r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f5e46725831d8d722872bf68d752f4c5
cf37793a1b73e3f84fe6c37fb27382c83b49dbc0
0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11966
Expires: Thu, 26 Jan 2023 13:55:14 GMT
Date: Thu, 26 Jan 2023 10:35:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2600
Expires: Thu, 26 Jan 2023 11:19:08 GMT
Date: Thu, 26 Jan 2023 10:35:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 26 Jan 2023 10:35:16 GMT
content-type: application/json
age: 32
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 69f73ac59327cd9ad7d99816ccfcc03e
c54844f82dbee0d5ee4c8ce344eb0139373e6c6b
e81c685b2d8f0e31b89e5cfc911a2c5a99a556646830ac5a8468d991b5e871a3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E81C685B2D8F0E31B89E5CFC911A2C5A99A556646830AC5A8468D991B5E871A3"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9527
Expires: Thu, 26 Jan 2023 13:14:35 GMT
Date: Thu, 26 Jan 2023 10:35:48 GMT
Connection: keep-alive
tibolario.com/track/mv/TRAhIvs?aff_transaction_id=plc00c3a828e026f721e5a8ebdd3d3b8&source=
130.193.108.230302 Found 890 B URL HTTP/1.1 tibolario.com/track/mv/TRAhIvs?aff_transaction_id=plc00c3a828e026f721e5a8ebdd3d3b8&source=
IP 130.193.108.230:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (361)
Hash 4bd9dfff8ff4b473a6ffb24af75da178
1cb1dc260fc2a951877840432ea089493eeb4ea8
8463a1eda2a9c7f1a4f985c16811bca48b5c19494fd971d5d53e8ffd7e4d0a54
GET /track/mv/TRAhIvs?aff_transaction_id=plc00c3a828e026f721e5a8ebdd3d3b8&source= HTTP/1.1
Host: tibolario.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: nginx/1.18.0 (Ubuntu)
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
cache-control: no-cache, private
date: Thu, 26 Jan 2023 10:35:48 GMT
location: https://123bookies.com/lp/lg-m2-cl/?utm_medium=plc00adf5880457493eea2a7e0f3e84c&utm_source=180&utm_term=1&utm_content=leadsglobal&utm_campaign=lg
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YRMRceThH7l6pHcYlfeN0lRaPEqiWGpVCjPmEjmTkrOwB3QMNPtzQchCSY1c2v2D8cnfwGzICDQ=
x-amz-request-id: 8J1FCMNR9B02T10E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 26 Jan 2023 10:20:03 GMT
age: 946
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 10:35:49 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 5b08912eb0f3f625afef5be9f95852f1
137a2f6487df7779bf73b687c639e9940aae0732
ace1589634e367c8fd59b1924a98bbc31761ac56abe9a941e25597782f3dc5ff
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=150078
Date: Thu, 26 Jan 2023 10:35:49 GMT
Etag: "63d1f135-1d7"
Expires: Sat, 28 Jan 2023 04:17:07 GMT
Last-Modified: Thu, 26 Jan 2023 03:19:17 GMT
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pnDGZOpjieyCBl3UIgLCGi38Nv-dPa0VzfxfWjg2L9WpJGKauhFcKQ==
Age: 3471
po.joshuarms.com/i/4bc143f09643313f1a7ce371ba0c0bc0.js
54.230.111.48200 OK 32 kB URL HTTP/2 po.joshuarms.com/i/4bc143f09643313f1a7ce371ba0c0bc0.js
IP 54.230.111.48:0
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash cbe5ef6858143998a19f270936c946e5
53c535ba6e4cd25065c1d90aba480d3cb20f51ab
88a96079993bf94680dd3debbe713535f69ac9901be93f4b45883660da428c09
Analyzer Verdict Alert fortinet Phishing
GET /i/4bc143f09643313f1a7ce371ba0c0bc0.js HTTP/1.1
Host: po.joshuarms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 31899
content-encoding: gzip
server: Caddy
date: Thu, 26 Jan 2023 07:48:27 GMT
cache-control: max-age=43200
expires: Thu, 26 Jan 2023 19:45:46 GMT
etag: "1571d-RbCekMaI4V88fEzyQvEX0A5JcDY"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vn8wjyZ5VwAWuG2YNrfT8TulgCL-sVyvSjSTRERmHS5blqiETyXTUQ==
age: 10203
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 26 Jan 2023 09:41:40 GMT
age: 3249
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2305
Expires: Thu, 26 Jan 2023 11:14:14 GMT
Date: Thu, 26 Jan 2023 10:35:49 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3e7fdf1ab4be9ee80518d0400683f0d3
dd2ec6511ba05e7fb89d32a1ad407db5eaa1520b
eb789178a0b528aad87a5bf0d05aecd45e7623ebaf198820f9310887757e1d5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2
216.58.207.227200 OK 9.1 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 9132, version 1.0\012- data
Hash 358d3070946a90b4960cd111154fdc12
a0ba0bf47a7f905f9aa1a3ce15a39cdac62466ee
54c64f3c66372027154f01fc9f24b4e25fdfe405b70d1994c79abbc2576ff775
GET /s/opensans/v18/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://123bookies.com
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9132
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 24 Jan 2023 18:35:18 GMT
expires: Wed, 24 Jan 2024 18:35:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Sep 2020 18:09:28 GMT
content-type: font/woff2
age: 144031
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhpKKSTjw.woff2
216.58.207.227200 OK 9.1 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhpKKSTjw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 9080, version 1.0\012- data
Hash 927f45f0c98e115c1f661f17d185771e
a4d63590c8393ae66bd712a0acd5105788c1a5b8
a48a6e4b14fe55f750c0a3dfb5a6f4941bdc06af0aa542b90de25c30c2b4625c
GET /s/opensans/v18/mem5YaGs126MiZpBA-UN7rgOUuhpKKSTjw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://123bookies.com
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 16:07:43 GMT
expires: Tue, 23 Jan 2024 16:07:43 GMT
cache-control: public, max-age=31536000
age: 239286
last-modified: Tue, 15 Sep 2020 18:10:27 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-MTSV9LF
142.250.74.72200 OK 82 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MTSV9LF
IP 142.250.74.72:0
File type ASCII text, with very long lines (24121)
Hash 7c5eeaff9bb7d0d22d25ccc17888dc7c
1241859899710a4fcef2ef19fadb78415ed0d1fc
bb14c9d5896cb1622eaadf1dc3bf62c4fcd71fdf57eddb28599e63daa52b4156
GET /gtm.js?id=GTM-MTSV9LF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 26 Jan 2023 10:35:49 GMT
expires: Thu, 26 Jan 2023 10:35:49 GMT
cache-control: private, max-age=900
last-modified: Thu, 26 Jan 2023 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 82407
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash afeb3476c3b5b8e10f11db443b8528af
f419163f1e43fece9e428e088c49c65e145846ed
8f9bbf884ae3cddaf2f3eff5d31abf823004207b33bc925651516c60af1f37a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 0bf8fccb276521254634abcdcb4b3f0d
a5b7ffa58daf7d1ea3e312b68533d4d0271348f4
991b03387ddbe0b07a9aee23ea7a98863fa85035cb26e631e0d22a1b999ee487
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sc-static.net/scevent.min.js
54.230.82.240200 OK 13 kB URL HTTP/2 sc-static.net/scevent.min.js
IP 54.230.82.240:0
File type ASCII text, with very long lines (30923), with no line terminators
Hash 957d65dfa972893511879b4d2abce54b
a0106f59c171c72c527a88cc3b06263af186a5c4
24cae1a14856e2642826fe9d960b0e61ae60fa45a778ec61f2b7d862dc3af603
GET /scevent.min.js HTTP/1.1
Host: sc-static.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 13270
server: CloudFront
date: Thu, 26 Jan 2023 10:35:49 GMT
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: Content-Type
cache-control: private, s-maxage=0, max-age=600
set-cookie: X-AB=0d6e407936704bd380072f5891d28b0e;max-age=86400;expires=Fri, 27 Jan 2023 08:20:54 GMT;Path=/scevent.min.js; Secure; SameSite=None
x-cache: LambdaGeneratedResponse from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Rd2GGpriQFivh-0yFSOqJslhUrA90MrbnpHwJUFWiaODzawCT_s2Pw==
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2fd3b5487710791cafa87110d681647a
6f3de59c79cf8f93c3312d917e9bb225a8bb25f9
35c24aa8f70e97185a0a18761f04b283cefecdce3abcd2261ccc6377077730c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35C24AA8F70E97185A0A18761F04B283CEFECDCE3ABCD2261CCC6377077730C5"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6852
Expires: Thu, 26 Jan 2023 12:30:01 GMT
Date: Thu, 26 Jan 2023 10:35:49 GMT
Connection: keep-alive
cdn.onesignal.com/sdks/OneSignalPageSDKES6.js?v=151514
104.18.226.52200 OK 69 kB URL HTTP/2 cdn.onesignal.com/sdks/OneSignalPageSDKES6.js?v=151514
IP 104.18.226.52:0
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 6fceb8cb64c8ee8f6413cab794d80127
8078b2e71dd3605724125f97c0cfd6e26fd90e11
4a80114222344bce1e724c44d14eafc0ee5d9f26fc6e804b34adb3e9ec274d7a
GET /sdks/OneSignalPageSDKES6.js?v=151514 HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:49 GMT
content-type: application/javascript
etag: W/"2f96824aee4bf927e734cc519e3e726d"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 1274
expires: Sun, 29 Jan 2023 10:35:49 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 78f89aa51e94b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=8cbcbb5f975d5cff5951fd6e8b6adcb71ab9e1a2c30eccd63b044c88e660a22c
139.45.195.8200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=8cbcbb5f975d5cff5951fd6e8b6adcb71ab9e1a2c30eccd63b044c88e660a22c
IP 139.45.195.8:0
Hash a57d822a3d0190dd7268b2fdaf0139e7
cbb6fdb975688574fd521285659a6507016badbb
af26ee6a23608b051ccb20b22478fffcf486c306ac839684d6e8725594979ea2
GET /p.js?f=sync&lr=1&partner=8cbcbb5f975d5cff5951fd6e8b6adcb71ab9e1a2c30eccd63b044c88e660a22c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 10:35:50 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3295d3058141b2ed6e7eeaed9c42ecca
edd6774f3c676940d6acdebc428a3d8097c07f3e
e9342908ebad694375eefc306084a3af973b934526ffd363f46dd76718664ad2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1196
Cache-Control: max-age=160397
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d22267-1d7"
Expires: Sat, 28 Jan 2023 07:09:07 GMT
Last-Modified: Thu, 26 Jan 2023 06:49:11 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3295d3058141b2ed6e7eeaed9c42ecca
edd6774f3c676940d6acdebc428a3d8097c07f3e
e9342908ebad694375eefc306084a3af973b934526ffd363f46dd76718664ad2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3056
Cache-Control: max-age=162257
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d22267-1d7"
Expires: Sat, 28 Jan 2023 07:40:07 GMT
Last-Modified: Thu, 26 Jan 2023 06:49:11 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3295d3058141b2ed6e7eeaed9c42ecca
edd6774f3c676940d6acdebc428a3d8097c07f3e
e9342908ebad694375eefc306084a3af973b934526ffd363f46dd76718664ad2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4996
Cache-Control: max-age=164197
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d22267-1d7"
Expires: Sat, 28 Jan 2023 08:12:27 GMT
Last-Modified: Thu, 26 Jan 2023 06:49:11 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 426d7a2a8b6ea4554648bb653dc169fd
6d9b28b5141b5502cdc00691f55738d09221a602
e56e2ff97bac596673aca4fd70dbfe9397d6ad8ab1f75ec008f245f22c817be9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99770
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d13a40-1d7"
Expires: Fri, 27 Jan 2023 14:18:40 GMT
Last-Modified: Wed, 25 Jan 2023 14:18:40 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8v4uT_wQzLEw9QVvbxV8ZeGF4ugS4P8WjdtroUKnf7BZiwtnaNKH5w==
ocsp.sca1b.amazontrust.com/
54.230.245.100200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.100:0
Hash 426d7a2a8b6ea4554648bb653dc169fd
6d9b28b5141b5502cdc00691f55738d09221a602
e56e2ff97bac596673aca4fd70dbfe9397d6ad8ab1f75ec008f245f22c817be9
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99770
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d13a40-1d7"
Expires: Fri, 27 Jan 2023 14:18:40 GMT
Last-Modified: Wed, 25 Jan 2023 14:18:40 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vNy4XbBRQO4O8r76N4upjYx-LbGEuG4Q2G0ji8ZX_dCxBSTK6nGt9g==
der.joshuarms.com/ct?id=7111&url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1674729347577&hl=1&op=0&ag=1317291471&rand=638077722872971292899255658001608959591169595206225159027512751115511110150&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=ggyByy30y4&pto=1009&ver=50&gac=-&mei=&ap=&duid=1.1674729347.OXEA5Tf5KV0fCeIC&suid=1.1674729347.xoNX2jnhCnnSe49Q&tuid=1.1674729347.i7hNLzLWX6wpOTSa&fbc=->m=W10%3D&it=5%2C563%2C244&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
34.199.234.25200 OK 0 B URL HTTP/2 der.joshuarms.com/ct?id=7111&url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1674729347577&hl=1&op=0&ag=1317291471&rand=638077722872971292899255658001608959591169595206225159027512751115511110150&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=ggyByy30y4&pto=1009&ver=50&gac=-&mei=&ap=&duid=1.1674729347.OXEA5Tf5KV0fCeIC&suid=1.1674729347.xoNX2jnhCnnSe49Q&tuid=1.1674729347.i7hNLzLWX6wpOTSa&fbc=->m=W10%3D&it=5%2C563%2C244&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP 34.199.234.25:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ct?id=7111&url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1674729347577&hl=1&op=0&ag=1317291471&rand=638077722872971292899255658001608959591169595206225159027512751115511110150&fs=1280x939&fst=1280x939&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=%7B%7D&cri=ggyByy30y4&pto=1009&ver=50&gac=-&mei=&ap=&duid=1.1674729347.OXEA5Tf5KV0fCeIC&suid=1.1674729347.xoNX2jnhCnnSe49Q&tuid=1.1674729347.i7hNLzLWX6wpOTSa&fbc=->m=W10%3D&it=5%2C563%2C244&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: der.joshuarms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript
date: Thu, 26 Jan 2023 10:35:50 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 0
X-Firefox-Spdy: h2
tr.snapchat.com/cm/i?pid=a1254cb6-8d5b-4b72-8223-4e703c8c7b40&u_scsid=57d5d046-fcdb-4141-b271-77747015852a&u_sclid=fc5a97fd-ce39-4df2-be49-9ebd4126888d
35.190.43.134200 OK 0 B URL HTTP/2 tr.snapchat.com/cm/i?pid=a1254cb6-8d5b-4b72-8223-4e703c8c7b40&u_scsid=57d5d046-fcdb-4141-b271-77747015852a&u_sclid=fc5a97fd-ce39-4df2-be49-9ebd4126888d
IP 35.190.43.134:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/i?pid=a1254cb6-8d5b-4b72-8223-4e703c8c7b40&u_scsid=57d5d046-fcdb-4141-b271-77747015852a&u_sclid=fc5a97fd-ce39-4df2-be49-9ebd4126888d HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
content-type: text/html
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-length: 0
x-envoy-upstream-service-time: 0
server: API Gateway
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
clicks.tracktemi.com/api/v1/user/save
18.169.95.56204 No Content 0 B URL HTTP/2 clicks.tracktemi.com/api/v1/user/save
IP 18.169.95.56:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v1/user/save HTTP/1.1
Host: clicks.tracktemi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://123bookies.com/
Origin: https://123bookies.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 26 Jan 2023 10:35:50 GMT
server: nginx/1.18.0
x-powered-by: Express
access-control-allow-origin: https://123bookies.com
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
vary: Origin, Access-Control-Request-Headers
X-Firefox-Spdy: h2
intersc.igaming-service.io/123bookies.com.js?ver=2023126
54.230.111.67200 OK 12 kB URL HTTP/2 intersc.igaming-service.io/123bookies.com.js?ver=2023126
IP 54.230.111.67:0
File type ASCII text, with very long lines (388)
Hash 53117ee4cd7d8ea6eb049b6324154a0b
08cf8ba315e6141cb80d917c3c5123159cbbc55a
7cc8d2f15b7e6ca361320cf6bf36b0577902f054da40243233c2658f8e013710
GET /123bookies.com.js?ver=2023126 HTTP/1.1
Host: intersc.igaming-service.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 25 Jan 2023 19:51:28 GMT
last-modified: Mon, 23 Jan 2023 15:23:03 GMT
etag: W/"a4238fa405ee8d0415bb578c95dc2964"
server: AmazonS3
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TsuKq3Z2sF6529ZSmoKHQxVMDyRXR2CjodJ-hj7sRGwIY1vXPshq8w==
age: 53063
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
ip-api.igaming-service.io/
3.10.72.72200 OK 277 B URL HTTP/1.1 ip-api.igaming-service.io/
IP 3.10.72.72:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 82020d94bbcf2db6d97419efa8285c3a
4c582444cd3aed07cc146f84943944384a531260
ce29f494686471ff7bb20a96efeb02abe0f76f557035a637f9a2201f90a2fd3d
GET / HTTP/1.1
Host: ip-api.igaming-service.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://123bookies.com
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 26 Jan 2023 10:35:50 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 277
Connection: keep-alive
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=15768000
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3295d3058141b2ed6e7eeaed9c42ecca
edd6774f3c676940d6acdebc428a3d8097c07f3e
e9342908ebad694375eefc306084a3af973b934526ffd363f46dd76718664ad2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1196
Cache-Control: max-age=160397
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d22267-1d7"
Expires: Sat, 28 Jan 2023 07:09:07 GMT
Last-Modified: Thu, 26 Jan 2023 06:49:11 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
clicks.tracktemi.com/api/v1/user/save
18.169.95.56200 OK 134 B URL HTTP/2 clicks.tracktemi.com/api/v1/user/save
IP 18.169.95.56:0
File type JSON data\012- , ASCII text, with no line terminators
Hash f8679102a51b839a2ed86f90afd9ead4
044984b309611b34a52125a68efe7ffa09b6f765
a20e0d40ed9c95e63c1d7473606762dfc020cb41437bf4092adff20d7334ce20
POST /api/v1/user/save HTTP/1.1
Host: clicks.tracktemi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://123bookies.com/
Content-Type: application/json
Origin: https://123bookies.com
Content-Length: 657
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
content-type: application/json; charset=utf-8
content-length: 134
server: nginx/1.18.0
x-powered-by: Express
access-control-allow-origin: https://123bookies.com
access-control-allow-methods: GET,PUT,POST,DELETE
access-control-allow-headers: Content-Type
vary: Origin
etag: W/"86-BEmEswlhGzSlISWmjv5/+gm292U"
X-Firefox-Spdy: h2
d13a7qj61jgl0i.cloudfront.net/wp-content/uploads/sites/64/2021/08/11133320/cropped-football-1-192x192.png
54.230.245.67200 OK 8.5 kB URL HTTP/2 d13a7qj61jgl0i.cloudfront.net/wp-content/uploads/sites/64/2021/08/11133320/cropped-football-1-192x192.png
IP 54.230.245.67:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash fc956b9f33f4752791a4e6f9070f681a
b1e9c1748cbb3eff978ad87d19ed5aa9ce325cf4
76922b9cb571ede98ab20444e0b1421feb28f23a42e084a6bc0311f64630a089
GET /wp-content/uploads/sites/64/2021/08/11133320/cropped-football-1-192x192.png HTTP/1.1
Host: d13a7qj61jgl0i.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 8493
date: Thu, 19 Jan 2023 16:31:13 GMT
last-modified: Wed, 11 Aug 2021 13:33:29 GMT
etag: "fc956b9f33f4752791a4e6f9070f681a"
cache-control: max-age=31536000
expires: Thu, 11 Aug 2022 13:33:27 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lhu1luYsD4iTrg28Mi4P_Z0e5r5Myt3wjymhKc-GY_O7YWWBUR3n9g==
age: 583478
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8127133a6d1c10ce4e3cbf6028b3e555
ce62fc282eee1a28e8bff5bd677cb0a63edea598
a411d44ecbe5c57bc81fca6c3c80a8de98cf82594bdb84dbef6e541e4df8d347
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6413
Cache-Control: max-age=136101
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d1af1f-1d7"
Expires: Sat, 28 Jan 2023 00:24:11 GMT
Last-Modified: Wed, 25 Jan 2023 22:37:19 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 34c6c87358e04f2487a4fcb466d2ad17
2e99bb20b81b80930471f736676e4dd3a093a9cd
db58d2601ad2308da96f8998b9b5e39c3c48b910c0f141230a757b9985b536fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
amplify.outbrain.com/cp/obtp.js
2.18.173.74200 OK 5.9 kB URL HTTP/1.1 amplify.outbrain.com/cp/obtp.js
IP 2.18.173.74:0
File type ASCII text, with very long lines (17737), with no line terminators
Hash 69ccf6d91702cd65dedfbad36e94c61b
adce8bd55dcc466c709dc96e230cbdd72fb27645
9a5b793c3b453c30229658bebe68719aa0df37a71ef371a6c6117e123b091e64
GET /cp/obtp.js HTTP/1.1
Host: amplify.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: application/x-javascript
ETag: "9f0b052ec22f789c3cc95c26dd0da7f4:1674389451.57807"
Last-Modified: Sun, 22 Jan 2023 12:08:14 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1200
Expires: Thu, 26 Jan 2023 10:55:50 GMT
Date: Thu, 26 Jan 2023 10:35:50 GMT
Content-Length: 5884
Connection: keep-alive
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 9ba458c0d3060a442f3094daf58ec05d
fc35d487d0dd81e6855f1b02367b755609d9608d
17087257ea25c2232c025f338b9f3153d35c3d953cb382b7b6e01728a643bc0b
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: AUtMwDNzrlVOXZWG9RwTX5ZH+1ZhvrV5GGQsBSlfSB2T+og0LZbJm+kGAe+ShMO9VH6GyBc+1QS5ojmjei6Z4g==
priority: u=3,i
content-length: 27859
x-fb-trip-id: 1904183273
date: Thu, 26 Jan 2023 10:35:50 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
216.58.207.206200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 216.58.207.206:0
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 26 Jan 2023 09:41:08 GMT
expires: Thu, 26 Jan 2023 11:41:08 GMT
cache-control: public, max-age=7200
age: 3282
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d97122742133f124ebe9ec5c50ada96f
bbba8c7969d6523f56dfe7d27aa994c009e1a644
fcc9d9d23c2d229605890553ee7a73ceb33523487f652635f982b6ed14b485e9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5349
Cache-Control: max-age=118806
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d16fb7-1d7"
Expires: Fri, 27 Jan 2023 19:35:56 GMT
Last-Modified: Wed, 25 Jan 2023 18:06:47 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
static.ads-twitter.com/uwt.js
151.101.244.157200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP 151.101.244.157:0
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Thu, 26 Jan 2023 10:35:50 GMT
x-served-by: cache-iad-kiad7000089-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 8127133a6d1c10ce4e3cbf6028b3e555
ce62fc282eee1a28e8bff5bd677cb0a63edea598
a411d44ecbe5c57bc81fca6c3c80a8de98cf82594bdb84dbef6e541e4df8d347
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6053
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Last-Modified: Thu, 26 Jan 2023 08:54:57 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
142.250.74.98200 OK 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP 142.250.74.98:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://123bookies.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Thu, 26 Jan 2023 10:35:50 GMT
expires: Thu, 26 Jan 2023 10:35:50 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 4414160395281709733
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49956
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d13a7qj61jgl0i.cloudfront.net/wp-content/uploads/sites/64/2021/08/11133320/cropped-football-1-32x32.png
54.230.245.67200 OK 958 B URL HTTP/2 d13a7qj61jgl0i.cloudfront.net/wp-content/uploads/sites/64/2021/08/11133320/cropped-football-1-32x32.png
IP 54.230.245.67:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 1550b8ed61f0250014d268b639e23272
3a9c9361000c01d2e63ae16c31f0cf896f6180b9
69b0c1aaec9c4ad1c51d48dab4e181fd89c092d0838b419a66632c929e834ad7
GET /wp-content/uploads/sites/64/2021/08/11133320/cropped-football-1-32x32.png HTTP/1.1
Host: d13a7qj61jgl0i.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 958
date: Thu, 19 Jan 2023 16:31:13 GMT
last-modified: Wed, 11 Aug 2021 13:33:29 GMT
etag: "1550b8ed61f0250014d268b639e23272"
cache-control: max-age=31536000
expires: Thu, 11 Aug 2022 13:33:27 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: quogiUqdhw6mpRw87dFfPStpts_BNx3UJEkeQ_v0zR_iM4NtZP_pMg==
age: 583478
X-Firefox-Spdy: h2
d13a7qj61jgl0i.cloudfront.net/wp-content/uploads/sites/64/2021/11/18092804/123-bookies-background-br-mark-roy.jpg.webp
54.230.245.67200 OK 676 kB URL HTTP/2 d13a7qj61jgl0i.cloudfront.net/wp-content/uploads/sites/64/2021/11/18092804/123-bookies-background-br-mark-roy.jpg.webp
IP 54.230.245.67:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 676 kB (675530 bytes)
Hash 4c7a4d72f3458daf1706cd08da8abea0
64bca5f054fd876dc3fb050a3c89e5b15d7d9b02
3e8b96af164fae38bb6cdd0a4caf424dd93b86cf21382123d9ede8e849a0e3c8
GET /wp-content/uploads/sites/64/2021/11/18092804/123-bookies-background-br-mark-roy.jpg.webp HTTP/1.1
Host: d13a7qj61jgl0i.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 675530
date: Sun, 22 Jan 2023 21:50:43 GMT
last-modified: Thu, 18 Nov 2021 09:28:13 GMT
etag: "4c7a4d72f3458daf1706cd08da8abea0"
cache-control: max-age=31536000
expires: Fri, 18 Nov 2022 09:28:10 GMT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QDACFYRVqMyhMbmDs6rbfhNIw4yL9H2NiWLXioUuo3THxkpJO77YmA==
age: 305108
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
188.125.94.204200 OK 6.4 kB IP 188.125.94.204:0
Hash b1b88633fae79445c459431c7ea196f3
66a208910b61253dc462ac481d86c37aac5a3177
b946704651c68573ecc0cbef663f49e00b195b521355dcd9cd9393a481910d99
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: aCLOZpc3WFz+r5S5XSn7EG138mBMd6WB3H0lClz1TWhqjDvXcz7QjLnspCPQSvn7n4BHzTmjWM4=
x-amz-request-id: PK9BMVHWCP241QEC
date: Thu, 26 Jan 2023 10:16:47 GMT
last-modified: Tue, 14 Jun 2022 12:21:31 GMT
x-amz-expiration: expiry-date="Thu, 20 Jul 2023 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "6a624022b5d271dcefb070b0b6670abc-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: .QD3nDfK79S8_ikLSJXTL23Tdis9tg0C
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 1144
content-encoding: gzip
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash bdf3a89c952811c3a4ce04eb83dc1d97
3807042e853f28dc46efb630c3c4020e69d06ed9
cbcfb131a8cec69e962ae20a3b43b3efce85a257215595053d0660cde63c8d11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5695
Cache-Control: max-age=96822
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d1187d-139"
Expires: Fri, 27 Jan 2023 13:29:32 GMT
Last-Modified: Wed, 25 Jan 2023 11:54:37 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash bdf3a89c952811c3a4ce04eb83dc1d97
3807042e853f28dc46efb630c3c4020e69d06ed9
cbcfb131a8cec69e962ae20a3b43b3efce85a257215595053d0660cde63c8d11
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1713
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Last-Modified: Thu, 26 Jan 2023 10:07:17 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 313
cdn.taboola.com/libtrc/unip/1078167/tfa.js
151.101.65.44200 OK 18 kB URL HTTP/2 cdn.taboola.com/libtrc/unip/1078167/tfa.js
IP 151.101.65.44:0
File type ASCII text, with very long lines (59651)
Hash 5afe587fb317a73ba15094575dcdf42d
b3d0580eafea96b4b13058833f77d39bb376af75
9b709a81aaa4b6e5e1cd6412b6ca826c849c5d4af25ec686df6446a34872bdcf
GET /libtrc/unip/1078167/tfa.js HTTP/1.1
Host: cdn.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: W+eByUNNZkf8pMFgU00xSi0x/UziwX5JaokdPpFVtdPwtUhUlBmt6BliqjlOsB/yl4Nrbl+3qJY=
x-amz-request-id: 2FNX411YY6ADK0JQ
x-amz-replication-status: COMPLETED
last-modified: Wed, 25 Jan 2023 10:26:08 GMT
etag: "c4d6289ed6669ddba8f9621b57964403"
x-amz-version-id: RmPJVTELSfSAN4gvFXAPEyj_HTnscENC
content-type: application/javascript; charset=utf-8
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 10:35:50 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1677-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1674729350.372409,VS0,VE201
cache-control: private,max-age=14401
vary: Accept-Encoding
abp: 80
content-length: 18338
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=8cbcbb5f975d5cff5951fd6e8b6adcb71ab9e1a2c30eccd63b044c88e660a22c&ttl=&rurl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=8cbcbb5f975d5cff5951fd6e8b6adcb71ab9e1a2c30eccd63b044c88e660a22c&ttl=&rurl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=8cbcbb5f975d5cff5951fd6e8b6adcb71ab9e1a2c30eccd63b044c88e660a22c&ttl=&rurl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Jan 2023 10:35:50 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=5e2ff1e24b1d4bb6a56b22dd14888c5e; expires=Fri, 26 Jan 2024 10:35:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea27ddab-65b0-496d-be29-cfcc4ad26087&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
104.244.42.197200 OK 43 B URL HTTP/2 t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea27ddab-65b0-496d-be29-cfcc4ad26087&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
IP 104.244.42.197:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea27ddab-65b0-496d-be29-cfcc4ad26087&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=704bac60-2aa9-456a-a93b-08545435e6b2; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 67ad32fe2c9ee219
strict-transport-security: max-age=0
x-response-time: 107
x-connection-hash: 4f17990f08ca63ef2bc042c15b5a75c87ad93746be4115896baa4645cccfb6b7
X-Firefox-Spdy: h2
t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=224fe3c2-1e62-44b7-8f77-0b80487b73ae&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
104.244.42.197200 OK 43 B URL HTTP/2 t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=224fe3c2-1e62-44b7-8f77-0b80487b73ae&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
IP 104.244.42.197:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=224fe3c2-1e62-44b7-8f77-0b80487b73ae&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=9516df27-3e87-4887-aad6-970688d321ed; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 76c731633312a290
strict-transport-security: max-age=0
x-response-time: 111
x-connection-hash: 4f17990f08ca63ef2bc042c15b5a75c87ad93746be4115896baa4645cccfb6b7
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-V5TKLSBSVC>m=2oe1p0&_p=640303708&cid=1554909925.1674729348&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674729347&sct=1&seg=0&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&dt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-V5TKLSBSVC>m=2oe1p0&_p=640303708&cid=1554909925.1674729348&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674729347&sct=1&seg=0&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&dt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-V5TKLSBSVC>m=2oe1p0&_p=640303708&cid=1554909925.1674729348&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1674729347&sct=1&seg=0&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&dt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://123bookies.com
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://123bookies.com
date: Thu, 26 Jan 2023 10:35:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=603027994931011&ev=PageView&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&rl=&if=false&ts=1674729348554&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&fbp=fb.1.1674729348554.1042166888&it=1674729348321&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=603027994931011&ev=PageView&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&rl=&if=false&ts=1674729348554&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&fbp=fb.1.1674729348554.1042166888&it=1674729348321&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=603027994931011&ev=PageView&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&rl=&if=false&ts=1674729348554&sw=1280&sh=1024&v=2.9.94&r=stable&ec=0&o=30&fbp=fb.1.1674729348554.1042166888&it=1674729348321&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 26 Jan 2023 10:35:50 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.41200 OK 1.8 kB IP 192.124.249.41:0
Hash b3a837ae63fbefc0dde08f8e06af7425
48b135e7fccbad24ba092f97e65de4cd425a6cd2
b61af6e2ca93ff3d9f6cbe078e68193590d16a6175a8f23f56969ed094db0ffb
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 26 Jan 2023 10:35:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 25 Jan 2023 20:51:59 GMT
Expires: Thu, 26 Jan 2023 20:51:59 GMT
ETag: "48b135e7fccbad24ba092f97e65de4cd425a6cd2"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 3770407203b1d086bb1266dcff7d1d3d
bc65aac367c611a8f9b0503093045e7132f17e66
90cc4337b5f34ecc414c705b505351714aa87b15c6da35ebde6e5de68de5a96a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4118
Cache-Control: max-age=136350
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d1b90e-139"
Expires: Sat, 28 Jan 2023 00:28:20 GMT
Last-Modified: Wed, 25 Jan 2023 23:19:42 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 313
ocsp.digicert.com/
93.184.220.29200 OK 313 B IP 93.184.220.29:0
Hash 3770407203b1d086bb1266dcff7d1d3d
bc65aac367c611a8f9b0503093045e7132f17e66
90cc4337b5f34ecc414c705b505351714aa87b15c6da35ebde6e5de68de5a96a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1848
Cache-Control: max-age=134080
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d1b90e-139"
Expires: Fri, 27 Jan 2023 23:50:30 GMT
Last-Modified: Wed, 25 Jan 2023 23:19:42 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 313
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 6aebd1dc8426a178f50e20aa0d4b3033
0e0a0846945e4b57dc4278ee5c94b45d5af55b10
38785869b6d008255d875685e8883a9092735cb8396b662d39c607724ba7ffff
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3947
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Last-Modified: Thu, 26 Jan 2023 09:30:03 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
status.thawte.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 6aebd1dc8426a178f50e20aa0d4b3033
0e0a0846945e4b57dc4278ee5c94b45d5af55b10
38785869b6d008255d875685e8883a9092735cb8396b662d39c607724ba7ffff
POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6499
Cache-Control: max-age=131135
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:50 GMT
Etag: "63d19b62-1d7"
Expires: Fri, 27 Jan 2023 23:01:25 GMT
Last-Modified: Wed, 25 Jan 2023 21:13:06 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
pixel.quantserve.com/pixel;r=157991820;labels=_fp.event.Default;rf=0;a=p-r5_-qd1tH82mf;url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-653828340-1674729348358;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=123bookies.com;dst=0;et=1674729348613;tzo=0;ogl=;ses=a7e47208-1a80-4d65-8b1a-d2a38fd639bc
91.228.74.200200 OK 35 B URL HTTP/2 pixel.quantserve.com/pixel;r=157991820;labels=_fp.event.Default;rf=0;a=p-r5_-qd1tH82mf;url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-653828340-1674729348358;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=123bookies.com;dst=0;et=1674729348613;tzo=0;ogl=;ses=a7e47208-1a80-4d65-8b1a-d2a38fd639bc
IP 91.228.74.200:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55d25e9dc950d5db4d53a3b195c046c6
75e91ae3e549dab12ed1c9787ade9131aef1c981
a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
GET /pixel;r=157991820;labels=_fp.event.Default;rf=0;a=p-r5_-qd1tH82mf;url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg;uh=e51ed67dfb8d91dc24b15e2ace0c3bc33bc53c3e1dfb09200d6c2f8387d67ea6;uht=2;fpan=1;fpa=P0-653828340-1674729348358;pbc=;ns=0;ce=1;qjs=1;qv=8508733c-20230116145555;cm=;gdpr=0;ref=;d=123bookies.com;dst=0;et=1674729348613;tzo=0;ogl=;ses=a7e47208-1a80-4d65-8b1a-d2a38fd639bc HTTP/1.1
Host: pixel.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
content-type: image/gif
content-length: 35
cache-control: private, no-cache, no-store, proxy-revalidate
expires: Fri, 04 Aug 1978 12:00:00 GMT
p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
pragma: no-cache
set-cookie: mc=63d25786-bfa0c-d0cc4-a4fad; expires=Mon, 26-Feb-2024 10:35:50 GMT; path=/; domain=.quantserve.com
X-Firefox-Spdy: h2
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=224fe3c2-1e62-44b7-8f77-0b80487b73ae&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
104.244.42.3200 OK 43 B URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=224fe3c2-1e62-44b7-8f77-0b80487b73ae&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
IP 104.244.42.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=224fe3c2-1e62-44b7-8f77-0b80487b73ae&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
perf: 7626143928
server: tsa_o
set-cookie: guest_id_marketing=v1%3A167472935082523475; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167472935082523475; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_pBJAauQpwuEldhyeSW4h/w=="; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167472935082523475; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: ab3ccb62163453fc
strict-transport-security: max-age=631138519
x-response-time: 109
x-connection-hash: 52d6e9fef0b9e254b34c3b932529c7590c4f44adb32f08a81773c1d59ad5c641
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10135249.json
188.125.94.204200 OK 22 B URL HTTP/2 s.yimg.com/wi/config/10135249.json
IP 188.125.94.204:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 14293ad9ad0ffaf9f7a3acf1b0793b66
718dea6b65b9516e5e33fac53451056397deb255
73a1b438b0221511fb3dde18e019f5ab045811b2248d25d424e40980c683a9dc
GET /wi/config/10135249.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://123bookies.com
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
x-amz-request-id: F2G2RVM47QBHFW9C
x-amz-id-2: gvsXPo1WFRlxb/sVYnhJbKLsJfOY3lSH9SDx5hMzIUwSJNvGDOKej1CuZVudBdxK8hzVBG6crbc=
content-type: application/json
date: Thu, 26 Jan 2023 10:35:50 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
age: 0
content-encoding: gzip
content-length: 22
strict-transport-security: max-age=15552000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea27ddab-65b0-496d-be29-cfcc4ad26087&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
104.244.42.3200 OK 1.8 kB URL HTTP/2 analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea27ddab-65b0-496d-be29-cfcc4ad26087&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29
IP 104.244.42.3:0
Hash 4bba631ac84e940cfadd9d83545113d5
dfb919a540dccf35ca5aac4eb04f7879fcebbd52
e47ce23b9b6fea075fc924679f65f9c834bdafca04d2370d7b850280e85675f6
GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ea27ddab-65b0-496d-be29-cfcc4ad26087&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=239b20ee-df7c-4b75-9a7e-1572608236db&tw_document_href=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&tw_iframe_status=0&txn_id=ocsjt&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:49 GMT
perf: 7626143928
server: tsa_o
set-cookie: guest_id_marketing=v1%3A167472935083597900; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id_ads=v1%3A167472935083597900; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
personalization_id="v1_RjnLlpRM0npYl8UAgOGL0Q=="; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
guest_id=v1%3A167472935083597900; Max-Age=63072000; Expires=Sat, 25 Jan 2025 10:35:50 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 93e9cf9acc03076d
strict-transport-security: max-age=631138519
x-response-time: 104
x-connection-hash: 52d6e9fef0b9e254b34c3b932529c7590c4f44adb32f08a81773c1d59ad5c641
X-Firefox-Spdy: h2
tr.outbrain.com/cachedClickId?marketerId=undefined
50.31.142.159200 OK 35 B URL HTTP/1.1 tr.outbrain.com/cachedClickId?marketerId=undefined
IP 50.31.142.159:0
File type ASCII text, with no line terminators
Hash 75c843c7b717e7b722777907475c67a3
983d1c9a05b315288039b9d4694ce3b402259240
1d348f9f803c95305f63def9d75fd50e79e54a375e1a4a888edbbea366845580
GET /cachedClickId?marketerId=undefined HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 10:35:50 GMT
Content-Type: application/javascript
Content-Length: 35
X-TraceId: 2e8c0a7e63207f62f56d0129f4bcc900
dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31177&tdr=&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=33618381423751464term=value
44.236.162.197200 OK 4.2 kB URL HTTP/1.1 dx.steelhousemedia.com/spx?dxver=4.0.0&shaid=31177&tdr=&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=33618381423751464term=value
IP 44.236.162.197:0
File type ASCII text, with very long lines (1486)
Hash 17dce4f508bb9d657c8816ed378757df
0aee4eccacb6756fb524dc29657a46cf6b6cdabb
52b81993d276525c2b34e44ab660fd6a3aecfdc52037515906a8ec48ccae781f
GET /spx?dxver=4.0.0&shaid=31177&tdr=&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=33618381423751464term=value HTTP/1.1
Host: dx.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Thu, 26 Jan 2023 10:35:50 GMT
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
transfer-encoding: chunked
tr.outbrain.com/unifiedPixel?marketerId=00f0edcdad6d0f430c09d4065d73a383f8,00c3f97de99f9ca7b721874c89cc8dda1d&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&optOut=false&bust=0025304267886664955&referrer=
50.31.142.159200 OK 53 B URL HTTP/1.1 tr.outbrain.com/unifiedPixel?marketerId=00f0edcdad6d0f430c09d4065d73a383f8,00c3f97de99f9ca7b721874c89cc8dda1d&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&optOut=false&bust=0025304267886664955&referrer=
IP 50.31.142.159:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 414bd2a5161db03fdd910327b42c6daa
65d4cf50496813c5f1a34eddd5c50dc67d44ff47
b51f3497b0a65f1e1e87e75f5e7e823d871c23bcf76a5ee4101783c8f939e553
GET /unifiedPixel?marketerId=00f0edcdad6d0f430c09d4065d73a383f8,00c3f97de99f9ca7b721874c89cc8dda1d&obApiVersion=1.1&obtpVersion=2.0.5&name=PAGE_VIEW&dl=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&optOut=false&bust=0025304267886664955&referrer= HTTP/1.1
Host: tr.outbrain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 10:35:50 GMT
Content-Type: image/gif;
Content-Length: 53
Cache-Control: no-cache
X-TraceId: b5fada0c1a41bca3bee74c5a57655ded
sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2026%20Jan%202023%2010%3A35%3A48%20GMT&n=0&b=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&.yp=10135249&f=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&enc=UTF-8&yv=1.13.0&tagmgr=gtm
212.82.100.181200 OK 43 B URL HTTP/2 sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2026%20Jan%202023%2010%3A35%3A48%20GMT&n=0&b=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&.yp=10135249&f=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&enc=UTF-8&yv=1.13.0&tagmgr=gtm
IP 212.82.100.181:0
ASN #34010 Yahoo! UK Services Limited
File type GIF image data, version 89a, 1 x 1\012- data
Hash bff56ce49dd485d195fdfa0a02342568
74fb4071deab7d3ab083562067b735df32c43397
0e4b1e428a2198ef747010c094101c257b568a97cdcc0f31ed5e9868cc835b39
GET /sp.pl?a=10000&d=Thu%2C%2026%20Jan%202023%2010%3A35%3A48%20GMT&n=0&b=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&.yp=10135249&f=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&enc=UTF-8&yv=1.13.0&tagmgr=gtm HTTP/1.1
Host: sp.analytics.yahoo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:51 GMT
expires: Thu, 26 Jan 2023 10:35:51 GMT
pragma: no-cache
cache-control: no-cache, private, must-revalidate
content-type: image/gif
accept-ranges: bytes
content-length: 43
server: ATS
age: 0
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
set-cookie: A3=d=AQABBIdX0mMCENSFfDc7fV93BonJ-9w-OzoFEgEBAQGp02PcYwAAAAAA_eMAAA&S=AQAAAgZcyW6TLPSfGueEKqy_2Ew; Expires=Fri, 26 Jan 2024 16:35:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10725
Expires: Thu, 26 Jan 2023 13:34:36 GMT
Date: Thu, 26 Jan 2023 10:35:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10725
Expires: Thu, 26 Jan 2023 13:34:36 GMT
Date: Thu, 26 Jan 2023 10:35:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c7f25e5-06eb-4d3f-99e2-edacd0739efb.jpeg
34.120.237.76200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c7f25e5-06eb-4d3f-99e2-edacd0739efb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cfe699b31f96add9f1439af1ff1191eb
f77a833a69b69eef4a39e404c102f624e96b52c0
44312979ac13221e5c3328ad590f0f3dc7da00380c07c433382cd81c47b717f8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c7f25e5-06eb-4d3f-99e2-edacd0739efb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14856
x-amzn-requestid: 2f52d4d7-4158-485e-bbae-1f906c40d1f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fSYg5HvwoAMFxjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0d46b-73d5d7862497852334d9cde2;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 07:04:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4szanZUhJULoG1K5oNXzvcaoImIduF8NnkTrwCPSpOFpJMaw7rQqEg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:22:01 GMT
age: 11630
etag: "f77a833a69b69eef4a39e404c102f624e96b52c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13cd008fb3e2739ec7caadadbd427655
c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1
a300a4fde1863c8b806d0557d9f0adaed19e1c612989d7e3f79a7bb45e6e74dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ffb1709-216c-4bf0-9b98-e3a355f000bb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8822
x-amzn-requestid: e16ae781-25f3-4b7d-b62b-85b35d6571c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwF2KIAMFjDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-377f24bd18dea32564b148bd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3Q-kz6GkBHp82E__crWSeqbfxme8c9y1BAAq3TW8NlwJy4eSy7gy7Q==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:07 GMT
age: 46004
etag: "c4802b06b87ab97f3ccd80d1c9bbdb4fab9886c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg
34.120.237.76200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e013ee2e3a5287de55de4c2437a279d
f2b0a5738ec9e3b178b2bf5513de3e604b86eadf
f174d5678154412cdbf71f93c345d28cfb8bad7c190fa31dd78e9314c510f7ca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb3177e0c-fa06-470b-bb9e-800d246a5096.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8648
x-amzn-requestid: 19beb9c1-4e85-47ba-9275-7fb5d25f055f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYMlENLoAMFhIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0b6-016533de5b42b3a573a66c78;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:35:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jkExt4JNW6KtzDm8mDdb-AvXWXeyZr14XifDN_XVzKiwFAru_1HcSA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:13 GMT
age: 45998
etag: "f2b0a5738ec9e3b178b2bf5513de3e604b86eadf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
34.120.237.76200 OK 116 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP 34.120.237.76:0
File type gzip compressed data, from Unix\012- data
Size 116 kB (116084 bytes)
Hash 62760eeebfcc6cda3724b0f4ba3e79b2
b7a30a580690c9e27be088038c6c5a65260fa860
b383cbc4702f43fc9e23cbedb5ebc0e643347c34b79592adde7c1d1f9e455429
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KY05WKpINERD5g9o2QLYdsNMSuuy_YKn2Tl7Qkn7YaAOaPTDfLteeA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:40 GMT
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
age: 45971
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 653bf5a34e9f99c9eef73a21d98d792f
c70d46aa2210c4f7c397fa20e1225b7d0734ac35
9f928ec6f194340e5543a4bf757aac31d545def67a56ae804a2039a3effd3fe0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3e6d9a5-dd7d-4337-a00f-a145350a1a29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10379
x-amzn-requestid: 77d12b56-c121-4d0a-9831-9de4151b65de
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUY8_GVUIAMFmgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a1ec-523a2d8b1028a4496a211030;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:41:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: i_OHKx9OPaP8_2ydfgZwY4Dvbq208pXR2hwFTdUySwjsIwEIcv-M4g==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:49:18 GMT
age: 45993
etag: "c70d46aa2210c4f7c397fa20e1225b7d0734ac35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cb7be12333fa7ea3353901b4b3215af
4b758cc432874384f330568177eef5a328d7e69a
d6f86c0ddbabd5c4fd7cee72ce4da62ccddd9d29139c9ab033bb1ab8425bae22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11918
x-amzn-requestid: ff47dd24-004f-4cc7-acfb-283b2e751f23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEqxwEyWoAMF3gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb580b-1e95f74b0846080f75a757f6;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:12:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ntW_cYMwX6UWInGOxxPlwnV1AJh46X-hiLvwggRz9oa1Yno6jyE51g==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 04:37:14 GMT
age: 21517
etag: "4b758cc432874384f330568177eef5a328d7e69a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 63caec3c4c79388fadf4030946d27c65
9ba6dcc32137eacb901f99b6b1ab9424a3fcc0ff
9b3cd098f93a0b5f5cf4f7eada416bb1a75ccced097ad53353a7b78561b7c701
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 10:35:51 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 22 Jan 2023 23:36:10 GMT
Expires: Sun, 29 Jan 2023 23:36:09 GMT
Etag: "9ba6dcc32137eacb901f99b6b1ab9424a3fcc0ff"
Cache-Control: max-age=305417,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78f89aadef43b4f7-OSL
px.steelhousemedia.com/st?ga_tracking_id=UA-61109268-44%3BUA-184659030-7&ga_client_id=&shpt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-61109268-44%3BUA-184659030-7%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com%22%2C%22dcm_cid%22%3A%221674729347.1%22%2C%22dcm_gid%22%3A%221107326097.1674729348%22%2C%22ga_utm_campaign%22%3A%22lg%22%2C%22ga_utm_source%22%3A%22180%22%2C%22ga_utm_medium%22%3A%22plc00adf5880457493eea2a7e0f3e84c%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1674729347.1&dcm_gid=1107326097.1674729348&dxver=4.0.0&shaid=31177&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=33618381423751464term%3Dvalue
44.237.157.168200 OK 1.2 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-61109268-44%3BUA-184659030-7&ga_client_id=&shpt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-61109268-44%3BUA-184659030-7%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com%22%2C%22dcm_cid%22%3A%221674729347.1%22%2C%22dcm_gid%22%3A%221107326097.1674729348%22%2C%22ga_utm_campaign%22%3A%22lg%22%2C%22ga_utm_source%22%3A%22180%22%2C%22ga_utm_medium%22%3A%22plc00adf5880457493eea2a7e0f3e84c%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1674729347.1&dcm_gid=1107326097.1674729348&dxver=4.0.0&shaid=31177&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=33618381423751464term%3Dvalue
IP 44.237.157.168:0
File type ASCII text, with very long lines (2505)
Hash fab4d4deae569442cb88661da12b076c
d3f69ff835237121ed0573b3b13d0e92852768b2
e63715c2f8ccc84796b657f52ab9e15e9ce0f90fab1784308f87caf4aaa8b7e1
GET /st?ga_tracking_id=UA-61109268-44%3BUA-184659030-7&ga_client_id=&shpt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-61109268-44%3BUA-184659030-7%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com%22%2C%22dcm_cid%22%3A%221674729347.1%22%2C%22dcm_gid%22%3A%221107326097.1674729348%22%2C%22ga_utm_campaign%22%3A%22lg%22%2C%22ga_utm_source%22%3A%22180%22%2C%22ga_utm_medium%22%3A%22plc00adf5880457493eea2a7e0f3e84c%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1674729347.1&dcm_gid=1107326097.1674729348&dxver=4.0.0&shaid=31177&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=33618381423751464term%3Dvalue HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 26 Jan 2023 10:35:52 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=34d4c3dc-9d65-11ed-8bb3-eb74f0e271e0;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
js-eu1.hs-scripts.com/25231212.js?businessUnitId=15204561
172.65.208.22200 OK 416 B URL HTTP/2 js-eu1.hs-scripts.com/25231212.js?businessUnitId=15204561
IP 172.65.208.22:0
File type ASCII text, with very long lines (1373), with no line terminators
Hash 168b292b250b86035d03d4824f59b6ec
709490eaf31ec58e525c467c2fd11c4fecb6149c
8db8dd5f341d6ce9f10aea679572e7e8e3d495937e1d6c3278e2285821344b1e
GET /25231212.js?businessUnitId=15204561 HTTP/1.1
Host: js-eu1.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:52 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://spin.123casinos.com
access-control-max-age: 3600
cache-control: public, max-age=30
cf-bgj: minify
cf-polished: origSize=1481
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 4153b886-f17e-44f8-9216-a9e94a23de62
x-trace: 2B6D960E71EB5435226FFFD8A8C1C53117E66E9DB7000000000000000000
cf-cache-status: HIT
age: 1
last-modified: Thu, 26 Jan 2023 10:35:51 GMT
server: cloudflare
cf-ray: 78f89ab3fde89927-ARN
content-encoding: br
X-Firefox-Spdy: h2
ww.steelhousemedia.com/gs
44.238.130.186200 OK 144 B URL HTTP/1.1 ww.steelhousemedia.com/gs
IP 44.238.130.186:0
File type ASCII text, with no line terminators
Hash 9b1ce3ae4c38ec5367256d8a52f8ddf5
eba66453dc039e667cd9e0299e0c25b0557c87e9
282bf333e2702457bf4a070bc874c7f356371b42c19a258c3e045737061c639b
GET /gs HTTP/1.1
Host: ww.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 26 Jan 2023 10:35:52 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
js-eu1.hsadspixel.net/fb.js
172.65.219.229200 OK 2.8 kB URL HTTP/2 js-eu1.hsadspixel.net/fb.js
IP 172.65.219.229:0
File type ASCII text, with very long lines (5775)
Hash 4b20541b4746c1611ade91491aca79b9
8ebf706eb0094e38b1cab6bea06520c7c3d006d6
8a4789fd57fbbd3579782c9f6df89c424dd98ca7668e15e83de37cf92232d5ab
GET /fb.js HTTP/1.1
Host: js-eu1.hsadspixel.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:53 GMT
content-type: application/javascript; charset=utf-8
x-amz-replication-status: COMPLETED
last-modified: Fri, 20 Jan 2023 04:29:49 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: SDrNOl8ziD8gAW.Yx4_m5h0e_hjF8Ssn
etag: W/"c400e8c1e05d683a64923854807562fd"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 103eb504d36d97c9f30550032223d996.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-C2
x-amz-cf-id: DPjfCqVIw691DjLzppUZ1NQ_MxJAnjqu5T9_lrKyi2ZZImsCQztacw==
age: 57
cache-control: max-age=600
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://exceptions.hubspot.com/csp/report?resource=adsscriptloaderstatic/static-1.316/bundles/pixels-release.js&cfRay=78f899559f7909b5-ARN
x-hs-target-asset: adsscriptloaderstatic/static-1.316/bundles/pixels-release.js
x-hs-cache-status: HIT
x-envoy-upstream-service-time: 3
x-evy-trace-route: nginx-catch-all
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: fra04/app-td/envoy-proxy-6bdc87f4c5-nfdbk
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
cache-tag: staticjsapp-AdsScriptLoaderCloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
server: cloudflare
cf-ray: 78f89abacc141685-ARN
content-encoding: br
X-Firefox-Spdy: h2
secure.quantserve.com/quant.js
91.228.74.200200 OK 10 kB URL HTTP/2 secure.quantserve.com/quant.js
IP 91.228.74.200:0
Hash c6a737851f88e1d22dc961dd13a9416b
0c27c50824ac57c22dbcafcaefae28b34e818201
5592aa9c5a212a50bc925f4c3a649deab267558d57a9eb85f1948ad967bd1832
GET /quant.js HTTP/1.1
Host: secure.quantserve.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
content-type: application/javascript
accept-ranges: bytes
cache-control: private, max-age=604800
content-encoding: gzip
etag: "OVi4z6W4qM+KoQEZlRgh5w=="
expires: Thu, 02 Feb 2023 10:35:50 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
tr.snapchat.com/config/com/a1254cb6-8d5b-4b72-8223-4e703c8c7b40.js
35.190.43.134200 OK 110 kB URL HTTP/2 tr.snapchat.com/config/com/a1254cb6-8d5b-4b72-8223-4e703c8c7b40.js
IP 35.190.43.134:0
File type ASCII text, with very long lines (64322)
Size 110 kB (110325 bytes)
Hash c848ec6e7ffa7e450b0d4b392e83d469
e4fbc50470187247b6d0da7562af3d3e5663cef7
505a4999673c36564cb8674db7e6df09e97e38e4d79869fa77a3059d26fdb9ca
GET /config/com/a1254cb6-8d5b-4b72-8223-4e703c8c7b40.js HTTP/1.1
Host: tr.snapchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://123bookies.com
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:50 GMT
access-control-allow-origin: https://123bookies.com
content-type: application/javascript
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-envoy-upstream-service-time: 0
content-encoding: gzip
vary: Accept-Encoding
server: API Gateway
access-control-allow-credentials: true
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
px.steelhousemedia.com/st?ga_tracking_id=UA-61109268-44%3BUA-184659030-7&ga_client_id=&shpt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-61109268-44%3BUA-184659030-7%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com%22%2C%22dcm_cid%22%3A%221674729347.1%22%2C%22dcm_gid%22%3A%221107326097.1674729348%22%2C%22ga_utm_campaign%22%3A%22lg%22%2C%22ga_utm_source%22%3A%22180%22%2C%22ga_utm_medium%22%3A%22plc00adf5880457493eea2a7e0f3e84c%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1674729347.1&dcm_gid=1107326097.1674729348&dxver=4.0.0&shaid=31177&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=1674729352197719&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1674729352964
44.237.157.168200 OK 1.3 kB URL HTTP/1.1 px.steelhousemedia.com/st?ga_tracking_id=UA-61109268-44%3BUA-184659030-7&ga_client_id=&shpt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-61109268-44%3BUA-184659030-7%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com%22%2C%22dcm_cid%22%3A%221674729347.1%22%2C%22dcm_gid%22%3A%221107326097.1674729348%22%2C%22ga_utm_campaign%22%3A%22lg%22%2C%22ga_utm_source%22%3A%22180%22%2C%22ga_utm_medium%22%3A%22plc00adf5880457493eea2a7e0f3e84c%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1674729347.1&dcm_gid=1107326097.1674729348&dxver=4.0.0&shaid=31177&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=1674729352197719&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1674729352964
IP 44.237.157.168:0
File type ASCII text, with very long lines (5751), with no line terminators
Hash 36b78386019569a45f4fab04eb32df86
2db379640c2a9985e4871fbad3052a8af6e51cf4
52a48d71f6f8d92a41fb91664b3ef463cca8107b23f7d752c75ab0be3a9a27ca
GET /st?ga_tracking_id=UA-61109268-44%3BUA-184659030-7&ga_client_id=&shpt=LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-61109268-44%3BUA-184659030-7%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22LeadsGlobal%20%E2%80%93%20M2%20%E2%80%93%20CL%20%E2%80%93%20123bookies.com%22%2C%22dcm_cid%22%3A%221674729347.1%22%2C%22dcm_gid%22%3A%221107326097.1674729348%22%2C%22ga_utm_campaign%22%3A%22lg%22%2C%22ga_utm_source%22%3A%22180%22%2C%22ga_utm_medium%22%3A%22plc00adf5880457493eea2a7e0f3e84c%22%2C%22mntnis%22%3A%7B%7D%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getTrackingIdByGA%22%3A%22OK%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22dcm_gid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1674729347.1&dcm_gid=1107326097.1674729348&dxver=4.0.0&shaid=31177&plh=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&cb=1674729352197719&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1674729352964 HTTP/1.1
Host: px.steelhousemedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
date: Thu, 26 Jan 2023 10:35:53 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: rt="MzA4MTY6MTY3NDY3Nzg5NSwzMzEzOToxNjc0NjMyNzYyLDMwNzM5OjE2NzQ2OTA5MTEsMzE4MTc6MTY3NDcyOTI5OSwzMTE3NzoxNjc0NzI5MzUzLDMxODM2OjE2NzQ3MTgzMzksMzIwNjI6MTY3NDcyNDI3Mw==";Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=35b0bce9-d250-329d-b012-c0426f88d0bd;Domain=steelhousemedia.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 16
server: istio-envoy
connection: close
transfer-encoding: chunked
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.21.226:0
Hash 4719dd29ec7fe377d53a4d97b22dcd3e
ed38806285bc5cfb7e2e2669920e6f204a50bd3b
6738dd7a65110d827515b104c9294da4e4dfdddd9500cfb122e7034f7bb3443e
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 10:35:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 30 Jan 2023 06:44:56 GMT
ETag: "ed38806285bc5cfb7e2e2669920e6f204a50bd3b"
Last-Modified: Thu, 26 Jan 2023 06:44:57 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1285
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78f89abedd21b4ed-OSL
ocsp.globalsign.com/gsgccr3dvtlsca2020
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP 104.18.21.226:0
Hash 4719dd29ec7fe377d53a4d97b22dcd3e
ed38806285bc5cfb7e2e2669920e6f204a50bd3b
6738dd7a65110d827515b104c9294da4e4dfdddd9500cfb122e7034f7bb3443e
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Jan 2023 10:35:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 30 Jan 2023 06:44:56 GMT
ETag: "ed38806285bc5cfb7e2e2669920e6f204a50bd3b"
Last-Modified: Thu, 26 Jan 2023 06:44:57 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1285
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78f89abedd690b41-OSL
match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=35b0bce9-d250-329d-b012-c0426f88d0bd&gdpr=&gdpr_consent=
15.197.193.217200 OK 70 B URL HTTP/2 match.adsrvr.org/track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=35b0bce9-d250-329d-b012-c0426f88d0bd&gdpr=&gdpr_consent=
IP 15.197.193.217:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 58a7930cd4577fc33c35828c271eab8f
406e57f86dc101e10f3a57be1e2f7b93c4580474
8d70b3e6badb6973663b398d297bb32eaedd08826a1af98d0a1cfce5324ffce0
GET /track/cmf/generic?ttd_pid=steelhouse&ttd_tpi=1&ttd_puid=35b0bce9-d250-329d-b012-c0426f88d0bd&gdpr=&gdpr_consent= HTTP/1.1
Host: match.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:54 GMT
content-type: image/gif
content-length: 70
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a6f494e0f7aaf403939b45edb1760610
60ec16b3f3b3d0962a3132dd9a826f859536ffbe
2996295d07eb9010e50e6fb305457be84d8b97f823fccbbe4ab2d05c243ebd12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4524
Cache-Control: max-age=116934
Content-Type: application/ocsp-response
Date: Thu, 26 Jan 2023 10:35:54 GMT
Etag: "63d16ba4-117"
Expires: Fri, 27 Jan 2023 19:04:48 GMT
Last-Modified: Wed, 25 Jan 2023 17:49:24 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
js-eu1.hs-analytics.net/analytics/1674729300000/25231212.js
172.65.238.60200 OK 21 kB URL HTTP/2 js-eu1.hs-analytics.net/analytics/1674729300000/25231212.js
IP 172.65.238.60:0
File type ASCII text, with very long lines (63109)
Hash 0f956f2e24b1057db29b6aa6f8e645b1
12b6c0ca5180fa432c95adbbecc920eb96255b3b
0a3e49cdb026550d4d4b935cdc14d0876175ad86c1716c101f7b24e5f9458074
GET /analytics/1674729300000/25231212.js HTTP/1.1
Host: js-eu1.hs-analytics.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:53 GMT
content-type: text/javascript
x-amz-id-2: 9J9ZMvXvOaSc/5eWOJkTI04LGWqs6YI4EJQPugUggmuWzK124O1EW57LxB8m6iQa4KGcS4X25u4=
x-amz-request-id: 190HSZ5PPTMH31JW
last-modified: Wed, 25 Jan 2023 02:44:55 GMT
etag: W/"fe0d4e933ac7d7e8cd3fb4e78a7c5437"
x-amz-server-side-encryption: AES256
cache-control: max-age=300,public
access-control-allow-credentials: false
vary: origin, Accept-Encoding
expires: Thu, 26 Jan 2023 10:40:07 GMT
x-envoy-upstream-service-time: 18
x-evy-trace-route: nginx-catch-all
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: fra04/analytics-js-proxy-td/envoy-proxy-5d6fcf645-4hwcl
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
cf-cache-status: HIT
age: 46
server: cloudflare
cf-ray: 78f89abcca662d89-ARN
content-encoding: br
X-Firefox-Spdy: h2
trc-events.taboola.com/1078167/log/3/unip?en=pre_d_eng_tb&tos=4557&scd=0&ssd=1&est=1674729348464&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1674729353021&vi=1674729348462&ri=a4e6bb2d1ee75f2035325b6c8cadf07d&ref=null&cv=20230125-5-RELEASE&item-url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&ler=other
141.226.228.48204 No Content 0 B URL HTTP/2 trc-events.taboola.com/1078167/log/3/unip?en=pre_d_eng_tb&tos=4557&scd=0&ssd=1&est=1674729348464&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1674729353021&vi=1674729348462&ri=a4e6bb2d1ee75f2035325b6c8cadf07d&ref=null&cv=20230125-5-RELEASE&item-url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&ler=other
IP 141.226.228.48:0
ASN #200478 Taboola.com ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1078167/log/3/unip?en=pre_d_eng_tb&tos=4557&scd=0&ssd=1&est=1674729348464&ver=36&isls=true&src=i&invt=3000&msa=0&rv=1&tim=1674729353021&vi=1674729348462&ri=a4e6bb2d1ee75f2035325b6c8cadf07d&ref=null&cv=20230125-5-RELEASE&item-url=https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg&ler=other HTTP/1.1
Host: trc-events.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://123bookies.com
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 26 Jan 2023 10:35:55 GMT
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: https://123bookies.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17e1b6f3caa98b0e0972802408dd3f93
07e48bf3565e00d093d72dd4ada606f5d39a4838
7094ef64e04573bea7a81bbcc8ab59d721c5ef433e3fa9203e5861040ced549c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8017df09-37d9-4c4b-9051-0442b3eb8fbf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9285
x-amzn-requestid: 526bd945-31d8-490e-af9d-5e6fc6ea3561
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYT2HzvoAMFYYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0e5-6812fe4354bbdac4472e7e81;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QEH9CmjfV8QZFNxFz_tEk06i_ELUSNC2QjdTF4K3xc3vS651BZ3NlQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 21:52:28 GMT
age: 45810
etag: "07e48bf3565e00d093d72dd4ada606f5d39a4838"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
rules.quantcount.com/rules-p-r5_-qd1tH82mf.js
54.230.111.33200 OK 0 B URL HTTP/2 rules.quantcount.com/rules-p-r5_-qd1tH82mf.js
IP 54.230.111.33:0
GET /rules-p-r5_-qd1tH82mf.js HTTP/1.1
Host: rules.quantcount.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 14 Oct 2022 00:51:33 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
date: Thu, 26 Jan 2023 10:35:50 GMT
cache-control: max-age=3600
etag: W/"1250610ff2216df11aef0b2d4e801a42"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vXlnTWfwCDBfc9gQOX8hcWwgeX371t7vaaUSS9d9xeNTotwidZyhCg==
age: 2723
X-Firefox-Spdy: h2
trc.taboola.com/1078167/trc/3/json?tim=1674729348467&data=%7B%22id%22%3A406%2C%22ii%22%3A%22%2Flp%2Flg-m2-cl%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1674729348462%2C%22cv%22%3A%2220230125-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Driseprojectitaly%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1674729348467%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
151.101.65.44200 OK 0 B URL HTTP/2 trc.taboola.com/1078167/trc/3/json?tim=1674729348467&data=%7B%22id%22%3A406%2C%22ii%22%3A%22%2Flp%2Flg-m2-cl%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1674729348462%2C%22cv%22%3A%2220230125-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Driseprojectitaly%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1674729348467%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i
IP 151.101.65.44:0
GET /1078167/trc/3/json?tim=1674729348467&data=%7B%22id%22%3A406%2C%22ii%22%3A%22%2Flp%2Flg-m2-cl%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1674729348462%2C%22cv%22%3A%2220230125-5-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%22%2C%22e%22%3Anull%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Driseprojectitaly%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpv%22%3Atrue%2C%22supv%22%3Atrue%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1674729348467%2C%22ref%22%3Anull%2C%22item-url%22%3A%22https%3A%2F%2F123bookies.com%2Flp%2Flg-m2-cl%2F%3Futm_medium%3Dplc00adf5880457493eea2a7e0f3e84c%26utm_source%3D180%26utm_term%3D1%26utm_content%3Dleadsglobal%26utm_campaign%3Dlg%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22supv%22%3Atrue%7D%7D&pubit=i HTTP/1.1
Host: trc.taboola.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
p3p: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM"
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
accept-ranges: bytes
date: Thu, 26 Jan 2023 10:35:50 GMT
via: 1.1 varnish
x-served-by: cache-bma1677-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1674729351.703154,VS0,VE117
vary: Accept-Encoding
x-vcl-time-ms: 117
X-Firefox-Spdy: h2
js-eu1.hs-banner.com/v2/25231212/banner.js
172.65.202.201200 OK 0 B URL HTTP/2 js-eu1.hs-banner.com/v2/25231212/banner.js
IP 172.65.202.201:0
GET /v2/25231212/banner.js HTTP/1.1
Host: js-eu1.hs-banner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:53 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: GqykNDbm3S/b+iJOt7837y4QQsqQm9JtjMHXmTy0B8fqXMJGH8pnuk6Ms7Z0q2hzFzn6doi/454=
x-amz-request-id: 3CFCT018BA8KDFGV
last-modified: Thu, 19 Jan 2023 15:31:54 GMT
etag: W/"5e25025c71c6f3b6d5f481b125a81e37"
x-amz-server-side-encryption: AES256
cache-control: max-age=300,public
x-amz-version-id: fUXnVLIEvXgggVFK9sbk1wja8Hsnrnj9
access-control-allow-origin: https://www.futbin.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Thu, 26 Jan 2023 10:38:46 GMT
x-envoy-upstream-service-time: 19
x-evy-trace-route: nginx-catch-all
x-evy-trace-virtual-host: all
x-evy-trace-served-by-pod: fra04/analytics-js-proxy-td/envoy-proxy-5d6fcf645-pk7jf
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
cf-cache-status: HIT
age: 127
server: cloudflare
cf-ray: 78f89abb2cc22e0f-ARN
content-encoding: br
X-Firefox-Spdy: h2
123bookies.com/lp/lg-m2-cl/?utm_medium=plc00adf5880457493eea2a7e0f3e84c&utm_source=180&utm_term=1&utm_content=leadsglobal&utm_campaign=lg
188.114.97.1200 OK 0 B URL HTTP/2 123bookies.com/lp/lg-m2-cl/?utm_medium=plc00adf5880457493eea2a7e0f3e84c&utm_source=180&utm_term=1&utm_content=leadsglobal&utm_campaign=lg
IP 188.114.97.1:0
GET /lp/lg-m2-cl/?utm_medium=plc00adf5880457493eea2a7e0f3e84c&utm_source=180&utm_term=1&utm_content=leadsglobal&utm_campaign=lg HTTP/1.1
Host: 123bookies.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:49 GMT
content-type: text/html; charset=UTF-8
link: <https://123bookies.com/wp-json/>; rel="https://api.w.org/", <https://123bookies.com/wp-json/wp/v2/lp/1187>; rel="alternate"; type="application/json", <https://123bookies.com/?p=1187>; rel=shortlink
fastcgi-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zf9LgRvD0gdxHhFC%2F9XDYmpH%2BQGufPrOsihuV25mxGWR5l75Lo2CfX9k%2BgDXLLl%2FFB8H1oyLb%2BbqeSfalGWXHm1qqDP%2BWVcPXHnDHnipjYA7uMz%2FJkA%2BouA44A3PtV%2BgIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78f89a9fdabb0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
104.18.226.52200 OK 0 B URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP 104.18.226.52:0
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:49 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 661
expires: Sun, 29 Jan 2023 10:35:49 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 78f89aa4ee63b4f3-OSL
content-encoding: br
X-Firefox-Spdy: h2
insight.adsrvr.org/track/evnt/?adv=hya0m5x&ct=0:7l73aot&fmt=3
15.197.193.217200 OK 0 B URL HTTP/2 insight.adsrvr.org/track/evnt/?adv=hya0m5x&ct=0:7l73aot&fmt=3
IP 15.197.193.217:0
GET /track/evnt/?adv=hya0m5x&ct=0:7l73aot&fmt=3 HTTP/1.1
Host: insight.adsrvr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://123bookies.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 26 Jan 2023 10:35:54 GMT
content-type: image/gif
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2