20media.world/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
301 Moved Permanently 0 B URL HTTP/1.1 20media.world/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.world Domain
GET /cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b HTTP/1.1
Host: 20media.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 02 Feb 2023 18:32:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 02 Feb 2023 19:32:13 GMT
Location: https://20media.world/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z2poYUetRrtv10FB5Xr2z0JqIcvF3JaiHpRLbfNafKf3JLOJLMH0lWs7oJQ2zR%2Bb4n9jTM1OBGBoBxW%2FfvcVDdd5jQSxqzn4OagmjNQ0xVQB4nURmihPV6wPRO%2BBAas%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7935021b4e6e1bfa-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d4e95d0d8982bcd07804baf6fc88231c
5027abda0875bd2529dd4d6691784c74da71a9ee
373799b5749d2cb08b5721699a3e4c6b94b0d41604ac07d4ef7179e47dabc71f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4389
Expires: Thu, 02 Feb 2023 19:45:22 GMT
Date: Thu, 02 Feb 2023 18:32:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2848
Expires: Thu, 02 Feb 2023 19:19:41 GMT
Date: Thu, 02 Feb 2023 18:32:13 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 17:43:31 GMT
content-type: application/json
age: 2922
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Thu, 02 Feb 2023 19:11:48 GMT
Date: Thu, 02 Feb 2023 18:32:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: jjHWRfg9/oGXmuzaHdIbhRjYjDu9VatAvGddih2XA2NADONHokyuazSd58fE+uCck3Co4IGtt+Ck8rPM4Jd0Ug==
x-amz-request-id: 4B9SW80VEBHV7E6E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 17:52:04 GMT
age: 2409
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a1ce658102d1f13cb6f219b9985ce950
7a1cbeeffd6186bc66c8b70a42a7421898158730
e36f013f5c9446f6dc75b6d715bf19cee200a0e861b53ccd8b6f4888bd83efdc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3749
Cache-Control: max-age=163172
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:13 GMT
Etag: "63dbcd6c-117"
Expires: Sat, 04 Feb 2023 15:51:45 GMT
Last-Modified: Thu, 02 Feb 2023 14:49:16 GMT
Server: ECS (amb/6BBB)
X-Cache: HIT
Content-Length: 279
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 18:32:13 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 463f3a9af84ff850dd8d48673d5d844d
5877a03c0cc150e757e71ba9aeb3520e62193ea1
9b2a289ec5d1d5df50e462f63338cca5920e62c39e76e62e5dee60a49a970649
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3505
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:13 GMT
Etag: "63d9ad1f-117"
Last-Modified: Thu, 02 Feb 2023 17:33:49 GMT
Server: ECS (amb/6BBB)
X-Cache: HIT
Content-Length: 278
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 18:31:58 GMT
age: 16
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7181
Expires: Thu, 02 Feb 2023 20:31:55 GMT
Date: Thu, 02 Feb 2023 18:32:14 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xdxsV+BEOiq7qvwwnwkoag==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PwJjGHBuoxUtNLS2N/RFtUXqR7s=
ocsp.digicert.com/
200 OK 278 B IP
Hash e35d67ef52ca9d47ddd887f53a5e5510
68b2d5526d3bee68d7808a01eef8cbdb4d9626bc
47ca00f1dcbdf708585c629fc112baf8874912a2b9bb42d7a68953c8778e2498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4045
Cache-Control: max-age=134267
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:15 GMT
Etag: "63db5b5e-116"
Expires: Sat, 04 Feb 2023 07:50:02 GMT
Last-Modified: Thu, 02 Feb 2023 06:42:38 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
20bet.com/custom-assets/mainloader.gif
200 OK 304 kB URL HTTP/2 20bet.com/custom-assets/mainloader.gif
IP
File type GIF image data, version 89a, 400 x 400\012- data
Size 304 kB (303571 bytes)
Hash 323a31f4cce6bcd83935bbccf0f665da
7ba68a35bec60487944b77a69f91c88556f7017a
9e9d2f310ed323e2649b69229dd077995f5c2217c12bc07c66ea3f17dbc1dafa
GET /custom-assets/mainloader.gif HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: image/gif
content-length: 303571
cf-ray: 79350229ea37b518-OSL
accept-ranges: bytes
age: 1250
cache-control: public, max-age=14400
last-modified: Thu, 02 Feb 2023 18:11:25 GMT
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash d986fba3ff512804dd83a67c4c4eac0f
c7840f5b3b30e1f70fbf18c70564056784a9334b
7d7af3ea777f64f5647ac964a91b78e3fa4f9dbb107503136b13082dd8a37c8e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5944
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:15 GMT
Last-Modified: Thu, 02 Feb 2023 16:53:12 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 70cbd1b63cb1b775c13dd57c8f000bd4
717682e9c79924b957208b5052e1ac1b624567fc
0b085d01339e8e9b9cc11e2958f9d0025d3784d1dfcee79d1606094168a831ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4671
Cache-Control: max-age=139255
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:15 GMT
Etag: "63db6c67-116"
Expires: Sat, 04 Feb 2023 09:13:10 GMT
Last-Modified: Thu, 02 Feb 2023 07:55:19 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
200 OK 1.8 kB URL HTTP/2 c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/apg-seal.js
IP
Hash 5749ac06a1a7c2cc2da34309bccb3686
db03b790e89f3dd7f6ee1d5698687416c6d59b7d
43d81deec54aef67e658d52be49d0300a03763dc2c5fa52ae329ab7409665975
Analyzer Verdict Alert fortinet Malware
GET /apg-seal.js HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
date: Thu, 02 Feb 2023 18:28:42 GMT
x-powered-by: Express
cache-control: max-age=300
etag: W/"e01-C4Qlbcf5HVLMvxWq0WSxBgDJCwc"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7934fcf6cc0f9c01-FRA
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Jh2FGlwO5E56Tfv0-UMX82UqXs7b0L26wmX1pTyrKiV9bdMoh78JaQ==
age: 213
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
200 OK 6.7 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP
Hash 5275e22054b1e96644e24896e1d9aeb2
10102af7d696393d6a7d2909202eb0d5373d2d75
94624f993ec1edb88a7ae12af399fc5e37fd09fbca05e84e609d13950c73f80d
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7935022a5c56b523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
200 OK 3.4 kB URL HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP
File type ASCII text, with very long lines (9097)
Hash d60afd7cac3bb355e23c51830f4622b4
b84c85f35448138f3bb0b1b33aec783aeee5ee8c
ad96ab4dff2ca16344ab1d37c4041b281a1687778cf4ead6fc979cef7f6a7408
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: application/javascript
etag: W/"ae63ef8ff03da61fffaa7f165729897a"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 369
expires: Sun, 05 Feb 2023 18:32:15 GMT
cache-control: public, max-age=259200
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 7935022aa847b4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d719402de0cd695e55dab2767247da49
f12f4795987a284820f6785ec16b5032b9861d79
98a14bd950cec10aeb3d76fa956fe13514f52c742adbded7a0fcef218c7195ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7144
Expires: Thu, 02 Feb 2023 20:31:19 GMT
Date: Thu, 02 Feb 2023 18:32:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash 70cbd1b63cb1b775c13dd57c8f000bd4
717682e9c79924b957208b5052e1ac1b624567fc
0b085d01339e8e9b9cc11e2958f9d0025d3784d1dfcee79d1606094168a831ac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4671
Cache-Control: max-age=139255
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:15 GMT
Etag: "63db6c67-116"
Expires: Sat, 04 Feb 2023 09:13:10 GMT
Last-Modified: Thu, 02 Feb 2023 07:55:19 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 278
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 395bb0f71f9eba82f5ca23548d08900f
b1fada280c7ea3eb775a6fa46ce173a51eb045f5
7443babb69532e1ee3ee779e05ad4f62de2c5bf62548bcb5702f8290a527664c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F496723d4-47ce-49a5-b3b3-9ae546523015.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11367
x-amzn-requestid: 67702c15-9a68-46ec-95e5-efb57f08e2f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5OGfBoAMF3Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6e-033182ba55fdd0230ad5a270;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H1HIK6zdv95V96NxqSfHCqYtDQNPZ9NLAwG5oM5mwRr3nAUR0BPxlg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:25:11 GMT
age: 72424
etag: "b1fada280c7ea3eb775a6fa46ce173a51eb045f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4bb3a6fba496d54cdbbccaf2b9600386
8e30002699e9fbf2047f9ac11a36d2175fc9c591
927bf3a04b011b4e3bc8d8772a3d5813507f7f523312d43627767b64615562f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2d02739-590e-4a37-9ca5-c27003f9e416.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15857
x-amzn-requestid: cfe36b9d-34f6-4f3f-896e-e70ec45c4a04
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2JGGWoAMFSLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf3-0dd68dd778b9aba268a129b0;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C1kqthy0eZop0UZfG3_op5xeBOVGiPLYfia4uS1l4-kchEzV6ccE9w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 07:28:37 GMT
age: 39818
etag: "8e30002699e9fbf2047f9ac11a36d2175fc9c591"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash df4a4906103a8f409c066b1cded71384
22847e3926db3e3d5f6b529297a4abe8b377c3a6
84a14b73b2cc7f4641eaa5539cbee0a109ae2b05cf88d06797a2b00c8d4f0c43
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F88b0e15d-e5be-4197-a382-bf7332128068.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9221
x-amzn-requestid: 209c2ad4-7a1f-4867-bf98-4ca8621111a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdTBFv5IAMFgqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadc13-1627a9d603c69f7760ad013b;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kAkcQOKAvuq3k-X081MLCqon-cnQJqGryVeE0fwX0a7bcXgJlySIvg==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:12:07 GMT
age: 73208
etag: "22847e3926db3e3d5f6b529297a4abe8b377c3a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash de49044c9365e16fec3a6d361cb94728
2b7b69c16de6fda1ae5206f92fe781ee07bd182a
6e76887b036544a5da3918116a180876c094cc3b31676abce8d5b7b716b00c30
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
casino.cur.a8r.games/public/sg.js
200 OK 7.6 kB URL HTTP/2 casino.cur.a8r.games/public/sg.js
IP
Hash fb99d74da85d1d7a07495093bfa6b0f4
3c5229beebca5c47a181dc2d373061bc65f6e794
326db95f54072e5db41915ff0d0f1366a14f4db25dce995a44ce5d0bbdad02f2
GET /public/sg.js HTTP/1.1
Host: casino.cur.a8r.games
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
last-modified: Thu, 02 Feb 2023 17:13:29 GMT
cf-cache-status: HIT
age: 4502
expires: Thu, 02 Feb 2023 22:32:15 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 7935022a8b63b50c-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d910c24f5a6108cb74103cd70692a703
9fe648fa464e46d16f685aca1704f3414eda4107
5cbe5e571e62555225621440203ae24a3b8c41ac7f49b6b731bc2c94e620797f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85f439bb-b615-43ac-bd20-2466bff7ff50.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5561
x-amzn-requestid: 76ca969b-a840-4d5c-97c1-2dfd93b8f630
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frdKYE3-IAMFqbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadbdb-2729fe22420bcc0563c39aff;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:38:35 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: E91BIw8QT3vXXQY8GIPpnRqnTZV4paZ3wynf7UjLnjeIfwS0tiC1Gg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:12:07 GMT
age: 73208
etag: "9fe648fa464e46d16f685aca1704f3414eda4107"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b9af1fd56c0de8f128ddce88d49c1b4d
e3bb3d4950f7c0267f4476eef21872da332831aa
908153182f76362ff329803d9c11c06c66181e85e8e51dabd927f1f1ac630d5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd3cca56-2e75-4efc-8090-c33c65a99f80.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8944
x-amzn-requestid: 07495184-ede8-485c-94e8-5302ec348ea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: freiLHRPoAMFYbw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dade0d-275437a54eceb40e302a7f55;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:47:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 86qoRJHXcrnBGi3REMF5q3ANzKdqEs5F3yFUBmiIt6SCbBVnhGe2Kw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:58:57 GMT
age: 73998
etag: "e3bb3d4950f7c0267f4476eef21872da332831aa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/877b066a168de758b5f3f6f4e657f728-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D
200 OK 95 B URL HTTP/2 c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/877b066a168de758b5f3f6f4e657f728-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D
IP
File type PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash 9591c410148e6883727c5339fd1c02cd
3442a95fe890ce4769b36b2ecc611b801a54cfb5
cafbd551d674da240212f6c44988757a728b9dc8cbc2a6c8dcf53c0d9159c323
Analyzer Verdict Alert fortinet Malware
GET /sealassets/877b066a168de758b5f3f6f4e657f728-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3BhY2VyLXNwcml0ZS5wbmc%3D HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 95
x-powered-by: Express
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7934f5515b7fbbd4-FRA
date: Thu, 02 Feb 2023 18:28:42 GMT
cache-control: max-age=1200
etag: W/"5f-NEKpX+iQzkdps2suzGEbgBpUz7U"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iKFHlqFGYayBWCw2PV4YQUeX2OAz-ufMP43TjnrD3vX3d3V_dRT9RQ==
age: 213
X-Firefox-Spdy: h2
c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/877b066a168de758b5f3f6f4e657f728-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid
200 OK 49 kB URL HTTP/2 c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com/sealassets/877b066a168de758b5f3f6f4e657f728-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid
IP
File type PNG image data, 512 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ef6782be55b8ce8f5b132d28af8e0d0
cb99df77f4865d9c2f287539a5ca474cf76f7d09
d614922fde9604f8899e47f3cc3d69bf952312b996f7cf1421163996710850fa
GET /sealassets/877b066a168de758b5f3f6f4e657f728-20bet.com-f5faf6d82a7be2057527120fa49724355adf2a8c973918d432fa7b70160234e717ac6b01358f27fc0aff52358b79fb11-c3ByaXRlLXNlYWwucG5n?status=valid HTTP/1.1
Host: c4457c89-e5ba-4d22-92e5-c2959310ee85.snippet.antillephone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 49397
x-powered-by: Express
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7934f55169472c3e-FRA
date: Thu, 02 Feb 2023 18:28:42 GMT
cache-control: max-age=1200
etag: W/"c0f5-y5nfd/SGXZwvKHU5pcpHTPdvfQk"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mgjf7ZVVHnDESM2Mn3TYZGRbeZ6AooXsDnZ-7iT3YKvNEOIRGEOWEw==
age: 213
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1d7275c50a3d2dcdcc4322e6ac3c7417
6244f0a25d605bdfaa0ab96b892c51fe750ebb14
397b0875844d3c66cc4bd8389774355f27e9c4aae6b1e4bad657879d8e60fc05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1392
Cache-Control: max-age=128394
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:16 GMT
Etag: "63db4eca-1d7"
Expires: Sat, 04 Feb 2023 06:12:10 GMT
Last-Modified: Thu, 02 Feb 2023 05:48:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e3383a870b280d28b1d924543e6128af
0e9ccaf308e10ae68774fe0d32e10d063f379e7d
093a4523b327faf080d2d200d6e8d9e615abe6e048a72d70c3bc8e9f89cc50bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
aswpsdkus.com/notify/v1/ua-sdk.min.js
200 OK 43 kB URL HTTP/2 aswpsdkus.com/notify/v1/ua-sdk.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1cda07a2bbc55dcaf684954e7d897c40
ad0c471c1cd361f7a4ef8deb825aa63eb1b01029
8e12a7991dda2a0e6cbd6ba7423a98ea668c2f47a83f7b70180d21b1f3893270
GET /notify/v1/ua-sdk.min.js HTTP/1.1
Host: aswpsdkus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdv_bcoU_FtFEkyWyPKhYmMYxQ2vvz2BxtrldqbOjnY5cWy475AhIMCEu1X-odi24Ls0verKjNWBDm1gGRvgImJ9WsPX8WuE
vary: X-Goog-Allowed-Resources
x-goog-generation: 1673371354401478
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 42942
content-encoding: gzip
x-goog-hash: crc32c=CzJWog==, md5=HNoHorvFXcr2hJVOfYl8QA==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 42942
server: UploadServer
date: Thu, 02 Feb 2023 18:28:59 GMT
expires: Thu, 02 Feb 2023 18:33:59 GMT
cache-control: public,max-age=300,no-transform
age: 197
last-modified: Tue, 10 Jan 2023 17:22:34 GMT
etag: "1cda07a2bbc55dcaf684954e7d897c40"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1d7275c50a3d2dcdcc4322e6ac3c7417
6244f0a25d605bdfaa0ab96b892c51fe750ebb14
397b0875844d3c66cc4bd8389774355f27e9c4aae6b1e4bad657879d8e60fc05
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1392
Cache-Control: max-age=128394
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:16 GMT
Etag: "63db4eca-1d7"
Expires: Sat, 04 Feb 2023 06:12:10 GMT
Last-Modified: Thu, 02 Feb 2023 05:48:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ws-cdn001.akamaized.net/7693683943e78a298c36d469e68b47d8/widgetloader
200 OK 60 kB URL HTTP/2 ws-cdn001.akamaized.net/7693683943e78a298c36d469e68b47d8/widgetloader
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (41453)
Hash 297124fbf369cd0269a9f454c978304a
052c58495f020b2a1823a08660c8493d959f1e21
5036b21a973f75c53f34c10a4da742dd668d0de498960cf6a2376d97b4856333
GET /7693683943e78a298c36d469e68b47d8/widgetloader HTTP/1.1
Host: ws-cdn001.akamaized.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
content-security-policy: frame-ancestors 'self' https://st-cdn001.akamaized.net https://ls-cdn001.akamaized.net
cache-control: public, max-age=120, stale-while-revalidate=60, immutable
etag: "dbd94835299851de14a09ce08183eb22-ad178b20a3ae52f75aa81f88f35a1d95"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-ing-v: 2
content-length: 60140
date: Thu, 02 Feb 2023 18:32:16 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAACT
200 OK 31 kB URL HTTP/2 tm.ads.sportradar.com/dist/tag-manager.js?id=STM-AAAACT
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash c107cbeae2be0d4f1d241b9fd672457d
a017d05ff36c646bfa755b60c25e0f67f723de6d
3aac2aa9d355d442078788e431cc0f96baa3f893389c422659323d7602c0261d
GET /dist/tag-manager.js?id=STM-AAAACT HTTP/1.1
Host: tm.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
apigw-requestid: fuM8DhkSjoEEJTA=
vary: Accept-Encoding
content-encoding: gzip
content-length: 31257
date: Thu, 02 Feb 2023 18:32:16 GMT
cache-control: max-age=900, public
x-n: S
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2751084b42dd111d0a7f28241a77201b
680a9ac2f4cf451c9a8449c4df3587595ed9cc4c
1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 42d54c8c12a2f90c448a11bf42800e86
bb66d35435411c825bfcd0a091f33b7d1708191e
3b67d91fbb38e5c47b6ebff53da366b87af3a308e5c588775ac66a808761dbb1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dwmu1hf7ovvid.cloudfront.net/site/upload/license_validation/9458241d-0da8-43ca-aac4-b1756ce0ba65/1674827467_1674826113_google01.webp
200 OK 13 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/site/upload/license_validation/9458241d-0da8-43ca-aac4-b1756ce0ba65/1674827467_1674826113_google01.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 893x331, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5640879b9f514c266a1cd9a77396d8e9
01436b5d74978c330336bed07a10ec3d2b0b99f3
c14b55b1ff7608476a048a78bc7c186e9c6ecda78b20ba3b035dc5e49a979c7f
GET /site/upload/license_validation/9458241d-0da8-43ca-aac4-b1756ce0ba65/1674827467_1674826113_google01.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 13352
last-modified: Fri, 27 Jan 2023 13:51:08 GMT
x-amz-version-id: ztTp6T_NLVo5JAFFnZeSlmlOdfavzTt2
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 15:49:12 GMT
etag: "5640879b9f514c266a1cd9a77396d8e9"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EWNPRx5TSpCpr-QHZ-xr3E41tFosIeJ7fkhUvNT_SlpVXyRGUmH7yA==
age: 9785
X-Firefox-Spdy: h2
20bet.com/assets/favicon.png
200 OK 9.3 kB URL HTTP/2 20bet.com/assets/favicon.png
IP
File type PNG image data, 129 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 76d3202979d99d33720b7b189cf8bc23
81cba7c933e4e332ea31208c388307d49bf1c1c8
7731ec4a0f05418aaf44b5d3b8010c5470303578fed1331bc18089fc802b2a96
GET /assets/favicon.png HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: image/png
content-length: 9320
cf-ray: 7935022cffcab518-OSL
accept-ranges: bytes
etag: "63da0f38-2468"
last-modified: Wed, 01 Feb 2023 07:05:28 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
X-Firefox-Spdy: h2
static.hotjar.com/c/hotjar-2053477.js?sv=6
200 OK 72 kB URL HTTP/2 static.hotjar.com/c/hotjar-2053477.js?sv=6
IP
File type ASCII text, with very long lines (7535)
Hash c7c78357aa8d62bfa56812bd436a0cff
d32d7865321d94addcdbf50bebb94b86a540de05
1a56390065d28fe5e4413a1cb1fc53c83b8219142e87d4b4a39ba830f9594fa6
GET /c/hotjar-2053477.js?sv=6 HTTP/1.1
Host: static.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
date: Thu, 02 Feb 2023 18:32:15 GMT
access-control-allow-origin: *
cache-control: max-age=60
content-encoding: br
cross-origin-resource-policy: cross-origin
etag: W/227235ab6acae18832572f3952372a0f
strict-transport-security: max-age=2592000; includeSubDomains
x-cache-hit: 1
x-content-type-options: nosniff
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Qx6QZewUc6H7zDl0sKM4iUjIFGJTR4JWBogDbQ7zeGwss7QvLvjXOg==
age: 1
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist/tracker.js
200 OK 12 kB URL HTTP/2 tracker.ads.sportradar.com/dist/tracker.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (34755)
Hash b34b13d85152f71b7fd15289c78c0583
0bb20191b022bbd0e75f2bbce7f6332886079c2c
7a3fc57394ecc6745eb6e18745aa1e5e5d05cb2237c4d0d754ab43d33863a84c
GET /dist/tracker.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 14:51:32 GMT
accept-ranges: bytes
server: AmazonS3
etag: "5ff82a1c468a89919e9437d33e0402cb"
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: ETbLIh65aY9mAVLWVaDNXwp9snfbUH2WYXvAEL3sCX87VsDHTCtsDg==
vary: Accept-Encoding
content-encoding: gzip
unused62: 8096267
content-length: 11553
date: Thu, 02 Feb 2023 18:32:16 GMT
cache-control: max-age=900, public
X-Firefox-Spdy: h2
vars.hotjar.com/box-2722367854ce9702c28ea74c51e2a23f.html
200 OK 1.0 kB URL HTTP/2 vars.hotjar.com/box-2722367854ce9702c28ea74c51e2a23f.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2368), with no line terminators
Hash 8665e233ef6caaf010ca89793f27b6f8
5c593fa5f33e55b3081308b43e6e801b56c047f7
435a3ca7c1c49cbfac193647d056e46217e5c3f9c65c354974ad7acdfb8925ac
GET /box-2722367854ce9702c28ea74c51e2a23f.html HTTP/1.1
Host: vars.hotjar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1035
date: Mon, 30 Jan 2023 16:06:06 GMT
accept-ranges: bytes
cache-control: max-age=31536000
content-encoding: br
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
etag: "8665e233ef6caaf010ca89793f27b6f8"
last-modified: Mon, 30 Jan 2023 16:05:37 GMT
strict-transport-security: max-age=2592000; includeSubDomains
x-robots-tag: none
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pIrZ5Fw_Oh3EsBRVarBrWrvBIcf9Tbq5dQaIs6_mz3y4dUeCuHPdyw==
age: 267970
X-Firefox-Spdy: h2
tracker.ads.sportradar.com/dist//sp-2.14.0.js
200 OK 30 kB URL HTTP/2 tracker.ads.sportradar.com/dist//sp-2.14.0.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (64903)
Hash 44f237857b8d03f32b53fe551e83c95a
91536fe6c60d947d29dfcb5f04d09b752b5ccf03
a5e10dc2f3c729300afe8fe24aa430f57d91fdefa8112c0b35dd424ba612caa7
GET /dist//sp-2.14.0.js HTTP/1.1
Host: tracker.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 20 Jan 2021 14:51:32 GMT
etag: "8dba669b94e3865c9205ef8fd15ee4d1"
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: AMS50-C1
x-amz-cf-id: nhilYV6V-q1PhJgn8gs9dmUPL39Zd2IwgnsFUnicuqpA-U_Vrqb7CA==
vary: Accept-Encoding
content-encoding: gzip
content-length: 30370
date: Thu, 02 Feb 2023 18:32:16 GMT
cache-control: max-age=900, public
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c0e3627947d27489a694e036c11667be
4d03c2e922024b8f055da8c3e84a1bd30ec539c2
a5e78a505379d2b130b503aae9e1e9de6dc74912107c2ce288fb627ab68348d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A5E78A505379D2B130B503AAE9E1E9DE6DC74912107C2CE288FB627AB68348D8"
Last-Modified: Tue, 31 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18095
Expires: Thu, 02 Feb 2023 23:33:51 GMT
Date: Thu, 02 Feb 2023 18:32:16 GMT
Connection: keep-alive
20bet.com/app/main.ec1fae44db88d4f7.css
200 OK 78 kB URL HTTP/2 20bet.com/app/main.ec1fae44db88d4f7.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f1f7ea1856ca4a3689e0e88e63957234
e24bc23d89f0d88a24447fb608630c42653fe0db
35d6c926a14bba1582e9362288412c702fea0f61861d1c283580b00cb9ebb136
GET /app/main.ec1fae44db88d4f7.css HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: text/css
cf-ray: 79350229da14b518-OSL
etag: W/"63da0e5b-5e6fb"
last-modified: Wed, 01 Feb 2023 07:01:47 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
secure.adnxs.com/seg?add=32401244&t=1
307 Redirection 0 B URL HTTP/1.1 secure.adnxs.com/seg?add=32401244&t=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /seg?add=32401244&t=1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Redirection
Server: nginx/1.21.3
Date: Thu, 02 Feb 2023 18:32:16 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
Location: https://secure.adnxs.com/bounce?%2Fseg%3Fadd%3D32401244%26t%3D1
AN-X-Request-Uuid: 65518b3e-9f8d-4305-98fe-728d7a213b0b
Set-Cookie: uuid2=8241842960278525546; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 03-May-2023 18:32:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 8fa70786f83c964d4fcc0a8f37c3f3ad
d00094a8712bcb57f3f4f3e93e5e2c41b60ab92c
0022148f69a943fbbe175d771852a24458af4487a5d732a49dc2b08ad89f9549
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 02 Feb 2023 18:32:16 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 02 Feb 2023 16:08:48 GMT
Expires: Fri, 03 Feb 2023 16:08:48 GMT
ETag: "d00094a8712bcb57f3f4f3e93e5e2c41b60ab92c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
tracker.growthbuddy.app/track.js?e=pageview&u=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&r=&i=DV-02355017850611493202&v=1.0.0&uid=d70d63e4-ad39-45bc-9591-106bf013f27b&_nc=1675362763738
200 OK 0 B URL HTTP/2 tracker.growthbuddy.app/track.js?e=pageview&u=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&r=&i=DV-02355017850611493202&v=1.0.0&uid=d70d63e4-ad39-45bc-9591-106bf013f27b&_nc=1675362763738
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track.js?e=pageview&u=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&r=&i=DV-02355017850611493202&v=1.0.0&uid=d70d63e4-ad39-45bc-9591-106bf013f27b&_nc=1675362763738 HTTP/1.1
Host: tracker.growthbuddy.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
set-cookie: INGRESSCOOKIE=1675362737.5.105.926166|4755d7349ad2180cc27216e76023fb56; Path=/; Secure; HttpOnly
cache-control: no-cache
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
sc-events-sdk.sharechat.com/web-sdk.js
200 OK 12 kB URL HTTP/2 sc-events-sdk.sharechat.com/web-sdk.js
IP
File type ASCII text, with very long lines (11862), with no line terminators
Hash 590bf0022120d1610cba44ba02e12810
5dc081270f226a5e3ee9b47ad279ed2b1cdcf492
07886428aa53f7fa0b69b0b5e236e171be8c492d7020686b0fdec11f572c07a8
GET /web-sdk.js HTTP/1.1
Host: sc-events-sdk.sharechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtO3Gf0k2sr33sviwJ_fjkIeLyNknq4LQJYuZNPK1GTpNayyMIo7uaBFBG_k3KfXc2oGRxbL0QBSQfyslXCwiZ-Ng
vary: X-Goog-Allowed-Resources
x-goog-generation: 1667891067679001
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 11862
x-goog-hash: crc32c=ZVy9+A==, md5=WQvwAiEg0WEMukS6AuEoEA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 11862
server: UploadServer
date: Thu, 02 Feb 2023 18:14:51 GMT
expires: Thu, 02 Feb 2023 19:14:51 GMT
cache-control: public, max-age=3600
age: 1045
last-modified: Tue, 08 Nov 2022 07:04:27 GMT
etag: "590bf0022120d1610cba44ba02e12810"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
secure.adnxs.com/bounce?%2Fseg%3Fadd%3D32401244%26t%3D1
200 OK 0 B URL HTTP/1.1 secure.adnxs.com/bounce?%2Fseg%3Fadd%3D32401244%26t%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bounce?%2Fseg%3Fadd%3D32401244%26t%3D1 HTTP/1.1
Host: secure.adnxs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.21.3
Date: Thu, 02 Feb 2023 18:32:16 GMT
Content-Type: application/javascript; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness
AN-X-Request-Uuid: 18dfe484-2888-4807-bdb8-d21c421e288b
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2ImGrH6-Q!@wnf-Te9(>wL5L!!'Wq$lRHQ; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 03-May-2023 18:32:16 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 941.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash a8e025aa5768f28402dd00764354cb6d
3a82dab30b6740d1c515c7437588ea58e5e6a0cb
8e90d09e64c1aa933edd9e1bd62ea34176cf5041f8a62f67aa7f99f1cd821454
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8E90D09E64C1AA933EDD9E1BD62EA34176CF5041F8A62F67AA7F99F1CD821454"
Last-Modified: Thu, 02 Feb 2023 06:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3406
Expires: Thu, 02 Feb 2023 19:29:02 GMT
Date: Thu, 02 Feb 2023 18:32:16 GMT
Connection: keep-alive
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash a8e025aa5768f28402dd00764354cb6d
3a82dab30b6740d1c515c7437588ea58e5e6a0cb
8e90d09e64c1aa933edd9e1bd62ea34176cf5041f8a62f67aa7f99f1cd821454
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "8E90D09E64C1AA933EDD9E1BD62EA34176CF5041F8A62F67AA7F99F1CD821454"
Last-Modified: Thu, 02 Feb 2023 06:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3424
Expires: Thu, 02 Feb 2023 19:29:20 GMT
Date: Thu, 02 Feb 2023 18:32:16 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e230890c905cff88a6cfd0070186113a
af2e574b6d96e1791df9587fdc9a8471e062d385
eeb2d9307606e0475ecbd30964c9af27d0bb9424c2e388e59326a0e7453d23b5
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=110140
Date: Thu, 02 Feb 2023 18:32:16 GMT
Etag: "63db0424-1d7"
Expires: Sat, 04 Feb 2023 01:07:56 GMT
Last-Modified: Thu, 02 Feb 2023 00:30:28 GMT
Server: ECS (bsa/EB16)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vMw_GFhAoXX875z6tTgypYMpqsJnHNRVjagg8EjcHeL-42wOEX8plQ==
Age: 2248
a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
302 Moved Temporarily 0 B URL HTTP/1.1 a.sportradarserving.com/pixel?type=js&aid=1121&id=1859
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel?type=js&aid=1121&id=1859 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 02 Feb 2023 18:32:16 GMT
Location: https://a.sportradarserving.com/ul_cb/pixel?type=js&aid=1121&id=1859
Set-Cookie: zuuid=054160d7-6911-4bc5-9288-fa8719715cfd; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
c=1675362736; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1675362736; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
20bet.com/api/translation/get?locale=es_CL
200 OK 40 kB URL HTTP/2 20bet.com/api/translation/get?locale=es_CL
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 11cd9efa47f3de4bbc3bf7d3503a8a9c
56451978cdc77d7cb2cf1f30ad572f02db6ca73e
9b743113fc7276d42841cb6f801ece98a1930390ed83286825e3c4c43f528d02
GET /api/translation/get?locale=es_CL HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/json
cf-ray: 7935022b7d23b518-OSL
cache-control: no-cache, private
vary: Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
a.sportradarserving.com/ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
302 Moved Temporarily 0 B URL HTTP/1.1 a.sportradarserving.com/ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ul_cb/sync?source=sr&redirect=//echoback.ads.sportradar.com/echoBack/_adsCookieSyncCallback?userId= HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
Connection: keep-alive
Cookie: zuuid=425967f9-53e5-4a49-b9c0-aa8adc5f470b; c=1675362736; zuuid_lu=1675362736
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Cache-Control: no-cache, no-store, must-revalidate
Date: Thu, 02 Feb 2023 18:32:16 GMT
Location: https://x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D425967f9-53e5-4a49-b9c0-aa8adc5f470b
Set-Cookie: zuuid=425967f9-53e5-4a49-b9c0-aa8adc5f470b; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1675362736; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1675362736; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 0
Connection: keep-alive
a.sportradarserving.com/ul_cb/pixel?type=js&aid=1121&id=1859
200 OK 1.5 kB URL HTTP/1.1 a.sportradarserving.com/ul_cb/pixel?type=js&aid=1121&id=1859
IP
File type ASCII text, with very long lines (1527), with no line terminators
Hash d191bf2a66cf51195e5c433fdcfa60f7
97e967496a6d2f5fbc7dff631c4496cd67bf63a9
b5a3663792f14d5f9b351f3e9321cb1841956fcb19813c5221eaed46d39b6c2a
GET /ul_cb/pixel?type=js&aid=1121&id=1859 HTTP/1.1
Host: a.sportradarserving.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
Connection: keep-alive
Cookie: zuuid=425967f9-53e5-4a49-b9c0-aa8adc5f470b; c=1675362736; zuuid_lu=1675362736
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/javascript; charset=UTF-8
Date: Thu, 02 Feb 2023 18:32:16 GMT
Set-Cookie: zuuid=425967f9-53e5-4a49-b9c0-aa8adc5f470b; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_lu=1675362736; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k=1; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
zuuid_k_lu=1675362736; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
cm2=!bidswitch,444691936; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
bss=!bidswitch,444619936; path=/; expires=Fri, 02-Feb-2024 18:32:16 GMT; domain=sportradarserving.com; samesite=none; secure
Content-Length: 1527
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ede42358dbe8cf2e6b7e6a2653774d01
5dc8ca0b929f04fb15c7ff81d0a9decda023b7fb
8e841815d41c4ade06e328cb1ffb9be342640167ec6acb658f6b4b373e23a52a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5202
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Last-Modified: Thu, 02 Feb 2023 17:05:35 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c2c479a8a05da4b28e988e8ebfc4076
fa11d1b7eded2d7e6e2746b69454b98b93d8a19a
6f31c33b8b3d149224eca87ccfa8068992f625fc96ed5059e522edee35c73af3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5473
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Last-Modified: Thu, 02 Feb 2023 17:01:04 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
a.exoclick.com/tag_gen.js
200 OK 515 B URL HTTP/1.1 a.exoclick.com/tag_gen.js
IP
File type ASCII text, with very long lines (1030), with no line terminators
Hash 628e0302068ade64b5f411f39d5ce7e5
ff1a609269f34bad5ae67ed1678df3f7b905d018
c583ceaeae2e9a05e25c27b61520710f16b8b98ca7f9087a75ae90a040b8bc3f
GET /tag_gen.js HTTP/1.1
Host: a.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 18:32:17 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 515
Content-Type: application/javascript
Accept-Ranges: bytes
Server: nginx
etag: W/"a56c0470b9aa925085e51a6271a"
Cache-Control: max-age=10800
X-HW: 1675362736.dop226.sk1.t,1675362737.cds235.sk1.shn,1675362737.dop226.sk1.t,1675362737.cds251.sk1.c
Access-Control-Allow-Origin: *, *
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash dd1f85cc598419df61e254e53f9ec1ef
f86c0ee563f5b7a01e1d40b566f2bc184a32380f
c06f52b233c835b03292f39cb847507a03bb971066bf91341b58a580244398c0
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 6JAixnCEItJ5FofRKpYvo4mRXAyo7exyglNDwyXHKt0a1vcEYWTH+E4Hq/i9PIKuLgbImm1fjFZJ+wVdSfYJXg==
content-length: 27843
x-fb-trip-id: 1904183273
date: Thu, 02 Feb 2023 18:32:17 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 02 Feb 2023 17:45:20 GMT
expires: Thu, 02 Feb 2023 19:45:20 GMT
cache-control: public, max-age=7200
age: 2817
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash 832fec2c274cd809f45c6f375c3586ef
d5e8d749837dfda3904da50aaae10e723fe594a1
46b07ffb5d56d5c33a4416fedce9ea5b805762fb19ab0c54abc8d1c190326d47
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5958
Cache-Control: max-age=164271
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Etag: "63dbc91b-138"
Expires: Sat, 04 Feb 2023 16:10:08 GMT
Last-Modified: Thu, 02 Feb 2023 14:30:51 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 312
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash c85b3b00224a35b9d428afca7338c8f6
9124141129fe6ae15cb4b245545a157f02da0ad8
fabc3d95a4572fa50ecdcb883733e37fd9f901ccdc2598ec2a9fcf92b3b595a2
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Mon, 06 Feb 2023 16:10:32 GMT
ETag: "9124141129fe6ae15cb4b245545a157f02da0ad8"
Last-Modified: Thu, 02 Feb 2023 16:10:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1435
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79350232f8260b59-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7a37d5f14346f4c2d32067a67ed9cbf2
9364052ccda00fe675fe8cc3f2f244161f2a2f69
c0f55cbfc7ce76856115b4557edefe0c45f2b2979ed89b39fd92d185fddb8682
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 13:56:49 GMT
Expires: Tue, 07 Feb 2023 13:56:48 GMT
Etag: "9364052ccda00fe675fe8cc3f2f244161f2a2f69"
Cache-Control: max-age=414870,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79350232fa8b1c12-OSL
ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered&context=20bet.com&cookiename=notregistered&age=262800&maxcookiecount=10
200 OK 35 B URL HTTP/1.1 ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered&context=20bet.com&cookiename=notregistered&age=262800&maxcookiecount=10
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /ctrack?action=list&type=add&id=notregistered&context=20bet.com&cookiename=notregistered&age=262800&maxcookiecount=10 HTTP/1.1
Host: ctrack.trafficjunky.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: openresty
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Sun, 22 Jan 1984 03:00:00 GMT
p3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
pragma: no-cache
set-cookie: tj_UUID=631cd2ee2b4f4cf89a98c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 04 Mar 2023 18:32:17 GMT; Secure; SameSite=None
tj_UUID_v2=631cd2ee-2b4f-4cf8-9a98-c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 04 Mar 2023 18:32:17 GMT; Secure; SameSite=None
1918bc62c1a6d87456120b5ac922270e=notregistered; Path=/; Domain=trafficjunky.net; Expires=Fri, 04 Aug 2023 06:32:17 GMT; Secure; SameSite=None
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Content-Type
access-control-max-age: 86400
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
x-request-id: 63DC01B1-42FE725901BB794C-D28CD4B
ocsp.digicert.com/
200 OK 471 B IP
Hash ede42358dbe8cf2e6b7e6a2653774d01
5dc8ca0b929f04fb15c7ff81d0a9decda023b7fb
8e841815d41c4ade06e328cb1ffb9be342640167ec6acb658f6b4b373e23a52a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2115
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Last-Modified: Thu, 02 Feb 2023 17:57:02 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=f2df4bd8-1a83-4dd1-be4a-b3fcc49939ac
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=f2df4bd8-1a83-4dd1-be4a-b3fcc49939ac
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=f2df4bd8-1a83-4dd1-be4a-b3fcc49939ac HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 18:32:17 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=f2df4bd8-1a83-4dd1-be4a-b3fcc49939ac
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=99ab9f41-c694-4167-9dbb-920085ad00d2; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D425967f9-53e5-4a49-b9c0-aa8adc5f470b
302 Found 0 B URL HTTP/2 x.bidswitch.net/syncd?dsp_id=409&user_group=1&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D425967f9-53e5-4a49-b9c0-aa8adc5f470b
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /syncd?dsp_id=409&user_group=1&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D425967f9-53e5-4a49-b9c0-aa8adc5f470b HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 18:32:17 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/syncd?dsp_id=409&user_group=1&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&redir=https%3A%2F%2Fechoback.ads.sportradar.com%2FechoBack%2F_adsCookieSyncCallback%3FuserId%3D425967f9-53e5-4a49-b9c0-aa8adc5f470b
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=fdbef96d-55b7-4de6-94d9-da6fbfded550; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7a37d5f14346f4c2d32067a67ed9cbf2
9364052ccda00fe675fe8cc3f2f244161f2a2f69
c0f55cbfc7ce76856115b4557edefe0c45f2b2979ed89b39fd92d185fddb8682
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 13:56:49 GMT
Expires: Tue, 07 Feb 2023 13:56:48 GMT
Etag: "9364052ccda00fe675fe8cc3f2f244161f2a2f69"
Cache-Control: max-age=414870,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793502332bbc1c16-OSL
region1.google-analytics.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=2oe210&_p=29056312&cid=1524787397.1675362764&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675362763&sct=1&seg=0&dl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&dt=Mejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-J9LNZYMXZE>m=2oe210&_p=29056312&cid=1524787397.1675362764&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675362763&sct=1&seg=0&dl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&dt=Mejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-J9LNZYMXZE>m=2oe210&_p=29056312&cid=1524787397.1675362764&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675362763&sct=1&seg=0&dl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&dt=Mejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://20bet.com
date: Thu, 02 Feb 2023 18:32:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Thu, 02 Feb 2023 19:32:17 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=9bd7d744-4d95-4ac6-ac44-7c4525461727
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=9bd7d744-4d95-4ac6-ac44-7c4525461727
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=9bd7d744-4d95-4ac6-ac44-7c4525461727 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 18:32:17 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=9bd7d744-4d95-4ac6-ac44-7c4525461727
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=5471337a-ea45-4bd4-95eb-01317f7250f6; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7a37d5f14346f4c2d32067a67ed9cbf2
9364052ccda00fe675fe8cc3f2f244161f2a2f69
c0f55cbfc7ce76856115b4557edefe0c45f2b2979ed89b39fd92d185fddb8682
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 13:56:49 GMT
Expires: Tue, 07 Feb 2023 13:56:48 GMT
Etag: "9364052ccda00fe675fe8cc3f2f244161f2a2f69"
Cache-Control: max-age=414870,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 793502331f99b4fa-OSL
x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=7273917c-c18d-498a-a525-8943f401ae95
302 Found 0 B URL HTTP/2 x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=7273917c-c18d-498a-a525-8943f401ae95
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=7273917c-c18d-498a-a525-8943f401ae95 HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 02 Feb 2023 18:32:17 GMT
content-length: 0
location: https://x.bidswitch.net/ul_cb/sync?dsp_id=409&expires=14&user_group=2&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&cb=7273917c-c18d-498a-a525-8943f401ae95
cache-control: no-cache, no-store, must-revalidate
set-cookie: tuuid=7ee6bbd1-0d34-4d7a-b2bc-ce00e4e29e8d; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
tuuid_lu=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
c=1675362737; path=/; expires=Fri, 02-Feb-2024 18:32:17 GMT; domain=.bidswitch.net; samesite=none; secure
X-Firefox-Spdy: h2
dsp-trk.eskimi.com/tracking/cssession?tst&id=22441
304 Not Modified 0 B URL HTTP/2 dsp-trk.eskimi.com/tracking/cssession?tst&id=22441
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tracking/cssession?tst&id=22441 HTTP/1.1
Host: dsp-trk.eskimi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 304 Not Modified
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
date: Thu, 02 Feb 2023 18:32:16 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
main.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
200 OK 20 B URL HTTP/1.1 main.realsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2 HTTP/1.1
Host: main.realsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-02-02%22%3B%7D%7D; expires=Fri, 02 Feb 2024 18:32:17 GMT; path=/; domain=.realsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b21f87e54b10ba719e15dc390c48701
7da5a76ac948ba52b23e19b4d857efddef75313e
178a5d6a627ac741af8a057c542d308bdc88802d07f1aeb41af37ff997cd90df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "178A5D6A627AC741AF8A057C542D308BDC88802D07F1AEB41AF37FF997CD90DF"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14882
Expires: Thu, 02 Feb 2023 22:40:19 GMT
Date: Thu, 02 Feb 2023 18:32:17 GMT
Connection: keep-alive
20bet.com/app/8416.089b97ec0fb7c863.esm.js
200 OK 403 B URL HTTP/2 20bet.com/app/8416.089b97ec0fb7c863.esm.js
IP
File type ASCII text, with very long lines (730), with no line terminators
Hash b6f7a2d1512551402a34fbc3e674a868
c99ad1b55ef3acc9b86ea83dca20b028f91293d5
fff957b37cd1f1ca98ce0b21b9c342e71035df7de401c60910672152daa0fc4f
GET /app/8416.089b97ec0fb7c863.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/javascript
cf-ray: 79350233ff20b518-OSL
etag: W/"63da0e6f-2da"
last-modified: Wed, 01 Feb 2023 07:02:07 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c2c479a8a05da4b28e988e8ebfc4076
fa11d1b7eded2d7e6e2746b69454b98b93d8a19a
6f31c33b8b3d149224eca87ccfa8068992f625fc96ed5059e522edee35c73af3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5805
Cache-Control: max-age=142164
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Etag: "63db7358-1d7"
Expires: Sat, 04 Feb 2023 10:01:41 GMT
Last-Modified: Thu, 02 Feb 2023 08:24:56 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
platform.20bet.com/api/status
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/status
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/status HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502352ad715f0-ARN
X-Firefox-Spdy: h2
platform.20bet.com/api/match-statuses/get-all/es
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/match-statuses/get-all/es
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/match-statuses/get-all/es HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502352ad415f0-ARN
X-Firefox-Spdy: h2
main.exdynsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
200 OK 20 B URL HTTP/1.1 main.exdynsrv.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2 HTTP/1.1
Host: main.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-02-02%22%3B%7D%7D; expires=Fri, 02 Feb 2024 18:32:17 GMT; path=/; domain=.exdynsrv.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
platform.20bet.com/api/v2/configurations
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/v2/configurations
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/configurations HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502353ae215f0-ARN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9c2c479a8a05da4b28e988e8ebfc4076
fa11d1b7eded2d7e6e2746b69454b98b93d8a19a
6f31c33b8b3d149224eca87ccfa8068992f625fc96ed5059e522edee35c73af3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5473
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Last-Modified: Thu, 02 Feb 2023 17:01:04 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
platform.20bet.com/api/sport/list/-1/0/es
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/sport/list/-1/0/es
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/sport/list/-1/0/es HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502354ae415f0-ARN
X-Firefox-Spdy: h2
platform.20bet.com/api/market-group-sorting/get-all-ordered
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/market-group-sorting/get-all-ordered
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/market-group-sorting/get-all-ordered HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502355aea15f0-ARN
X-Firefox-Spdy: h2
20bet.com/app/6485.c5e5798c269cfd52.esm.js
200 OK 451 B URL HTTP/2 20bet.com/app/6485.c5e5798c269cfd52.esm.js
IP
File type ASCII text, with very long lines (782), with no line terminators
Hash 3a1adaeb287d99ab643a52037fa75387
9367a54eb0b80631ce39267b99d2ba1f1711f6d4
97651e2989ec4f6641677a81210bc1d7fbc91517e43230b5d124c6eac355e93c
GET /app/6485.c5e5798c269cfd52.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/javascript
cf-ray: 79350233ff1eb518-OSL
etag: W/"63da0e76-30e"
last-modified: Wed, 01 Feb 2023 07:02:14 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a
IP
Hash 50bd6e5705d2521bca2b787e709a056b
6216f7e6fce68eba983e254863c86f29248531b0
0f9b337808a018383c64035060134c4bbf0d8de9e9541284ab5ffaa9f42cd434
GET /p.js?f=sync&lr=1&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
platform.20bet.com/api/v2/ip-data
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/v2/ip-data
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/ip-data HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502356af115f0-ARN
X-Firefox-Spdy: h2
platform.20bet.com/api/data/get-countries
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/data/get-countries
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/get-countries HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502357afd15f0-ARN
X-Firefox-Spdy: h2
20bet.com/app/6629.29212ef88d7a9f7d.esm.js
200 OK 9.9 kB URL HTTP/2 20bet.com/app/6629.29212ef88d7a9f7d.esm.js
IP
File type ASCII text, with very long lines (34317), with no line terminators
Hash 71eb26e1ee417bc796e045cb27e5f01c
eb9521082fef7c05eff5152369d76fc74f831867
0f168589d0a1c5fe05bb3051cabc9c78ffe45cc92f494c0bf2c99fbb0cfb4013
GET /app/6629.29212ef88d7a9f7d.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/javascript
cf-ray: 79350233ff16b518-OSL
etag: W/"63da0e7c-860d"
last-modified: Wed, 01 Feb 2023 07:02:20 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/data/get-currencies
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/data/get-currencies
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/data/get-currencies HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502358b1415f0-ARN
X-Firefox-Spdy: h2
platform.20bet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502359b1715f0-ARN
X-Firefox-Spdy: h2
platform.20bet.com/api/v2/data/rates
204 No Content 0 B URL HTTP/2 platform.20bet.com/api/v2/data/rates
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/data/rates HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: client-timezone,content-type,x-requested-with
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
access-control-max-age: 86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502359b1a15f0-ARN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash df4a6d84addba49571d9f6ae44c61a3f
28c8093de27e27645cf6dfd5ae93a62fc77b9be5
cb6623b08b6245ea11bb871729613e453046d427d738a8c6431c5da8347e6e05
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6LeYXFIiAAAAAEinEF15OsBYNq5UXwmor7zuYO0g
200 OK 586 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LeYXFIiAAAAAEinEF15OsBYNq5UXwmor7zuYO0g
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash 585ebc63e7bc2ce60a4cacef4cb3e4e7
edadbf655eb10f8df100bb9357a4394b343811d2
3e4f89f73a6c2f6a1617af63ee2f3f876936d4aec4966df0a72efab9db8eeb4b
GET /recaptcha/api.js?render=6LeYXFIiAAAAAEinEF15OsBYNq5UXwmor7zuYO0g HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 02 Feb 2023 18:32:17 GMT
date: Thu, 02 Feb 2023 18:32:17 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 586
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
20bet.com/app/polyfills.5e91295279033faf.esm.js
200 OK 36 kB URL HTTP/2 20bet.com/app/polyfills.5e91295279033faf.esm.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash bac9080abbec3a0204149e6b3058611b
8098107e3593622f8eceb366799dc14e465bdc6b
b9f04b36424490b479e5f363bc73d4ad515985fe5a42687b7dfa20ea4811bb5a
GET /app/polyfills.5e91295279033faf.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/javascript
cf-ray: 7935022e3bdbb518-OSL
etag: W/"63da0e68-17687"
last-modified: Wed, 01 Feb 2023 07:02:00 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/data/provinces
200 OK 840 B URL HTTP/2 platform.20bet.com/api/data/provinces
IP
File type JSON data\012- , ASCII text, with very long lines (1894), with no line terminators
Hash 5020b135f0b40f3c159ba7e52203ac61
e1e0d37a3ea433db0b5906b6dc79597643a6f1a7
6965274aa3f4d0f941b926f8033de9493f3fa21db8f8606b0efea3da499f18c8
GET /api/data/provinces HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235c9b9b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
serving.ads.sportradar.com/i?stm=1675362763720&e=pv&url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&page=Mejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&tv=js-2.14.0&tna=cf&aid=sr-tracker-20bet-com&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&cookie=1&eid=7c85a3da-9b7d-4b00-8838-bfa150966ac5&dtm=1675362763719&vp=1280x939&ds=1280x939&vid=1&sid=1be7b674-8414-4c66-9ac8-f5ca02b46260&duid=90a15b45-c08d-4223-be86-f81c115c65ca&cx=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
200 OK 43 B URL HTTP/1.1 serving.ads.sportradar.com/i?stm=1675362763720&e=pv&url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&page=Mejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&tv=js-2.14.0&tna=cf&aid=sr-tracker-20bet-com&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&cookie=1&eid=7c85a3da-9b7d-4b00-8838-bfa150966ac5&dtm=1675362763719&vp=1280x939&ds=1280x939&vid=1&sid=1be7b674-8414-4c66-9ac8-f5ca02b46260&duid=90a15b45-c08d-4223-be86-f81c115c65ca&cx=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
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1675362763720&e=pv&url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&page=Mejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&tv=js-2.14.0&tna=cf&aid=sr-tracker-20bet-com&p=web&tz=UTC&lang=en-US&cs=UTF-8&res=1280x1024&cd=24&cookie=1&eid=7c85a3da-9b7d-4b00-8838-bfa150966ac5&dtm=1675362763719&vp=1280x939&ds=1280x939&vid=1&sid=1be7b674-8414-4c66-9ac8-f5ca02b46260&duid=90a15b45-c08d-4223-be86-f81c115c65ca&cx=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 HTTP/1.1
Host: serving.ads.sportradar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Set-Cookie: _sr_ads=584d2f7f-33d3-4f30-b966-21673ecadc1c; Expires=Fri, 02 Feb 2024 18:32:17 GMT; Domain=sportradar.com; Path=/; Secure; HttpOnly; SameSite=None
Cache-Control: no-cache, no-store, must-revalidate
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Server: akka-http/10.1.12
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: image/gif
Content-Length: 43
tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331
200 OK 35 B URL HTTP/2 tsyndicate.com/api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /api/v1/retargeting/set/45d3301c-de08-443f-9716-ba31e2632331 HTTP/1.1
Host: tsyndicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: text/plain; charset=utf-8
content-length: 35
pragma: no-cache
expires: 0
vary: *
x-api-version: 1
x-request-id: 42745230027443b5
set-cookie: ts_rt_45d3301c-de08-443f-9716-ba31e2632331=AAMC; expires=Fri, 02 Feb 2024 18:32:17 GMT; path=/; HttpOnly; secure; SameSite=None
cache-control: no-cache, no-store, no-transform, must-revalidate, no-transform
x-robots-tag: none, noindex, nofollow
report-to: { "url": "https://pxl.tsyndicate.com/api/v1/heavy-ad/report", "max_age": 86401 }
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9bfd33253208c9d034988400d66abd5d
8811fd76d9bc56c15431433f8f08d648185992ed
6382de7eb2bc0b40dc6d2e21ab8b6cb90cc0effe3241e3fb5008d2e4f626e92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-179168354-1&cid=1524787397.1675362764&jid=136472711&gjid=436162015&_gid=43003637.1675362765&_u=YADAAEAAAAAAACAAI~&z=910376451
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-179168354-1&cid=1524787397.1675362764&jid=136472711&gjid=436162015&_gid=43003637.1675362765&_u=YADAAEAAAAAAACAAI~&z=910376451
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-179168354-1&cid=1524787397.1675362764&jid=136472711&gjid=436162015&_gid=43003637.1675362765&_u=YADAAEAAAAAAACAAI~&z=910376451 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://20bet.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 02 Feb 2023 18:32:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
platform.20bet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
200 OK 346 B URL HTTP/2 platform.20bet.com/api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers
IP
File type JSON data\012- , ASCII text, with very long lines (916), with no line terminators
Hash d8f9fe19451ebfd73f985b83396faa2e
0882eee97ce6493ca57be422f7b429ed4f122049
4a93b1f68c7212850402b6b6350bc3efcd6bac57320032faed031bd533dbe803
GET /api/tournaments/bet-tournament/get-active?fields%5B%5D=tournaments&fields%5B%5D=leaderboards&fields%5B%5D=authorizedUsers HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235ea0bb518-OSL
content-encoding: br
X-Firefox-Spdy: h2
ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered-new&context=20bet.com&cookiename=notregistered-new&age=259200&maxcookiecount=10
200 OK 35 B URL HTTP/1.1 ctrack.trafficjunky.net/ctrack?action=list&type=add&id=notregistered-new&context=20bet.com&cookiename=notregistered-new&age=259200&maxcookiecount=10
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /ctrack?action=list&type=add&id=notregistered-new&context=20bet.com&cookiename=notregistered-new&age=259200&maxcookiecount=10 HTTP/1.1
Host: ctrack.trafficjunky.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: openresty
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: image/gif
content-length: 35
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Sun, 22 Jan 1984 03:00:00 GMT
p3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA"
pragma: no-cache
set-cookie: tj_UUID=631cd2ee2b4f4cf89a98c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 04 Mar 2023 18:32:17 GMT; Secure; SameSite=None
tj_UUID_v2=631cd2ee-2b4f-4cf8-9a98-c513c08d9583; Path=/; Domain=trafficjunky.net; Expires=Sat, 04 Mar 2023 18:32:17 GMT; Secure; SameSite=None
614ac6550300bc7c00c3f821d11e0512=notregistered-new; Path=/; Domain=trafficjunky.net; Expires=Tue, 01 Aug 2023 18:32:17 GMT; Secure; SameSite=None
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET,POST
access-control-allow-headers: Content-Type
access-control-max-age: 86400
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
x-request-id: 63DC01B1-42FE725901BB794C-D28CF56
platform.20bet.com/api/data/get-currencies
200 OK 1.1 kB URL HTTP/2 platform.20bet.com/api/data/get-currencies
IP
File type JSON data\012- , ASCII text, with very long lines (10746), with no line terminators
Hash 1b6bebea56c2d0ebd35fbc9cd033681e
a52932fefb97a8ef3e578a6413ba1162b5cf879f
de0a5d31cebeee75b16b6b4ec24783b519b4ce50d5903d3e9766b83753db266c
GET /api/data/get-currencies HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235ea09b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/market-descriptions/get-all-outcomes/es
200 OK 12 kB URL HTTP/2 platform.20bet.com/api/market-descriptions/get-all-outcomes/es
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash f6027dcc996618bdd02326be11892977
af3734bde20ccca10ee9b754aabd6c8fa0dbc4fc
f453e2314d3a7845644afcc3ad687d3051061e268ab87eca05b3955af269937f
GET /api/market-descriptions/get-all-outcomes/es HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502356930b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/v2/data/rates
200 OK 1.6 kB URL HTTP/2 platform.20bet.com/api/v2/data/rates
IP
File type JSON data\012- , ASCII text, with very long lines (8369), with no line terminators
Hash 84dc31d2d69fd0fe18ce9ebf52434cc9
5d1541de12bf33cd24cc3f8de70552bffc405494
c78d1e3c807588f8236262719ef8b97319d8963e04fbf50bf6be8f084ff8bbce
GET /api/v2/data/rates HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235ea12b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 02 Feb 2023 18:32:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform.20bet.com/api/match-statuses/get-all/es
200 OK 165 kB URL HTTP/2 platform.20bet.com/api/match-statuses/get-all/es
IP
File type JSON data\012- , ASCII text, with very long lines (6725), with no line terminators
Size 165 kB (165121 bytes)
Hash 84979f77ee0c59e07c7170cbbd2b6693
48a5f6eaa3894766d553e3bf4de50fb5323af540
76ec1af2fb91390385bcf7b71dd044d3d8acc740d1144f2ece6191e323ae9b49
GET /api/match-statuses/get-all/es HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502357949b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/common.1dbd82f577afb193.esm.js
200 OK 14 kB URL HTTP/2 20bet.com/app/common.1dbd82f577afb193.esm.js
IP
File type ASCII text, with very long lines (32298), with no line terminators
Hash 398a5acaf90b01ef9b2b7bb2fd0f4e06
0feafae732bcc668c2d8ce95f03cd86522bc9188
4ae5fca7c871c7ed2a1e7620a79d15a95573ae207d776a28029225ede820f8ff
GET /app/common.1dbd82f577afb193.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/javascript
cf-ray: 79350233ff1cb518-OSL
etag: W/"63da0e6f-7e2a"
last-modified: Wed, 01 Feb 2023 07:02:07 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
main.exoclick.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
200 OK 20 B URL HTTP/1.1 main.exoclick.com/tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /tag.php?goal=8b2e6ea6f4f288415527d8eb7f5c3dc2 HTTP/1.1
Host: main.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Feb 2023 18:32:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: goals=a%3A1%3A%7Bi%3A93090%3Ba%3A1%3A%7Bs%3A4%3A%22date%22%3Bs%3A10%3A%222023-02-02%22%3B%7D%7D; expires=Fri, 02 Feb 2024 18:32:17 GMT; path=/; domain=.exoclick.com; Secure; SameSite=none
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
platform.20bet.com/api/v2/configurations
200 OK 7.0 kB URL HTTP/2 platform.20bet.com/api/v2/configurations
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 6fba491140496359b7a8619d864d4d51
dbfe5cac02dd7a12e608c071fa22828515f234e6
38803ab9c93da0bd11ae2bc8c11872da50b6fe74385ac64765bc8ec651d0a43c
GET /api/v2/configurations HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 793502358958b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/v2/ip-data
200 OK 394 B URL HTTP/2 platform.20bet.com/api/v2/ip-data
IP
File type JSON data\012- , ASCII text, with very long lines (734), with no line terminators
Hash 28fb555657e7faf94f7c39bfb6d01fba
858880b66103bd0fae7622eb58fc3ce799a68408
117ceeb220ddda8083cd4d707b351a6349619606114c11e4f95b58270e00c071
GET /api/v2/ip-data HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235b999b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
x.bidswitch.net/syncd?dsp_id=409&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
200 OK 43 B URL HTTP/2 x.bidswitch.net/syncd?dsp_id=409&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /syncd?dsp_id=409&user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&user_group=2&redir=%2F%2Feu.sportradarserving.com%2Fbsw_sync%3Fbsw_uid%3D%24%7BBSW_UID%7D HTTP/1.1
Host: x.bidswitch.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e339189bc4891a9cb9a0fc8ec190631b
1dd91331f11362eb68fcb826719588ee9836863b
dbde8dc20b088d4aa1bf3810d589f39c8e3a2563662a419a679ae37a39090f33
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127316
Date: Thu, 02 Feb 2023 18:32:18 GMT
Etag: "63db437a-1d7"
Expires: Sat, 04 Feb 2023 05:54:14 GMT
Last-Modified: Thu, 02 Feb 2023 05:00:42 GMT
Server: ECS (nyb/1D34)
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: o9wbXgf21az8_exm7xqVbD-l6YMSAJlnj0p1FwPMkCZhEF1x3I6ZRA==
Age: 3212
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:18 GMT
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/watch.js
200 OK 0 B URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 58066
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: *
etag: "63c93a4b-e2d2"
expires: Thu, 02 Feb 2023 19:32:17 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e339189bc4891a9cb9a0fc8ec190631b
1dd91331f11362eb68fcb826719588ee9836863b
dbde8dc20b088d4aa1bf3810d589f39c8e3a2563662a419a679ae37a39090f33
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127072
Date: Thu, 02 Feb 2023 18:32:18 GMT
Etag: "63db437a-1d7"
Expires: Sat, 04 Feb 2023 05:50:10 GMT
Last-Modified: Thu, 02 Feb 2023 05:00:42 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Q5_iKcTgLeiECAOva6AzJeTQbCGxuEwI09yZBl1HmZrAbAeirVGMwA==
Age: 2968
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash e339189bc4891a9cb9a0fc8ec190631b
1dd91331f11362eb68fcb826719588ee9836863b
dbde8dc20b088d4aa1bf3810d589f39c8e3a2563662a419a679ae37a39090f33
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127050
Date: Thu, 02 Feb 2023 18:32:18 GMT
Etag: "63db437a-1d7"
Expires: Sat, 04 Feb 2023 05:49:48 GMT
Last-Modified: Thu, 02 Feb 2023 05:00:42 GMT
Server: ECS (bsa/EB21)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KLQ1-huFjAQsWgeVYnSi2Naikv8i42OPSt_zXCnQQXhFoC678aYLtw==
Age: 2946
my.rtmark.net/img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=cd60a55da311d1562975ffab2a7f08e376179d9ae222cd454571a6753429581a&ttl=&rurl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=4eae958f1a9c4a82895af8eac9e5bad9; expires=Fri, 02 Feb 2024 18:32:18 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
204 No Content 0 B URL HTTP/2 match.sharethrough.com/sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/v1?source_id=bf2b131f1f7eff9d8892972c&source_user_id=&seat_user_id=425967f9-53e5-4a49-b9c0-aa8adc5f470b&seat_key=409&gdpr=&gdpr_consent=&gdpr_pd=&usprivacy= HTTP/1.1
Host: match.sharethrough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Thu, 02 Feb 2023 18:32:18 GMT
X-Firefox-Spdy: h2
20bet.com/custom-assets/logo.webp
200 OK 14 kB URL HTTP/2 20bet.com/custom-assets/logo.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 38810a32194964dbdbf543e2a93e6a8c
e6c250ae7a2dd04c3473b6c03880c59960cabd74
7e7b70fbac7c9bd957367ddf9e51c883b7705307315a74899e94e04b0f1d6cd3
GET /custom-assets/logo.webp HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: image/webp
content-length: 13882
cf-ray: 7935023aca5bb518-OSL
accept-ranges: bytes
age: 3619
cache-control: public, max-age=14400
last-modified: Thu, 02 Feb 2023 17:31:59 GMT
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://20bet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 13:09:06 GMT
expires: Wed, 31 Jan 2024 13:09:06 GMT
cache-control: public, max-age=31536000
age: 192192
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://20bet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 07:51:59 GMT
expires: Thu, 01 Feb 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 124819
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 7a37d5f14346f4c2d32067a67ed9cbf2
9364052ccda00fe675fe8cc3f2f244161f2a2f69
c0f55cbfc7ce76856115b4557edefe0c45f2b2979ed89b39fd92d185fddb8682
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 02 Feb 2023 18:32:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 31 Jan 2023 13:56:49 GMT
Expires: Tue, 07 Feb 2023 13:56:48 GMT
Etag: "9364052ccda00fe675fe8cc3f2f244161f2a2f69"
Cache-Control: max-age=414869,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79350232ff60b4fa-OSL
20bet.com/app/5027.189a4d0eb5e0fdc1.esm.js
200 OK 314 kB URL HTTP/2 20bet.com/app/5027.189a4d0eb5e0fdc1.esm.js
IP
File type ASCII text, with no line terminators
Size 314 kB (314149 bytes)
Hash 7375d7ce6b71d937d17e63528bb16cb3
e8429d39ca990ed842e5867b911285c273399f64
68e113a0d7b7775cfc7210b3741aede5b27eea4d64877df74209c1bfb343e698
GET /app/5027.189a4d0eb5e0fdc1.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b2acfb518-OSL
etag: W/"63da0e6f-ee"
last-modified: Wed, 01 Feb 2023 07:02:07 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
platform.20bet.com/api/market-group-sorting/get-all-ordered
200 OK 117 kB URL HTTP/2 platform.20bet.com/api/market-group-sorting/get-all-ordered
IP
File type JSON data\012- , ASCII text, with very long lines (23709), with no line terminators
Size 117 kB (117306 bytes)
Hash 3f6338aa0ca9036ac7a4154fc7144609
e09165ad25595cfe3ae84d5246a77aafbb9c402f
227acc0509c6bb47c18c2c746fe4fbc60f732657d8f7f23f40ea0bbafc9e97d8
GET /api/market-group-sorting/get-all-ordered HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235a97cb518-OSL
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/main.e14a3b8bc34943cf.esm.js
200 OK 383 kB URL HTTP/2 20bet.com/app/main.e14a3b8bc34943cf.esm.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 383 kB (383219 bytes)
Hash 6fe0ef11667f79f13848502545256036
b483211c72e43453755234e153899d6f242252da
3bda1bfb685e5b0fbd49a2a560888b31014d8805c395c66a4f67436e9127c356
GET /app/main.e14a3b8bc34943cf.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/javascript
cf-ray: 7935022e3bd5b518-OSL
etag: W/"63da0e7c-16d1d7"
last-modified: Wed, 01 Feb 2023 07:02:20 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.livechatinc.com/tracking.js
200 OK 26 kB URL HTTP/2 cdn.livechatinc.com/tracking.js
IP
ASN #20940 Akamai International B.V.
Hash ad168b14a5b7efd5137559bade93ad14
7ba3e2c551fdf2879a757fbfcf5f42590269d010
3a4a1053c09137d9d25d118699d7389e019da7a9597b95a7504311b87111909c
GET /tracking.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 25 Jan 2023 08:47:12 GMT
x-amz-version-id: iNzmqDcn1iRKaLiTk37THrDgz9osPO8C
server: AmazonS3
content-encoding: br
etag: W/"29e075294399875f6fd4bdaa0f4a20e4"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: qzl-0Ag5XGkDv_kWLbnI4JJvQy7icD_Dvire8pnIpy79iQNET2NH5w==
content-length: 26103
cache-control: max-age=28800
expires: Fri, 03 Feb 2023 02:32:19 GMT
date: Thu, 02 Feb 2023 18:32:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
platform.20bet.com/api/user/is-auth
200 OK 213 B URL HTTP/2 platform.20bet.com/api/user/is-auth
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ff401fc6dffa476b7b9cf8fa29a12bf
65dff4da6333de7552a453cd5d9cf138b45cbc06
2c5153e9483dce73d2173a523f1f2a41a4dd18b49ae108d530e31a5dc7e1e98a
GET /api/user/is-auth HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b; _fbp=fb.1.1675362766107.1204276116
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:19 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7935023f3910b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/cl/api/seo/get-data?pageUrl=%2Fcl%2Fregistration
200 OK 1.3 kB URL HTTP/2 20bet.com/cl/api/seo/get-data?pageUrl=%2Fcl%2Fregistration
IP
File type JSON data\012- , ASCII text, with very long lines (3341), with no line terminators
Hash d7a7a8a15a28856f5ccb077d55881f35
005d86a33a28a7ebb20e8ad1f7151bd91d58daa3
7b6166e8878dcc392be80c55f6a7ec58b6a45b23648ee32a1cb555a3888fe582
GET /cl/api/seo/get-data?pageUrl=%2Fcl%2Fregistration HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Connection: keep-alive
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b; _fbp=fb.1.1675362766107.1204276116
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:19 GMT
content-type: application/json
cf-ray: 7935023eb84bb518-OSL
cache-control: max-age=0, must-revalidate, private
expires: Thu, 02 Feb 2023 18:32:19 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=9054575&version=299775.12.12.43723.2881.1356.1580.16.3.3.3.244.1799&group_id=24&jsonp=__lc_static_config
200 OK 1.4 kB URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_configuration?license_id=9054575&version=299775.12.12.43723.2881.1356.1580.16.3.3.3.244.1799&group_id=24&jsonp=__lc_static_config
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (3985), with no line terminators
Hash f8a43b2efa034178ecd264425287b9c0
41a5d4178b27a0a5859e4d4978b5765972e5cd0f
528296be7cd0d1d14f29ad581f947066003fcbc3cfc0ebc69a2c124385ece401
GET /v3.3/customer/action/get_configuration?license_id=9054575&version=299775.12.12.43723.2881.1356.1580.16.3.3.3.244.1799&group_id=24&jsonp=__lc_static_config HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 1388
cache-control: public, max-age=403
expires: Thu, 02 Feb 2023 18:39:02 GMT
date: Thu, 02 Feb 2023 18:32:19 GMT
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/get_localization?license_id=9054575&version=ff93808ef52c6dd040640c4853b854bd_21716f53f53807807abed6ecf43750c1&language=en&group_id=24&jsonp=__lc_localization
200 OK 3.8 kB URL HTTP/2 api.livechatinc.com/v3.3/customer/action/get_localization?license_id=9054575&version=ff93808ef52c6dd040640c4853b854bd_21716f53f53807807abed6ecf43750c1&language=en&group_id=24&jsonp=__lc_localization
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (10873), with no line terminators
Hash d79ca272d883316ea37d4520152b9c17
21b73f4c86e8f92be5fb242719ed8b94a88ff01f
382fdf62da78f74a1cefa2383c87b0a4e3071a56534969e0f1d204d1f544e399
GET /v3.3/customer/action/get_localization?license_id=9054575&version=ff93808ef52c6dd040640c4853b854bd_21716f53f53807807abed6ecf43750c1&language=en&group_id=24&jsonp=__lc_localization HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 3786
cache-control: public, max-age=438
expires: Thu, 02 Feb 2023 18:39:37 GMT
date: Thu, 02 Feb 2023 18:32:19 GMT
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/mastercard.webp
200 OK 2.4 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/mastercard.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9819535f317a470cbe091587c3419fbe
9b5b6c30ca2c5190847498f23b144ff39c74b9d4
12bc46c585e9aaa0d800549310c3038384bb5158eccd4439d2b6223703192fa9
GET /logos/payments/mastercard.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 2386
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: u7PXjQfxDKbNI6fOoUgizj8N9fNa7yWT
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 17:21:12 GMT
etag: "9819535f317a470cbe091587c3419fbe"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ACP6_N5kgCrY_q0xlIJDswg0my6gIzKkXZCrVefXx4GWzJ9pyhvkMQ==
age: 4268
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/dinners_discover.webp
200 OK 4.9 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/dinners_discover.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6ea8d660b5467827c912554aabe647d5
4570f9ecbcb61f9a2c44cd16ab737fb0e2b4cebd
2221037740fca246343805287f1d37d254f7942155f6b4c8572ac553f1bad5c6
GET /logos/payments/dinners_discover.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4926
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: UHAkVVlDSlfVyn0QaFp_FgwNMMIk82nh
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 11:47:06 GMT
etag: "6ea8d660b5467827c912554aabe647d5"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NHEVEiC-lUKiMuFMd19kdrxaYv3yOvWgFP8V2fq5cwFllOgnfPq-uQ==
age: 24314
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/visa.webp
200 OK 6.6 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/visa.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ee2fad6bac293e4ca7ab69e783d4e2cd
f11c25ce6201ed8431bf370ba8163a8b96a629ea
75e10393bb2bf4d84cf86b733f85db33b66e7bf6e2538dc601d8772d2bfcad87
GET /logos/payments/visa.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6550
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: pIXrhOThuPwmmXfQM00f4w8j43Wb2AWV
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 01:49:29 GMT
etag: "ee2fad6bac293e4ca7ab69e783d4e2cd"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ybKRt4X061FX5Bu5T62xTG9V-59CVgl1qrLgMwHm0ja_hmkzOt5gYA==
age: 60171
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/flags/cl.svg
200 OK 563 B URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/flags/cl.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 8949f9e6d4f88c4f5bc1fe5f3b4e44c4
af42ef3e8c67c40e43c926415c893618db004136
b0c3f433217a039247b2c7f3f8694d05237ba684726b604a33c102d10f279fde
GET /flags/cl.svg HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 563
date: Wed, 01 Feb 2023 18:45:19 GMT
last-modified: Tue, 10 Aug 2021 11:34:24 GMT
etag: "8949f9e6d4f88c4f5bc1fe5f3b4e44c4"
x-amz-version-id: 1M30H8DR.N4rNyTxSA7.FkZCSAwxnbEK
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 45sbG3QQCfvIr4GbGc6SsKOzL7-l_bn9qWuBD78Im-QNX6WCaF0tug==
age: 85621
X-Firefox-Spdy: h2
tag.growthbuddy.app/tag.js?id=DV-02355017850611493202
200 OK 6.3 kB URL HTTP/2 tag.growthbuddy.app/tag.js?id=DV-02355017850611493202
IP
Hash 3e0f4df3e0a18bfb00b6dba5f0832b8f
632612952ddbd99858872506297c95695c1fe516
f41704216e3e52b6fcccead5eb1f849169614f1e4f1cc1f80dddd96bb994fdba
GET /tag.js?id=DV-02355017850611493202 HTTP/1.1
Host: tag.growthbuddy.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/javascript; charset=utf-8
set-cookie: INGRESSCOOKIE=1675362737.407.105.125246|5f2e1b57d78510d04b0cf9036879032b; Path=/; Secure; HttpOnly
vary: Accept-Encoding
cache-control: public, max-age=7200
x-content-type-options: nosniff
etag: "1382-4YuDa3owVc9r2LUx5CM7dj7oB9U"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/neteller.webp
200 OK 4.9 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/neteller.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 47bb0df8a3ee01f51ed82850b4c55391
1ba733d5f5b0cf3479c70a4b2ea34e3ef8d3b217
3a0b436b5a4f864b6677521211770d0053ec43815f8c6f7c543422512e3c2fea
GET /logos/payments/neteller.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4862
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: 8RbaJ7MP7LV79qt8v0kp8zh9BB1BW52T
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 17:21:12 GMT
etag: "47bb0df8a3ee01f51ed82850b4c55391"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CWX1tWYxglGI-rRBmwLDDkjbmvDlcTPc7IfEPf_sXRS4s07D0fd6dA==
age: 4268
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/interac.webp
200 OK 2.0 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/interac.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cdab7fb995b7866403558f335543bda7
7e6664ba967fd7b2e4d974fdb935a34e05227c45
c995f3a08c8df5b312ca12754a9faf36a9ee44ace812217fcf71414ec89a707f
GET /logos/payments/interac.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 1950
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: IsVRXTBPMjrUqDJ0FxzCocQI4PQQyK0X
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 17:21:12 GMT
etag: "cdab7fb995b7866403558f335543bda7"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BVedw_miw31UVPvZA6mEgvCdfkMn0W-HFdaqbtMtXGFpWDKeZ_9XRQ==
age: 4268
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/ecopayz.webp
200 OK 11 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/ecopayz.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 655fa02c6cfd48264806295ab9c2f3dc
c4abba9520932ed352a85b34fd59a3a6978cfd22
29bd5b67b49f82e8b22afb6502cce95d9972f580406ed3cabc58498e762831fe
GET /logos/payments/ecopayz.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 11298
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: bdHaBf_POQvEHZxa2qXczjd2tqXiAluR
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 17:21:12 GMT
etag: "655fa02c6cfd48264806295ab9c2f3dc"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bZW0whDUww-_x_wJ9nrG3b5tH7s1Iu6eADHUx1zRCRl7c2O__lkqhA==
age: 4268
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/jeton.webp
200 OK 5.9 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/jeton.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5b322abc074e92690294cbc4c91e7367
2eec25886d1b942709730e2ad20bf4175ac5a670
1b0d4b8ad5f4e4a48a81be2d13a2649d6b3c7cd41a501744c2525567d0d0bab8
GET /logos/payments/jeton.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5878
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: 3LxIFrbuND7xADVUotkoJ4KLlpdKaCIO
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 17:21:12 GMT
etag: "5b322abc074e92690294cbc4c91e7367"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cMJ4CudpxXml_cS4j4wxNXPluqWvGRvTY7ABg6TYkVnD-xM1QzB0Cg==
age: 4268
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/cryptocurrency.webp
200 OK 5.3 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/cryptocurrency.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4923661fefdfbe670be68a25329912eb
6ad90e59a44ea11896e12fb1b9832e9c7088c780
53eeb9d95673ea2018aa9a7033846d58c7592a0d068ba5778033e167f9e33361
GET /logos/payments/cryptocurrency.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5348
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: b72gvm3FoOVUU.rPJwpoK6me7DPM5VqB
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 17:21:12 GMT
etag: "4923661fefdfbe670be68a25329912eb"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q_75SS71hhGDRhJ_NR-nwjVV1c2Nmd-cagu7xwSTis-b2ZgZ68rkRQ==
age: 4268
X-Firefox-Spdy: h2
dwmu1hf7ovvid.cloudfront.net/logos/payments/perfectmoney.webp
200 OK 9.2 kB URL HTTP/2 dwmu1hf7ovvid.cloudfront.net/logos/payments/perfectmoney.webp
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7bdbb0621ba893bb559e51169543deb5
a8579c46d6a94a2c89f2c489da5228cc51fe5ab5
764bc6ff2e5e83dd93def92c7acfb0c1ccd094c0231bc0adab4e52dc0fbbf136
GET /logos/payments/perfectmoney.webp HTTP/1.1
Host: dwmu1hf7ovvid.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 9200
last-modified: Fri, 25 Feb 2022 07:48:25 GMT
x-amz-version-id: OO_BasJwQQO0g.jv4KPj.MPmZ8lFDBrP
accept-ranges: bytes
server: AmazonS3
date: Thu, 02 Feb 2023 17:21:12 GMT
etag: "7bdbb0621ba893bb559e51169543deb5"
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0Fcb79fSjbn0EdH1YvcM2ZQ_kgqgmJVp0m4s5qOk-H5lublV2ruLmA==
age: 4268
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=4565082360183930&ev=PageView&dl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&rl=&if=false&ts=1675362766109&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675362766107.1204276116&it=1675362764815&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=4565082360183930&ev=PageView&dl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&rl=&if=false&ts=1675362766109&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675362766107.1204276116&it=1675362764815&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=4565082360183930&ev=PageView&dl=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&rl=&if=false&ts=1675362766109&sw=1280&sh=1024&v=2.9.95&r=stable&ec=0&o=30&fbp=fb.1.1675362766107.1204276116&it=1675362764815&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 02 Feb 2023 18:32:19 GMT
X-Firefox-Spdy: h2
20bet.com/app/9117.59a1f36812423e88.esm.js
200 OK 4.1 kB URL HTTP/2 20bet.com/app/9117.59a1f36812423e88.esm.js
IP
File type ASCII text, with very long lines (1998), with no line terminators
Hash b1c781e2993466534253bf41e18f10f1
bb6c61e30c4266c2af7525472aa683f121be7367
87e538f2ac644e088241b05698c36479777163f8fb90d156bae7628eea62c369
GET /app/9117.59a1f36812423e88.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023baba2b518-OSL
etag: W/"63da0e7c-7ce"
last-modified: Wed, 01 Feb 2023 07:02:20 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/0.d619df13.chunk.js
200 OK 15 kB URL HTTP/2 cdn.livechatinc.com/widget/static/js/0.d619df13.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (47599), with no line terminators
Hash f790030a4058f34f76fa8b0e0e4285cf
955ed12553baf05025f6f19f9079bad07af10bc3
5a57474ecc2a44ecf94ceae42e672745f900749479012ee2ba9eea180ee2a265
GET /widget/static/js/0.d619df13.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 11 Jan 2023 08:35:01 GMT
x-amz-version-id: fr6Gz9d8KXQbrJuaQVT4sDUpSqjnuR9Q
server: AmazonS3
content-encoding: br
etag: W/"10a3d7ac1ed37325d3341c379ee0de69"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: M5BEPnK3INOuxV-Zd5EkJqKhsnyIsA6pc5CcKg9GF8ozNzaNoBaR7Q==
content-length: 14885
cache-control: max-age=31536000
expires: Fri, 02 Feb 2024 18:32:19 GMT
date: Thu, 02 Feb 2023 18:32:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/1.242d30c5.chunk.js
200 OK 66 kB URL HTTP/2 cdn.livechatinc.com/widget/static/js/1.242d30c5.chunk.js
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65462)
Hash 837574e727c7477fb1aafaae2ee0f000
4302eeddb91b30897a9f1192197f2bca4f8c8673
1379e2d7c0609f498b00423d0e61eff1f32fca81763b7b5a24120d55a5abfc66
GET /widget/static/js/1.242d30c5.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 16 Jan 2023 07:45:14 GMT
x-amz-version-id: Px6texczRRdv2H_bvm87pAIOH7z7Z.qa
server: AmazonS3
content-encoding: br
etag: W/"6cc6a8d0a347434070e1ae1406714b63"
vary: Accept-Encoding
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: wE4tvds8I8rdMvWK8ZjfXt0uA449t3dgMbRjzjYyX0onl7EVVeKJuw==
content-length: 66393
cache-control: max-age=31536000
expires: Fri, 02 Feb 2024 18:32:19 GMT
date: Thu, 02 Feb 2023 18:32:19 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2
200 OK 13 kB URL HTTP/2 cdn.livechatinc.com/widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), TrueType, length 12852, version 1.0\012- data
Hash 3b5df7e947d77201eaf22f3dbdac08cc
21989ca07e4afe32d48982b816b8fac85ce3e668
4a46d61a9aed90cea010dbabcdb510b9ceff1b729a06b169cdbe142f66cbc86f
GET /widget/o-0IIpQlx3QUlC5A4PNr5TRASf6M7Q.woff2 HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/octet-stream
content-length: 12852
last-modified: Tue, 18 Oct 2022 07:22:37 GMT
etag: "3b5df7e947d77201eaf22f3dbdac08cc"
x-amz-version-id: 4jMtpmrTh3NU2il.eSSLRODO9UYgvJk9
accept-ranges: bytes
server: AmazonS3
x-amz-cf-pop: HAM50-C2
x-amz-cf-id: KM8abeyaVeSEIxlLTJcUkoNH7_q4l1PlUQolOkL0_K8Ml-Hn8lULcg==
cache-control: max-age=31536000
expires: Fri, 02 Feb 2024 18:32:19 GMT
date: Thu, 02 Feb 2023 18:32:19 GMT
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.livechatinc.com/widget/static/js/iframe.73879adc.chunk.js
200 OK 13 kB URL HTTP/2 cdn.livechatinc.com/widget/static/js/iframe.73879adc.chunk.js
IP
ASN #20940 Akamai International B.V.
Hash d9f5998f47f6f22cb66e7dbf428c76ab
86b993baf91f867a03ea62e0d0adc9488530efaa
e94ba9c6df7a149b4b3c590bcc484ce24ce7c0f15c6f7f43479035a6311211d6
GET /widget/static/js/iframe.73879adc.chunk.js HTTP/1.1
Host: cdn.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 25 Jan 2023 08:47:14 GMT
x-amz-version-id: DWqeOBaonG9oWcxGU0ZIpqeLsqrYCT6x
server: AmazonS3
content-encoding: gzip
etag: W/"90cad0f1a20bbe0c7b70af650ab7491a"
vary: Accept-Encoding
x-amz-cf-pop: AMS54-C1
x-amz-cf-id: _moYFAh9CU_TCG1Yzj16TH06fqZO-0j2iiv2chXN-6-X-3i1nCAlEQ==
cache-control: max-age=31536000
expires: Fri, 02 Feb 2024 18:32:19 GMT
date: Thu, 02 Feb 2023 18:32:19 GMT
content-length: 228662
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
accounts.livechatinc.com/customer/token
200 OK 138 B URL HTTP/2 accounts.livechatinc.com/customer/token
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text
Hash 39405612377ca907f4ae1d6085145519
0e93a86f4fa3683961e359d99e3d5689441aa5b8
2e77db783b9feb9df8caad943557d1847a541bb7d5a9d7ff3557479ce02424d6
POST /customer/token HTTP/1.1
Host: accounts.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 189
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: application/json
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 138
date: Thu, 02 Feb 2023 18:32:20 GMT
set-cookie: __lc_cid=4807f33c-2cdc-4a78-727c-a6d53e87ca7f; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 02 Feb 2025 18:32:19 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=16b0ebbaedc74c87e43d61f3d7f08874a4e7f696076cf9c2aa3f3cb9f4c843da90af394558272a438a95c5f2b94f9afe8c576ce27a5f27b40b606e072e05; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 02 Feb 2025 18:32:19 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cid=4807f33c-2cdc-4a78-727c-a6d53e87ca7f; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 02 Feb 2025 18:32:19 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__lc_cst=16b0ebbaedc74c87e43d61f3d7f08874a4e7f696076cf9c2aa3f3cb9f4c843da90af394558272a438a95c5f2b94f9afe8c576ce27a5f27b40b606e072e05; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Sun, 02 Feb 2025 18:32:19 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None
__oauth_redirect_detector=counter=1&t=1675362769&tag=d8725dcd6d84f8e820b7bafdaf18bf8d5f9e7f08; Path=/; Expires=Thu, 02 Feb 2023 18:32:49 GMT; HttpOnly; Secure; SameSite=None
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/check_goals?license_id=9054575
200 OK 0 B URL HTTP/2 api.livechatinc.com/v3.3/customer/action/check_goals?license_id=9054575
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v3.3/customer/action/check_goals?license_id=9054575 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization,content-type
Referer: https://secure.livechatinc.com/
Origin: https://secure.livechatinc.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Authorization,Content-Type
access-control-allow-origin: https://secure.livechatinc.com
vary: Accept-Encoding
content-length: 0
date: Thu, 02 Feb 2023 18:32:20 GMT
X-Firefox-Spdy: h2
api.livechatinc.com/v3.3/customer/action/check_goals?license_id=9054575
200 OK 2 B URL HTTP/2 api.livechatinc.com/v3.3/customer/action/check_goals?license_id=9054575
IP
ASN #20940 Akamai International B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /v3.3/customer/action/check_goals?license_id=9054575 HTTP/1.1
Host: api.livechatinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer dal:5P5X0K5lRPm0Cv_3d9ys1Q
Content-Length: 151
Origin: https://secure.livechatinc.com
Connection: keep-alive
Referer: https://secure.livechatinc.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://secure.livechatinc.com
content-type: application/json
legacy: 2023-06-30
vary: Accept-Encoding
content-length: 2
date: Thu, 02 Feb 2023 18:32:20 GMT
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab614ba-4572-4b54-9079-a26b68b1ece7.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab614ba-4572-4b54-9079-a26b68b1ece7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6bb5b89e738516f4862491eec286bf6d
8fb46b9ca85f2c578eb2a56d0007859183e12209
7f164a37b675bf39f8473392b07a2a383397da003303965fb190fd4f455bb43b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdab614ba-4572-4b54-9079-a26b68b1ece7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 15051
x-amzn-requestid: 72a3f2ae-538e-40dc-9496-86c28334ba0d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc6jGTAIAMFy4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb76-72178ed13a2e70d462785b90;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CKTfQzCvXa4oL6Lm2n8Rw_9Uhj69YfgpDTP9s0zoaX5qW1vcqWIXDA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 21:46:26 GMT
age: 74756
etag: "8fb46b9ca85f2c578eb2a56d0007859183e12209"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 8fa70786f83c964d4fcc0a8f37c3f3ad
d00094a8712bcb57f3f4f3e93e5e2c41b60ab92c
0022148f69a943fbbe175d771852a24458af4487a5d732a49dc2b08ad89f9549
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 02 Feb 2023 18:32:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 15041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 02 Feb 2023 16:08:48 GMT
Expires: Fri, 03 Feb 2023 16:08:48 GMT
ETag: "d00094a8712bcb57f3f4f3e93e5e2c41b60ab92c"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
20bet.com/app/8522.093b2b3cd6f2d1e6.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/8522.093b2b3cd6f2d1e6.esm.js
IP
GET /app/8522.093b2b3cd6f2d1e6.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b9b86b518-OSL
etag: W/"63da0e7c-946"
last-modified: Wed, 01 Feb 2023 07:02:20 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/1742.157c0f3c644cecdb.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/1742.157c0f3c644cecdb.esm.js
IP
GET /app/1742.157c0f3c644cecdb.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b9b92b518-OSL
etag: W/"63da0e6f-739"
last-modified: Wed, 01 Feb 2023 07:02:07 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/2343.88bb85338fd2e975.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/2343.88bb85338fd2e975.esm.js
IP
GET /app/2343.88bb85338fd2e975.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b6b34b518-OSL
etag: W/"63da0e68-4c5"
last-modified: Wed, 01 Feb 2023 07:02:00 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
mc.yandex.ru/watch/73094056?wmode=7&page-url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A2784%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1186039536581%3Ahid%3A336338392%3Az%3A0%3Ai%3A20230202183244%3Aet%3A1675362765%3Ac%3A1%3Arn%3A783422270%3Arqn%3A1%3Au%3A1675362765239760065%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C50%2C1627%2C0%2C634%2C0%2C%2C435%2C3%2C%2C%2C%2C2783%3Aco%3A0%3Ans%3A1675362760501%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675362765%3At%3AMejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/73094056?wmode=7&page-url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A2784%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1186039536581%3Ahid%3A336338392%3Az%3A0%3Ai%3A20230202183244%3Aet%3A1675362765%3Ac%3A1%3Arn%3A783422270%3Arqn%3A1%3Au%3A1675362765239760065%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C50%2C1627%2C0%2C634%2C0%2C%2C435%2C3%2C%2C%2C%2C2783%3Aco%3A0%3Ans%3A1675362760501%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675362765%3At%3AMejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/73094056?wmode=7&page-url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A2784%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1186039536581%3Ahid%3A336338392%3Az%3A0%3Ai%3A20230202183244%3Aet%3A1675362765%3Ac%3A1%3Arn%3A783422270%3Arqn%3A1%3Au%3A1675362765239760065%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C50%2C1627%2C0%2C634%2C0%2C%2C435%2C3%2C%2C%2C%2C2783%3Aco%3A0%3Ans%3A1675362760501%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675362765%3At%3AMejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/73094056/1?wmode=7&page-url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A2784%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1186039536581%3Ahid%3A336338392%3Az%3A0%3Ai%3A20230202183244%3Aet%3A1675362765%3Ac%3A1%3Arn%3A783422270%3Arqn%3A1%3Au%3A1675362765239760065%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C50%2C1627%2C0%2C634%2C0%2C%2C435%2C3%2C%2C%2C%2C2783%3Aco%3A0%3Ans%3A1675362760501%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675362765%3At%3AMejor%20casa%20de%20apuestas%20online%20%C2%BB%20Apuesta%20legalmente%20con%20la%20casa%20de%20apuestas%2020Bet&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 02 Feb 2023 18:32:17 GMT
access-control-allow-origin: https://20bet.com
set-cookie: yabs-sid=2572844741675362737; Path=/; SameSite=None; Secure
i=A8HVcfh/4Sb2qZOmr1GuCYimBRFKpMsezFXrQJhPQpbdQzmTGT0qF6C+mfmmtMZFYri/qZvfVO/odIW6bmKTbSJ0sI0=; Expires=Sun, 30-Jan-2033 18:32:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1628719281675362737; Expires=Fri, 02-Feb-2024 18:32:17 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1628719281675362737; Expires=Fri, 02-Feb-2024 18:32:17 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706898737.yc.1675362737#1706898737.yrts.1675362737#1706898737.yrtsi.1675362737; Expires=Fri, 02-Feb-2024 18:32:17 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 02-Feb-2023 18:32:17 GMT
last-modified: Thu, 02-Feb-2023 18:32:17 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
dsp-media.eskimi.com/assets/js/e/gtr.min.js?_=0.0.0.3
200 OK 0 B URL HTTP/2 dsp-media.eskimi.com/assets/js/e/gtr.min.js?_=0.0.0.3
IP
ASN #34989 ServeTheWorld AS
GET /assets/js/e/gtr.min.js?_=0.0.0.3 HTTP/1.1
Host: dsp-media.eskimi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 692289
cdn-uid: ce2848ff-13c5-49e5-873d-af24ad423612
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31536000
etag: W/"621cbfb5-12fb"
expires: Tue, 28 Nov 2023 12:07:50 GMT
last-modified: Mon, 28 Feb 2022 12:27:33 GMT
x-content-type-options: nosniff
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/28/2022 12:07:50
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 20699dd7138e56d61b2b4f1e2fa0419c
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/3048.9609a2d0804371c8.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/3048.9609a2d0804371c8.esm.js
IP
GET /app/3048.9609a2d0804371c8.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023bbbceb518-OSL
etag: W/"63da0e76-7ca"
last-modified: Wed, 01 Feb 2023 07:02:14 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/api/seo/get-data?pageUrl=/cl/registration
302 Found 0 B URL HTTP/2 20bet.com/api/seo/get-data?pageUrl=/cl/registration
IP
GET /api/seo/get-data?pageUrl=/cl/registration HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: text/html; charset=UTF-8
location: /cl/api/seo/get-data?pageUrl=%2Fcl%2Fregistration
cf-ray: 7935023bcbe1b518-OSL
cache-control: no-cache, private
cf-cache-status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
cdn.seon.io/js/v4/agent.js
200 OK 0 B URL HTTP/2 cdn.seon.io/js/v4/agent.js
IP
GET /js/v4/agent.js HTTP/1.1
Host: cdn.seon.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:00:08 GMT
x-amz-version-id: oBwuMALhSWNlluJ4Z9BGO_.GELHIAD3H
server: AmazonS3
content-encoding: gzip
date: Thu, 02 Feb 2023 18:09:59 GMT
cache-control: max-age=3600
etag: W/"c34c3067f651e0fea2609171ab7bfec0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0CH6bbTSGOpzu7aHGvjxW45vtBxjuCbpCsjO8fA19cG26J0jNIKsxw==
age: 1336
X-Firefox-Spdy: h2
20bet.com/app/runtime.93456666e96f9357.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/runtime.93456666e96f9357.esm.js
IP
GET /app/runtime.93456666e96f9357.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/javascript
cf-ray: 7935022e3bdfb518-OSL
etag: W/"63da0e76-272e"
last-modified: Wed, 01 Feb 2023 07:02:14 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/8459.ac653e03c2d7c942.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/8459.ac653e03c2d7c942.esm.js
IP
GET /app/8459.ac653e03c2d7c942.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b7b69b518-OSL
etag: W/"63da0e68-cac"
last-modified: Wed, 01 Feb 2023 07:02:00 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/9320.d7618dd1fd8f0311.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/9320.d7618dd1fd8f0311.esm.js
IP
GET /app/9320.d7618dd1fd8f0311.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b9b91b518-OSL
etag: W/"63da0e5b-1070"
last-modified: Wed, 01 Feb 2023 07:01:47 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/8319.7ec039d8049267af.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/8319.7ec039d8049267af.esm.js
IP
GET /app/8319.7ec039d8049267af.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b9b8db518-OSL
etag: W/"63da0e6f-25f6"
last-modified: Wed, 01 Feb 2023 07:02:07 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/5238.c643742b8f51fd51.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/5238.c643742b8f51fd51.esm.js
IP
GET /app/5238.c643742b8f51fd51.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b6b2db518-OSL
etag: W/"63da0e62-2fe4"
last-modified: Wed, 01 Feb 2023 07:01:54 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/styles.09f1d7fd866591ab.css
200 OK 0 B URL HTTP/2 20bet.com/app/styles.09f1d7fd866591ab.css
IP
GET /app/styles.09f1d7fd866591ab.css HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: text/css
cf-ray: 79350229ca0eb518-OSL
etag: W/"63da0e77-23c8a"
last-modified: Wed, 01 Feb 2023 07:02:15 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/vendor.7f46fa567274024c.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/vendor.7f46fa567274024c.esm.js
IP
GET /app/vendor.7f46fa567274024c.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/javascript
cf-ray: 7935022e4bf0b518-OSL
etag: W/"63da0e77-251c87"
last-modified: Wed, 01 Feb 2023 07:02:15 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
apis.sharechat.com/self-serve-service/v1/external/selfServe/sdk/SG3eKxKT7W/get
200 OK 0 B URL HTTP/2 apis.sharechat.com/self-serve-service/v1/external/selfServe/sdk/SG3eKxKT7W/get
IP
GET /self-serve-service/v1/external/selfServe/sdk/SG3eKxKT7W/get HTTP/1.1
Host: apis.sharechat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/
Origin: https://20bet.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json;charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: https://20bet.com
vary: Origin
etag: W/"1f-6dkZ0odeH7r21LA6dRUG6G17Ebs"
via: 1.1 google
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=dUduKZVCJhG9ObupGnxoPa7j8UKOtjysISB9PDDAXjk-1675362737-0-AaGHZWGcBziVMH1wH6KjahEORx104oqZ/F5culVtRd4KhctC0tjBWsWtSv41vHdqJx65TfSrpHQ4y0qYQ6oXAp4=; path=/; expires=Thu, 02-Feb-23 19:02:17 GMT; domain=.sharechat.com; HttpOnly; Secure; SameSite=None
_cfuvid=4tE6oe6ZdX7GaJicDQn4zdm2dEp_RLcln6RL9BOYvAY-1675362737041-0-604800000; path=/; domain=.sharechat.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7935022fdf8eb515-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
platform.20bet.com/api/sport/list/-1/0/es
200 OK 0 B URL HTTP/2 platform.20bet.com/api/sport/list/-1/0/es
IP
GET /api/sport/list/-1/0/es HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235a97bb518-OSL
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/2786.7bb20f7c68bb8324.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/2786.7bb20f7c68bb8324.esm.js
IP
GET /app/2786.7bb20f7c68bb8324.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b8b79b518-OSL
etag: W/"63da0e76-d0f"
last-modified: Wed, 01 Feb 2023 07:02:14 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/9182.07b8b9883724525e.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/9182.07b8b9883724525e.esm.js
IP
GET /app/9182.07b8b9883724525e.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023cfdadb518-OSL
etag: W/"63da0e5b-2a5"
last-modified: Wed, 01 Feb 2023 07:01:47 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/2775.71943518a4ff78b7.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/2775.71943518a4ff78b7.esm.js
IP
GET /app/2775.71943518a4ff78b7.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b8b7eb518-OSL
etag: W/"63da0e5b-d65"
last-modified: Wed, 01 Feb 2023 07:01:47 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/configuration.js
302 Found 0 B URL HTTP/2 20bet.com/configuration.js
IP
GET /configuration.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: text/html; charset=UTF-8
location: /cl/configuration.js
cf-ray: 79350229ea34b518-OSL
cache-control: no-cache, private
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
X-Firefox-Spdy: h2
platform.20bet.com/api/status
200 OK 0 B URL HTTP/2 platform.20bet.com/api/status
IP
GET /api/status HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235793eb518-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-55HKBB7
200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-55HKBB7
IP
GET /gtm.js?id=GTM-55HKBB7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 02 Feb 2023 18:32:16 GMT
expires: Thu, 02 Feb 2023 18:32:16 GMT
cache-control: private, max-age=900
last-modified: Thu, 02 Feb 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 59513
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
assets.customer.io/assets/track.js
200 OK 0 B URL HTTP/2 assets.customer.io/assets/track.js
IP
GET /assets/track.js HTTP/1.1
Host: assets.customer.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 16:12:22 GMT
server: AmazonS3
content-encoding: br
date: Thu, 02 Feb 2023 02:27:29 GMT
etag: W/"60648b7089f3133807fa043435dcaf74"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5ep5dOVTCC0UJ9vuVpnre9_VHzv09NxSwUabK1NUA4GJ6JItGaZnuw==
age: 57890
X-Firefox-Spdy: h2
platform.20bet.com/api/market-descriptions/get-all-markets/es
200 OK 0 B URL HTTP/2 platform.20bet.com/api/market-descriptions/get-all-markets/es
IP
GET /api/market-descriptions/get-all-markets/es HTTP/1.1
Host: platform.20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Requested-With: XMLHttpRequest
client-timezone: UTC
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Cookie: _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: application/json; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,client-timezone,LOCATION-SMART-HTML-SESSION-ID,LOCATION-SMART-DEVICE-SESSION-ID
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 79350235a97fb518-OSL
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/2096.c1ad3bd039c852b6.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/2096.c1ad3bd039c852b6.esm.js
IP
GET /app/2096.c1ad3bd039c852b6.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b9b8bb518-OSL
etag: W/"63da0e5b-12ce"
last-modified: Wed, 01 Feb 2023 07:01:47 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/6612.8b90df75e8984f5b.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/6612.8b90df75e8984f5b.esm.js
IP
GET /app/6612.8b90df75e8984f5b.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023babafb518-OSL
etag: W/"63da0e68-4ac"
last-modified: Wed, 01 Feb 2023 07:02:00 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20bet.com/app/1872.0c663141ba8cfc44.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/1872.0c663141ba8cfc44.esm.js
IP
GET /app/1872.0c663141ba8cfc44.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023cfdb5b518-OSL
etag: W/"63da0e7c-51c"
last-modified: Wed, 01 Feb 2023 07:02:20 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
20media.world/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
302 Found 0 B URL HTTP/2 20media.world/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
IP
NIDS Severity Alert suricata medium ET INFO HTTP Request to Suspicious *.world Domain
GET /cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b HTTP/1.1
Host: 20media.world
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Thu, 02 Feb 2023 18:32:13 GMT
content-type: text/html; charset=UTF-8
location: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zp32h5tRFrfIQLR0oDRpZI80lLZs3%2FrSbqBW3zxMuY3k1GBwysq5lzNNm0f8USUCCC5PTsS0JzYxO1HCZOScrVs8T1bkARJS%2FfIEQhHIJkRXcj1JhhwT%2BhmsNOmSgts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7935021d99970b69-OSL
X-Firefox-Spdy: h2
20bet.com/app/common.68e049bd60bde3ea.css
200 OK 0 B URL HTTP/2 20bet.com/app/common.68e049bd60bde3ea.css
IP
GET /app/common.68e049bd60bde3ea.css HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.1.1524787397.1675362764
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:17 GMT
content-type: text/css
cf-ray: 79350233ff1bb518-OSL
etag: W/"63da0e6f-d68"
last-modified: Wed, 01 Feb 2023 07:02:07 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
dsp-ap.eskimi.com/v2/gtr?id=22441&url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&t=1675362764661
200 OK 0 B URL HTTP/2 dsp-ap.eskimi.com/v2/gtr?id=22441&url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&t=1675362764661
IP
GET /v2/gtr?id=22441&url=https%3A%2F%2F20bet.com%2Fcl%2Fregistration%3Fbtag%3D668076_92F2F752F36F4A09BA1925B6425FBCB3%26clickid%3Ddc72buogxgmntf3b&t=1675362764661 HTTP/1.1
Host: dsp-ap.eskimi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://20bet.com
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
set-cookie: __eConsent=1; Expires=Sat, 04 Mar 2023 18:32:17 GMT; Max-Age=2592000; Domain=.eskimi.com; Path=/; Secure; SameSite=None
__eDId=17bd6630-996c-4f55-8964-60229c0bb987; Expires=Sat, 04 Mar 2023 18:32:17 GMT; Max-Age=2592000; Domain=.eskimi.com; Path=/; Secure; SameSite=None
__eP=1; Expires=Thu, 16 Feb 2023 18:32:17 GMT; Max-Age=1209600; Domain=.eskimi.com; Path=/; Secure; SameSite=None
access-control-allow-origin: https://20bet.com
access-control-allow-credentials: true
cache-control: no-cache
date: Thu, 02 Feb 2023 18:32:16 GMT
content-type: application/json
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
20bet.com/cl/configuration.js
200 OK 0 B URL HTTP/2 20bet.com/cl/configuration.js
IP
GET /cl/configuration.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Connection: keep-alive
Cookie: btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:15 GMT
content-type: text/javascript; charset=UTF-8
cf-ray: 7935022a7b2bb518-OSL
cache-control: no-cache, no-store, private
set-cookie: preferred-language=cl; path=/; secure; httponly; samesite=lax
vary: Accept-Encoding
cf-cache-status: BYPASS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length,Content-Range
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic
IP
GET /css?family=Roboto:400,500,700,300,900&display=swap&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 18:32:15 GMT
date: Thu, 02 Feb 2023 18:32:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
20bet.com/app/75.7513aeaf09e494d8.esm.js
200 OK 0 B URL HTTP/2 20bet.com/app/75.7513aeaf09e494d8.esm.js
IP
GET /app/75.7513aeaf09e494d8.esm.js HTTP/1.1
Host: 20bet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://20bet.com/cl/registration?btag=668076_92F2F752F36F4A09BA1925B6425FBCB3&clickid=dc72buogxgmntf3b
Cookie: is_mobile_device=false; btag=668076_92F2F752F36F4A09BA1925B6425FBCB3; click_id=dc72buogxgmntf3b; preferred-language=cl; _sp_srt_ses.1d36=*; _sp_srt_id.1d36=90a15b45-c08d-4223-be86-f81c115c65ca.1675362764.1.1675362764.1675362764.1be7b674-8414-4c66-9ac8-f5ca02b46260; _hjSessionUser_2053477=eyJpZCI6IjFlN2M3ZjQyLTdjM2UtNTE2Ni05Njg4LWQ2NDQzM2FjNjcxZCIsImNyZWF0ZWQiOjE2NzUzNjI3NjM2NzgsImV4aXN0aW5nIjpmYWxzZX0=; _hjFirstSeen=1; _hjIncludedInSessionSample=0; _hjSession_2053477=eyJpZCI6IjZiNTJkN2U4LTAxNGMtNDM4My04YzU1LTJmZjQzMDI3Mjk1MyIsImNyZWF0ZWQiOjE2NzUzNjI3NjM3MjYsImluU2FtcGxlIjpmYWxzZX0=; _hjAbsoluteSessionInProgress=0; DV_TRACK=d70d63e4-ad39-45bc-9591-106bf013f27b; _ga_J9LNZYMXZE=GS1.1.1675362763.1.0.1675362763.0.0.0; _ga=GA1.2.1524787397.1675362764; _gid=GA1.2.43003637.1675362765; _gat_UA-179168354-1=1; _ym_uid=1675362765239760065; _ym_d=1675362765; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 02 Feb 2023 18:32:18 GMT
content-type: application/javascript
cf-ray: 7935023b1abfb518-OSL
etag: W/"63da0e76-4b9"
last-modified: Wed, 01 Feb 2023 07:02:14 GMT
set-cookie: is_mobile_device=false
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
104.26.2.3
104.18.12.198
3.65.68.137
23.36.79.8
95.211.229.245
54.74.252.125
157.240.205.35
77.88.21.119
31.13.72.12
93.184.220.29