ms-request-id: f4088b6c-901e-002c-3a60-f1fead000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
c.cachegorilla.com/cf?id=2439376574989233823&sid=B79SGewuO6N&subid=0000&fid=19298&redir=1
302 Found 0 B URL HTTP/2 c.cachegorilla.com/cf?id=2439376574989233823&sid=B79SGewuO6N&subid=0000&fid=19298&redir=1
IP
GET /cf?id=2439376574989233823&sid=B79SGewuO6N&subid=0000&fid=19298&redir=1 HTTP/1.1
Host: c.cachegorilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Sat, 05 Nov 2022 21:57:27 GMT
location: http://click-v4.junmediadirect1.com/click?i=HPn6qU4bHzQ_0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z4U9iFEt7KUjDQfYJkx7pfjg9bairbFxkzI3CJmhtCRk1gFS74QK5Ogh3JyT60axY%2FjZxnHBVmzezW3OR8dOy7CkBFg9l8KwuPJpYZR4X5KPAi1oC%2FwnrasaSabHxj3WvKpoiMk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d85feb3d0b31-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/com-payments.svg
200 OK 0 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/com-payments.svg
IP
GET /no/pop/multisport/com-payments.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: vwb7ospRft2xzGDtJvR3WA==
last-modified: Thu, 13 Oct 2022 10:36:46 GMT
etag: W/"0x8DAAD06D4424C26"
x-ms-request-id: bd237d69-201e-0039-2861-f1e91e000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
unpkg.com/jquery@2.2.4/dist/jquery.min.js
200 OK 0 B URL HTTP/2 unpkg.com/jquery@2.2.4/dist/jquery.min.js
IP
GET /jquery@2.2.4/dist/jquery.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:25 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Fri, 20 May 2016 17:24:42 GMT
etag: W/"14e4a-abtp4lyn1e8JNTF1hOYVPz/ZqIw"
via: 1.1 fly.io
fly-request-id: 01G754SVY4BFC19MXYRYRMED91-fra
cf-cache-status: HIT
age: 10728946
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7658d8518d7fb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
200 OK 0 B URL HTTP/2 cdn.bannerflow.com/resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg
IP
GET /resources/18-plus-adbfd412-ffe0-4780-a5c3-1b540d6ceed3.svg HTTP/1.1
Host: cdn.bannerflow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: image/svg+xml
cache-control: public,max-age=604800
content-md5: DtBEzXf8HuXNecd90Rx/1w==
last-modified: Fri, 27 Nov 2020 14:00:01 GMT
etag: W/"0x8D892DCBC244A27"
x-ms-request-id: f9c36029-201e-0105-665e-a57399000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 555
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86bbfbc0af6-OSL
content-encoding: br
X-Firefox-Spdy: h2
script.crazyegg.com/pages/scripts/0012/9242.js?463245
200 OK 0 B URL HTTP/2 script.crazyegg.com/pages/scripts/0012/9242.js?463245
IP
GET /pages/scripts/0012/9242.js?463245 HTTP/1.1
Host: script.crazyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/javascript
access-control-allow-origin: *
access-control-expose-headers: CE-Version
ce-version: 11.4.35
cache-control: public, max-age=300, s-maxage=1209600
cf-bgj: minify
cf-polished: origSize=6088
last-modified: Sat, 05 Nov 2022 15:59:01 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 21508
vary: Accept-Encoding
server: cloudflare
cf-ray: 7658d86a4fd40b3d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/utv-logo.svg
200 OK 0 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/utv-logo.svg
IP
GET /no/pop/multisport/utv-logo.svg HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: image/svg+xml
cache-control: public, max-age=900, immutable
content-md5: QazcDvviTF55mXL/M8kCWQ==
last-modified: Thu, 13 Oct 2022 10:36:46 GMT
etag: W/"0x8DAAD06D3E93CAC"
x-ms-request-id: dfb6b833-901e-005e-3860-f1f9e2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
200 OK 0 B URL HTTP/2 unpkg.com/jquery.cookie@1.4.1/jquery.cookie.js
IP
GET /jquery.cookie@1.4.1/jquery.cookie.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:25 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sun, 27 Apr 2014 20:04:54 GMT
etag: W/"c31-MeG8xM+AWiwv7iH0je0eWY9koqg"
via: 1.1 fly.io
fly-request-id: 01G75513388K1MR4R8RW1AYXTV-fra
cf-cache-status: HIT
age: 10728946
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7658d8517d7ab51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/1-styles.css
200 OK 0 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/1-styles.css
IP
GET /no/pop/multisport/1-styles.css HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: text/css; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: zXkBqwBMviPPaK5rBIapmA==
last-modified: Thu, 13 Oct 2022 10:36:45 GMT
etag: W/"0x8DAAD06D3661614"
x-ms-request-id: 2ccf1e6e-601e-0007-3760-f17e61000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
welcome.unibet.com/no/pop/multisport/read_json.js
200 OK 0 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/read_json.js
IP
GET /no/pop/multisport/read_json.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: rGS1nJi75Qz2m2yY+jlYXA==
last-modified: Thu, 13 Oct 2022 10:36:52 GMT
etag: W/"0x8DAAD06D76229F6"
x-ms-request-id: 0ced3eb0-d01e-0002-6d60-f1acba000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
200 OK 0 B URL HTTP/2 unpkg.com/progressbar.js@1.1.0/dist/progressbar.min.js
IP
GET /progressbar.js@1.1.0/dist/progressbar.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:25 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7315-VGu3QlAvqjb4wruVTC8CgYdmBAQ"
via: 1.1 fly.io
fly-request-id: 01F3YGTHVETVB9B7TG2TW5GR8F
cf-cache-status: HIT
age: 16996209
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7658d8517d64b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
hqq.to/ad/api/popunder.js
200 OK 0 B URL HTTP/2 hqq.to/ad/api/popunder.js
IP
ASN #262254 DDOS-GUARD CORP.
GET /ad/api/popunder.js HTTP/1.1
Host: hqq.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hqq.to/e/ADUDWu6lT5Or
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg1_=SQ7K4SUyddsTGArDlQeO; Domain=.hqq.to; HttpOnly; Path=/; Expires=Sun, 05-Nov-2023 21:57:25 GMT
date: Fri, 15 Jul 2022 10:51:32 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 15 Sep 2021 14:06:22 GMT
etag: W/"6141fdde-15"
access-control-allow-origin: *
accessing-static: 1
cache-control: public, max-age=31536000, stale-while-revalidate=30, stale-if-error=30
pragma: cache
x-cache-status-inferno-s: HIT
x-inferno-location: static
accept-ranges: bytes
age: 9803206
ddg-cache-status: HIT,HIT
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2
zap.buzz/Jr1zAzZ
302 Found 0 B IP
GET /Jr1zAzZ HTTP/1.1
Host: zap.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 05 Nov 2022 21:57:26 GMT
content-type: text/html; charset=utf-8
location: https://xml.poprtb.com/redirect?feed=457657&auth=p12tC3&pubid=152420
vary: Cookie
set-cookie: session=eyJfcGVybWFuZW50Ijp0cnVlfQ.Y2bcRg.mg_XNFsW4Lk84XeW9kljeEirCbs; Expires=Sat, 05 Nov 2022 22:27:26 GMT; HttpOnly; Path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FS9puhLPfGwFTXpAB9F6tX%2BnSp3i%2Fe%2FWVMoHtzPuy09mX45SHhm6h%2FA%2BNu01OPWoy%2FbwrFFUc3duk81yg%2Fqr8KnZgND2cccDDSvuAnBhyT%2FIb%2F1TyhNE5sJu1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7658d8591b71b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
french-manga.net/zakaz/zakaz.js
404 Not Found 0 B URL HTTP/1.1 french-manga.net/zakaz/zakaz.js
IP
GET /zakaz/zakaz.js HTTP/1.1
Host: french-manga.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://french-manga.net/index.php?newsid=1497869
HTTP/1.1 404 Not Found
Date: Sat, 05 Nov 2022 21:57:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bYTjd2VfGIZz2R6Re8XVnAheDXfmau1otQLKJ%2FuAhXAMDqQe%2BilW0UUduq2m3BQC1zdhkhxGMqL5n4DtOzFVuR5p1pmVfs7r0o3Yu8dVuNL%2FNRu0xEkkPmT4Z%2BlmO9m8%2BB7z"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7658d849fa10b4f1-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86610677-37950&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&bid=37950&campaignId=2750545&pid=86610677
200 OK 0 B URL HTTP/2 welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86610677-37950&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&bid=37950&campaignId=2750545&pid=86610677
IP
GET /no/pop/multisport/index.html?mktid=1:320665405:86610677-37950&btag=320665405_C4D9D64B427A4B9E965D4908399C9FF4&bid=37950&campaignId=2750545&pid=86610677 HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%2c%7b%22PID%22%3a86610677%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685449607)%5c%2f%22%2c%22CookieTag%22%3a%223795086610677451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_C4D9D64B427A4B9E965D4908399C9FF4; BID=37950; PID=86610677; _ce.s=v~a9dfda4bb217ba33773a5c0e029bd768f92e50bf~vpv~0; cebs=1; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_C4D9D64B427A4B9E965D4908399C9FF4%26sref%3DTRM%26TRM%3Dd_291587.236963_958893590%26affiliateId%3D1%26pid%3D86610677%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:29 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=900, immutable
content-md5: FqBQjTLYFkhl05Waw3eqnQ==
last-modified: Thu, 13 Oct 2022 10:36:45 GMT
etag: W/"0x8DAAD06D35528A5"
x-ms-request-id: e2649508-a01e-0055-3660-f10289000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
welcome.unibet.com/custom.js
200 OK 0 B URL HTTP/2 welcome.unibet.com/custom.js
IP
GET /custom.js HTTP/1.1
Host: welcome.unibet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/no/pop/multisport/index.html?mktid=1:320665405:86262149-37950&btag=320665405_52D6066E8A50480BAC11AEE3F76F4EB4&bid=37950&campaignId=2750545&pid=86262149
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a86262149%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1667685448456)%5c%2f%22%2c%22CookieTag%22%3a%223795086262149451240919C20221152157%22%7d%5d; __ucbt=node01tvnwjcw9hlep1ghn8ap72x04; uniattr=ST.0.T; uniattr_ref=; campaignId=2750545; framework.forceBigLandingArea=; affiliateId=1; B-TAG=320665405_52D6066E8A50480BAC11AEE3F76F4EB4; BID=37950; PID=86262149; AFFILIATE_REQUEST_URL=https%3A%2F%2Fno.unibet.com%2Fstan%2Fcampaign.do%3FcmpId%3D2750545%26affiliateId%3D1%26unibetTarget%3D%2Fno%2Fpop%2Fmultisport%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_52D6066E8A50480BAC11AEE3F76F4EB4%26sref%3DTRM%26TRM%3DdL_119050.242451_422655%26affiliateId%3D1%26pid%3D86262149%26bid%3D37950; AFFILIATE_CAMPAIGN_ID=2750545
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 21:57:28 GMT
content-type: application/javascript
content-md5: e/Aekt1V1fopj1X7y5r9MA==
last-modified: Tue, 29 Mar 2022 08:25:09 GMT
etag: W/"0x8DA115DA300B0C1"
x-ms-request-id: 13443c84-101e-006f-31f3-f018f1000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
server: NetDNA-cache/2.2
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
172.67.200.219
104.18.20.226
178.154.131.216
46.105.201.240
190.115.19.71
93.184.220.29
23.36.77.32
104.40.147.180
192.99.0.58
151.101.84.193
85.184.96.0
37.252.172.249
63.34.6.182